aboutsummaryrefslogtreecommitdiff
Commit message (Collapse)AuthorAgeFilesLines
* make specifying an ipv6 fully optionnalAlex Auvolat2023-04-215-14/+22
|
* Diplonat on bespin, ipv6-onlyAlex Auvolat2023-04-211-1/+4
|
* break out core services into separate filesAlex Auvolat2023-04-215-258/+278
|
* Fix unbound; remove Nixos firewall (use only diplonat)Alex Auvolat2023-04-2110-17/+3
|
* Merge branch 'main' into simplify-network-configAlex Auvolat2023-04-214-81/+108
|\
| * Garage backup to SFTP target hosted by MaxAlex Auvolat2023-04-204-81/+108
| |
* | diplonat with fixed iptables thingAlex Auvolat2023-04-203-59/+78
| |
* | increase diplonat ramAlex Auvolat2023-04-191-1/+1
| |
* | staging: fix consul server addressesAlex Auvolat2023-04-192-3/+3
| |
* | Merge branch 'main' into simplify-network-configAlex Auvolat2023-04-1912-22/+131
|\|
| * interface gestion site web guichetQuentin Dufour2023-04-192-1/+4
| |
| * allow memory overprovisionningQuentin Dufour2023-04-083-7/+14
| |
| * redeploy bagageQuentin Dufour2023-04-053-1/+91
| |
| * diplonat with ipv6 firewall support; email ipv6 addresses in dnsAlex Auvolat2023-04-042-5/+5
| |
| * added luxeylab to dkim signingtableAdrien2023-03-301-0/+1
| |
| * better classificationQuentin Dufour2023-03-271-4/+6
| |
| * update descriptiosQuentin Dufour2023-03-271-4/+5
| |
| * update readmeQuentin Dufour2023-03-271-3/+8
| |
| * upgrade bottin + remove bespinQuentin Dufour2023-03-261-2/+2
| |
* | D53 with addresses from DiploNAT autodiscovery; diplonat fw opening for tricotAlex Auvolat2023-04-052-3/+3
| |
* | Adapt prod config to new parametersAlex Auvolat2023-04-0515-167/+98
| |
* | introduce back static ipv4 prefix lenght but with default valueAlex Auvolat2023-04-054-4/+9
| |
* | make script clearer and add documentationAlex Auvolat2023-04-051-14/+20
| |
* | Allow for IPv6 with RA disabled by manually providing gatewayAlex Auvolat2023-04-056-38/+59
| |
* | staging: ipv6-only diplonat for automatic address discoveryAlex Auvolat2023-04-051-3/+2
| |
* | remove obsolete directivesAlex Auvolat2023-03-311-3/+0
| |
* | Merge branch 'main' into simplify-network-configAlex Auvolat2023-03-242-2/+2
|\|
| * Update piranha IP againBaptiste Jonglez2023-03-242-2/+2
| |
* | refactor configuration syntaxAlex Auvolat2023-03-2412-185/+144
| |
* | greatly simplify ipv4 and ipv6 configurationAlex Auvolat2023-03-2412-79/+76
| |
* | Sanitize DNS configurationAlex Auvolat2023-03-245-32/+10
|/ | | | | | | | - get rid of outside nameserver, unbound does the recursive resolving itself (and it checks DNSSEC) - remove CAP_NET_BIND_SERVICE for Consul as it is no longer binding on port 53 (was already obsolete) - make unbound config independant of LAN IPv4 address
* Merge pull request 'Passer wgautomesh en prod' (#9) from wgautomesh into mainAlex2023-03-249-32/+185
|\ | | | | | | Reviewed-on: https://git.deuxfleurs.fr/Deuxfleurs/nixcfg/pulls/9
| * wgautomesh actually on prodAlex Auvolat2023-03-246-24/+15
| |
| * Merge branch 'main' into wgautomeshwgautomeshAlex Auvolat2023-03-2411-13/+320
| |\ | |/ |/|
* | backup memoryAlex Auvolat2023-03-241-2/+2
| |
* | upgrade matrixQuentin Dufour2023-03-223-9/+9
| |
* | Add Garage backup script running on AbricotAlex Auvolat2023-03-203-4/+140
| |
* | socat proxyQuentin Dufour2023-03-201-0/+126
| |
* | wip rsa-ecc proxyQuentin Dufour2023-03-204-1/+46
| |
| * use nix enum typeAlex Auvolat2023-03-201-1/+1
| |
| * wgautomesh variable log level (debug for staging)Alex Auvolat2023-03-172-1/+7
| |
| * keep wg-quick code as referenceAlex Auvolat2023-03-171-0/+12
| |
| * wgautomesh from static binary hosted on giteaAlex Auvolat2023-03-171-4/+3
| |
| * update wgautomeshAlex Auvolat2023-03-171-1/+1
| |
| * wgautomesh persist state to fileAlex Auvolat2023-03-172-1/+8
| |
| * wgautomesh gossip secret fileAlex Auvolat2023-03-174-2/+18
| |
| * document wgautomesh portAlex Auvolat2023-03-171-0/+1
| |
| * sample deployment of wgautomesh on staging (dont deploy prod with this commit)Alex Auvolat2023-03-176-15/+136
|/
* abricot fixed ipv6Alex Auvolat2023-03-172-3/+2
|
* remove email-inAlex Auvolat2023-03-171-2/+1
|