Commit Graph

  • b6e1c626c0 Correct name of ssh-options 25.05 niten 2025-05-07 12:43:58 -07:00
  • 4ec8579399 Add deployment vars to hosts. niten 2025-05-07 12:29:04 -07:00
  • be05273ab4 Move records up to default TTL niten 2025-04-23 12:17:31 -07:00
  • 988e3a5f06 Add function to write env file niten 2025-04-23 11:37:19 -07:00
  • 90806f2f24 Add ID to subnet in Kea niten 2025-01-29 16:39:44 -08:00
  • 1d8be242a1 Remove IPv6 addrs from defaults niten 2025-01-29 12:08:10 -08:00
  • bcb2bdf9eb Remove ref to socket-group, which no longer exists niten 2025-01-28 22:18:06 -08:00
  • caf1a162db Forget the socket niten 2025-01-28 22:15:31 -08:00
  • 437fc6402f Provide debug output niten 2025-01-28 20:52:08 -08:00
  • feb97b1e54 Didn't work, remove ExecStartPre niten 2025-01-28 20:47:25 -08:00
  • 83a217777a Full path to mkdir & chown niten 2025-01-28 20:31:05 -08:00
  • 52e5c05ebd Fuckin create the directory manually niten 2025-01-28 20:26:11 -08:00
  • 007a88cdfa Add runtime dir to readwrite paths niten 2025-01-28 20:19:19 -08:00
  • 66bbe7b760 Create runtime directory for postgresql niten 2025-01-28 20:04:22 -08:00
  • c9f66e2ed0 Switch to 24.11 niten 2025-01-26 10:54:09 -08:00
  • 358859f0b7 Fucking hell niten 2024-10-31 17:20:50 -07:00
  • 82cd4d1db4 Don't set a default for domain niten 2024-10-31 16:02:36 -07:00
  • 0eeb0eea47 Belongs in 'services' niten 2024-10-17 06:11:54 -07:00
  • 217444aaf3 Add udev rules for android niten 2024-10-17 06:10:46 -07:00
  • cc8debb111 Open DNS port for UDP. niten 2024-10-06 22:35:32 -07:00
  • c49b3e8259 Remove initrd-network, never finished that niten 2024-09-21 16:49:23 -07:00
  • 39c9dc8376 Remove old cruft, add initrd address niten 2024-09-21 16:31:37 -07:00
  • f1f6f5e6a1 Disable resolution from /etc/hosts niten 2024-08-23 11:19:24 -07:00
  • 3d82323e22 Create state directory niten 2024-08-22 20:25:50 -07:00
  • d4980a2d5e Wrap scripts in scripts niten 2024-08-22 20:19:07 -07:00
  • 4aa532bf4d Why syslog.target anyway? niten 2024-08-22 17:57:26 -07:00
  • 763670e46a Get rid of some cruft, and un-nest systemd niten 2024-08-22 17:52:20 -07:00
  • 2c20446df3 Switch to regular systemd service niten 2024-08-22 17:49:36 -07:00
  • 233c1fb29c Set a default for domain-upstreams niten 2024-08-18 17:06:23 -07:00
  • 9eaea4c641 Allow specifying specific upstreams per-domain niten 2024-08-18 12:00:07 -07:00
  • ef116b2b14 Nah...stick to a simpler service niten 2024-08-10 12:10:41 -07:00
  • 3c0347e734 Add initial kubernetes configuration niten 2024-08-10 11:52:35 -07:00
  • f8a5c9d3ec Was double-defining it... niten 2024-07-29 22:33:20 -07:00
  • 340e0fcb15 Set a default null for local-gateway niten 2024-07-29 22:32:24 -07:00
  • 46e5d85c30 mkif -> mkIf niten 2024-07-28 13:14:02 -07:00
  • 101b3994a7 Don't add empty clauses niten 2024-07-28 13:13:04 -07:00
  • 964974bca1 secured should be a bool niten 2024-07-28 13:08:29 -07:00
  • 37ea31b085 Better default for scraper port niten 2024-07-27 18:29:00 -07:00
  • 730c93fc4c Big changes to prometheus scrapers niten 2024-07-27 18:16:07 -07:00
  • b0b3f03231 Shit...nevermind niten 2024-07-21 16:26:41 -07:00
  • 804eb74969 Stick with just /metrics, it's cleaner niten 2024-07-21 16:21:00 -07:00
  • c2406ccc1e minecraft requires network niten 2024-07-20 13:16:06 -07:00
  • afaf723dee Make webmail init depend on secret services niten 2024-07-20 09:16:13 -07:00
  • 05fd51218c dataDir must be a path? niten 2024-07-19 18:31:33 -07:00
  • d2e648160f Don't set a state dir for prometheus either niten 2024-07-19 18:21:32 -07:00
  • 16c9d4b7c4 Don't set a default state dir for grafana niten 2024-07-19 18:21:01 -07:00
  • 89c241cb88 Import getHostFqdn too niten 2024-07-18 13:16:49 -07:00
  • e9520e66cd Wrap filter in () niten 2024-07-18 13:15:23 -07:00
  • ff7101ce62 Filter for those hosts with valid IP addresses niten 2024-07-18 13:01:13 -07:00
  • f45d9fa935 Need to import getHostIpv4 niten 2024-07-18 12:38:27 -07:00
  • 29405fae48 Include only real hosts from local site in hosts niten 2024-07-18 12:12:45 -07:00
  • 8279a28d15 Oops, messed with some concatStringsSep niten 2024-07-18 11:12:20 -07:00
  • 9a55c90d7f Don't use hostssl if we're local and ssl-free niten 2024-07-18 11:10:36 -07:00
  • 8f38f6a1c1 Don't nead load-paths anymore niten 2024-07-12 23:54:44 -07:00
  • 1977bafbb5 apparently uiop doesn't exist niten 2024-07-12 23:51:02 -07:00
  • 27a6a04f67 quicklisp is apparently obsolete? I hope? niten 2024-07-12 23:47:19 -07:00
  • c10160bf26 Use new lisp-modules method niten 2024-07-12 23:41:44 -07:00
  • 2d94cf0b1b Merge branch '24.05' of github.com:fudoniten/fudo-nix-lib into 24.05 niten 2024-07-12 13:17:06 -07:00
  • a9f1822e6d Add 'config-user' to users niten 2024-07-12 13:16:43 -07:00
  • 31bd4bd157 Wrap funcall in brackets niten 2024-07-11 09:16:57 -07:00
  • 1a3b73440a Typo: reqires -> requires niten 2024-07-11 09:12:20 -07:00
  • a1f2e7f28b ensurePermissions no longer exists niten 2024-07-11 09:08:08 -07:00
  • 4e071df85f krb5 in security niten 2024-07-04 23:14:51 -07:00
  • 1e95fbc8f1 kerberos renamed to package niten 2024-07-04 22:23:43 -07:00
  • c1eb271eda Nest kerberos settings in settings niten 2024-07-04 22:22:10 -07:00
  • dfad95b705 krb5 -> security.krb5 niten 2024-07-04 21:30:30 -07:00
  • 113e7f3b52 Change format of nexus doamins niten 2024-07-01 05:41:48 -07:00
  • f9c38a8479 Add world-readable option back in, it's used. master niten 2024-06-10 17:16:16 -07:00
  • b0b280c231 /var/run -> /run niten 2024-06-06 14:02:32 -07:00
  • d604090b94 Add fudo-system option niten 2024-06-02 14:40:34 -07:00
  • 6d08c1a790 Heimdal no longer stores kdc in libexec/heimdal/ niten 2024-06-02 13:34:57 -07:00
  • 60d5d50336 Restart secret services if changed niten 2024-05-21 15:24:46 -07:00
  • 68c8052e0c Add private/tailscale domains to nexus niten 2024-05-11 14:33:58 -07:00
  • 7bdae87de3 Add public/tailscale domain types for nexus niten 2024-05-11 13:58:17 -07:00
  • e6109489d4 Don't need to provide public LDAP anymore niten 2024-03-08 15:11:37 -08:00
  • 751ee6be5d /var/run -> /run niten 2024-02-04 23:21:36 -08:00
  • b1197db920 Oops, put the option in the wrong place niten 2024-02-04 23:03:20 -08:00
  • cc0a8b5cba Set up state directory for webmail niten 2024-02-04 22:45:38 -08:00
  • fe27dc3f3d Do this in a domain-specific way... niten 2024-02-01 21:00:19 -08:00
  • 62e4276a86 The ::1 network has extra stuff... niten 2024-01-31 09:56:34 -08:00
  • 38640140c8 v6 is handled...roughly niten 2024-01-31 09:36:35 -08:00
  • c1c67ecc80 ip -> network, one breaking niten 2024-01-31 09:26:55 -08:00
  • b0c7b7bd88 hasPrefix needs to get the IP too niten 2024-01-31 00:17:50 -08:00
  • 2d2f1099ea Add some brackets niten 2024-01-31 00:14:00 -08:00
  • 9e36dfc6ca domains -> fudo.domains niten 2024-01-30 22:21:48 -08:00
  • c5d1d11137 Handle IPv6 networks in SPF. niten 2024-01-30 22:19:50 -08:00
  • 16a105a24e Fuckin copy the primary job def niten 2024-01-13 14:19:08 -08:00
  • 168dc68251 Shouldn't be called 'template' niten 2024-01-13 13:26:10 -08:00
  • 031600e175 WTF, never changed keyfile placeholder niten 2024-01-13 13:07:52 -08:00
  • 083defd692 Change Pre/Post KDC jobs to scripts niten 2024-01-13 10:16:16 -08:00
  • ace843b59d Add coreutils to heimdal hprop job niten 2024-01-13 09:52:59 -08:00
  • e8a191908e Perform hpropd merge outside of main dir niten 2024-01-12 16:51:09 -08:00
  • 2a27c0f7b1 Remove unused options niten 2024-01-12 13:41:19 -08:00
  • 45b15e65fd password -> passwd niten 2024-01-07 18:09:12 -08:00
  • 92be492607 Don't create users if they don't have passwords niten 2024-01-07 17:51:23 -08:00
  • f7a5a43d30 Wait, Restart can't be 'never', only 'no' niten 2024-01-07 15:25:29 -08:00
  • 2c206d394b DELETE. EVERYTHING. niten 2024-01-07 15:21:07 -08:00
  • 7e533a6d6f Wait, is it ReadWritePaths? niten 2024-01-07 14:48:42 -08:00
  • dd2df768f1 Disable everything niten 2024-01-07 09:31:53 -08:00
  • c405597d81 Are numbers not legit? niten 2024-01-07 09:25:51 -08:00