| Commit message (Collapse) | Author | Age | Files | Lines | |
|---|---|---|---|---|---|
| * | prod: nixos 23.11 and nomad 1.5 | Alex Auvolat | 2024-04-20 | 1 | -0/+1 |
| | | |||||
| * | prod: update nixos to 23.05 | Alex Auvolat | 2024-04-20 | 1 | -1/+0 |
| | | |||||
| * | disable network fingerprinting in nomad | Quentin Dufour | 2023-08-07 | 1 | -0/+3 |
| | | |||||
| * | rename wgautomesh config to deuxfleurs namespace to avoid conflict | Alex Auvolat | 2023-06-12 | 1 | -1/+1 |
| | | |||||
| * | Merge branch 'main' into simplify-network-config | Alex Auvolat | 2023-05-09 | 1 | -0/+4 |
| |\ | |||||
| | * | nix: allow wireguard + logs | Quentin Dufour | 2023-04-28 | 1 | -0/+5 |
| | | | |||||
| * | | different wgautomesh gossip ports for prod and staging | Alex Auvolat | 2023-05-04 | 1 | -1/+6 |
| | | | |||||
| * | | make specifying an ipv6 fully optionnal | Alex Auvolat | 2023-04-21 | 1 | -8/+11 |
| | | | |||||
| * | | Fix unbound; remove Nixos firewall (use only diplonat) | Alex Auvolat | 2023-04-21 | 1 | -0/+2 |
| | | | |||||
| * | | introduce back static ipv4 prefix lenght but with default value | Alex Auvolat | 2023-04-05 | 1 | -1/+6 |
| | | | |||||
| * | | make script clearer and add documentation | Alex Auvolat | 2023-04-05 | 1 | -14/+20 |
| | | | |||||
| * | | Allow for IPv6 with RA disabled by manually providing gateway | Alex Auvolat | 2023-04-05 | 1 | -33/+54 |
| | | | |||||
| * | | refactor configuration syntax | Alex Auvolat | 2023-03-24 | 1 | -101/+89 |
| | | | |||||
| * | | greatly simplify ipv4 and ipv6 configuration | Alex Auvolat | 2023-03-24 | 1 | -49/+38 |
| | | | |||||
| * | | Sanitize DNS configuration | Alex Auvolat | 2023-03-24 | 1 | -28/+10 |
| |/ | | | | | | | | - get rid of outside nameserver, unbound does the recursive resolving itself (and it checks DNSSEC) - remove CAP_NET_BIND_SERVICE for Consul as it is no longer binding on port 53 (was already obsolete) - make unbound config independant of LAN IPv4 address | ||||
| * | wgautomesh actually on prod | Alex Auvolat | 2023-03-24 | 1 | -7/+2 |
| | | |||||
| * | keep wg-quick code as reference | Alex Auvolat | 2023-03-17 | 1 | -0/+12 |
| | | |||||
| * | wgautomesh persist state to file | Alex Auvolat | 2023-03-17 | 1 | -0/+1 |
| | | |||||
| * | wgautomesh gossip secret file | Alex Auvolat | 2023-03-17 | 1 | -0/+1 |
| | | |||||
| * | sample deployment of wgautomesh on staging (dont deploy prod with this commit) | Alex Auvolat | 2023-03-17 | 1 | -9/+24 |
| | | |||||
| * | TODOs in deuxfleurs.nix because the old world is maybe mixing with the new | Adrien | 2023-03-15 | 1 | -2/+2 |
| | | |||||
| * | Remove hardcoded years in deuxfleurs.nix | Alex Auvolat | 2023-01-01 | 1 | -7/+7 |
| | | |||||
| * | Replace deploy_wg by a NixOS activation script | Alex Auvolat | 2022-12-14 | 1 | -0/+9 |
| | | |||||
| * | Add possible public_ipv4 node tag | Alex Auvolat | 2022-12-07 | 1 | -1/+10 |
| | | |||||
| * | Staging: Add CNAME target meta parameter, will be used for diplonat auto dns ↵ | Alex Auvolat | 2022-12-07 | 1 | -8/+16 |
| | | | | | update | ||||
| * | Staging: ability to run Nix jobs using exec2 driver | Alex Auvolat | 2022-11-28 | 1 | -0/+1 |
| | | |||||
| * | Remove root, add wg-quick-wg0 after unbound | Alex Auvolat | 2022-11-28 | 1 | -0/+1 |
| | | |||||
| * | Fix wg-quick MTU because it does bad stuff by default | Alex Auvolat | 2022-11-22 | 1 | -0/+1 |
| | | |||||
| * | Add after config on nomad and consul | Alex Auvolat | 2022-11-22 | 1 | -0/+2 |
| | | |||||
| * | Add Baptiste ; fix wireguard | Alex Auvolat | 2022-11-22 | 1 | -2/+2 |
| | | |||||
| * | remove systemd-resolved | Alex Auvolat | 2022-10-16 | 1 | -8/+2 |
| | | |||||
| * | Complete telemetry configuration | Alex Auvolat | 2022-10-16 | 1 | -0/+5 |
| | | |||||
| * | Add docker | Quentin Dufour | 2022-10-16 | 1 | -1/+1 |
| | | |||||
| * | Switch to systemd-networkd | Quentin Dufour | 2022-10-15 | 1 | -25/+27 |
| | | |||||
| * | Force Garage to use ipv6 connectivity | Alex Auvolat | 2022-09-15 | 1 | -0/+1 |
| | | |||||
| * | Improve DNS configuration | Alex Auvolat | 2022-08-30 | 1 | -4/+38 |
| | | | | | | | | | | Add Unbound server that separates queries between those going to Consul and those going elsewhere. This allows us to have DNS working even if Consul fails for some reason. This way we can also remove the secondary `nameserver` entry in /etc/resolv.conf, thus fixing a bug where certain containers (Alpine-based images?) were using the secondary resolver some of the time, making them unable to access .consul hosts. | ||||
| * | Ask consul to use advertised address and not bind one | Quentin Dufour | 2022-08-24 | 1 | -0/+1 |
| | | |||||
| * | Fix nomad talking to consul | Alex Auvolat | 2022-08-24 | 1 | -1/+4 |
| | | |||||
| * | Fix access to consul for non-server nodes | Alex Auvolat | 2022-08-24 | 1 | -1/+1 |
| | | |||||
| * | Disable bootstrap_expect unless specific deuxfleurs.bootstrap is set | Alex Auvolat | 2022-08-24 | 1 | -9/+11 |
| | | |||||
| * | Fix IPv6 | Quentin Dufour | 2022-08-24 | 1 | -1/+10 |
| | | |||||
| * | Remove wesher, reconfigure staging without it | Alex Auvolat | 2022-08-23 | 1 | -24/+73 |
| | | |||||
| * | Disable ipv6 temporary addresses | Alex Auvolat | 2022-08-23 | 1 | -0/+1 |
| | | |||||
| * | Update to nixos 22.05 | Alex Auvolat | 2022-07-27 | 1 | -9/+11 |
| | | |||||
| * | Configure Consul DNS | Alex Auvolat | 2022-06-01 | 1 | -3/+23 |
| | | |||||
| * | Work on drone runner as VM | Alex Auvolat | 2022-05-30 | 1 | -0/+11 |
| | | |||||
| * | Fix firewall rule for IGD | Alex Auvolat | 2022-05-09 | 1 | -2/+2 |
| | | |||||
| * | Network configuration updates | Alex Auvolat | 2022-05-09 | 1 | -16/+21 |
| | | |||||
| * | Update network configuration | Alex Auvolat | 2022-05-08 | 1 | -1/+1 |
| | | |||||
| * | Replace ad-hoc wireguard by wesher on staging cluster | Alex Auvolat | 2022-04-20 | 1 | -67/+70 |
| | | |||||
 |
index : nixcfg.git | |
| Nixos configuration for Deuxfleurs clusters |
| aboutsummaryrefslogtreecommitdiff |