433 commits

Author	SHA1	Message	Date
SebastianStork	252abe9443	Create networking abstraction on top of nebula	2026-01-11 19:13:30 +01:00
SebastianStork	6804112df6	Disable any ipv6 functionality	2026-01-11 14:34:53 +01:00
SebastianStork	3cf75dc7e1	Remove all traces of tailscale	2026-01-11 00:17:51 +01:00
SebastianStork	ccac4395a2	Finally disable tailscale on clients	2026-01-11 00:10:08 +01:00
SebastianStork	2acd61d67e	vps-monitor: Switch completely to nebula	2026-01-11 00:07:24 +01:00
SebastianStork	6069bd4b06	vps-public: Switch completely to nebula	2026-01-10 23:27:36 +01:00
SebastianStork	b7a2598ebe	vps-private: Switch completely to nebula	2026-01-10 23:25:13 +01:00
SebastianStork	c6b56d87ff	gc: Enable on servers with gcroot cleanup only	2026-01-10 14:37:44 +01:00
SebastianStork	ac3b43a952	nebula: Add DNS support by configuring unbound	2026-01-09 19:43:19 +01:00
SebastianStork	dc3fc4d5ad	Enable localsend on clients	2026-01-09 16:15:31 +01:00
SebastianStork	1c61682e5a	tailscale: Disable ssh for all hosts	2026-01-07 20:51:50 +01:00
SebastianStork	ef6cdd8e22	nebula: Roll out to all hosts	2026-01-06 21:33:46 +01:00
SebastianStork	61f5c54196	nebula: Enable firewall and restrict ssh access by role	2026-01-03 00:41:13 +01:00
SebastianStork	94ac7bbca3	vps-public: Disable forgejo's ssh server	2025-12-31 19:19:04 +01:00
SebastianStork	02846ab16f	Refactor web services to use a unified web-services namespace	2025-12-28 19:33:56 +01:00
SebastianStork	308ee43ec4	vps-public: Disable stirling-pdf	2025-12-28 19:12:08 +01:00
SebastianStork	10362bd42b	sops: Read age public-keys from files	2025-12-25 20:23:12 +01:00
SebastianStork	c8db179bda	nebula: Add laptop to network	2025-12-24 01:10:51 +01:00
SebastianStork	435a70a4e9	nebula: Test with desktop and vps-private	2025-12-23 14:43:18 +01:00
SebastianStork	8cd27cac05	Increase min-free threshold	2025-12-22 22:37:27 +01:00
SebastianStork	8199296c5c	Install comma	2025-12-13 20:31:29 +01:00
SebastianStork	25f4536bb3	hosts/*: Update tailscale service-auth-keys	2025-12-09 13:28:48 +01:00
SebastianStork	ed9e6ab5ef	hosts/vps-public: Remove unused forgejo secret	2025-12-09 12:55:11 +01:00
SebastianStork	b5e13cea54	hosts/vps-public: Remove unused porkbun secrets	2025-12-09 12:53:58 +01:00
SebastianStork	cd54a6628a	desktop: Disable folding at home	2025-12-05 21:57:32 +01:00
SebastianStork	094393879b	vps-monitor: Remove ssh-gatus-endpoint	2025-11-26 21:15:21 +01:00
SebastianStork	3155b96ce1	laptop: Fix renamed options	2025-11-26 20:16:32 +01:00
SebastianStork	d5174f8c40	vps-public: Reinstall with xfs /nix	2025-11-23 01:07:51 +01:00
SebastianStork	b4241e4e23	vps-public: Rename host	2025-11-21 10:29:38 +01:00
SebastianStork	f3c74bb477	Refactor min/max-free to use byte values	2025-11-20 23:10:27 +01:00
SebastianStork	adc086043e	Increase min- and max-free	2025-11-14 22:51:14 +01:00
SebastianStork	1fe43f5802	persistence: Rename module ... `impermanence` -> `persistence`	2025-11-11 15:29:17 +01:00
SebastianStork	59d2a732a0	crowdsec: Auto enable sources when appropriate	2025-11-09 21:41:30 +01:00
SebastianStork	c9f05a040e	caddy: Configure virtual hosts inside each web-service's module instead of in the host configs	2025-11-08 22:52:01 +01:00
SebastianStork	0ee45e2672	Revert "Increase min- and max-free" ... This reverts commit a42478b852.	2025-11-06 10:25:45 +01:00
SebastianStork	ccdf26ea94	vps-private: Reinstall with xfs /nix	2025-11-05 23:48:33 +01:00
SebastianStork	bffbc4a1a0	vps-monitor: Reinstall with xfs /nix	2025-11-05 22:49:14 +01:00
SebastianStork	4f1143c9ec	freshrss: Configure backups	2025-10-26 23:22:38 +01:00
SebastianStork	a42478b852	Increase min- and max-free	2025-10-26 15:08:47 +01:00
SebastianStork	9ec0c676be	hosts/srv-public: Enable personal-blog	2025-10-23 20:08:16 +02:00
SebastianStork	bfac8a286a	grafana: Refactor dashboard options	2025-10-18 14:03:34 +02:00
SebastianStork	199f0e3eb8	grafana: Add crowdsec dashboard	2025-10-18 13:32:07 +02:00
SebastianStork	f276848b18	hosts/laptop: Add fwupdmgr instructions	2025-10-17 00:01:36 +02:00
SebastianStork	929004083b	hedgedoc: Remove module	2025-10-15 20:58:35 +02:00
SebastianStork	778663900b	hosts/laptop: Enable wireshark	2025-10-15 16:27:07 +02:00
SebastianStork	5e010debf6	hosts/srv-private: Enable freshrss	2025-10-13 18:22:39 +02:00
SebastianStork	cdbeabd0bd	hosts/laptop: Enable resolved	2025-10-12 01:13:01 +02:00
SebastianStork	2802eac4c7	Remove broken and unneeded option	2025-10-12 01:12:05 +02:00
SebastianStork	de18f587c7	Simplify host imports	2025-10-11 21:40:42 +02:00
SebastianStork	f9b399f60b	Fix secrets.json formatting	2025-10-11 17:49:52 +02:00