Commit Graph

1315 Commits

Author SHA1 Message Date
e3ec681950 direnv: bump to 3.0.4 2024-03-10 17:20:09 +02:00
1f2c2f8569 add vno1-op5p to prometheus and deploy hosts 2024-03-10 16:17:57 +02:00
7c192dd004 vno1-op5p: add jakstIP 2024-03-10 16:17:01 +02:00
542d45f159 syntax error 2024-03-10 16:07:04 +02:00
b790d6a5f2 vno1-op5p: add tailscale and deployerbot-follower 2024-03-10 16:05:47 +02:00
ac69473a17 flake.nix: fix copy-pasta 2024-03-10 14:57:01 +02:00
50d9990fa7 vno1-op5p: add config 2024-03-10 14:42:01 +02:00
a760f95d0f vno1-op5p: enable deployments and passwords 2024-03-10 14:40:08 +02:00
19a44dc1d2 vno1-op5p: change keyfile props 2024-03-10 14:16:53 +02:00
e79424eef5 vno1-op5p: remove secrets for now 2024-03-10 12:12:30 +02:00
924aa3f8d8 flake.lock: Update
Flake lock file updates:

• Updated input 'nixpkgs':
    'github:NixOS/nixpkgs/880992dcc006a5e00dd0591446fdf723e6a51a64' (2024-03-05)
  → 'github:NixOS/nixpkgs/2be119add7b37dc535da2dd4cba68e2cf8d1517e' (2024-03-08)
• Updated input 'nur':
    'github:nix-community/NUR/e6999b0bacd992f609dcb1657461c682addaf9d0' (2024-03-08)
  → 'github:nix-community/NUR/91cc200411377bd61e63526d925a82be50dc9d7f' (2024-03-09)
2024-03-09 23:30:48 +00:00
d849fb1e3f flake.lock: Update
Flake lock file updates:

• Updated input 'nix-index-database':
    'github:Mic92/nix-index-database/94a1e46434736a40f976a454f8bd3ea2144f349b' (2024-03-06)
  → 'github:Mic92/nix-index-database/2ad5ebce1e1be47a8cf330d85265ac09ffa15178' (2024-03-08)
• Updated input 'nur':
    'github:nix-community/NUR/7f2452fb0a3a523159456396ecc21be850d9e31f' (2024-03-07)
  → 'github:nix-community/NUR/e6999b0bacd992f609dcb1657461c682addaf9d0' (2024-03-08)
2024-03-08 23:30:13 +00:00
58275bdf5f vno1-op5p: postfix 2024-03-08 20:35:32 +02:00
b8d2bb3bcd vno1-op5p: fix syntax error 2024-03-08 20:35:03 +02:00
98146bde95 vno1-op5p: enable secrets 2024-03-08 20:34:08 +02:00
402b195de8 rekey 2024-03-08 19:59:48 +02:00
4c04b8eacf vno1-op5p: start with secrets
need to recode
2024-03-08 17:20:04 +00:00
1038e5ea81 uboot: removeuse bl31 from tfa
Otherwise `cryptsetup benchmark` performance drops to <100MB/s with
aes-xts 256b. Now we're almost 400MB/s.
2024-03-08 14:29:41 +02:00
234e7d8979 flake.lock: Update
Flake lock file updates:

• Updated input 'nixpkgs':
    'github:NixOS/nixpkgs/617579a787259b9a6419492eaac670a5f7663917' (2024-03-04)
  → 'github:NixOS/nixpkgs/880992dcc006a5e00dd0591446fdf723e6a51a64' (2024-03-05)
• Updated input 'nur':
    'github:nix-community/NUR/922e9ab7245e8d8083cb2e8e61021e27d5f6b2f6' (2024-03-06)
  → 'github:nix-community/NUR/7f2452fb0a3a523159456396ecc21be850d9e31f' (2024-03-07)
2024-03-07 23:30:48 +00:00
0d7e143864 uboot: use binary bl31 2024-03-07 20:59:58 +02:00
b1d1632295 fix perf 2024-03-07 14:19:29 +02:00
2ee1f67c2a base: add libkcapi 2024-03-07 14:18:17 +02:00
ecdac4871e CRYPTO_DEV_ROCKCHIP2_DEBUG 2024-03-07 13:40:44 +02:00
d4a6e36fd1 arm64: skip perf tools
doesn't build on the custome kernel
2024-03-07 13:08:40 +02:00
c001078e56 arm64: compile some stuff natively 2024-03-07 13:01:59 +02:00
e9f3ef3b2b arm64 kernel: cross-compile 2024-03-07 11:47:15 +02:00
dc5569f331 rk3588 crypto extension
From https://lore.kernel.org/all/20231107155532.3747113-1-clabbe@baylibre.com/
2024-03-07 11:15:51 +02:00
f9426cddba vno1-op5p 2024-03-07 08:35:05 +02:00
0e32f5a913 flake.lock: Update
Flake lock file updates:

• Updated input 'nix-index-database':
    'github:Mic92/nix-index-database/93554c04c2f1c02f4a383538e8848d511c3129e9' (2024-03-03)
  → 'github:Mic92/nix-index-database/94a1e46434736a40f976a454f8bd3ea2144f349b' (2024-03-06)
• Updated input 'nur':
    'github:nix-community/NUR/94cc427bb87caa8d954e3e80c72e39e078c93dca' (2024-03-05)
  → 'github:nix-community/NUR/922e9ab7245e8d8083cb2e8e61021e27d5f6b2f6' (2024-03-06)
2024-03-06 23:30:07 +00:00
8f8a089c87 base: add cryptsetup 2024-03-06 14:29:00 +02:00
8f3f3e9522 op5p: enable pcscd 2024-03-06 13:58:26 +02:00
42078016e8 base: +keyutils 2024-03-06 13:25:18 +02:00
8d13c7820d users: fix extraGroups 2024-03-06 13:22:56 +02:00
741c21214f base/users: fix empty password handling 2024-03-06 13:07:41 +02:00
88da46eb98 base: add bcachefs-tools 2024-03-06 12:56:27 +02:00
f2bd060ba3 vm: get back to zfs
most host use it anyway
2024-03-06 12:51:15 +02:00
7ad3e26401 vm and op5p: add bcachefs 2024-03-06 12:48:27 +02:00
3f7c097634 prometheus config: fix copy-paste 2024-03-06 12:41:23 +02:00
10a59c7eea node-exporter: add vno1-vinc 2024-03-06 12:36:26 +02:00
a29171eb4b vm: use systemd-boot 2024-03-06 12:19:33 +02:00
66c30688f0 add nom 2024-03-06 12:12:50 +02:00
3610224056 wireshark: use wireshark-qt everywhere 2024-03-06 12:05:49 +02:00
83355bee0f vm: do not autostart xorg 2024-03-06 12:01:34 +02:00
2cb294b9ab op5p: add base 2024-03-06 11:51:26 +02:00
842d67d959 kernelPackage: remove the setting from vno3-rp3b 2024-03-06 10:46:23 +02:00
0bf8bd3611 zfs-boot: do not configure kernelPackage there
it's in our base
2024-03-06 10:45:06 +02:00
d57a2c2d47 qgis -> qgis-ltr
this one gets downloaded from cache
2024-03-06 10:41:18 +02:00
f67a9f7438 kernel: default to zfs-enabled 2024-03-06 10:37:59 +02:00
f5edd23253 vm: fix user propagation, refactor base.users 2024-03-06 10:33:48 +02:00
b31dff0451 fix firefox 2024-03-06 09:11:48 +02:00