oysteikt
9acddf5067
skrott: disable promtail, documentation
2026-02-17 08:41:16 +01:00
oysteikt
65318093eb
skrott: disable thermald
2026-02-17 08:41:16 +01:00
oysteikt
5189d6772b
skrott: disable zfs, udisks2
2026-02-17 08:41:16 +01:00
oysteikt
6fd6263693
skrott: disable smartd
2026-02-17 08:41:16 +01:00
oysteikt
f4d10c21e3
base: re-enable mutableUsers (absolute state)
2026-02-17 08:41:16 +01:00
oysteikt
1c41842001
README: add skrott to machine overview
2026-02-17 08:41:16 +01:00
oysteikt
4a09cecf56
secrets/skrott: add database password
2026-02-17 08:41:16 +01:00
oysteikt
a76be0d23a
skrott: set gateway
2026-02-17 08:41:16 +01:00
oysteikt
875d58bc92
flake.nix: bump dibbler
2026-02-17 08:41:16 +01:00
felixalb
8806efa238
users/felixalb: update SSH keys
2026-02-17 08:41:16 +01:00
oysteikt
1a90981060
skrott: bump stateVersion
2026-02-17 08:41:16 +01:00
oysteikt
0273344997
skrott: update dibbler + config
2026-02-17 08:41:16 +01:00
vegardbm
0648794360
use grub as bootloader because of no uefi support
2026-02-17 08:41:16 +01:00
oysteikt
6de6f71b76
topology: fix ntnu gateway <-> knutsen connection network
2026-02-17 08:41:16 +01:00
oysteikt
9ef08d2561
topology: fix gluttony network interface
2026-02-17 08:41:16 +01:00
oysteikt
d9171ac861
topology: more connections to powerpuff cluster
2026-02-17 08:41:16 +01:00
oysteikt
ec32ba0ad6
topology: fix new machines
2026-02-17 08:41:16 +01:00
oysteikt
4e6c05a08d
skrott: fix sops file location
2026-02-17 08:41:16 +01:00
oysteikt
eff8ce7161
temmie: set up httpd
2026-02-17 08:41:16 +01:00
oysteikt
741e3a297f
skrott: move networking config to values, add ipv6 address
2026-02-17 08:41:16 +01:00
oysteikt
bd402b8fd0
gluttony: fix eval
2026-02-17 08:41:16 +01:00
oysteikt
77971ce459
temmie/nfs-mounts: generate systemd units ourselves
2026-02-17 08:41:16 +01:00
oysteikt
07d9f76d5a
base: configure sops
2026-02-17 08:41:16 +01:00
oysteikt
c6dbf8b586
base: don't install dynamic loader stub
2026-02-17 08:41:16 +01:00
oysteikt
d7eda3f667
base: OOM early on nixos rebuilds
2026-02-17 08:41:16 +01:00
oysteikt
307c48b21c
hosts/various: enable qemu guest agent, disable smartd for vms by default
2026-02-17 08:41:16 +01:00
oysteikt
efc4c164a3
hosts/various: formatting, add consistent warnings to stateVersion
2026-02-17 08:41:16 +01:00
oysteikt
0c5cb3c64f
flake.nix: set default hostname for most nixos hosts
2026-02-17 08:41:16 +01:00
oysteikt
5bb13f4d06
bikkje: set hostName
2026-02-17 08:41:16 +01:00
oysteikt
ad74a3e377
hosts/various: use systemd-boot as default bootloader
2026-02-17 08:41:16 +01:00
oysteikt
0b5eb548c0
hosts/various: remove empty environment.systemPackages lists
2026-02-17 08:41:16 +01:00
oysteikt
6024d02bac
base: move package list to separate file
2026-02-17 08:41:16 +01:00
oysteikt
bd816899e4
base: provide reasoning for packages, add a few new ones
2026-02-17 08:41:16 +01:00
oysteikt
a322a66121
modules/grzegorz: override base certificate config
2026-02-17 08:41:16 +01:00
oysteikt
9f3524e8dd
base: disable fontconfig by default
2026-02-17 08:41:16 +01:00
oysteikt
2378f7840d
base: disable hibernation and sleep
2026-02-17 08:41:16 +01:00
oysteikt
846deb4185
base: no mutable users by default
2026-02-17 08:41:16 +01:00
oysteikt
b34a2f0332
base/nginx: return 444 on fqdn virtualHost by default
2026-02-17 08:41:16 +01:00
oysteikt
370dfc4b41
nix-topology: remove postgresql icon override
2026-02-17 08:41:16 +01:00
oysteikt
4fa3466112
flake.lock: bump
2026-02-17 08:41:16 +01:00
oysteikt
4a328c3234
bekkalokk/well-known: reply to well-known for all domains
2026-02-17 08:41:16 +01:00
oysteikt
190a8334b4
bicep/element: fetch correct well-known file
2026-02-17 08:41:16 +01:00
oysteikt
ed382bd9d4
packages/ooye: bump
2026-02-17 08:41:16 +01:00
oysteikt
ea013572b5
modules/ooye: calm yo ass (set restart timer + counter)
2026-02-17 08:41:16 +01:00
oysteikt
c302d26a96
bicep/matrix: remove some whitespace lol
2026-02-17 08:41:16 +01:00
oysteikt
2ac9ae84f6
update and fix `packages.out-of-your-element
2026-02-17 08:41:16 +01:00
oysteikt
a1c06aae32
bicep/sshguard: disable
...
sshguard doesn't actually work as it currently stands, also the builtin
PerSourcePenalty functionality in SSH is more aggressive than sshguard
is able to catch anyway. It might've been reasonable if we were using it
for anything other than SSH, but it doesn't seem like we are.
2026-02-17 08:41:16 +01:00
oysteikt
1ac9fe5fbd
bicep/matrix: use sops templates to render structured files
2026-02-17 08:41:16 +01:00
oysteikt
9e3770ab27
bicep/matrix: have element-web source well-known from config
2026-02-17 08:41:16 +01:00
oysteikt
d8dd9d7a1f
bicep/matrix: add synapse config to help with livekit
2026-02-17 08:41:16 +01:00
oysteikt
felixalb
vegardbm