17 commits

Author	SHA1	Message	Date
SebastianStork	7b8435a555	Expose radicale publicly	2026-01-14 21:06:58 +01:00
SebastianStork	79da1f6644	vps-*: Fix nebula option name	2026-01-11 21:33:00 +01:00
SebastianStork	252abe9443	Create networking abstraction on top of nebula	2026-01-11 19:13:30 +01:00
SebastianStork	6804112df6	Disable any ipv6 functionality	2026-01-11 14:34:53 +01:00
SebastianStork	3cf75dc7e1	Remove all traces of tailscale	2026-01-11 00:17:51 +01:00
SebastianStork	b7a2598ebe	vps-private: Switch completely to nebula	2026-01-10 23:25:13 +01:00
SebastianStork	c6b56d87ff	gc: Enable on servers with gcroot cleanup only	2026-01-10 14:37:44 +01:00
SebastianStork	ac3b43a952	nebula: Add DNS support by configuring unbound	2026-01-09 19:43:19 +01:00
SebastianStork	1c61682e5a	tailscale: Disable ssh for all hosts	2026-01-07 20:51:50 +01:00
SebastianStork	61f5c54196	nebula: Enable firewall and restrict ssh access by role	2026-01-03 00:41:13 +01:00
SebastianStork	02846ab16f	Refactor web services to use a unified web-services namespace	2025-12-28 19:33:56 +01:00
SebastianStork	10362bd42b	sops: Read age public-keys from files	2025-12-25 20:23:12 +01:00
SebastianStork	435a70a4e9	nebula: Test with desktop and vps-private	2025-12-23 14:43:18 +01:00
SebastianStork	25f4536bb3	hosts/*: Update tailscale service-auth-keys	2025-12-09 13:28:48 +01:00
SebastianStork	1fe43f5802	persistence: Rename module ... `impermanence` -> `persistence`	2025-11-11 15:29:17 +01:00
SebastianStork	c9f05a040e	caddy: Configure virtual hosts inside each web-service's module instead of in the host configs	2025-11-08 22:52:01 +01:00
SebastianStork	ccdf26ea94	vps-private: Reinstall with xfs /nix	2025-11-05 23:48:33 +01:00