32 commits

Author	SHA1	Message	Date
SebastianStork	cb4c268550	nebula: Add caCertificatePath and privateKeyPath options ... For future usage in nixos tests	2026-02-14 21:18:41 +01:00
SebastianStork	f93908d157	nebula: Set listen address on hosts with fixed addresses	2026-02-08 19:26:58 +01:00
SebastianStork	eee2cebd21	nebula: Actually enable relay support	2026-02-08 19:23:38 +01:00
SebastianStork	4cd24ddfc4	Revert "nebula: Enable relay support" ... This reverts commit 2b85b2df9c.	2026-02-08 19:02:12 +01:00
SebastianStork	2b85b2df9c	nebula: Enable relay support	2026-02-08 18:48:31 +01:00
SebastianStork	dfdabfb5b1	nebula: Switch to group-based firewall rules	2026-02-05 23:32:52 +01:00
SebastianStork	56c7b22bf1	Route all DNS traffic to my own DNS servers	2026-02-03 23:06:00 +01:00
SebastianStork	e20ad1398b	Improve wording of assertion messages	2026-02-02 19:20:46 +01:00
SebastianStork	a14692c6d6	nebula: Auto enable as default overlay implementation	2026-01-31 01:53:30 +01:00
SebastianStork	27b5c57023	networking: Unify underlay config across hosts	2026-01-30 20:39:59 +01:00
SebastianStork	b487ec8ae7	Remove meta.ports and meta.domains modules	2026-01-21 23:25:16 +01:00
SebastianStork	49c918f747	Refactor	2026-01-17 13:21:16 +01:00
SebastianStork	07c46beefb	nebula: Fix constant restarts by using fixed paths	2026-01-16 10:53:41 +01:00
SebastianStork	82844a3bb4	networking: Set overlay options in nebula module	2026-01-15 21:05:40 +01:00
SebastianStork	11769ee3ac	networking: Add dnsServers option	2026-01-14 19:53:33 +01:00
SebastianStork	2703325b4d	nebula: Change network interface name to nebula	2026-01-11 21:38:56 +01:00
SebastianStork	252abe9443	Create networking abstraction on top of nebula	2026-01-11 19:13:30 +01:00
SebastianStork	e0b6239ab6	nebula/sshd: Hardcode port 22	2026-01-11 14:14:01 +01:00
SebastianStork	3cf75dc7e1	Remove all traces of tailscale	2026-01-11 00:17:51 +01:00
SebastianStork	116b4437fe	caddy: Add support for web services over nebula	2026-01-10 23:19:49 +01:00
SebastianStork	bd196f1f27	nebula/dns: Add forward-zone for tailscale domains ... I'm not sure if this is actually doing anything	2026-01-10 01:31:09 +01:00
SebastianStork	ac3b43a952	nebula: Add DNS support by configuring unbound	2026-01-09 19:43:19 +01:00
SebastianStork	72ed799826	nebula/sshd: Only allow key auth	2026-01-07 20:40:09 +01:00
SebastianStork	9a101eeeac	nebula: Reset logging level to info	2026-01-06 21:36:43 +01:00
SebastianStork	2978d2c1a5	nebula: Fix tailscale ssh disconnects	2026-01-03 00:42:02 +01:00
SebastianStork	61f5c54196	nebula: Enable firewall and restrict ssh access by role	2026-01-03 00:41:13 +01:00
SebastianStork	b4191c56aa	nebula: Configure ssh server	2026-01-01 23:46:15 +01:00
SebastianStork	21b4e04613	nebula: Rename options for public key and certificate paths for clarity	2025-12-25 20:27:13 +01:00
SebastianStork	de16ca49e8	nebula: Assert routability of lighthouses	2025-12-25 20:00:44 +01:00
SebastianStork	d58da5ce7d	nebula: Set logging level to warning	2025-12-25 19:40:29 +01:00
SebastianStork	61f4ac9053	nebula: Allow non-lighthouse nodes to be static hosts	2025-12-25 19:39:44 +01:00
SebastianStork	a7a16378b2	nebula: Init module	2025-12-23 14:42:26 +01:00