Commit graph

Select branches

Hide pull requests

canon

Mono Color

• 6f70c36b8f ops/nixos/blade: further nuke forwardX11 Luke Granger-Brown 2022-04-16 01:52:50 +0100
• 514d703560 ops/nixos/blade: nuke forwardX11 Luke Granger-Brown 2022-04-16 01:48:32 +0100
• 7b4febe0ab ops/nixos/blade: honey I shrunk the closure Luke Granger-Brown 2022-04-10 02:20:41 +0000
• 784324fd20 ops/nixos: decommission virgin media Luke Granger-Brown 2022-04-15 23:42:05 +0100
• 75d3386cd2 treewide: fix up for nixpkgs bump Luke Granger-Brown 2022-04-15 23:33:53 +0100
• bb584b27e9 Project import generated by Copybara. Default email 2022-04-15 03:41:22 +0200
• 29ac5c60c3 oracle-lon01: do more complicated routing, because google Luke Granger-Brown 2022-04-15 11:58:16 +0000
• b5fbf1f472 oracle-lon01: add my first aarch64-linux boxen Luke Granger-Brown 2022-04-13 12:03:56 +0000
• dca96efffe fup: move config to secret Luke Granger-Brown 2022-04-10 01:37:37 +0100
• 8647af22d7 ops/nixos: put more things in Vault Luke Granger-Brown 2022-04-09 21:51:24 +0100
• 2536214734 deluge: migrate auth file to vault Luke Granger-Brown 2022-04-09 20:59:11 +0100
• a3ef78701e web/lukegbcom: add a diagram to illustrate the token hierarchy Luke Granger-Brown 2022-04-09 20:46:48 +0100
• 675b65b5da nix/docker/heptapod: add update script for image Luke Granger-Brown 2022-04-09 20:17:32 +0100
• e1ede118d1 web/lukegbcom: add some padding Luke Granger-Brown 2022-04-08 02:30:59 +0100
• 482ecc6984 web/lukegbcom/2022-04-07-vault-and-me: add hero image Luke Granger-Brown 2022-04-08 02:22:01 +0100
• 65236b2c0c web/lukegbcom/2022-04-07: explain why tokend ACLs are more permissive... Luke Granger-Brown 2022-04-08 02:10:22 +0100
• 78ccb6a571 web/lukegbcom: underline links in posts Luke Granger-Brown 2022-04-08 02:08:24 +0100
• adec31460a web/lukegbcom: oops, YAML... Luke Granger-Brown 2022-04-08 02:01:51 +0100
• ff665ab50f lukegbcom: add a long rambly post about my Vault setup Luke Granger-Brown 2022-04-08 01:42:43 +0100
• b238831963 frantech-nyc01: no more bgp Luke Granger-Brown 2022-04-07 04:13:33 +0100
• 55b6bd2a19 ops/nixos: add nixos-size to measure total closure pinned by booted-system/current-system mismatch Luke Granger-Brown 2022-04-07 03:42:17 +0000
• bd4e52105d nix/pkgs/plex-pass: update version to 1.25.9.5721-965587f64 deployer@bvm-nixosmgmt.blade.as205479.net 2022-04-07 02:12:24 +0000
• 157629a402 paperless: allow websockets, set up postgres Luke Granger-Brown 2022-04-06 11:49:52 +0100
• d56f44df06 Project import generated by Copybara. Default email 2022-04-03 20:54:34 +0200
• fa8f317d6f totoro: add firewall rule for Lifx Luke Granger-Brown 2022-04-06 01:00:55 +0100
• da71f20036 ops/nixos: enable paperless Luke Granger-Brown 2022-04-06 00:57:22 +0100
• a0802e697f gitlab-ci: restore machine deploys Luke Granger-Brown 2022-04-05 22:13:21 +0100
• 98cd1c7427 gitlab-ci: try setting NIX_PATH explicitly Luke Granger-Brown 2022-04-05 22:09:21 +0100
• 97a2e46eeb lukegbcom: autodeploy using Vault Luke Granger-Brown 2022-04-05 22:04:32 +0100
• 57c5a7d1ce coredns: add bvm-paperless.int Luke Granger-Brown 2022-04-05 11:28:10 +0100
• 2585d70127 porcorosso: tidy up gl packages Luke Granger-Brown 2022-04-05 03:14:07 +0000
• 67252bab10 lightspeed: delete Luke Granger-Brown 2022-04-05 02:41:16 +0000
• 9119a5893f lukegbcom: fix up images in posts Luke Granger-Brown 2022-04-05 02:18:57 +0000
• 8f6ae5cfd4 bvm-paperless: init Luke Granger-Brown 2022-04-04 19:11:22 +0000
• 8a45d4525b Project import generated by Copybara. Default email 2022-03-30 11:31:56 +0200
• 6f81c9d464 3p/nixpkgs: remove old PR patches Luke Granger-Brown 2022-04-04 19:05:49 +0000
• 11f8adeb43 3p/nixpkgs: add pr167721 for paperless-ngx Luke Granger-Brown 2022-04-04 18:56:17 +0000
• 9f9991c895 heptapod: 0.30.0 -> 0.30.1 Luke Granger-Brown 2022-04-04 14:53:06 +0100
• 32f6d38549 web/lukegbcom: limit homepage posts to 3 Luke Granger-Brown 2022-04-04 02:38:10 +0100
• 43e5ecf0db web/lukegbcom: add all the rest of the posts Luke Granger-Brown 2022-04-04 02:36:09 +0100
• 762a5a7271 web/lukegbcom: init next.js version Luke Granger-Brown 2022-04-04 00:32:57 +0100
• f8f5d48eec porcorosso: blocklist r8152/r8153_ecm Luke Granger-Brown 2022-04-03 19:47:19 +0100
• b40f3435f4 swann: switch to SFP Luke Granger-Brown 2022-03-30 16:42:37 +0000
• addba44d44 coredns: fix ipv6 zones Luke Granger-Brown 2022-03-30 17:25:25 +0100
• 4b6b4842d1 update dns Luke Granger-Brown 2022-03-29 21:30:09 +0100
• d2aaa28aa5 nix/pkgs/plex-pass: update version to 1.25.8.5663-e071c3d62 deployer@bvm-nixosmgmt.blade.as205479.net 2022-03-25 02:11:03 +0000
• f5d66318a3 go/access: set principal name, set presence required by host Luke Granger-Brown 2022-03-25 01:47:18 +0000
• 3a32590571 go/access: init Luke Granger-Brown 2022-03-25 01:24:21 +0000
• eb163962a4 nixos/common: add wireguard-tools Luke Granger-Brown 2022-03-24 22:22:18 +0000
• 4d00448f55 heptapod: 0.29.1 -> 0.30.0 Luke Granger-Brown 2022-03-24 22:20:56 +0000
• dbaabf1295 vault: deployer should be allowed to read nix-daemon secrets Luke Granger-Brown 2022-03-24 22:20:44 +0000
• b8acd6e31b swann: re-enable vault-agent Luke Granger-Brown 2022-03-20 19:10:24 +0000
• 7592e76a31 tokend: init Luke Granger-Brown 2022-03-20 17:47:52 +0000
• 08b68745f0 ops/vault: move policies to token_policies Luke Granger-Brown 2022-03-20 11:29:10 +0000
• 58a907b700 nixos/vault-agent: listen on UDS only Luke Granger-Brown 2022-03-20 11:14:51 +0000
• d97a1b7437 bvm-radius: reenable roaming2.ja.net Luke Granger-Brown 2022-03-20 11:08:34 +0000
• c60a68a354 nix/gitlab-ci: try to restrict deploy steps to only default Luke Granger-Brown 2022-03-20 10:26:56 +0000
• 4020f310ce ops/vault: destroy existing secrets before provisioning a new one Luke Granger-Brown 2022-03-20 10:20:25 +0000
• 132cb805b3 ops/vault: use wrapping token to protect secret IDs in transit Luke Granger-Brown 2022-03-20 10:14:02 +0000
• 829d179d37 nixos/common: make the EnvironmentFile optional to avoid... problems Luke Granger-Brown 2022-03-20 10:00:17 +0000
• c9ffb4ed3e secretsmgr: actually _enable_ the timer unit Luke Granger-Brown 2022-03-18 01:08:35 +0000
• ce698ab382 nixos/secretsmgr: add the timer unit Luke Granger-Brown 2022-03-18 01:03:55 +0000
• b719181dfe nixos: migrate to secretsmgr for sshd and ACME Luke Granger-Brown 2022-03-17 23:31:55 +0000
• 702cd972ab nixos/vault-agent: should care about /var/lib/vault-agent instead Luke Granger-Brown 2022-03-17 12:27:10 +0000
• b4b3484e6c nix/pkgs/plex-pass: update version to 1.25.7.5604-980a13e02 deployer@bvm-nixosmgmt.blade.as205479.net 2022-03-17 02:10:56 +0000
• 037c6f0fd8 go/secretsmgr: add support for ACME certificate issuance Luke Granger-Brown 2022-03-17 01:26:18 +0000
• b0d2782369 nixos/vault-agent: set a longer timeout on HTTP requests to upstream Luke Granger-Brown 2022-03-17 01:25:44 +0000
• d2481b1461 vault-acme: sleep in lieu of waiting "properly" for DNS propagation Luke Granger-Brown 2022-03-17 01:03:41 +0000
• 148e071c21 ops/vault/cfg: add acme-ca Luke Granger-Brown 2022-03-16 00:18:47 +0000
• fb7e18260a ops/vault/cfg: where we're going, we don't need secrets.nix Luke Granger-Brown 2022-03-16 00:06:46 +0000
• 165fc4559c go/secretsmgr: init Luke Granger-Brown 2022-03-15 03:07:34 +0000
• 0dacea5ff8 3p/gopkgs: add a bunch of dependencies of github.com/hashicorp/vault/api Luke Granger-Brown 2022-03-15 03:07:06 +0000
• 23df8e3b18 ops/vault/cfg: initial configuration Luke Granger-Brown 2022-03-14 23:34:33 +0000
• 92998b5d36 ops/vault/cfg: init terranix stuff Luke Granger-Brown 2022-03-14 21:29:15 +0000
• b469b24c5a totoro: add live2 alias Luke Granger-Brown 2022-03-14 21:28:58 +0000
• f55dc46170 ssh-ca-vault: disable SSH host key signing for now Luke Granger-Brown 2022-03-14 21:28:37 +0000
• 8c6c7af3f7 ops/vault: add reissue-secret-id utility Luke Granger-Brown 2022-03-14 21:28:16 +0000
• 262620f177 swann: also put v6 RA routes into the correct route table Luke Granger-Brown 2022-03-13 20:35:11 +0000
• 615c30ed54 swann: reduce write activity on disk Luke Granger-Brown 2022-03-13 17:34:23 +0000
• edf6671aff 3p/nixpkgs: add pr164025 Luke Granger-Brown 2022-03-13 17:33:59 +0000
• b29a330382 ubi_reader: init Luke Granger-Brown 2022-03-13 17:32:59 +0000
• c41914e274 nixos/networkd: add support for configuring networkd.conf settings Luke Granger-Brown 2022-03-13 04:00:48 +0000
• aa526eb20f Project import generated by Copybara. Default email 2022-03-10 11:12:11 -0800
• c9bd0696ed heptapod: enable SSH CA Luke Granger-Brown 2022-03-13 00:24:57 +0000
• f1fcda810a vault-agent-acme: disable Luke Granger-Brown 2022-03-12 23:39:45 +0000
• 5283ee4fee swann: migrate fully to using networkd Luke Granger-Brown 2022-03-12 19:38:54 +0000
• 9099ee2a45 swann: only rename physical interfaces Luke Granger-Brown 2022-03-12 07:25:48 +0000
• fb2dc81bc0 bvm-radius: ensure acme user Luke Granger-Brown 2022-03-11 23:10:01 +0000
• 6353ce6603 swann: make systemd-networkd-wait-online wait for _any_ NIC Luke Granger-Brown 2022-03-11 22:57:08 +0000
• f15e112da7 ssh-ca-vault: by default enable user matches Luke Granger-Brown 2022-03-11 22:31:57 +0000
• ae97fddae2 vault-agent-acme: migrate to using a single token file that writes the other files as a side-effect Luke Granger-Brown 2022-03-11 22:07:31 +0000
• ac0c6eccef ssh-ca-vault: init Luke Granger-Brown 2022-03-11 21:48:06 +0000
• 86a6191a56 vault-agent-secrets: add wantedBy for all restartable units too Luke Granger-Brown 2022-03-11 18:48:54 +0000
• ada466bae0 vault-agent-secrets: put Before in the correct place Luke Granger-Brown 2022-03-11 18:48:08 +0000
• a66bd4822a totoro: disable RP filter Luke Granger-Brown 2022-03-11 18:45:41 +0000
• fde964db82 hm/client: add VAULT_ADDR env variable Luke Granger-Brown 2022-03-11 18:44:52 +0000
• 0187120a24 ops/nixos: move nix cache tokens into vault Luke Granger-Brown 2022-03-11 16:46:50 +0000
• 4100b021aa etheroute-lon01: add google service account token Luke Granger-Brown 2022-03-11 16:20:34 +0000
• dd746bec32 etheroute-lon01: use FQDN for Pomerium DNS Luke Granger-Brown 2022-03-11 16:20:24 +0000
• 72a647b80f baserow: disable moto tests which are broken for some reason Luke Granger-Brown 2022-03-11 15:53:04 +0000