Commit graph

588 commits

Author SHA1 Message Date
576896970a bvm-heptapod: add more heptapod 2021-12-18 04:15:53 +00:00
5eb7f7102f bvm-heptapod: init 2021-12-17 01:28:39 +00:00
fee02312d3 blade-tuvok: move public interface off a VLAN
Previously, the public/internal interfaces were VLANned onto the same NIC. For
some reason, sometime the Emulex adapters seem to end up not getting configured
properly, which causes me no end of pain when I spend time trying to debug why
none of my VMs can see the internet anymore.

Instead of doing this, put the public interface onto its own actual virtual
network interface.
2021-12-17 00:27:24 +00:00
d99fe8b153 depot: fixups 2021-12-08 02:37:12 +00:00
29f7073384 ops/nixos: compatibility with NixOS 22.05 2021-12-07 19:13:04 +00:00
b6e4741320 etheroute-lon01: stateful firewall for forwarded packets 2021-12-07 17:25:59 +00:00
81b19971d1 etheroute-lon01: IPIP shouldn't bind to that 2021-12-07 16:48:48 +00:00
a344287e92 etheroute-lon01: fix up IPIP 2021-12-07 16:13:32 +00:00
105fcf1d50 coredns/zones: quadv stuff 2021-12-07 16:01:57 +00:00
41c85d898b etheroute-lon01: export QuadV net 2021-12-07 15:48:50 +00:00
da0717b02c ops/nixos: don't announce QuadV net everywhere by default 2021-12-07 15:19:45 +00:00
a1ee1e396c ops/nixos: alacritty -> kitty 2021-11-28 12:51:40 +00:00
7cbd53de1a ops/nixos: add blast configs 2021-11-25 17:14:03 +00:00
1eda43af34 go/trains: go! trains! 2021-11-23 12:32:01 +00:00
6d21c17a2a totoro: increase ping latency threshold 2021-11-18 21:36:22 +00:00
86e0ce9af9 nix/pkgs/datez: init 2021-11-18 21:33:40 +00:00
84c965f7cd totoro: give postgresql more resources to play with 2021-11-18 20:40:28 +00:00
0621fbfbf1 go/streetworks: init, schedule on totoro 2021-11-08 20:08:56 +00:00
94470110ed totoro: scrape prometheus data from 2112 for trains 2021-11-07 18:14:42 +00:00
4cb0716c91 ops/nixos: move minotarproxy back to clouvider-lon01
Closes #13.
2021-11-06 19:56:06 +00:00
9c8f3824a8 ops/nixos/lib/blade: virtualisation.libvirtd.qemuRunAsRoot -> virtualisation.libvirtd.qemu.runAsRoot 2021-11-05 01:34:04 +00:00
0b8196b04f kusakabe: expunge 2021-11-05 01:30:45 +00:00
72a2867e63 ops/nixos: enable X11 forwarding for some hosts 2021-11-05 01:29:53 +00:00
8834def522 clouvider-fra01: add content to port 18081 as well 2021-10-31 12:35:05 +00:00
a241cf7e82 porcorosso: switch back to nvidia 2021-10-31 11:38:34 +00:00
fad32fad6b marukuru: set accept_ra=2 for eth0 2021-10-22 19:39:46 +01:00
c769f2aeb6 bvm-prosody: keep messages forever 2021-10-22 19:39:32 +01:00
b9034f71aa porcorosso: enable bluetooth 2021-10-22 02:49:50 +01:00
a4f786f709 hm: add su-cinema-ernie 2021-10-19 07:53:59 +01:00
b94b586d5b clouvider-fra01: add content.int.lukegb.com 2021-10-19 07:06:37 +01:00
7b0e63d99c porcorosso: intel, again 2021-10-19 05:14:58 +01:00
c535655086 totoro/swann: do shenanigans with PS5 RTMP 2021-09-30 17:10:52 +00:00
fb16bea95c swann: give PS5 a static IP 2021-09-30 16:07:12 +00:00
9ed22f57ad bvm-radius: actually add cuirecv policy file 2021-09-27 08:35:53 +00:00
79a06fc54f bvm-radius: also permit User-Name attr in response 2021-09-27 08:16:48 +00:00
9773272e20 bvm-radius: request CUI 2021-09-27 08:01:14 +00:00
6b766b111d bvm-radius: make sure nginx can see certificates 2021-09-27 08:00:41 +00:00
00a02f8772 coredns: use the correct syntax, oops 2021-09-25 21:27:24 +00:00
bbbdfd5138 as205479.net: hmm, what 2021-09-25 21:18:09 +00:00
c976214bf8 coredns: _acme-challenge.www.as205479.net -> _acme-challenge.as205479.net 2021-09-25 21:03:14 +00:00
9c92e12742 bvm-radius: start serving as205479.net webpage 2021-09-25 20:51:24 +00:00
932afbda74 bvm-radius: require message authenticators 2021-09-25 20:36:40 +00:00
d6bd6e85ca bvm-radius: add freeradius configuration 2021-09-25 18:28:45 +00:00
a8718864c1 swann: configure for eduroam on VLAN 100 2021-09-25 17:38:21 +00:00
f93ec18859 bvm-radius: add ACME certs for as205479.net 2021-09-25 17:38:09 +00:00
b50fa68559 coredns: delegate _acme-challenge to GCP DNS 2021-09-25 13:17:52 +00:00
8e97938d3e bvm-radius: install eapol_test 2021-09-25 12:55:47 +00:00
f3c38e3bb2 bvm-radius: use IP rather than DNS in extraCommands
DNS resolution doesn't work during extraCommands, which... is probably reasonable. Let's not do that.
2021-09-25 12:39:44 +00:00
4530991827 bvm-radius: RADIUS fw/pkg setup 2021-09-25 12:32:27 +00:00
0d6ab41728 bvm-radius: add tailscale IP 2021-09-25 12:19:07 +00:00