Commit graph

42 commits

Author SHA1 Message Date
9d6aa88d2d ops/nixos: add gitlab-runner-cacher, unassign clouvider-lon01, assign cofractal-ams01 2023-03-11 18:15:45 +00:00
0583eb2f07 clouvider-lon01: enable aarch64 emulation 2023-01-17 21:49:53 +00:00
3c7d0fa54e clouvider-lon01: add live1 relay 2022-11-24 13:03:16 +00:00
c16856f8ab treewide: add my.ip.tailscale6 2022-09-02 00:22:16 +01:00
e25a1ba6c4 depotwide: fix stuff 2022-08-14 21:01:26 +01:00
13d51a7978 ops/nixos: move gitlab-runner registration token to vault 2022-05-13 21:45:36 +00:00
8647af22d7 ops/nixos: put more things in Vault 2022-04-09 21:51:24 +01:00
b719181dfe nixos: migrate to secretsmgr for sshd and ACME 2022-03-17 23:31:55 +00:00
daccfa5717 ops/nixos: migrate everything to vault-agent-acme 2022-03-07 00:52:03 +00:00
43f62d224f ops/factorio/multiworld: prohibit /ws while hand-crafting 2022-02-05 21:04:03 +00:00
7b4b5dd1a4 clouvider-lon01: switch to -ws world 2022-02-05 17:52:06 +00:00
616a441451 clouvider-lon01: swap back to the other save 2022-02-02 02:20:19 +00:00
28b70d8e5a clouvider-lon01: swap game save 2022-02-01 22:56:21 +00:00
11739cc4c6 clouvider-lon01: change factorio savegame 2022-01-31 23:35:18 +00:00
cbabb6f211 ops/nixos: migrate nix.maxJobs/binaryCaches/trustedBinaryCaches to the nix.settings equivalents 2022-01-30 20:30:20 +00:00
4b14ea5b4d ops/nixos: remove rebuilder
It's in the common profile, we don't need it everywhere.
2022-01-23 16:57:20 +00:00
ad95bffd3d ops/nixos: tidy up networking.useDHCP 2022-01-08 21:45:18 +00:00
d79265ddad ops/nixos: tidy up security.acme 2022-01-04 14:00:45 +00:00
1f13fd811d coredns: bind to specific interfaces/IPs 2022-01-01 09:03:25 +00:00
4cb0716c91 ops/nixos: move minotarproxy back to clouvider-lon01
Closes #13.
2021-11-06 19:56:06 +00:00
66b6252d6f clouvider-lon01: withdraw 92.118.29.0/24 2021-07-03 00:14:54 +00:00
606ff984eb ops/nixos: minotarproxy-as-a-lib 2021-07-01 01:48:12 +00:00
0372f4b848 ops/nixos: set isNormalUser for all existing users
Now there's an assertion which requires either isNormalUser or isSystemUser, so
we set one of them for all the users we have already.
2021-04-17 20:16:27 +01:00
91f6cb3317 clouvider-lon01: add mac-mini as remote builder 2021-04-09 18:14:06 +00:00
d84075b124 clouvider-lon01: drop 92.118.28.0/24 2021-03-29 12:15:27 +00:00
b0a6ebe52d ops/nixos: add coredns 2021-03-20 02:03:23 +00:00
b014ef780b clouvider-lon01: give minotarproxy more IPs 2021-03-01 17:16:06 +00:00
5ee6a1c3b7 ops/nixos/quotes.bfob.gg: add my.quotesdb.listen option 2021-01-20 00:21:21 +00:00
ef81a0c080 quotes.bfob.gg: add to clouvider-lon01 2021-01-19 23:41:47 +00:00
d20dd06aaf clouvider-lon01: disable SSH open-to-all 2021-01-12 00:00:34 +00:00
ad516941e8 clouvider-lon01: SSH firewalling changes 2021-01-11 23:45:06 +00:00
7b9191f261 clouvider-lon01: factorio: open firewall 2020-11-30 19:53:57 +00:00
23e97ff266 ops/nixos: add whitby-distributed to clouvider-lon01 2020-11-30 23:21:56 +00:00
8c36ae940b clouvider-lon01: add factorio server 2020-11-24 04:50:31 +00:00
07b76f5cf9 clouvider-lon01: only listen on specified IPs 2020-11-07 14:20:46 +00:00
b2384d844d clouvider-lon01: disable automatic nix-gc
It's used as a Nix build cache machine - since we don't have gcroot
generation, it's better to just not collect garbage for the moment.
2020-11-06 05:21:37 +00:00
855feececa clouvider-lon01: set up as cache builder 2020-11-04 17:30:28 +00:00
252ad42fb2 clouvider-lon01: add minotarproxy 2020-11-04 17:23:52 +00:00
86a09dab73 clouvider-lon01: add minotarproxy IPs 2020-11-04 16:41:15 +00:00
4da102053c clouvider-lon01: add ZNC 2020-11-04 16:27:46 +00:00
129bdd0e69 clouvider-lon01: update tailscale IP 2020-11-04 15:53:18 +00:00
7795bd1d0f clouvider-lon01: init 2020-11-04 15:51:55 +00:00