nixos-servers

Author	SHA1	Message	Date
Torjus Håkestad	0abdda8e8a	docs: add plan for migrating existing hosts to opentofu Some checks failed Run nix flake check / flake-check (push) Failing after 3m28s Details Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>	2026-02-05 01:59:51 +01:00
Torjus Håkestad	4076361bf7	Merge pull request 'hosts: remove decommissioned media1, ns3, ns4, nixos-test1' (#18 ) from host-cleanup into master All checks were successful Run nix flake check / flake-check (push) Successful in 3m36s Details Reviewed-on: #18	2026-02-05 00:38:56 +00:00
Torjus Håkestad	0ef63ad874	hosts: remove decommissioned media1, ns3, ns4, nixos-test1 Some checks failed Run nix flake check / flake-check (push) Failing after 4m47s Details Run nix flake check / flake-check (pull_request) Successful in 3m20s Details Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>	2026-02-05 01:36:57 +01:00
Torjus Håkestad	8f29141dd1	Merge pull request 'monitoring: exclude step-ca serving cert from general expiry alert' (#17 ) from monitoring-cleanup into master All checks were successful Run nix flake check / flake-check (push) Successful in 5m30s Details Reviewed-on: #17	2026-02-05 00:22:15 +00:00
Torjus Håkestad	3a9a47f1ad	monitoring: exclude step-ca serving cert from general expiry alert Some checks failed Run nix flake check / flake-check (push) Failing after 6m23s Details Run nix flake check / flake-check (pull_request) Failing after 4m46s Details The step-ca serving certificate is auto-renewed with a 24h lifetime, so it always triggers the general < 86400s threshold. Exclude it and add a dedicated step_ca_serving_cert_expiring alert at < 1h instead. Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>	2026-02-05 01:12:42 +01:00
Torjus Håkestad	fa6380e767	monitoring: fix nix-cache_caddy scrape target TLS error All checks were successful Run nix flake check / flake-check (push) Successful in 2m43s Details Move nix-cache_caddy back to a manual config in prometheus.nix using the service CNAME (nix-cache.home.2rjus.net) instead of the hostname. The auto-generated target used nix-cache01.home.2rjus.net which doesn't match the TLS certificate SAN. Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>	2026-02-05 01:04:50 +01:00
Torjus Håkestad	86a077e152	docs: add host cleanup plan for decommissioned hosts Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>	2026-02-05 01:04:50 +01:00
torjus-bot	9da57c6a2f	flake.lock: Update Flake lock file updates: • Updated input 'nixpkgs-unstable': 'github:nixos/nixpkgs/e6eae2ee2110f3d31110d5c222cd395303343b08?narHash=sha256-KHFT9UWOF2yRPlAnSXQJh6uVcgNcWlFqqiAZ7OVlHNc%3D' (2026-02-03) → 'github:nixos/nixpkgs/bf922a59c5c9998a6584645f7d0de689512e444c?narHash=sha256-ksTL7P9QC1WfZasNlaAdLOzqD8x5EPyods69YBqxSfk%3D' (2026-02-04)	2026-02-05 00:01:37 +00:00
Torjus Håkestad	da9dd02d10	Merge pull request 'monitoring: auto-generate Prometheus scrape targets from host configs' (#16 ) from monitoring-improvements into master All checks were successful Run nix flake check / flake-check (push) Successful in 6m32s Details Periodic flake update / flake-update (push) Successful in 1m54s Details Reviewed-on: #16	2026-02-04 23:53:46 +00:00
Torjus Håkestad	e7980978c7	docs: document monitoring auto-generation in CLAUDE.md Some checks failed Run nix flake check / flake-check (push) Failing after 5m33s Details Run nix flake check / flake-check (pull_request) Successful in 6m48s Details Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>	2026-02-05 00:52:39 +01:00
Torjus Håkestad	dd1b64de27	monitoring: auto-generate Prometheus scrape targets from host configs Some checks failed Run nix flake check / flake-check (pull_request) Successful in 2m49s Details Run nix flake check / flake-check (push) Has been cancelled Details Add homelab.monitoring NixOS options (enable, scrapeTargets) following the same pattern as homelab.dns. Prometheus scrape configs are now auto-generated from flake host configurations and external targets, replacing hardcoded target lists. Also cleans up alert rules: snake_case naming, fix zigbee2mqtt typo, remove duplicate pushgateway alert, add for clauses to monitoring_rules, remove hardcoded WireGuard public key, and add new alerts for certificates, proxmox, caddy, smartctl temperature, filesystem prediction, systemd state, file descriptors, and host reboots. Fixes grafana scrape target port from 3100 to 3000. Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>	2026-02-05 00:49:07 +01:00
Torjus Håkestad	4e8cc124f2	docs: add plan management workflow and lab-monitoring MCP server Some checks failed Run nix flake check / flake-check (push) Failing after 11m30s Details Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>	2026-02-05 00:21:08 +01:00
Torjus Håkestad	a2a55f3955	docs: add docs directory info and nixos options improvement plan Some checks failed Run nix flake check / flake-check (push) Failing after 4m12s Details Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>	2026-02-04 22:27:11 +01:00
Torjus Håkestad	c38034ba41	docs: rewrite README with current infrastructure overview Some checks failed Run nix flake check / flake-check (push) Failing after 4m41s Details Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>	2026-02-04 22:20:49 +01:00
Torjus Håkestad	d7d4b0846c	docs: move dns-automation plan to completed All checks were successful Run nix flake check / flake-check (push) Successful in 2m17s Details Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>	2026-02-04 22:13:38 +01:00
Torjus Håkestad	8ca7c4e402	Merge pull request 'dns-automation' (#15 ) from dns-automation into master All checks were successful Run nix flake check / flake-check (push) Successful in 2m18s Details Reviewed-on: #15	2026-02-04 21:02:24 +00:00
Torjus Håkestad	106912499b	docs: add git workflow note about not committing to master Some checks failed Run nix flake check / flake-check (pull_request) Successful in 2m16s Details Run nix flake check / flake-check (push) Failing after 17m2s Details Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>	2026-02-04 21:57:40 +01:00
Torjus Håkestad	83af00458b	dns: remove defunct external hosts Remove hosts that no longer respond to ping: - kube-blue1-10 (entire k8s cluster) - virt-mini1, mpnzb, inc2, testing - CNAMEs: rook, git (pointed to removed kube-blue nodes) Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>	2026-02-04 21:50:56 +01:00
Torjus Håkestad	67d5de3eb8	docs: update CLAUDE.md for DNS automation - Add /modules/ and /lib/ to directory structure - Document homelab.dns options and zone auto-generation - Update "Adding a New Host" workflow (no manual zone editing) - Expand DNS Architecture section with auto-generation details Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>	2026-02-04 21:45:16 +01:00
Torjus Håkestad	cee1b264cd	dns: auto-generate zone entries from host configurations Replace static zone file with dynamically generated records: - Add homelab.dns module with enable/cnames options - Extract IPs from systemd.network configs (filters VPN interfaces) - Use git commit timestamp as zone serial number - Move external hosts to separate external-hosts.nix Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>	2026-02-04 21:43:44 +01:00
Torjus Håkestad	4ceee04308	docs: update MCP config for nixpkgs-options and add nixpkgs-packages Some checks failed Run nix flake check / flake-check (push) Failing after 14m50s Details Rename nixos-options to nixpkgs-options and add new nixpkgs-packages server for package search functionality. Update CLAUDE.md to document both MCP servers and their available tools. Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>	2026-02-04 20:50:36 +01:00
torjus-bot	e3ced5bcda	flake.lock: Update Flake lock file updates: • Updated input 'nixpkgs': 'github:nixos/nixpkgs/41e216c0ca66c83b12ab7a98cc326b5db01db646?narHash=sha256-I7Lmgj3owOTBGuauy9FL6qdpeK2umDoe07lM4V%2BPnyA%3D' (2026-01-31) → 'github:nixos/nixpkgs/e576e3c9cf9bad747afcddd9e34f51d18c855b4e?narHash=sha256-tlFqNG/uzz2%2B%2BaAmn4v8J0vAkV3z7XngeIIB3rM3650%3D' (2026-02-03) • Updated input 'nixpkgs-unstable': 'github:nixos/nixpkgs/cb369ef2efd432b3cdf8622b0ffc0a97a02f3137?narHash=sha256-VKS4ZLNx4PNrABoB0L8KUpc1fE7CLpQXQs985tGfaCU%3D' (2026-02-02) → 'github:nixos/nixpkgs/e6eae2ee2110f3d31110d5c222cd395303343b08?narHash=sha256-KHFT9UWOF2yRPlAnSXQJh6uVcgNcWlFqqiAZ7OVlHNc%3D' (2026-02-03) • Updated input 'sops-nix': 'github:Mic92/sops-nix/1e89149dcfc229e7e2ae24a8030f124a31e4f24f?narHash=sha256-twBMKGQvaztZQxFxbZnkg7y/50BW9yjtCBWwdjtOZew%3D' (2026-02-01) → 'github:Mic92/sops-nix/17eea6f3816ba6568b8c81db8a4e6ca438b30b7c?narHash=sha256-ktjWTq%2BD5MTXQcL9N6cDZXUf9kX8JBLLBLT0ZyOTSYY%3D' (2026-02-03)	2026-02-04 00:01:04 +00:00
Torjus Håkestad	15459870cd	Merge pull request 'backup: migrate to native services.restic.backups' (#14 ) from migrate-to-native-restic-backups into master All checks were successful Run nix flake check / flake-check (push) Successful in 4m4s Details Periodic flake update / flake-update (push) Successful in 1m10s Details Reviewed-on: #14	2026-02-03 23:47:11 +00:00
Torjus Håkestad	d1861eefb5	docs: add clipboard note and update flake inputs Some checks failed Run nix flake check / flake-check (push) Successful in 4m10s Details Run nix flake check / flake-check (pull_request) Failing after 18m29s Details Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>	2026-02-04 00:45:37 +01:00
Torjus Håkestad	d25fc99e1d	backup: migrate to native services.restic.backups Some checks failed Run nix flake check / flake-check (push) Has been cancelled Details Run nix flake check / flake-check (pull_request) Successful in 4m0s Details Replace custom backup-helper flake input with NixOS native services.restic.backups module for ha1, monitoring01, and nixos-test1. Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>	2026-02-04 00:41:40 +01:00
Torjus Håkestad	b5da9431aa	docs: add nixos-options MCP configuration Some checks failed Run nix flake check / flake-check (push) Failing after 13m51s Details Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>	2026-02-04 00:01:00 +01:00
Torjus Håkestad	0e5dea635e	Merge pull request 'create-host: add delete feature' (#13 ) from create-host-delete-feature into master All checks were successful Run nix flake check / flake-check (push) Successful in 2m20s Details Reviewed-on: #13	2026-02-03 12:06:32 +00:00
Torjus Håkestad	86249c466b	create-host: add delete feature Some checks failed Run nix flake check / flake-check (push) Failing after 21m31s Details Run nix flake check / flake-check (pull_request) Failing after 15m17s Details	2026-02-03 12:11:41 +01:00
Torjus Håkestad	5d560267cf	Merge pull request 'pki-migration' (#12 ) from pki-migration into master All checks were successful Run nix flake check / flake-check (push) Successful in 2m21s Details Reviewed-on: #12	2026-02-03 05:56:53 +00:00
Torjus Håkestad	63662b89e0	docs: update TODO.md All checks were successful Run nix flake check / flake-check (push) Successful in 2m51s Details Run nix flake check / flake-check (pull_request) Successful in 2m53s Details	2026-02-03 06:53:59 +01:00
Torjus Håkestad	7ae474fd3e	pki: add new vault root ca to pki	2026-02-03 06:53:59 +01:00
Torjus Håkestad	f0525b5c74	ns: add vaulttest01 to zone All checks were successful Run nix flake check / flake-check (push) Successful in 2m19s Details	2026-02-03 06:42:05 +01:00
Torjus Håkestad	42c391b355	ns: add vault cname to zone Some checks failed Run nix flake check / flake-check (push) Failing after 4m7s Details	2026-02-03 06:00:59 +01:00
Torjus Håkestad	048536ba70	docs: move dns automation from TODO.md to nixos-improvements.md All checks were successful Run nix flake check / flake-check (push) Successful in 2m20s Details	2026-02-03 04:51:27 +01:00
Torjus Håkestad	cccce09406	Merge pull request 'vault: implement bootstrap integration' (#11 ) from vault-bootstrap-integration into master Some checks failed Run nix flake check / flake-check (push) Has been cancelled Details Reviewed-on: #11	2026-02-03 03:46:25 +00:00
Torjus Håkestad	01d4812280	vault: implement bootstrap integration Some checks failed Run nix flake check / flake-check (push) Successful in 2m31s Details Run nix flake check / flake-check (pull_request) Failing after 14m16s Details	2026-02-03 01:10:36 +01:00
torjus-bot	b5364d2ccc	flake.lock: Update Flake lock file updates: • Updated input 'nixpkgs-unstable': 'github:nixos/nixpkgs/62c8382960464ceb98ea593cb8321a2cf8f9e3e5?narHash=sha256-kKB3bqYJU5nzYeIROI82Ef9VtTbu4uA3YydSk/Bioa8%3D' (2026-01-30) → 'github:nixos/nixpkgs/cb369ef2efd432b3cdf8622b0ffc0a97a02f3137?narHash=sha256-VKS4ZLNx4PNrABoB0L8KUpc1fE7CLpQXQs985tGfaCU%3D' (2026-02-02)	2026-02-03 00:01:39 +00:00
Torjus Håkestad	7fc69c40a6	docs: add truenas-migration plan All checks were successful Run nix flake check / flake-check (push) Successful in 2m18s Details Periodic flake update / flake-update (push) Successful in 1m13s Details	2026-02-02 18:29:11 +01:00
Torjus Håkestad	34a2f2ab50	docs: add infrastructure documentation Some checks failed Run nix flake check / flake-check (push) Failing after 11m9s Details	2026-02-02 17:36:55 +01:00
Torjus Håkestad	16b3214982	Merge pull request 'vault-setup' (#10 ) from vault-setup into master Some checks failed Run nix flake check / flake-check (push) Failing after 6m19s Details Reviewed-on: #10	2026-02-02 15:28:58 +00:00
torjus-bot	244dd0c78b	flake.lock: Update Flake lock file updates: • Updated input 'nixpkgs': 'github:nixos/nixpkgs/fa83fd837f3098e3e678e6cf017b2b36102c7211?narHash=sha256-e7VO/kGLgRMbWtpBqdWl0uFg8Y2XWFMdz0uUJvlML8o%3D' (2026-01-28) → 'github:nixos/nixpkgs/41e216c0ca66c83b12ab7a98cc326b5db01db646?narHash=sha256-I7Lmgj3owOTBGuauy9FL6qdpeK2umDoe07lM4V%2BPnyA%3D' (2026-01-31) • Updated input 'nixpkgs-unstable': 'github:nixos/nixpkgs/bfc1b8a4574108ceef22f02bafcf6611380c100d?narHash=sha256-msG8SU5WsBUfVVa/9RPLaymvi5bI8edTavbIq3vRlhI%3D' (2026-01-26) → 'github:nixos/nixpkgs/62c8382960464ceb98ea593cb8321a2cf8f9e3e5?narHash=sha256-kKB3bqYJU5nzYeIROI82Ef9VtTbu4uA3YydSk/Bioa8%3D' (2026-01-30) • Updated input 'sops-nix': 'github:Mic92/sops-nix/c5eebd4eb2e3372fe12a8d70a248a6ee9dd02eff?narHash=sha256-wFcr32ZqspCxk4%2BFvIxIL0AZktRs6DuF8oOsLt59YBU%3D' (2026-01-26) → 'github:Mic92/sops-nix/1e89149dcfc229e7e2ae24a8030f124a31e4f24f?narHash=sha256-twBMKGQvaztZQxFxbZnkg7y/50BW9yjtCBWwdjtOZew%3D' (2026-02-01)	2026-02-02 00:00:56 +00:00
Torjus Håkestad	238ad45c14	chore: update TODO.md Some checks failed Run nix flake check / flake-check (push) Failing after 4m53s Details Run nix flake check / flake-check (pull_request) Successful in 2m16s Details	2026-02-02 00:47:31 +01:00
Torjus Håkestad	c694b9889a	vault: add auto-unseal All checks were successful Run nix flake check / flake-check (push) Successful in 2m16s Details	2026-02-02 00:28:24 +01:00
Torjus Håkestad	3f2f91aedd	terraform: add vault pki management to terraform Some checks failed Run nix flake check / flake-check (push) Has been cancelled Details	2026-02-01 23:23:03 +01:00
Torjus Håkestad	5d513fd5af	terraform: add vault secret managment to terraform	2026-02-01 23:07:47 +01:00
Torjus Håkestad	b6f1e80c2a	chore: run tofu fmt	2026-02-01 23:04:02 +01:00
Torjus Håkestad	4133eafc4e	flake: add openbao to devshell Some checks failed Run nix flake check / flake-check (push) Failing after 18m52s Details	2026-02-01 22:16:52 +01:00
Torjus Håkestad	ace848b29c	vault: replace vault with openbao	2026-02-01 22:16:52 +01:00
Torjus Håkestad	b012df9f34	ns: add vault01 host to zone Some checks failed Run nix flake check / flake-check (push) Failing after 15m40s Details Periodic flake update / flake-update (push) Successful in 1m7s Details	2026-02-01 20:54:22 +01:00
Torjus Håkestad	ab053c25bd	opentofu: add tmp device to vms	2026-02-01 20:54:05 +01:00

1 2 3 4 5 ...

681 Commits