Torjus Håkestad c13921d302 loki: add basic auth for log push and dual-ship promtail ...

- Loki bound to localhost, Caddy reverse proxy with basic_auth
- Vault secret (shared/loki/push-auth) for password, bcrypt hash
  generated at boot for Caddy environment
- Promtail dual-ships to monitoring01 (direct) and loki.home.2rjus.net
  (with basic auth), conditional on vault.enable
- Terraform: new shared loki-push policy added to all AppRoles

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

2026-02-17 20:00:08 +01:00

..

monitoring

loki: add basic auth for log push and dual-ship promtail

2026-02-17 20:00:08 +01:00

pki

pki: add new vault root ca to pki

2026-02-03 06:53:59 +01:00

acme.nix

acme: migrate from step-ca to OpenBao PKI

2026-02-07 18:20:10 +01:00

autoupgrade.nix

Add autoupgrade

2025-02-06 19:58:01 +01:00

default.nix

system: add pipe-to-loki helper script

2026-02-08 15:30:53 +01:00

homelab-deploy.nix

homelab-deploy: enable prometheus metrics

2026-02-07 08:04:23 +01:00

kanidm-client.nix

system: add kanidm PAM/NSS client module

2026-02-08 15:12:19 +01:00

motd.nix

system: add UTC suffix to MOTD commit timestamp

2026-02-06 00:34:24 +01:00

nix.nix

nix-cache01: decommission and remove all references

2026-02-10 23:40:51 +01:00

packages.nix

Add some default packages

2025-02-24 18:54:59 +01:00

pipe-to-loki.nix

docs: update Loki queries from host to hostname label

2026-02-13 23:43:47 +01:00

root-user.nix

secrets: migrate all hosts from sops to OpenBao vault

2026-02-05 18:43:09 +01:00

sshd.nix

Add template host

2024-03-08 20:10:50 +01:00

vault-secrets.nix

system: replace writeShellScript with writeShellApplication

2026-02-06 00:17:24 +01:00

zram.nix

system: enable zram swap for all hosts

2026-02-08 13:02:58 +01:00