niten
ef2f8ff5fe
Updated flake.lock
2021-12-08 11:23:51 -08:00
niten
11062e73ca
Updated flake.lock
2021-12-08 11:19:11 -08:00
niten
81a391b9db
Updated flake.lock
2021-12-08 11:09:46 -08:00
niten
d741529e67
Updated flake.lock
2021-12-08 11:02:50 -08:00
niten
b4ab3f44ee
Updating flake.lock
2021-12-08 11:00:45 -08:00
niten
8e335d9591
Update flake
2021-12-08 10:47:58 -08:00
niten
c7fd2d15c7
Whenever keytab is modded, copy.
2021-12-02 18:02:01 -08:00
niten
c7b01f3ea3
Forget it, just focus on one arch.
2021-12-02 17:41:18 -08:00
niten
128fce7c6f
Fresh flake.lock
2021-12-01 09:18:40 -08:00
niten
9a3e8eefa2
Merged with upstream (lock conflict)
2021-12-01 09:18:10 -08:00
niten
9bf6f6c319
Make system3 able to cross-compile
2021-12-01 09:15:27 -08:00
niten
b17afe092a
Update flake.lock
2021-12-01 09:02:27 -08:00
niten
9ae99f0894
Updated deps
2021-11-30 16:12:10 -08:00
niten
98c4ecee7d
Lol oops left old config after new
2021-11-30 15:37:19 -08:00
niten
01134960db
text -> source
2021-11-30 15:35:46 -08:00
niten
d6bc280a25
Added (new-fangled) plato.
...
Also added build-seed.sha1sum and build-timestamp to /etc.
2021-11-30 15:30:32 -08:00
niten
55d8ca47fe
Move to using git.fudo.org directly
2021-11-30 10:52:00 -08:00
niten
9bc143805b
Only allow admins to login to hardened hosts.
2021-11-30 10:46:38 -08:00
niten
a1d4e2aeb4
More fixes for procul certs.
2021-11-29 21:56:28 -08:00
niten
b10d055e25
Updated lib flake
2021-11-29 21:34:05 -08:00
niten
492f3cf688
Fixes to procul postgres SSL certs
2021-11-29 21:18:58 -08:00
niten
e9f9b9b093
inputs isn't a list
2021-11-29 19:34:15 -08:00
niten
7fa2e24315
last -> latest
2021-11-29 19:25:56 -08:00
niten
bfca81213c
Woops, typo
2021-11-29 19:24:32 -08:00
niten
96e5205835
Make the DNS serial correct
2021-11-29 19:21:38 -08:00
niten
8ea09b18f2
Working 'flakified' nixops deploy!
2021-11-29 16:03:38 -08:00
niten
4215ba7886
Forget mobile, need a better plan for laptops
2021-11-28 12:40:24 -08:00
niten
6bf378cad7
Pretty massive changes really
2021-11-28 12:39:03 -08:00
niten
003637f435
Moving config stuff from ./lib into ./config
2021-11-22 10:17:44 -08:00
niten
08b2da1b6f
Changes to nutmeg and flake.nix
2021-11-19 10:26:21 -08:00
niten
c2b16c0342
Add fudoHosts output to flake.nix
2021-11-18 12:00:49 -08:00
niten
4168027ac2
Working system flake builds, attempt to integrate into nixops
2021-11-18 09:51:41 -08:00
niten
fbd190bd4a
Added nuttyclub-vm site
2021-11-17 22:18:04 -08:00
niten
9e181c149c
added nuttyclub-vm site
2021-11-17 22:12:49 -08:00
niten
451ee1d0ae
Changes for cashew, added mobile site
2021-11-17 17:32:27 -08:00
niten
b5cdfc7293
Added cashew, did some backplane yak shaving
2021-11-16 16:56:43 -08:00
niten
c747746eee
fixes for nutboy
2021-11-13 11:13:38 -08:00
niten
d7ee19dd2f
Added nutboy3 and nuttyclub
2021-11-13 10:30:58 -08:00
niten
1c059841e6
Added emply worldstream site-config
2021-11-05 07:07:21 -07:00
niten
2dd5407129
Tons of changes, I guess?
2021-11-05 07:06:08 -07:00
niten
c31af09ede
Nevermind, to import need config defined first
2021-11-02 09:40:51 -07:00
niten
566643e195
Move profiles from ./profile-config to ./profile
2021-11-02 09:34:26 -07:00
niten
79b05be7d3
Fixed sea-store:/export/projects, removed unnecesary submodules
2021-10-29 11:40:43 -07:00
niten
08766dfeb6
Partway to getting France back in the fold. Stuck on ACME certs.
2021-10-28 09:32:35 -07:00
niten
81aae5cd8d
It's gitea-passwd
2021-10-19 13:22:21 -07:00
niten
9fd1cb9fc4
file -> files
2021-10-19 13:19:32 -07:00
niten
f782c15aae
Fixes for procul.
2021-10-19 13:16:13 -07:00
niten
8bd9b6f466
Require a master key.
2021-10-19 12:50:46 -07:00
niten
58f989b968
Bad var name.
2021-10-19 12:49:14 -07:00
niten
8459d63697
Some procul secrets are set elsewhere now.
2021-10-19 12:47:26 -07:00
niten
5383cea338
Networks aren't a function
2021-10-19 10:04:35 -07:00
niten
409f341fbb
Daaamn NFS is a pain
2021-10-18 21:55:24 -07:00
niten
0a460f3374
Attempted to fix initrd-network
2021-10-18 09:07:49 -07:00
niten
b1b5e69a1c
instance.site -> instance.local-site
2021-10-18 08:46:38 -07:00
niten
3d5d7e389e
Working mounted encrypted file system! Neat.
2021-10-18 08:40:35 -07:00
niten
eef580d596
Create groups for encrypted filesystems
2021-10-18 07:19:13 -07:00
niten
cbf87fe8cf
Ensure mountpoints exist
2021-10-18 07:03:01 -07:00
niten
0a6f6b794d
Various fixes to sea-store
2021-10-17 23:33:07 -07:00
niten
41951b56ea
fs.filesystem, not filesystem
2021-10-17 23:17:43 -07:00
niten
44fcc8e262
Oops, mounts shouldn't be a list, should be attrs.
2021-10-17 23:16:46 -07:00
niten
56cea847f4
Try to get sea-store working
2021-10-17 23:12:49 -07:00
niten
c9815b4caf
Ooof, to -> To
2021-10-17 22:36:01 -07:00
niten
5fb426f365
Corrected typo
2021-10-17 22:34:22 -07:00
niten
b9067e7f13
Add initial support for encrypted filesystems.
2021-10-17 22:10:26 -07:00
niten
db108dde93
Give sea-camera a break, it's hitting too hard
2021-10-17 14:03:28 -07:00
niten
90dafdf8e1
Ensure proper perms for /var/hom
2021-10-17 14:00:42 -07:00
niten
8a260cf13b
state should be noexec
2021-10-16 18:08:51 -07:00
niten
1be71b13ab
Merged with upstream
2021-10-15 23:25:01 -07:00
niten
a53807f888
Make sure backplane client homedir exists
2021-10-15 23:23:00 -07:00
niten
455bdf4942
Give socrates root 12G to work with.
2021-10-15 17:39:24 -07:00
niten
7cf751b013
Enable initrd ssh on limina
2021-10-15 15:37:04 -07:00
niten
bd03f8c4f5
Include openssh as a dep
2021-10-15 15:23:41 -07:00
niten
18618c9c2a
Apparently writeText doesn't exist in pkgs?
2021-10-15 15:22:21 -07:00
niten
210a19d12c
writeTextFile -> writeText
2021-10-15 15:20:43 -07:00
niten
7ea906162e
writeTextFile -> builtins.writeTextFile
2021-10-15 15:18:50 -07:00
niten
3bf763c124
This shit is so weird
2021-10-15 15:17:45 -07:00
niten
a0fd17c9ca
Fuckin FORCE it
2021-10-15 14:29:02 -07:00
niten
c4fa73c8e7
Force empty secrets
2021-10-15 14:27:33 -07:00
niten
23d2a4de70
Just fuckin remove the whole thing
...
bet this doesn't work
2021-10-15 14:25:22 -07:00
niten
437203721b
Ugh, extra n
2021-10-15 14:21:30 -07:00
niten
8a78f2d830
Ugh, (submodule ...)
2021-10-15 14:20:04 -07:00
niten
0c3fd5b522
Okay, let's make sure private-key-file is a string
2021-10-15 14:14:38 -07:00
niten
bab995346e
Make sure it's really a list of lists
2021-10-15 14:00:44 -07:00
niten
174abdf990
Corrected sshfp records.
...
Also, though, is nixops not picking this up?
2021-10-15 13:49:11 -07:00
niten
51546ec7fd
Fiiiine, I'll just use a local fuckin file.
2021-10-15 12:57:48 -07:00
niten
0330f6ae78
Ahh fuck this wtf
2021-10-15 10:58:47 -07:00
niten
095876e12d
Try again
2021-10-15 10:57:04 -07:00
niten
c3fc069f34
Let's just verify...
2021-10-15 10:54:09 -07:00
niten
ea8d7c9007
What if I hardcode the path?
2021-10-15 10:49:01 -07:00
niten
9b3333616d
Was that just totally irrelevant?
2021-10-15 10:42:32 -07:00
niten
b3258ad8a2
Try dumping the path...why is it refering to store
2021-10-15 10:40:10 -07:00
niten
e6252d551a
Fuck a secret then
2021-10-15 10:38:07 -07:00
niten
054ff9758c
Sigh...try a fixed path again.
2021-10-15 10:36:16 -07:00
niten
870c90b679
These initrd secrets are annoying...
...
Betting this won't work.
2021-10-15 10:30:43 -07:00
niten
4e62739086
Oops, didn't escape the attr name.
2021-10-15 10:11:26 -07:00
niten
11f1560410
Ugh...it was a function.
2021-10-15 10:03:14 -07:00
niten
b22b7083e7
Correct typo?
...
Getting "A definition for option `fudo.secrets.host-secrets' is not of
type `attribute set of attribute set of submoduless'." But it is, I
don't get it. Maybe it's due to the typo?
Also, switch back to using secrets.
2021-10-15 09:33:25 -07:00
niten
7264d98dd8
Move initrd host ssh key to host.
...
Apparently the initrd is built on the host. That's perfect!
2021-10-15 08:52:44 -07:00
niten
22999a8fa4
Maybe this will work?
2021-10-14 18:13:40 -07:00
niten
f3bc3c2013
Let's try this again just to verify
2021-10-14 16:48:35 -07:00
niten