|
|
0c458988de
|
ops/nixos: misc cleanups
|
2022-03-11 03:27:58 +00:00 |
|
|
|
daccfa5717
|
ops/nixos: migrate everything to vault-agent-acme
|
2022-03-07 00:52:03 +00:00 |
|
|
|
cbabb6f211
|
ops/nixos: migrate nix.maxJobs/binaryCaches/trustedBinaryCaches to the nix.settings equivalents
|
2022-01-30 20:30:20 +00:00 |
|
|
|
4b14ea5b4d
|
ops/nixos: remove rebuilder
It's in the common profile, we don't need it everywhere.
|
2022-01-23 16:57:20 +00:00 |
|
|
|
ad95bffd3d
|
ops/nixos: tidy up networking.useDHCP
|
2022-01-08 21:45:18 +00:00 |
|
|
|
2ddd50aef4
|
etheroute-lon01: disable TLS verification for totoro
For some reason this is failing with a TLS alert that the certificate
is expired???
|
2022-01-07 15:23:43 +00:00 |
|
|
|
d79265ddad
|
ops/nixos: tidy up security.acme
|
2022-01-04 14:00:45 +00:00 |
|
|
|
05aea7f5f1
|
ops/nixos: migrate from services.redis to services.redis.servers.""
|
2021-12-24 02:02:57 +00:00 |
|
|
|
b6e4741320
|
etheroute-lon01: stateful firewall for forwarded packets
|
2021-12-07 17:25:59 +00:00 |
|
|
|
81b19971d1
|
etheroute-lon01: IPIP shouldn't bind to that
|
2021-12-07 16:48:48 +00:00 |
|
|
|
a344287e92
|
etheroute-lon01: fix up IPIP
|
2021-12-07 16:13:32 +00:00 |
|
|
|
41c85d898b
|
etheroute-lon01: export QuadV net
|
2021-12-07 15:48:50 +00:00 |
|
|
|
b94b586d5b
|
clouvider-fra01: add content.int.lukegb.com
|
2021-10-19 07:06:37 +01:00 |
|
|
|
05ddad31ad
|
bvm-netbox: complete setup
|
2021-08-16 02:09:47 +00:00 |
|
|
|
eba082c249
|
etheroute-lon01: renumber BGP session from 16089 to 3170
|
2021-06-11 12:28:30 +00:00 |
|
|
|
36cc88bcef
|
ipfs: add to pomerium, explicitly set IPs for swarm
|
2021-04-18 16:24:59 +00:00 |
|
|
|
d96ef542d7
|
etheroute-lon01: set X-Forwarded-Roles header for rundeck
|
2021-04-10 19:22:54 +00:00 |
|
|
|
d9662bcd10
|
etheroute-lon01: add rundeck
|
2021-04-10 17:22:11 +00:00 |
|
|
|
bb03f5ea0d
|
ops/nixos: fixups for upstream pomerium module
|
2021-04-07 00:46:15 +00:00 |
|
|
|
66bfd9a458
|
etheroute-lon01: add twitterchiver
|
2021-03-31 22:37:01 +00:00 |
|
|
|
665dc16239
|
etheroute-lon01: bump timeout, which is just 'timeout'
|
2021-03-18 23:50:54 +00:00 |
|
|
|
a51b864d0d
|
etheroute-lon01: set more finegrained timeouts
|
2021-03-14 13:00:37 +00:00 |
|
|
|
da6c3854bd
|
etheroute-lon01: move to objdump.zxcvbnm.ninja
|
2021-03-14 11:46:05 +00:00 |
|
|
|
38e34e2210
|
etheroute-lon01: add objdump.lukegb.com
|
2021-03-14 11:44:17 +00:00 |
|
|
|
d38601fabe
|
etheroute-lon01: allow unifi websockets
|
2021-01-04 21:15:43 +00:00 |
|
|
|
045f9f5b22
|
etheroute-lon01: unifi needs tls_skip_verify
|
2021-01-03 15:32:00 +00:00 |
|
|
|
596752caa0
|
etheroute-lon01: add unifi.int
|
2021-01-03 03:35:24 +00:00 |
|
|
|
26e379dfb7
|
depot-wide: create logged-out.int.lukegb.com
|
2020-12-30 00:57:53 +00:00 |
|
|
|
be3ce89fb4
|
etheroute-lon01: unset allowed_domains
|
2020-12-29 20:55:01 +00:00 |
|
|
|
7573280e5b
|
etheroute-lon01: de-redundantify int.lukegb.com cert
|
2020-12-29 20:37:33 +00:00 |
|
|
|
1c550cf508
|
etheroute-lon01: rejiggle pomerium policy
|
2020-12-29 20:11:41 +00:00 |
|
|
|
11c4b77eab
|
etheroute-lon01: send more identity headers
|
2020-12-29 20:00:52 +00:00 |
|
|
|
8773350ba6
|
etheroute-lon01: add prometheus and alertmanager
|
2020-12-29 16:57:26 +00:00 |
|
|
|
aa9c1eb17e
|
etheroute-lon01: hint that it's-a-me, lukegb
|
2020-12-28 19:26:39 +00:00 |
|
|
|
6f65c77ad3
|
etheroute-lon01: fix databroker connection string
|
2020-12-28 19:11:25 +00:00 |
|
|
|
2c0de76c8b
|
etheroute-lon01: use redis for pomerium databroker storage
|
2020-12-28 19:09:55 +00:00 |
|
|
|
784138746f
|
pomerium: document all known pomerium options as nixos module options
|
2020-12-28 18:54:00 +00:00 |
|
|
|
d3f6442301
|
etheroute-lon01: add things on clouvider-fra01
|
2020-12-28 15:56:54 +00:00 |
|
|
|
721018520b
|
etheroute-lon01/pomerium: enable http redirect server
|
2020-12-28 15:40:13 +00:00 |
|
|
|
41bdeda58a
|
pomerium: various fixups to make this work
|
2020-12-28 15:27:18 +00:00 |
|
|
|
10c6ddc4c9
|
etheroute-lon01: install pomerium
|
2020-12-28 14:08:24 +00:00 |
|
|
|
3ee1906b97
|
ops/nixos: init etheroute-lon01
|
2020-12-26 23:36:34 +00:00 |
|
