|
c16856f8ab
|
treewide: add my.ip.tailscale6
|
2022-09-02 00:22:16 +01:00 |
|
|
e25a1ba6c4
|
depotwide: fix stuff
|
2022-08-14 21:01:26 +01:00 |
|
|
13d51a7978
|
ops/nixos: move gitlab-runner registration token to vault
|
2022-05-13 21:45:36 +00:00 |
|
|
8647af22d7
|
ops/nixos: put more things in Vault
|
2022-04-09 21:51:24 +01:00 |
|
|
b719181dfe
|
nixos: migrate to secretsmgr for sshd and ACME
|
2022-03-17 23:31:55 +00:00 |
|
|
daccfa5717
|
ops/nixos: migrate everything to vault-agent-acme
|
2022-03-07 00:52:03 +00:00 |
|
|
43f62d224f
|
ops/factorio/multiworld: prohibit /ws while hand-crafting
|
2022-02-05 21:04:03 +00:00 |
|
|
7b4b5dd1a4
|
clouvider-lon01: switch to -ws world
|
2022-02-05 17:52:06 +00:00 |
|
|
616a441451
|
clouvider-lon01: swap back to the other save
|
2022-02-02 02:20:19 +00:00 |
|
|
28b70d8e5a
|
clouvider-lon01: swap game save
|
2022-02-01 22:56:21 +00:00 |
|
|
11739cc4c6
|
clouvider-lon01: change factorio savegame
|
2022-01-31 23:35:18 +00:00 |
|
|
cbabb6f211
|
ops/nixos: migrate nix.maxJobs/binaryCaches/trustedBinaryCaches to the nix.settings equivalents
|
2022-01-30 20:30:20 +00:00 |
|
|
4b14ea5b4d
|
ops/nixos: remove rebuilder
It's in the common profile, we don't need it everywhere.
|
2022-01-23 16:57:20 +00:00 |
|
|
ad95bffd3d
|
ops/nixos: tidy up networking.useDHCP
|
2022-01-08 21:45:18 +00:00 |
|
|
d79265ddad
|
ops/nixos: tidy up security.acme
|
2022-01-04 14:00:45 +00:00 |
|
|
1f13fd811d
|
coredns: bind to specific interfaces/IPs
|
2022-01-01 09:03:25 +00:00 |
|
|
4cb0716c91
|
ops/nixos: move minotarproxy back to clouvider-lon01
Closes #13.
|
2021-11-06 19:56:06 +00:00 |
|
|
66b6252d6f
|
clouvider-lon01: withdraw 92.118.29.0/24
|
2021-07-03 00:14:54 +00:00 |
|
|
606ff984eb
|
ops/nixos: minotarproxy-as-a-lib
|
2021-07-01 01:48:12 +00:00 |
|
|
0372f4b848
|
ops/nixos: set isNormalUser for all existing users
Now there's an assertion which requires either isNormalUser or isSystemUser, so
we set one of them for all the users we have already.
|
2021-04-17 20:16:27 +01:00 |
|
|
91f6cb3317
|
clouvider-lon01: add mac-mini as remote builder
|
2021-04-09 18:14:06 +00:00 |
|
|
d84075b124
|
clouvider-lon01: drop 92.118.28.0/24
|
2021-03-29 12:15:27 +00:00 |
|
|
b0a6ebe52d
|
ops/nixos: add coredns
|
2021-03-20 02:03:23 +00:00 |
|
|
b014ef780b
|
clouvider-lon01: give minotarproxy more IPs
|
2021-03-01 17:16:06 +00:00 |
|
|
5ee6a1c3b7
|
ops/nixos/quotes.bfob.gg: add my.quotesdb.listen option
|
2021-01-20 00:21:21 +00:00 |
|
|
ef81a0c080
|
quotes.bfob.gg: add to clouvider-lon01
|
2021-01-19 23:41:47 +00:00 |
|
|
d20dd06aaf
|
clouvider-lon01: disable SSH open-to-all
|
2021-01-12 00:00:34 +00:00 |
|
|
ad516941e8
|
clouvider-lon01: SSH firewalling changes
|
2021-01-11 23:45:06 +00:00 |
|
|
7b9191f261
|
clouvider-lon01: factorio: open firewall
|
2020-11-30 19:53:57 +00:00 |
|
|
23e97ff266
|
ops/nixos: add whitby-distributed to clouvider-lon01
|
2020-11-30 23:21:56 +00:00 |
|
|
8c36ae940b
|
clouvider-lon01: add factorio server
|
2020-11-24 04:50:31 +00:00 |
|
|
07b76f5cf9
|
clouvider-lon01: only listen on specified IPs
|
2020-11-07 14:20:46 +00:00 |
|
|
b2384d844d
|
clouvider-lon01: disable automatic nix-gc
It's used as a Nix build cache machine - since we don't have gcroot
generation, it's better to just not collect garbage for the moment.
|
2020-11-06 05:21:37 +00:00 |
|
|
855feececa
|
clouvider-lon01: set up as cache builder
|
2020-11-04 17:30:28 +00:00 |
|
|
252ad42fb2
|
clouvider-lon01: add minotarproxy
|
2020-11-04 17:23:52 +00:00 |
|
|
86a09dab73
|
clouvider-lon01: add minotarproxy IPs
|
2020-11-04 16:41:15 +00:00 |
|
|
4da102053c
|
clouvider-lon01: add ZNC
|
2020-11-04 16:27:46 +00:00 |
|
|
129bdd0e69
|
clouvider-lon01: update tailscale IP
|
2020-11-04 15:53:18 +00:00 |
|
|
7795bd1d0f
|
clouvider-lon01: init
|
2020-11-04 15:51:55 +00:00 |
|