Commit graph

64 commits

Author SHA1 Message Date
4c918ad074 Set resolv.conf file manually for uptime-kuma container due to a bug 2023-11-09 23:10:52 +01:00
eba7c018ed Use only snake case for element-web config since camel case is deprecated 2023-11-09 23:10:52 +01:00
21c0b67ac2 Configure TLS settings on mail relay 2023-11-09 23:10:52 +01:00
eb84404a10 Enable TLS on mail relay 2023-11-09 23:10:52 +01:00
cae1284094 Forward port 80 to mail servers for the http acme challange 2023-11-09 23:10:52 +01:00
6c6cfb6da8 Use snat rule instead if masquerade for wireguard nat 2023-11-09 23:10:52 +01:00
74d5abdfe2 Use a less generic nftables table name 2023-11-09 23:10:52 +01:00
cd938d5020 Use another subnet for WireGuard tunnel as is conflicts with the openstack internal subnet 2023-11-09 23:10:52 +01:00
f9971c842e Add tcpdump to default packages 2023-11-09 23:10:52 +01:00
3723b4edf2 Fix WireGuard nat rules 2023-11-09 23:10:52 +01:00
e0d1e17bbb Change mail-1 wireguard port as it is already used for STS setup 2023-11-09 23:10:52 +01:00
b359ec8644 Use host resolv.conf in container 2023-11-09 23:10:52 +01:00
d1f2b13232 Add missing wireguard-tools dependency 2023-11-09 23:10:52 +01:00
03719f5bf8 Pass libnftables.so.1 path into python script 2023-11-09 23:10:52 +01:00
ea11e41005 Add wireguard-nat-nftables python script 2023-11-09 23:10:52 +01:00
34b8dcef9c Add valkyrie host 2023-11-09 23:10:52 +01:00
f3385b48a2 Enable firewall 2023-11-09 23:10:52 +01:00
4a802ab44d Setup mail server and restructure some things 2023-11-09 23:10:52 +01:00
fa3db3bad6 Update flake.lock 2023-11-09 23:10:52 +01:00
1c268bbea6 Just do the nginx proxy_protocol listen in extraConfig and use stable packages 2023-11-09 23:10:52 +01:00
7283b50b39 Bump element-web to v1.11.40 2023-11-09 23:10:52 +01:00
685daabdd2 Bump flake.lock 2023-11-09 23:10:52 +01:00
4d7c667c45 Add matrix-synapse host 2023-11-09 23:10:52 +01:00
b50f8c615c Only run pipeline when specific RUN_JOB variable value is set 2023-11-09 23:10:52 +01:00
fd9952e9f2 Bump flake.lock 2023-11-09 23:10:52 +01:00
909a2ac6c1 Rename nixos-coturn to coturn and finish config 2023-11-09 23:10:52 +01:00
fc2c69dbb7 Add metrics host with Grafana and Prometheus 2023-11-09 23:10:52 +01:00
acdff7a0cc WIP grafana 2023-11-09 23:10:52 +01:00
b1015f627a Increase opcache.interned_strings_buffer PHP option 2023-11-09 23:10:52 +01:00
dc7c5225ad Enable proxyprotocol for nitter host 2023-11-09 23:10:52 +01:00
d314976135 Add netbox host 2023-11-09 23:10:52 +01:00
8968d11075 Fix hostname 2023-11-09 23:10:52 +01:00
fec32d5549 Restrict allowedTCPPorts to port 8443 2023-11-09 23:10:52 +01:00
86a2bf0395 Add SMTP configuration to nextcloud and use an additional disk for the data 2023-11-09 23:10:52 +01:00
a57c5183d8 Set boot.growPartition = true 2023-11-09 23:10:52 +01:00
09abf3bee9 Improve Proxmox backup image generation 2023-11-09 23:10:52 +01:00
5c0f7dd6b8 Add nextcloud host 2023-11-09 23:10:52 +01:00
5691e65bf3 Remove secret.nix from jellyfin imports 2023-11-09 23:10:52 +01:00
39bc88eb0f Enable firewall and migrate Jellyfin to NixOS 2023-11-09 23:10:52 +01:00
def599be28 Add jellyfin host 2023-11-09 23:10:52 +01:00
e122ca0006 Enable console on serial port and print public ssh host key when booting 2023-11-09 23:10:52 +01:00
4b18856559 Use hacky workaround for enableACME check with a proxyProtocol listener 2023-11-09 23:10:52 +01:00
e60e96c88b Set binary cache hint 2023-11-09 23:10:52 +01:00
ea78e90875 Bump flake.lock 2023-11-09 23:10:51 +01:00
a1e39754f9 Generate colmena and hydraJobs outputs from the same hosts attribute set 2023-11-09 23:10:51 +01:00
29fe1fbeca Test host specific nixpkgs 2023-11-09 23:10:51 +01:00
361f5ef709 Generate hosts for hydra 2023-11-09 23:10:51 +01:00
2673483143 Add iperf host 2023-11-09 23:10:51 +01:00
fc50e78610 Add output for nixos-generators 2023-11-09 23:10:51 +01:00
bff3ca1445 Serve element-web directly from web-public-2 2023-11-09 23:10:51 +01:00