28 commits

Author	SHA1	Message	Date
SebastianStork	066a8e624f	nebula: Fix malformed groups in the certificates	2026-02-05 23:50:06 +01:00
SebastianStork	dfdabfb5b1	nebula: Switch to group-based firewall rules	2026-02-05 23:32:52 +01:00
SebastianStork	f1e10f728e	syncthing: Read device id from file by default	2026-02-04 17:53:05 +01:00
SebastianStork	100f02a2d8	profiles: Introduce core, server and workstation profiles	2026-02-03 21:09:06 +01:00
SebastianStork	16b8bbf076	vps-private: Enable comin	2026-02-03 18:31:51 +01:00
SebastianStork	277dd188ae	vps-private: Disable memos	2026-02-01 22:52:11 +01:00
SebastianStork	6d5a9538a7	vps-private: Disable freshrss	2026-01-31 19:32:10 +01:00
SebastianStork	a14692c6d6	nebula: Auto enable as default overlay implementation	2026-01-31 01:53:30 +01:00
SebastianStork	27b5c57023	networking: Unify underlay config across hosts	2026-01-30 20:39:59 +01:00
SebastianStork	8e949b0361	Rename module gc to auto-gc	2026-01-23 21:32:41 +01:00
SebastianStork	b487ec8ae7	Remove meta.ports and meta.domains modules	2026-01-21 23:25:16 +01:00
SebastianStork	7b8435a555	Expose radicale publicly	2026-01-14 21:06:58 +01:00
SebastianStork	79da1f6644	vps-*: Fix nebula option name	2026-01-11 21:33:00 +01:00
SebastianStork	252abe9443	Create networking abstraction on top of nebula	2026-01-11 19:13:30 +01:00
SebastianStork	6804112df6	Disable any ipv6 functionality	2026-01-11 14:34:53 +01:00
SebastianStork	3cf75dc7e1	Remove all traces of tailscale	2026-01-11 00:17:51 +01:00
SebastianStork	b7a2598ebe	vps-private: Switch completely to nebula	2026-01-10 23:25:13 +01:00
SebastianStork	c6b56d87ff	gc: Enable on servers with gcroot cleanup only	2026-01-10 14:37:44 +01:00
SebastianStork	ac3b43a952	nebula: Add DNS support by configuring unbound	2026-01-09 19:43:19 +01:00
SebastianStork	1c61682e5a	tailscale: Disable ssh for all hosts	2026-01-07 20:51:50 +01:00
SebastianStork	61f5c54196	nebula: Enable firewall and restrict ssh access by role	2026-01-03 00:41:13 +01:00
SebastianStork	02846ab16f	Refactor web services to use a unified web-services namespace	2025-12-28 19:33:56 +01:00
SebastianStork	10362bd42b	sops: Read age public-keys from files	2025-12-25 20:23:12 +01:00
SebastianStork	435a70a4e9	nebula: Test with desktop and vps-private	2025-12-23 14:43:18 +01:00
SebastianStork	25f4536bb3	hosts/*: Update tailscale service-auth-keys	2025-12-09 13:28:48 +01:00
SebastianStork	1fe43f5802	persistence: Rename module ... `impermanence` -> `persistence`	2025-11-11 15:29:17 +01:00
SebastianStork	c9f05a040e	caddy: Configure virtual hosts inside each web-service's module instead of in the host configs	2025-11-08 22:52:01 +01:00
SebastianStork	ccdf26ea94	vps-private: Reinstall with xfs /nix	2025-11-05 23:48:33 +01:00