Commit Graph

760 Commits

Author SHA1 Message Date
ab11ee31f2 vno1-oh2: pass ssh key to borg 2023-07-26 14:49:34 +03:00
e1b1715a48 vno1-oh2: backup /home/motiejus/annex2 2023-07-26 14:24:20 +03:00
bb5ae6d2f7 sshguard: whitelist all known public ips 2023-07-26 14:17:14 +03:00
99488618ce enable sshguard and plocate 2023-07-26 14:12:09 +03:00
6200488e32 remove nixos-upgrade 2023-07-26 14:04:45 +03:00
cff18bfb8f move common zfs settings to modules/base 2023-07-26 14:01:57 +03:00
d4527c24a6 mailutils comes with postfix 2023-07-26 13:32:03 +03:00
bac191ef2f postfix: add to vno1-oh2 2023-07-26 13:27:15 +03:00
60936605c9 vno1-oh2: snapshot /home 2023-07-26 13:09:40 +03:00
bccefbc4ba split backup dirs to their repos 2023-07-26 12:59:19 +03:00
4f1aa85659 syncthing 2023-07-26 12:55:15 +03:00
77c40d676d add sysstat 2023-07-26 11:09:52 +03:00
9cf3ed3185 add procps 2023-07-26 11:06:28 +03:00
f57a61cfc9 remove grub.version 2023-07-26 10:49:04 +03:00
727c0457f6 flake.lock: Update
Flake lock file updates:

• Updated input 'agenix':
    'github:ryantm/agenix/0d8c5325fc81daf00532e3e26c6752f7bcde1143' (2023-07-14)
  → 'github:ryantm/agenix/d8c973fd228949736dedf61b7f8cc1ece3236792' (2023-07-24)
2023-07-26 08:21:14 +03:00
e85cfd5d08 add TODO 2023-07-24 16:46:35 +03:00
69fe567b00 vno1-oh2: trust updaterbot 2023-07-24 16:46:35 +03:00
71fd71cb6b vno1-oh2: add updaterbot 2023-07-24 16:46:35 +03:00
aac0ea1fec remove glibcLocales temporarily; it's null sometimes 2023-07-24 16:46:35 +03:00
8b673d25af change initrd pubkey of vno1-oh2 2023-07-24 16:46:35 +03:00
6977dcff77 flake.lock: Update
Flake lock file updates:

• Updated input 'nixpkgs':
    'github:NixOS/nixpkgs/6da4bc6cb07cba1b8e53d139cbf1d2fb8061d967' (2023-07-21)
  → 'github:NixOS/nixpkgs/ac1acba43b2f9db073943ff5ed883ce7e8a40a2c' (2023-07-23)
2023-07-24 16:46:10 +03:00
5b44216b4b add zfsunlock for vno1-oh2 2023-07-24 12:50:17 +03:00
f5d3249fa0 add en_US.UTF-8/UTF-8 locale 2023-07-24 12:47:41 +03:00
6f7e911d4e flakes: add locale-archive 2023-07-24 12:42:37 +03:00
4611c08d4f cleanup ips; nix fmt 2023-07-24 12:36:34 +03:00
c2249cebb1 zfsunlock: quiet diagnostics 2023-07-24 10:38:29 +03:00
679226b60f zfsunlock 2023-07-24 10:31:29 +03:00
6c9cb09a6f root unlocking is more restrictive
akin to asking for a password
2023-07-23 16:05:07 +03:00
9c116fa8c7 add vno1-oh2 pubkey to hel1-a initrd 2023-07-23 15:58:54 +03:00
16c024ae47 zfs-passphrases are one-level now 2023-07-23 15:43:55 +03:00
039ea29829 flake.lock: Update
Flake lock file updates:

• Updated input 'nixpkgs':
    'github:NixOS/nixpkgs/08700de174bc6235043cb4263b643b721d936bdb' (2023-07-18)
  → 'github:NixOS/nixpkgs/6da4bc6cb07cba1b8e53d139cbf1d2fb8061d967' (2023-07-21)
2023-07-23 15:38:24 +03:00
7307ef57f7 comment zfs passphrases temporarily 2023-07-23 15:37:59 +03:00
4d927856e6 move pubkeys back to data.nix 2023-07-23 15:34:16 +03:00
dd60e07a14 wip more intitrd unlockers 2023-07-23 15:24:38 +03:00
af1f4be6a2 make DNS configuration consistent 2023-07-23 15:11:59 +03:00
b529dd5c5c make host pubkeys reachable via myData 2023-07-23 15:10:22 +03:00
a6a1229825 add rootfs secrets 2023-07-23 14:27:29 +03:00
0a2cafb830 use motiejus for deployment 2023-07-22 20:27:49 +03:00
e4679c8299 rekeying 2023-07-22 20:25:28 +03:00
f4446cb506 wip vno1-oh2 2023-07-22 16:51:34 +03:00
7ac1264454 add motiejus_yk2 2023-07-20 16:32:46 +03:00
95d6326c5a update yubikey-installer.nix to 23.05 and nix flake update 2023-07-20 15:19:33 +03:00
28d12ab379 small cleanup 2023-07-20 15:04:50 +03:00
5313a3ffeb users and passwords 2023-07-20 15:02:38 +03:00
16a8eff543 small cleanup 2023-07-20 11:56:37 +03:00
0f1d12cb34 unitstatus: pre-defined service units now exist 2023-07-20 10:25:53 +03:00
1bfd201028 add unitstatus
with some TODOs
2023-07-20 06:58:47 +03:00
9b090ff8ae zfsborg 2023-07-20 05:47:21 +03:00
97f720558d base/snapshot: move sanoid there 2023-07-18 16:32:45 +03:00
46e2d86918 wip snapshots 2023-07-18 12:31:48 +03:00