0700033c0a
secrets: migrate all hosts from sops to OpenBao vault
...
Replace sops-nix secrets with OpenBao vault secrets across all hosts.
Hardcode root password hash, add extractKey option to vault-secrets
module, update Terraform with secrets/policies for all hosts, and
create AppRole provisioning playbook.
Hosts migrated: ha1, monitoring01, ns1, ns2, http-proxy, nix-cache01
Wave 1 hosts (nats1, jelly01, pgdb1) get AppRole policies only.
Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com >
2026-02-05 18:43:09 +01:00
64f2688349
nix: configure gc to delete generations older than 14d
...
Run nix flake check / flake-check (push) Successful in 2m27s
Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com >
2026-02-05 02:21:19 +01:00
cee1b264cd
dns: auto-generate zone entries from host configurations
...
Replace static zone file with dynamically generated records:
- Add homelab.dns module with enable/cnames options
- Extract IPs from systemd.network configs (filters VPN interfaces)
- Use git commit timestamp as zone serial number
- Move external hosts to separate external-hosts.nix
Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com >
2026-02-04 21:43:44 +01:00
7ae474fd3e
pki: add new vault root ca to pki
2026-02-03 06:53:59 +01:00
01d4812280
vault: implement bootstrap integration
Run nix flake check / flake-check (push) Successful in 2m31s
Run nix flake check / flake-check (pull_request) Failing after 14m16s
2026-02-03 01:10:36 +01:00
cba1821f3b
Add lldap to auth01 host
2025-04-01 22:23:59 +02:00
dd86298253
Change substituter override
Run nix flake check / flake-check (push) Failing after 4m4s
Periodic flake update / flake-update (push) Successful in 1m20s
2025-02-26 18:44:45 +01:00
844449b899
Disable using itself as substituter for nix-cache
Run nix flake check / flake-check (push) Has been cancelled
2025-02-26 18:34:44 +01:00
298f2372ca
Add some default packages
Run nix flake check / flake-check (push) Has been cancelled
2025-02-24 18:54:59 +01:00
4d2fbff6d0
Fix error in journald config
Run nix flake check / flake-check (push) Failing after 4m0s
2025-02-07 13:22:50 +01:00
f29edfe34a
Configure journald storage
Run nix flake check / flake-check (push) Failing after 34s
2025-02-07 13:21:43 +01:00
002f934c70
Add ansible and playbook to trigger upgrade
Run nix flake check / flake-check (push) Failing after 27m26s
Periodic flake update / flake-update (push) Successful in 1m24s
2025-02-07 00:28:05 +01:00
fbcb81291b
Enable gc and optimise
Run nix flake check / flake-check (push) Failing after 4m52s
2025-02-06 23:39:54 +01:00
44d4dc6cdf
Remove weekly-rebuild
Run nix flake check / flake-check (push) Failing after 11m1s
2025-02-06 20:00:22 +01:00
5866a2be8f
Add autoupgrade
Run nix flake check / flake-check (push) Has been cancelled
2025-02-06 19:58:01 +01:00
60b2a24271
Add kitty terminfo
Run nix flake check / flake-check (push) Failing after 15m6s
2025-02-06 11:38:07 +01:00
e366a05204
Fix caddy logging
Run nix flake check / flake-check (push) Failing after 9m1s
Periodic flake update / flake-update (push) Successful in 1m36s
2025-01-28 00:49:22 +01:00
006d0b9213
Finish nix-cache
Run nix flake check / flake-check (push) Failing after 4m3s
2025-01-24 15:48:03 +01:00
8545807dd8
Add job label to promtail journald logs
Run nix flake check / flake-check (push) Failing after 4m51s
2025-01-23 19:50:25 +01:00
02ef7e861b
Add qemu guest agent to all VMs
2024-12-05 18:35:06 +01:00
a4592ffda3
Improve monitoring stuff
Run nix flake check / flake-check (push) Failing after 23m19s
2024-12-01 20:51:14 +01:00
32425807fc
Add promtail for journal
Run nix flake check / flake-check (push) Failing after 7m47s
2024-12-01 03:00:07 +01:00
5844e7b32b
Add internal CA
Run nix flake check / flake-check (push) Successful in 3m31s
2024-11-30 20:24:43 +01:00
1da20471a8
Add jq to system packages
Run nix flake check / flake-check (push) Successful in 3m45s
2024-11-30 12:53:20 +01:00
c089cbedee
Remove rebuild switch, messes with running unit
Run nix flake check / flake-check (push) Successful in 1m45s
Periodic flake update / flake-update (push) Successful in 1m57s
2024-10-12 21:59:28 +02:00
b7d9a12786
Collect garbage after rebuild
Run nix flake check / flake-check (push) Successful in 1m36s
2024-10-12 21:53:34 +02:00
c4e1026d5e
Add weekly-rebuild timer
Run nix flake check / flake-check (push) Successful in 1m37s
2024-10-12 21:38:37 +02:00
07f519bf36
Add monitoring services
2024-06-03 04:08:16 +02:00
2576748c38
Add prometheus monitoring
2024-06-03 03:44:34 +02:00
7ba862f21d
Add template host
2024-03-08 20:10:50 +01:00
0ed396cd88
Initial commit
2024-03-07 23:14:44 +01:00
