niten
8459d63697
Some procul secrets are set elsewhere now.
2021-10-19 12:47:26 -07:00
niten
5383cea338
Networks aren't a function
2021-10-19 10:04:35 -07:00
niten
409f341fbb
Daaamn NFS is a pain
2021-10-18 21:55:24 -07:00
niten
0a460f3374
Attempted to fix initrd-network
2021-10-18 09:07:49 -07:00
niten
b1b5e69a1c
instance.site -> instance.local-site
2021-10-18 08:46:38 -07:00
niten
3d5d7e389e
Working mounted encrypted file system! Neat.
2021-10-18 08:40:35 -07:00
niten
eef580d596
Create groups for encrypted filesystems
2021-10-18 07:19:13 -07:00
niten
cbf87fe8cf
Ensure mountpoints exist
2021-10-18 07:03:01 -07:00
niten
0a6f6b794d
Various fixes to sea-store
2021-10-17 23:33:07 -07:00
niten
41951b56ea
fs.filesystem, not filesystem
2021-10-17 23:17:43 -07:00
niten
44fcc8e262
Oops, mounts shouldn't be a list, should be attrs.
2021-10-17 23:16:46 -07:00
niten
56cea847f4
Try to get sea-store working
2021-10-17 23:12:49 -07:00
niten
c9815b4caf
Ooof, to -> To
2021-10-17 22:36:01 -07:00
niten
5fb426f365
Corrected typo
2021-10-17 22:34:22 -07:00
niten
b9067e7f13
Add initial support for encrypted filesystems.
2021-10-17 22:10:26 -07:00
niten
db108dde93
Give sea-camera a break, it's hitting too hard
2021-10-17 14:03:28 -07:00
niten
90dafdf8e1
Ensure proper perms for /var/hom
2021-10-17 14:00:42 -07:00
niten
8a260cf13b
state should be noexec
2021-10-16 18:08:51 -07:00
niten
1be71b13ab
Merged with upstream
2021-10-15 23:25:01 -07:00
niten
a53807f888
Make sure backplane client homedir exists
2021-10-15 23:23:00 -07:00
niten
455bdf4942
Give socrates root 12G to work with.
2021-10-15 17:39:24 -07:00
niten
7cf751b013
Enable initrd ssh on limina
2021-10-15 15:37:04 -07:00
niten
bd03f8c4f5
Include openssh as a dep
2021-10-15 15:23:41 -07:00
niten
18618c9c2a
Apparently writeText doesn't exist in pkgs?
2021-10-15 15:22:21 -07:00
niten
210a19d12c
writeTextFile -> writeText
2021-10-15 15:20:43 -07:00
niten
7ea906162e
writeTextFile -> builtins.writeTextFile
2021-10-15 15:18:50 -07:00
niten
3bf763c124
This shit is so weird
2021-10-15 15:17:45 -07:00
niten
a0fd17c9ca
Fuckin FORCE it
2021-10-15 14:29:02 -07:00
niten
c4fa73c8e7
Force empty secrets
2021-10-15 14:27:33 -07:00
niten
23d2a4de70
Just fuckin remove the whole thing
...
bet this doesn't work
2021-10-15 14:25:22 -07:00
niten
437203721b
Ugh, extra n
2021-10-15 14:21:30 -07:00
niten
8a78f2d830
Ugh, (submodule ...)
2021-10-15 14:20:04 -07:00
niten
0c3fd5b522
Okay, let's make sure private-key-file is a string
2021-10-15 14:14:38 -07:00
niten
bab995346e
Make sure it's really a list of lists
2021-10-15 14:00:44 -07:00
niten
174abdf990
Corrected sshfp records.
...
Also, though, is nixops not picking this up?
2021-10-15 13:49:11 -07:00
niten
51546ec7fd
Fiiiine, I'll just use a local fuckin file.
2021-10-15 12:57:48 -07:00
niten
0330f6ae78
Ahh fuck this wtf
2021-10-15 10:58:47 -07:00
niten
095876e12d
Try again
2021-10-15 10:57:04 -07:00
niten
c3fc069f34
Let's just verify...
2021-10-15 10:54:09 -07:00
niten
ea8d7c9007
What if I hardcode the path?
2021-10-15 10:49:01 -07:00
niten
9b3333616d
Was that just totally irrelevant?
2021-10-15 10:42:32 -07:00
niten
b3258ad8a2
Try dumping the path...why is it refering to store
2021-10-15 10:40:10 -07:00
niten
e6252d551a
Fuck a secret then
2021-10-15 10:38:07 -07:00
niten
054ff9758c
Sigh...try a fixed path again.
2021-10-15 10:36:16 -07:00
niten
870c90b679
These initrd secrets are annoying...
...
Betting this won't work.
2021-10-15 10:30:43 -07:00
niten
4e62739086
Oops, didn't escape the attr name.
2021-10-15 10:11:26 -07:00
niten
11f1560410
Ugh...it was a function.
2021-10-15 10:03:14 -07:00
niten
b22b7083e7
Correct typo?
...
Getting "A definition for option `fudo.secrets.host-secrets' is not of
type `attribute set of attribute set of submoduless'." But it is, I
don't get it. Maybe it's due to the typo?
Also, switch back to using secrets.
2021-10-15 09:33:25 -07:00
niten
7264d98dd8
Move initrd host ssh key to host.
...
Apparently the initrd is built on the host. That's perfect!
2021-10-15 08:52:44 -07:00
niten
22999a8fa4
Maybe this will work?
2021-10-14 18:13:40 -07:00
niten
f3bc3c2013
Let's try this again just to verify
2021-10-14 16:48:35 -07:00
niten
8a928d9e25
Move secrets to the right place
2021-10-14 16:39:43 -07:00
niten
e4d4f6d7af
toPath -> builtins.toPath
2021-10-14 16:37:45 -07:00
niten
2f42079265
Try again at using secrets
2021-10-14 16:36:30 -07:00
niten
36413c80cd
Ugh, apparently not allowed...
2021-10-13 23:04:21 -07:00
niten
08bb0e339a
Ehh, fuckin key is hard
...
Might have to do something fancy
2021-10-13 22:58:35 -07:00
niten
5f79252dd6
Secrets don't seem to work?
2021-10-13 22:04:49 -07:00
niten
eb3ff0bfe0
Fixed variable name
2021-10-13 21:05:52 -07:00
niten
6a9ce2e118
Forgot semicolon
2021-10-13 21:03:43 -07:00
niten
24dc18ee81
Make all hosts' initrd network-accessible
...
First attempt
2021-10-13 17:23:47 -07:00
niten
c310aeb414
Got a rogue interface on zbox, disable DHCP
2021-10-13 11:08:44 -07:00
niten
793c3c1363
Try removing 'noexec' flag on socrates fs.
...
Maybe that's what is causing fonts to fail to build?
2021-10-13 10:28:38 -07:00
niten
6ada43a205
Frick...flatMap -> concatMap
2021-10-13 10:02:21 -07:00
niten
eae9e15c15
Oops, made the wrong map a concatMap.
2021-10-13 10:01:14 -07:00
niten
46469b739f
File contains multi sshfp, not one.
2021-10-13 09:58:17 -07:00
niten
674c91354b
Well that didn't work.
...
Frickin docker, man.
2021-10-13 09:16:52 -07:00
niten
d27bb84cf0
Try using host dns from docker.
...
I want the pihole image to access the parent host's dns-over-https
proxy, but ideally that proxy should only be exposed on 127.0.0.1.
According to
https://www.cloudsavvyit.com/14114/how-to-connect-to-localhost-within-a-docker-container/
I can alias the host in docker. Let's give it a shot.
2021-10-13 09:05:14 -07:00
niten
35d172b279
Oops, missing semicolon
2021-10-13 08:41:46 -07:00
niten
248df221d8
No reason to put the HTTPS proxy on a public port
2021-10-13 08:34:48 -07:00
niten
76c0d49053
/nix must NOT be noexec
2021-10-13 00:23:14 -07:00
niten
72665ef874
limina-root -> limina-data
2021-10-13 00:06:54 -07:00
niten
283afec419
Changes for the new limina
2021-10-12 23:54:43 -07:00
niten
9c024fd9ee
Need to specify a secret group and user
2021-10-12 17:34:23 -07:00
niten
7c08e0173e
Need to use nixopsUnstable for flakes
2021-10-12 16:50:54 -07:00
niten
00ac387dfb
Don't set the backplane passwd in limina.nix.
...
It's done elsewhere.
2021-10-12 14:43:14 -07:00
niten
ac2e38040c
Nonexistent variable: backplane-passwd -> backplane-passwd-source
2021-10-12 14:40:12 -07:00
niten
b0c5b2bf6c
Fix typo: password -> passwd
2021-10-12 14:38:23 -07:00
niten
478f502784
Version doesn't exist, I guess?
2021-10-12 14:08:05 -07:00
niten
4d4a274448
Include installed package list in /etc
2021-10-12 14:06:34 -07:00
niten
cd50ed9580
Okay, include the fonts
2021-10-12 12:03:25 -07:00
niten
392fca4884
Double-definition
2021-10-11 15:23:04 -07:00
niten
ce3bc96f87
As it turns out, don't need config lib pkgs
2021-10-11 15:19:10 -07:00
niten
8736fba4ec
Merged with unhead changes
2021-10-11 15:04:51 -07:00
niten
fbede93934
Trying to get this to build...
2021-10-11 15:04:06 -07:00
niten
a323dbdd9c
Working flake-based nixops config
2021-10-08 15:26:19 -07:00
niten
5a48c78b48
There's no reason for networks to be functions
2021-10-07 19:20:43 -07:00
niten
30c37b0798
Tweak to initialize.nix
2021-10-06 07:12:50 -07:00
niten
f0be146512
By default, hosts should have no site.
2021-10-05 22:16:59 -07:00
niten
70b19b8c85
Tweaks to try to get this building...
2021-10-05 10:18:54 -07:00
niten
2ea4f6be5a
Extract host type to host.nix
2021-10-04 13:23:40 -07:00
niten
2551908093
Added lib overlay
2021-10-04 12:23:46 -07:00
niten
3597d82f64
Checkin to see if lib gets fudo
2021-10-04 10:20:53 -07:00
niten
643f8d6df4
Move user types to a common file
2021-10-01 16:05:56 -07:00
niten
1450256a76
Add system stuff to config.instance
2021-10-01 12:52:57 -07:00
niten
6170ffc0af
Trying to get home manager working
2021-09-30 17:14:20 -07:00
niten
82325ddaf9
Added master keys
2021-09-30 11:30:32 -07:00
niten
b690935dea
Working flake check
2021-09-30 08:40:47 -07:00
niten
4df4d2e7db
Various minor fixes
2021-09-29 18:44:33 -07:00
niten
3dc5986134
Initial, broken
2021-09-29 17:55:13 -07:00
niten
b072fed747
Don't set system
2021-09-24 11:47:35 -07:00
niten