Commit message (Collapse) | Author | Age | Files | Lines | |
---|---|---|---|---|---|
* | deploy tricot at bespin, register gitea (not accessed yet) | Alex Auvolat | 2023-05-09 | 3 | -18/+42 |
| | |||||
* | Merge branch 'main' into simplify-network-config | Alex Auvolat | 2023-05-09 | 10 | -29/+41 |
|\ | |||||
| * | Update telemetry stack apps | Maximilien Richer | 2023-05-07 | 3 | -3/+3 |
| | | |||||
| * | multi-zone matrix | Alex Auvolat | 2023-05-04 | 1 | -11/+5 |
| | | |||||
| * | orient SoGo and Synapse to closest psql-proxy; psql backup anywhere | Alex Auvolat | 2023-05-04 | 4 | -11/+11 |
| | | |||||
| * | multisite postgres, orient plume to correct db | Alex Auvolat | 2023-05-04 | 2 | -4/+11 |
| | | |||||
| * | Add infinite restart policy for postgresql | Baptiste Jonglez | 2023-05-03 | 1 | -0/+7 |
| | | |||||
| * | nix: allow wireguard + logs | Quentin Dufour | 2023-04-28 | 1 | -0/+5 |
| | | |||||
* | | different wgautomesh gossip ports for prod and staging | Alex Auvolat | 2023-05-04 | 2 | -1/+8 |
| | | |||||
* | | make specifying an ipv6 fully optionnal | Alex Auvolat | 2023-04-21 | 5 | -14/+22 |
| | | |||||
* | | Diplonat on bespin, ipv6-only | Alex Auvolat | 2023-04-21 | 1 | -1/+4 |
| | | |||||
* | | break out core services into separate files | Alex Auvolat | 2023-04-21 | 5 | -258/+278 |
| | | |||||
* | | Fix unbound; remove Nixos firewall (use only diplonat) | Alex Auvolat | 2023-04-21 | 10 | -17/+3 |
| | | |||||
* | | Merge branch 'main' into simplify-network-config | Alex Auvolat | 2023-04-21 | 4 | -81/+108 |
|\| | |||||
| * | Garage backup to SFTP target hosted by Max | Alex Auvolat | 2023-04-20 | 4 | -81/+108 |
| | | |||||
* | | diplonat with fixed iptables thing | Alex Auvolat | 2023-04-20 | 3 | -59/+78 |
| | | |||||
* | | increase diplonat ram | Alex Auvolat | 2023-04-19 | 1 | -1/+1 |
| | | |||||
* | | staging: fix consul server addresses | Alex Auvolat | 2023-04-19 | 2 | -3/+3 |
| | | |||||
* | | Merge branch 'main' into simplify-network-config | Alex Auvolat | 2023-04-19 | 12 | -22/+131 |
|\| | |||||
| * | interface gestion site web guichet | Quentin Dufour | 2023-04-19 | 2 | -1/+4 |
| | | |||||
| * | allow memory overprovisionning | Quentin Dufour | 2023-04-08 | 3 | -7/+14 |
| | | |||||
| * | redeploy bagage | Quentin Dufour | 2023-04-05 | 3 | -1/+91 |
| | | |||||
| * | diplonat with ipv6 firewall support; email ipv6 addresses in dns | Alex Auvolat | 2023-04-04 | 2 | -5/+5 |
| | | |||||
| * | added luxeylab to dkim signingtable | Adrien | 2023-03-30 | 1 | -0/+1 |
| | | |||||
| * | better classification | Quentin Dufour | 2023-03-27 | 1 | -4/+6 |
| | | |||||
| * | update descriptios | Quentin Dufour | 2023-03-27 | 1 | -4/+5 |
| | | |||||
| * | update readme | Quentin Dufour | 2023-03-27 | 1 | -3/+8 |
| | | |||||
| * | upgrade bottin + remove bespin | Quentin Dufour | 2023-03-26 | 1 | -2/+2 |
| | | |||||
* | | D53 with addresses from DiploNAT autodiscovery; diplonat fw opening for tricot | Alex Auvolat | 2023-04-05 | 2 | -3/+3 |
| | | |||||
* | | Adapt prod config to new parameters | Alex Auvolat | 2023-04-05 | 15 | -167/+98 |
| | | |||||
* | | introduce back static ipv4 prefix lenght but with default value | Alex Auvolat | 2023-04-05 | 4 | -4/+9 |
| | | |||||
* | | make script clearer and add documentation | Alex Auvolat | 2023-04-05 | 1 | -14/+20 |
| | | |||||
* | | Allow for IPv6 with RA disabled by manually providing gateway | Alex Auvolat | 2023-04-05 | 6 | -38/+59 |
| | | |||||
* | | staging: ipv6-only diplonat for automatic address discovery | Alex Auvolat | 2023-04-05 | 1 | -3/+2 |
| | | |||||
* | | remove obsolete directives | Alex Auvolat | 2023-03-31 | 1 | -3/+0 |
| | | |||||
* | | Merge branch 'main' into simplify-network-config | Alex Auvolat | 2023-03-24 | 2 | -2/+2 |
|\| | |||||
| * | Update piranha IP again | Baptiste Jonglez | 2023-03-24 | 2 | -2/+2 |
| | | |||||
* | | refactor configuration syntax | Alex Auvolat | 2023-03-24 | 12 | -185/+144 |
| | | |||||
* | | greatly simplify ipv4 and ipv6 configuration | Alex Auvolat | 2023-03-24 | 12 | -79/+76 |
| | | |||||
* | | Sanitize DNS configuration | Alex Auvolat | 2023-03-24 | 5 | -32/+10 |
|/ | | | | | | | | - get rid of outside nameserver, unbound does the recursive resolving itself (and it checks DNSSEC) - remove CAP_NET_BIND_SERVICE for Consul as it is no longer binding on port 53 (was already obsolete) - make unbound config independant of LAN IPv4 address | ||||
* | Merge pull request 'Passer wgautomesh en prod' (#9) from wgautomesh into main | Alex | 2023-03-24 | 9 | -32/+185 |
|\ | | | | | | | Reviewed-on: https://git.deuxfleurs.fr/Deuxfleurs/nixcfg/pulls/9 | ||||
| * | wgautomesh actually on prod | Alex Auvolat | 2023-03-24 | 6 | -24/+15 |
| | | |||||
| * | Merge branch 'main' into wgautomeshwgautomesh | Alex Auvolat | 2023-03-24 | 11 | -13/+320 |
| |\ | |/ |/| | |||||
* | | backup memory | Alex Auvolat | 2023-03-24 | 1 | -2/+2 |
| | | |||||
* | | upgrade matrix | Quentin Dufour | 2023-03-22 | 3 | -9/+9 |
| | | |||||
* | | Add Garage backup script running on Abricot | Alex Auvolat | 2023-03-20 | 3 | -4/+140 |
| | | |||||
* | | socat proxy | Quentin Dufour | 2023-03-20 | 1 | -0/+126 |
| | | |||||
* | | wip rsa-ecc proxy | Quentin Dufour | 2023-03-20 | 4 | -1/+46 |
| | | |||||
| * | use nix enum type | Alex Auvolat | 2023-03-20 | 1 | -1/+1 |
| | | |||||
| * | wgautomesh variable log level (debug for staging) | Alex Auvolat | 2023-03-17 | 2 | -1/+7 |
| | |