|
932afbda74
|
bvm-radius: require message authenticators
|
2021-09-25 20:36:40 +00:00 |
|
|
d6bd6e85ca
|
bvm-radius: add freeradius configuration
|
2021-09-25 18:28:45 +00:00 |
|
|
a8718864c1
|
swann: configure for eduroam on VLAN 100
|
2021-09-25 17:38:21 +00:00 |
|
|
f93ec18859
|
bvm-radius: add ACME certs for as205479.net
|
2021-09-25 17:38:09 +00:00 |
|
|
b50fa68559
|
coredns: delegate _acme-challenge to GCP DNS
|
2021-09-25 13:17:52 +00:00 |
|
|
8e97938d3e
|
bvm-radius: install eapol_test
|
2021-09-25 12:55:47 +00:00 |
|
|
5d2cc39419
|
nix/pkgs: add eapol-test
|
2021-09-25 12:55:06 +00:00 |
|
|
f3c38e3bb2
|
bvm-radius: use IP rather than DNS in extraCommands
DNS resolution doesn't work during extraCommands, which... is probably reasonable. Let's not do that.
|
2021-09-25 12:39:44 +00:00 |
|
|
4530991827
|
bvm-radius: RADIUS fw/pkg setup
|
2021-09-25 12:32:27 +00:00 |
|
|
0d6ab41728
|
bvm-radius: add tailscale IP
|
2021-09-25 12:19:07 +00:00 |
|
|
c908e3ab5d
|
coredns: add RADSEC entry for as205479.net.
|
2021-09-25 11:45:05 +00:00 |
|
Default email
|
84cb9d505d
|
Project import generated by Copybara.
GitOrigin-RevId: 51bcdc4cdaac48535dabf0ad4642a66774c609ed
|
2021-09-23 17:35:13 +02:00 |
|
|
4b1fd796ae
|
bvm-radius: init
|
2021-09-24 22:50:30 +00:00 |
|
|
158e0afcf3
|
coredns: init bvm-radius
|
2021-09-24 22:46:44 +00:00 |
|
Default email
|
d9e13ed064
|
Project import generated by Copybara.
GitOrigin-RevId: a930f7da84786807bb105df40e76b541604c3e72
|
2021-09-22 23:38:15 +08:00 |
|
Default email
|
88abffb7d2
|
Project import generated by Copybara.
GitOrigin-RevId: bc9b956714ed6eac5f8888322aac5bc41389defa
|
2021-09-18 12:52:07 +02:00 |
|
deployer@localhost
|
8ea060fa0c
|
nix/pkgs/plex-pass: update version to 1.24.3.5033-757abe6b4
|
2021-09-21 02:10:56 +00:00 |
|
|
ccec4b308b
|
as205479.net: add MX records
|
2021-09-19 00:08:03 +00:00 |
|
|
19782a9e63
|
ops/nixos: set group for isSystemUser users
|
2021-09-16 19:14:30 +00:00 |
|
|
cb7811898c
|
blade-tuvok: set bgp_local_prefs
|
2021-09-10 20:46:05 +00:00 |
|
|
dbf906a9a7
|
blade-router: add cloudflare
|
2021-09-10 20:23:24 +00:00 |
|
|
3ba0ab045c
|
blade-router: remove prefix limit
|
2021-09-10 20:00:31 +00:00 |
|
deployer@localhost
|
1a75721707
|
nix/pkgs/plex-pass: update version to 1.24.2.4973-2b1b51db9
|
2021-09-09 02:10:54 +00:00 |
|
|
3f184e6323
|
nix/gitlab-ci: add separate pipeline steps for Intel/ARM macOS
|
2021-09-05 09:24:03 +00:00 |
|
|
c705bf788a
|
depot: support system arg
|
2021-09-05 09:21:41 +00:00 |
|
|
26dad9dce1
|
ci-root: teach about aarch64-darwin
|
2021-09-05 09:08:28 +00:00 |
|
|
e7bfb107b1
|
coredns: update mac-mini tailscale IP
|
2021-09-05 08:07:14 +00:00 |
|
|
4bb015ee0d
|
swann: use IPv6 endpoint for tuvok over EE
EE uses CGNAT on IPv4, which makes this... less than ideal. However, IPv6 is
IPv6 and works pretty reasonably.
|
2021-09-03 12:40:52 +00:00 |
|
|
edfc04551a
|
totoro: set for duration on BFD alert
|
2021-09-02 19:24:17 +00:00 |
|
|
d35a0a35ba
|
swann: ee-scrape-data must output data with a newline
|
2021-09-02 19:23:03 +00:00 |
|
|
58b87a9f0e
|
swann: add ee-scrape-data, for putting allowance data into prometheus
|
2021-09-02 19:19:53 +00:00 |
|
|
683e6ffc21
|
totoro: add alert for BFD session failure
|
2021-09-02 18:35:18 +00:00 |
|
|
3abe727604
|
blade-router: add google session, which will hopefully turn up eventually
|
2021-08-31 20:36:26 +00:00 |
|
|
b4c80a07fa
|
blade-router: configure passive session towards AS62240
|
2021-08-31 16:39:23 +00:00 |
|
|
2c632e28d2
|
blade-tuvok: switch from ECMP to metrics
|
2021-08-31 12:12:44 +00:00 |
|
|
e95324c175
|
swann: yes, this one
|
2021-08-31 02:29:56 +00:00 |
|
|
2d0a607383
|
ops/nixos: enable bird-exporter-lfty
|
2021-08-31 02:26:50 +00:00 |
|
|
f7fbfa5436
|
nix/pkgs: init prometheus-bird-exporter-lfty
|
2021-08-31 02:01:38 +00:00 |
|
|
a0d97e082d
|
blade-tuvok: also NAT things going out onto linx
|
2021-08-31 01:37:34 +00:00 |
|
|
9a5b0379cb
|
blade-tuvok: set net.ipv6.conf.default.forwarding as well
|
2021-08-30 21:01:53 +01:00 |
|
|
31e254192f
|
heptapod: 0.23.2 -> 0.24.0
|
2021-08-30 20:52:41 +01:00 |
|
|
b2e45b56bb
|
blade-tuvok: make sure wg-endpoint sysctl gets forwarding enabled
|
2021-08-30 20:52:20 +01:00 |
|
|
7134fe904a
|
ops/nixos: implement BFD+WG tunneling for mldn-rd
|
2021-08-30 19:58:21 +01:00 |
|
|
bc1932df9b
|
hm: start 1password's gui silently
|
2021-08-30 14:26:25 +01:00 |
|
|
44e22b810c
|
porcorosso: force wayland off
|
2021-08-30 14:23:20 +01:00 |
|
Default email
|
58849dfc4f
|
Project import generated by Copybara.
GitOrigin-RevId: 21c937f8cb1e6adcfeb36dfd6c90d9d9bfab1d28
|
2021-08-27 16:25:00 +02:00 |
|
Default email
|
456cea78a8
|
Project import generated by Copybara.
GitOrigin-RevId: 88226ea038e538e09c272a7c56ba73c3f5eed57f
|
2021-08-25 10:27:29 +02:00 |
|
Default email
|
2ea8997135
|
Project import generated by Copybara.
GitOrigin-RevId: 5bc8b980b9178ef9a4bb622320cf34e59ea2ea10
|
2021-08-23 10:02:39 +02:00 |
|
Default email
|
619d6dcc77
|
Project import generated by Copybara.
GitOrigin-RevId: 870959c7fb3a42af1863bed9e1756086a74eb649
|
2021-08-22 09:53:02 +02:00 |
|
deployer@localhost
|
c440846823
|
nix/pkgs/plex-pass: update version to 1.24.1.4931-1a38e63c6
|
2021-08-24 02:10:55 +00:00 |
|