Commit graph

141 commits

Author SHA1 Message Date
Christoph Heiss 6106809c1f
secrets: fort: change some things
All checks were successful
flake / build (push) Successful in 3m24s
Signed-off-by: Christoph Heiss <christoph@c8h4.io>
2024-09-19 17:22:02 +02:00
Christoph Heiss 850c8a0cc1
lib: add trimNewlines
Signed-off-by: Christoph Heiss <christoph@c8h4.io>
2024-08-25 23:05:35 +02:00
Christoph Heiss 6f656dff2f
secrets: fort: update something
All checks were successful
flake / build (push) Successful in 3m2s
Signed-off-by: Christoph Heiss <christoph@c8h4.io>
2024-08-24 20:27:40 +02:00
Christoph Heiss d63c2335a8
services: web: c8h4-io: move acme definitions here
Signed-off-by: Christoph Heiss <christoph@c8h4.io>
2024-08-24 20:26:49 +02:00
Christoph Heiss 35dcf3d3ba
services: forgejo: pin secret key
All checks were successful
flake / build (push) Successful in 3m18s
Signed-off-by: Christoph Heiss <christoph@c8h4.io>
2024-08-24 14:12:16 +02:00
Christoph Heiss 30d55d5792
services: forgejo: move to other host with dedicated data directory
Signed-off-by: Christoph Heiss <christoph@c8h4.io>
2024-08-24 14:12:16 +02:00
Christoph Heiss 981fe69bf5
services: forgejo: simplify ssh setup by renaming user
Signed-off-by: Christoph Heiss <christoph@c8h4.io>
2024-08-24 14:02:23 +02:00
Christoph Heiss c513cc2bce
home-manager: desktop: git: set sendemail identity explicitly
Signed-off-by: Christoph Heiss <christoph@c8h4.io>
2024-08-23 11:13:36 +02:00
Christoph Heiss 8b45301ab9
secrets: tank: update something
Signed-off-by: Christoph Heiss <christoph@c8h4.io>
2024-08-22 20:10:31 +02:00
Christoph Heiss 1f851ab8b9
secrets: desktop: update something
All checks were successful
flake / build (push) Successful in 3m12s
Signed-off-by: Christoph Heiss <christoph@c8h4.io>
2024-08-21 14:35:38 +02:00
Christoph Heiss 31076d3f8f
services: add new yarr service for RSS reading
All checks were successful
flake / build (push) Successful in 3m57s
Signed-off-by: Christoph Heiss <christoph@c8h4.io>
2024-08-18 22:03:19 +02:00
Christoph Heiss 4f7694fec5
services: vaultwarden: move to fort
All checks were successful
flake / build (push) Successful in 3m30s
Signed-off-by: Christoph Heiss <christoph@c8h4.io>
2024-08-17 18:22:02 +02:00
Christoph Heiss 2875ee182b
services: vikunja: move to fort
All checks were successful
flake / build (push) Successful in 3m31s
Signed-off-by: Christoph Heiss <christoph@c8h4.io>
2024-08-17 16:52:44 +02:00
Christoph Heiss f9f7017442
machines: zero: add some secrets
All checks were successful
flake / build (push) Successful in 3m19s
Signed-off-by: Christoph Heiss <christoph@c8h4.io>
2024-08-17 01:24:36 +02:00
Christoph Heiss 6333d7d38d
services: drop tt-rss completely
All checks were successful
flake / build (push) Successful in 3m21s
Instead I'll be switching to yarr [0], which is a lot simpler and
supports using a sqlite database.

[0] https://github.com/nkanaev/yarr

Signed-off-by: Christoph Heiss <christoph@c8h4.io>
2024-08-16 23:21:47 +02:00
Christoph Heiss 851aa3abb0
secrets: fort: drop some obsolete stuff
All checks were successful
flake / build (push) Successful in 3m10s
Signed-off-by: Christoph Heiss <christoph@c8h4.io>
2024-08-05 23:15:57 +02:00
Christoph Heiss 893ceb1687
services: prometheus: switch over to dedicated subdomain instead of subpath
All checks were successful
ci/woodpecker/push/woodpecker Pipeline was successful
Signed-off-by: Christoph Heiss <christoph@c8h4.io>
2024-07-07 17:04:03 +02:00
Christoph Heiss ef0d4cea6d
secrets: fort: update some things
Some checks failed
ci/woodpecker/push/woodpecker Pipeline failed
Signed-off-by: Christoph Heiss <christoph@c8h4.io>
2024-07-01 16:52:33 +02:00
Christoph Heiss 06fd80f486
services: grafana: switch over to dedicated subdomain instead of subpath
Signed-off-by: Christoph Heiss <christoph@c8h4.io>
2024-06-29 12:50:54 +02:00
Christoph Heiss 1f52d0f979
machines: maui: fix PATH for lix configuration
Signed-off-by: Christoph Heiss <christoph@c8h4.io>
2024-06-25 10:04:40 +02:00
Christoph Heiss b13318b89f
services: sourcehut: drop completely
Switched to Forgejo .. it's just so _much_ simpler than sourcehut with
all its small microservices, essentially.

Signed-off-by: Christoph Heiss <christoph@c8h4.io>
2024-06-24 23:37:09 +02:00
Christoph Heiss d94687c812
services: git-ingress: add dmz'd git-over-ssh ingress for forgejo
Signed-off-by: Christoph Heiss <christoph@c8h4.io>
2024-06-24 23:37:08 +02:00
Christoph Heiss 599a4db693
services: forgejo: add initial deployment
Signed-off-by: Christoph Heiss <christoph@c8h4.io>
2024-06-18 22:10:52 +02:00
Christoph Heiss 249cf3f640
services: vikunja: add initial deployment
Signed-off-by: Christoph Heiss <christoph@c8h4.io>
2024-06-06 17:56:34 +02:00
Christoph Heiss 6aac3e5cfc
services: nginx: make clientMaxBodySize default overridable
Signed-off-by: Christoph Heiss <christoph@c8h4.io>
2024-06-05 22:51:55 +02:00
Christoph Heiss e7b0f7a938
services: nginx: optimize overall configuration
Signed-off-by: Christoph Heiss <christoph@c8h4.io>
2024-06-04 17:23:57 +02:00
Christoph Heiss 6fb9beb383
flake: bump nixpkgs, home-manager, nixos-hardware, nixgl and sops-nix
Signed-off-by: Christoph Heiss <christoph@c8h4.io>
2024-06-03 11:15:44 +02:00
Christoph Heiss a95c8c343b
secrets: fort: IPv6 stuff
Signed-off-by: Christoph Heiss <christoph@c8h4.io>
2024-06-01 20:29:08 +02:00
Christoph Heiss 058efe7f4d
services: prometheus: clean up a bit
Signed-off-by: Christoph Heiss <christoph@c8h4.io>
2024-06-01 00:59:06 +02:00
Christoph Heiss db0d68bfd0
machines: tank: set IPv6 DUID for dhcpcd
Signed-off-by: Christoph Heiss <christoph@c8h4.io>
2024-06-01 00:59:03 +02:00
Christoph Heiss 620b681176
secrets: convert machine-specific zero secrets to common desktop
Signed-off-by: Christoph Heiss <christoph@c8h4.io>
2024-05-25 20:07:37 +02:00
Christoph Heiss 9e104c8307
common: packages: clean up; move some more packages to home-manager
Signed-off-by: Christoph Heiss <christoph@c8h4.io>
2024-05-21 13:04:01 +02:00
Christoph Heiss e1163ab15b
services: home-assistant: move reverse proxy definition to service file
Signed-off-by: Christoph Heiss <christoph@c8h4.io>
2024-05-20 15:58:47 +02:00
Christoph Heiss 0f678e07a2
services: paperless: move reverse proxy definition to service file
Signed-off-by: Christoph Heiss <christoph@c8h4.io>
2024-05-20 15:50:41 +02:00
Christoph Heiss e9472ed01b
services: alertmanager: switch to local address for simplicity
Signed-off-by: Christoph Heiss <christoph@c8h4.io>
2024-05-20 12:48:15 +02:00
Christoph Heiss 664a99c58f
secrets: tank: fix navidrome
Signed-off-by: Christoph Heiss <christoph@c8h4.io>
2024-05-10 11:15:19 +02:00
Christoph Heiss 7bc24fdba6
secrets: tank, fort: update something
Signed-off-by: Christoph Heiss <christoph@c8h4.io>
2024-05-10 01:30:23 +02:00
Christoph Heiss 720693a7c6
sops: add maui user key
Signed-off-by: Christoph Heiss <christoph@c8h4.io>
2024-05-10 01:20:50 +02:00
Christoph Heiss 320b97d660
tree-wide: convert everything from morph to nixinate + sops-nix
Signed-off-by: Christoph Heiss <christoph@c8h4.io>
2024-05-10 01:20:50 +02:00
Christoph Heiss 15c9581536
secrets: tank: switch homer to light theme
Signed-off-by: Christoph Heiss <christoph@c8h4.io>
2024-04-21 02:12:30 +02:00
Christoph Heiss 83c7b415d1
services: alertmanager: add initial deployment
Signed-off-by: Christoph Heiss <christoph@c8h4.io>
2024-04-20 21:27:19 +02:00
Christoph Heiss 88e3d72b01
secrets: fort: update
Signed-off-by: Christoph Heiss <christoph@c8h4.io>
2024-04-16 14:16:52 +02:00
Christoph Heiss f185afdc87
services: tt-rss: add initial deployment
Signed-off-by: Christoph Heiss <christoph@c8h4.io>
2024-04-15 23:22:28 +02:00
Christoph Heiss 8b44c5b6c1
services: vaultwarden: add initial service configuration
Signed-off-by: Christoph Heiss <christoph@c8h4.io>
2024-03-24 14:26:24 +01:00
Christoph Heiss 5752d22cc5
services: paperless: move to own subdomain
Signed-off-by: Christoph Heiss <christoph@c8h4.io>
2024-03-22 21:57:54 +01:00
Christoph Heiss cf8d568548
services: paperless: drop now-obsolete secret key setting
Since 63ef03399 ("nixos/paperless: set PAPERLESS_SECRET_KEY"), this is
set up (in an even better way) by the NixOS module already.

Signed-off-by: Christoph Heiss <christoph@c8h4.io>
2024-03-22 21:38:44 +01:00
Christoph Heiss e375540fec
secrets: maui: update
Signed-off-by: Christoph Heiss <christoph@c8h4.io>
2024-03-21 16:37:35 +01:00
Christoph Heiss 9f35d0a165
secrets: update some deployments
Signed-off-by: Christoph Heiss <christoph@c8h4.io>
2024-03-07 13:30:21 +01:00
Christoph Heiss 950f67077e
machines: fort: change some wireguard things
Signed-off-by: Christoph Heiss <christoph@c8h4.io>
2024-03-04 09:37:17 +01:00
Christoph Heiss 9219504c20
services: prometheus: restructure a bit, extract node-exporter
Signed-off-by: Christoph Heiss <christoph@c8h4.io>
2024-03-03 21:31:50 +01:00