Commit Graph

2283 Commits

Author SHA1 Message Date
6c9cb09a6f root unlocking is more restrictive
akin to asking for a password
2023-07-23 16:05:07 +03:00
9c116fa8c7 add vno1-oh2 pubkey to hel1-a initrd 2023-07-23 15:58:54 +03:00
16c024ae47 zfs-passphrases are one-level now 2023-07-23 15:43:55 +03:00
039ea29829 flake.lock: Update
Flake lock file updates:

• Updated input 'nixpkgs':
    'github:NixOS/nixpkgs/08700de174bc6235043cb4263b643b721d936bdb' (2023-07-18)
  → 'github:NixOS/nixpkgs/6da4bc6cb07cba1b8e53d139cbf1d2fb8061d967' (2023-07-21)
2023-07-23 15:38:24 +03:00
7307ef57f7 comment zfs passphrases temporarily 2023-07-23 15:37:59 +03:00
4d927856e6 move pubkeys back to data.nix 2023-07-23 15:34:16 +03:00
dd60e07a14 wip more intitrd unlockers 2023-07-23 15:24:38 +03:00
af1f4be6a2 make DNS configuration consistent 2023-07-23 15:11:59 +03:00
b529dd5c5c make host pubkeys reachable via myData 2023-07-23 15:10:22 +03:00
a6a1229825 add rootfs secrets 2023-07-23 14:27:29 +03:00
0a2cafb830 use motiejus for deployment 2023-07-22 20:27:49 +03:00
e4679c8299 rekeying 2023-07-22 20:25:28 +03:00
f4446cb506 wip vno1-oh2 2023-07-22 16:51:34 +03:00
7ac1264454 add motiejus_yk2 2023-07-20 16:32:46 +03:00
95d6326c5a update yubikey-installer.nix to 23.05 and nix flake update 2023-07-20 15:19:33 +03:00
28d12ab379 small cleanup 2023-07-20 15:04:50 +03:00
5313a3ffeb users and passwords 2023-07-20 15:02:38 +03:00
16a8eff543 small cleanup 2023-07-20 11:56:37 +03:00
0f1d12cb34 unitstatus: pre-defined service units now exist 2023-07-20 10:25:53 +03:00
1bfd201028 add unitstatus
with some TODOs
2023-07-20 06:58:47 +03:00
9b090ff8ae zfsborg 2023-07-20 05:47:21 +03:00
97f720558d base/snapshot: move sanoid there 2023-07-18 16:32:45 +03:00
46e2d86918 wip snapshots 2023-07-18 12:31:48 +03:00
26747bd639 flakes 2023-07-18 11:27:59 +03:00
5f8cc2f9ba add borgbackup to dev shell 2023-07-17 17:46:10 +03:00
855bffb200 wip vm 2023-07-17 16:40:37 +03:00
0d804c2adb nix flake update 2023-07-17 14:53:44 +03:00
247910a2f0 move to 23.05-small 2023-05-30 10:34:02 +03:00
ba65a7ffdf jump to 23.05 2023-05-30 10:34:02 +03:00
78c1c3c2de add ngrep 2023-05-09 06:28:15 +03:00
82707c14db add tcpdump 2023-05-09 06:25:32 +03:00
fa1b4a68c2 www.recordrecap 2023-05-08 17:14:17 +03:00
a197f4db68 fuckaudiorecordings -> recordrecap 2023-05-08 17:03:49 +03:00
ee31a3df1b also add caddy config 2023-05-08 15:53:56 +03:00
521ca077c5 add fuckaudiorecordings.com 2023-05-08 15:49:44 +03:00
79d4ce9a99 add fwmine.jakstys.lt 2023-05-04 03:18:29 +03:00
bfb0eefa93 move to unstable 2023-04-26 16:27:07 +03:00
c85a495cef nix flake update 2023-04-23 21:20:44 +03:00
7e09ad32a5 nix flake update 2023-04-19 06:12:16 +03:00
30a8c6066f nix flake update 2023-04-16 22:14:21 +03:00
a22cb892f6 remove ssh-to-age
not necessary, rage accepts ssh keys natively
2023-04-16 22:12:35 +03:00
fb1464bd07 headscale: configure restart policies
OICD is an online dependency that takes time
2023-04-16 08:00:08 +03:00
d621307248 Update README 2023-04-16 06:54:29 +03:00
e1c47cce5f add ssh-to-age 2023-04-16 06:29:32 +03:00
a5e4ac3afa add rage 2023-04-16 06:24:33 +03:00
011068f5cc formatting + remove obsolete gpgconv 2023-04-14 22:55:39 +03:00
867eb0ec77 agenix + nix flake update 2023-04-14 14:15:43 +03:00
2ccda42128 add a license
yes, this *is* a personal repository and will remain as such.
2023-04-13 23:50:42 +03:00
cfe835bf62 tidy up mounts and remove sops 2023-04-13 23:36:27 +03:00
a1544a9bfe jakstys.lt: add sts 2023-04-13 11:57:54 +03:00