aboutsummaryrefslogtreecommitdiff
Commit message (Collapse)AuthorAgeFilesLines
...
| * | | Fix unbound; remove Nixos firewall (use only diplonat)Alex Auvolat2023-04-2110-17/+3
| | | |
| * | | Merge branch 'main' into simplify-network-configAlex Auvolat2023-04-214-81/+108
| |\ \ \
| * | | | diplonat with fixed iptables thingAlex Auvolat2023-04-203-59/+78
| | | | |
| * | | | increase diplonat ramAlex Auvolat2023-04-191-1/+1
| | | | |
| * | | | staging: fix consul server addressesAlex Auvolat2023-04-192-3/+3
| | | | |
| * | | | Merge branch 'main' into simplify-network-configAlex Auvolat2023-04-1912-22/+131
| |\ \ \ \
| * | | | | D53 with addresses from DiploNAT autodiscovery; diplonat fw opening for tricotAlex Auvolat2023-04-052-3/+3
| | | | | |
| * | | | | Adapt prod config to new parametersAlex Auvolat2023-04-0515-167/+98
| | | | | |
| * | | | | introduce back static ipv4 prefix lenght but with default valueAlex Auvolat2023-04-054-4/+9
| | | | | |
| * | | | | make script clearer and add documentationAlex Auvolat2023-04-051-14/+20
| | | | | |
| * | | | | Allow for IPv6 with RA disabled by manually providing gatewayAlex Auvolat2023-04-056-38/+59
| | | | | |
| * | | | | staging: ipv6-only diplonat for automatic address discoveryAlex Auvolat2023-04-051-3/+2
| | | | | |
| * | | | | remove obsolete directivesAlex Auvolat2023-03-311-3/+0
| | | | | |
| * | | | | Merge branch 'main' into simplify-network-configAlex Auvolat2023-03-242-2/+2
| |\ \ \ \ \
| * | | | | | refactor configuration syntaxAlex Auvolat2023-03-2412-185/+144
| | | | | | |
| * | | | | | greatly simplify ipv4 and ipv6 configurationAlex Auvolat2023-03-2412-79/+76
| | | | | | |
| * | | | | | Sanitize DNS configurationAlex Auvolat2023-03-245-32/+10
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | - get rid of outside nameserver, unbound does the recursive resolving itself (and it checks DNSSEC) - remove CAP_NET_BIND_SERVICE for Consul as it is no longer binding on port 53 (was already obsolete) - make unbound config independant of LAN IPv4 address
* | | | | | | staging plume: cleanup and updateAlex Auvolat2023-05-158-104/+12
| |_|_|_|_|/ |/| | | | |
* | | | | | first plume on staging with S3 backendAlex Auvolat2023-05-1210-0/+360
| | | | | |
* | | | | | Export all Grafana dashboardsAlex Auvolat2023-05-098-0/+25424
| |_|_|_|/ |/| | | |
* | | | | Update telemetry stack appsMaximilien Richer2023-05-073-3/+3
| | | | |
* | | | | multi-zone matrixAlex Auvolat2023-05-041-11/+5
| | | | |
* | | | | orient SoGo and Synapse to closest psql-proxy; psql backup anywhereAlex Auvolat2023-05-044-11/+11
| | | | |
* | | | | multisite postgres, orient plume to correct dbAlex Auvolat2023-05-042-4/+11
| | | | |
* | | | | Add infinite restart policy for postgresqlBaptiste Jonglez2023-05-031-0/+7
| | | | |
* | | | | nix: allow wireguard + logsQuentin Dufour2023-04-281-0/+5
| |_|_|/ |/| | |
* | | | Garage backup to SFTP target hosted by MaxAlex Auvolat2023-04-204-81/+108
| |_|/ |/| |
* | | interface gestion site web guichetQuentin Dufour2023-04-192-1/+4
| | |
* | | allow memory overprovisionningQuentin Dufour2023-04-083-7/+14
| | |
* | | redeploy bagageQuentin Dufour2023-04-053-1/+91
| | |
* | | diplonat with ipv6 firewall support; email ipv6 addresses in dnsAlex Auvolat2023-04-042-5/+5
| | |
* | | added luxeylab to dkim signingtableAdrien2023-03-301-0/+1
| | |
* | | better classificationQuentin Dufour2023-03-271-4/+6
| | |
* | | update descriptiosQuentin Dufour2023-03-271-4/+5
| | |
* | | update readmeQuentin Dufour2023-03-271-3/+8
| | |
* | | upgrade bottin + remove bespinQuentin Dufour2023-03-261-2/+2
| |/ |/|
* | Update piranha IP againBaptiste Jonglez2023-03-242-2/+2
|/
* Merge pull request 'Passer wgautomesh en prod' (#9) from wgautomesh into mainAlex2023-03-249-32/+185
|\ | | | | | | Reviewed-on: https://git.deuxfleurs.fr/Deuxfleurs/nixcfg/pulls/9
| * wgautomesh actually on prodAlex Auvolat2023-03-246-24/+15
| |
| * Merge branch 'main' into wgautomeshwgautomeshAlex Auvolat2023-03-2411-13/+320
| |\ | |/ |/|
* | backup memoryAlex Auvolat2023-03-241-2/+2
| |
* | upgrade matrixQuentin Dufour2023-03-223-9/+9
| |
* | Add Garage backup script running on AbricotAlex Auvolat2023-03-203-4/+140
| |
* | socat proxyQuentin Dufour2023-03-201-0/+126
| |
* | wip rsa-ecc proxyQuentin Dufour2023-03-204-1/+46
| |
| * use nix enum typeAlex Auvolat2023-03-201-1/+1
| |
| * wgautomesh variable log level (debug for staging)Alex Auvolat2023-03-172-1/+7
| |
| * keep wg-quick code as referenceAlex Auvolat2023-03-171-0/+12
| |
| * wgautomesh from static binary hosted on giteaAlex Auvolat2023-03-171-4/+3
| |
| * update wgautomeshAlex Auvolat2023-03-171-1/+1
| |