Commit Graph

1035 Commits

Author SHA1 Message Date
h7x4 1cf956f37b skrott: disable thermald 2026-01-26 02:04:03 +09:00
h7x4 38a1d38c7f skrott: disable zfs, udisks2 2026-01-26 01:31:46 +09:00
h7x4 f1a6e47e67 skrott: disable smartd 2026-01-26 00:48:36 +09:00
h7x4 c061c5be0c base: re-enable mutableUsers (absolute state) 2026-01-26 00:25:20 +09:00
h7x4 08e3e1a287 README: add skrott to machine overview 2026-01-25 23:30:41 +09:00
h7x4 034f6540d9 secrets/skrott: add database password 2026-01-25 23:30:41 +09:00
h7x4 695fe48ba8 skrott: set gateway 2026-01-25 23:30:41 +09:00
h7x4 b37551209a flake.nix: bump dibbler 2026-01-25 22:54:52 +09:00
felixalb 19059b742e users/felixalb: update SSH keys 2026-01-25 13:17:39 +01:00
h7x4 e336c119a5 skrott: bump stateVersion 2026-01-25 21:08:28 +09:00
h7x4 52ac4ca775 skrott: update dibbler + config 2026-01-25 20:56:33 +09:00
Vegard Bieker Matthey 6b352507a3 Merge pull request 'gluttony: use grub as bootloader because of no uefi support' (!121) from gluttony-boot into main
Reviewed-on: https://git.pvv.ntnu.no/Drift/pvv-nixos-config/pulls/121
2026-01-24 22:25:28 +01:00
Vegard Bieker Matthey 604b528dd3 use grub as bootloader because of no uefi support 2026-01-24 22:04:54 +01:00
h7x4 689d6582ae topology: fix ntnu gateway <-> knutsen connection network 2026-01-23 00:56:32 +09:00
h7x4 ccdaeaf4a3 topology: fix gluttony network interface 2026-01-23 00:51:30 +09:00
h7x4 72fdca4998 topology: more connections to powerpuff cluster 2026-01-23 00:50:16 +09:00
h7x4 9ccdeb6ac9 topology: fix new machines 2026-01-23 00:43:20 +09:00
h7x4 8072121b3c skrott: fix sops file location 2026-01-22 19:44:05 +09:00
h7x4 95f6463171 temmie: set up httpd 2026-01-22 19:41:52 +09:00
h7x4 39d3773a10 skrott: move networking config to values, add ipv6 address 2026-01-22 19:30:04 +09:00
h7x4 0e963f8cf0 gluttony: fix eval 2026-01-22 19:17:28 +09:00
h7x4 ba6c1c8205 temmie/nfs-mounts: generate systemd units ourselves 2026-01-22 19:10:30 +09:00
h7x4 1d47409d96 base: configure sops 2026-01-22 16:48:59 +09:00
h7x4 f7757d697d base: don't install dynamic loader stub 2026-01-22 16:13:36 +09:00
h7x4 9f43ea887e base: OOM early on nixos rebuilds 2026-01-22 16:13:20 +09:00
h7x4 5f94345a91 hosts/various: enable qemu guest agent, disable smartd for vms by default 2026-01-22 16:05:36 +09:00
h7x4 28baf322ce hosts/various: formatting, add consistent warnings to stateVersion 2026-01-22 15:57:12 +09:00
h7x4 12477aeb34 flake.nix: set default hostname for most nixos hosts 2026-01-22 15:49:50 +09:00
h7x4 e2d553af19 bikkje: set hostName 2026-01-22 15:49:50 +09:00
h7x4 89ea5b321a hosts/various: use systemd-boot as default bootloader 2026-01-22 15:49:50 +09:00
h7x4 3940f52760 hosts/various: remove empty environment.systemPackages lists 2026-01-22 15:45:43 +09:00
h7x4 e2f3c81ecd base: move package list to separate file 2026-01-22 15:35:18 +09:00
h7x4 a4c3aaa402 base: provide reasoning for packages, add a few new ones 2026-01-22 15:31:48 +09:00
h7x4 5714efc668 modules/grzegorz: override base certificate config 2026-01-22 15:10:50 +09:00
h7x4 d5199779a6 base: disable fontconfig by default 2026-01-22 14:57:00 +09:00
h7x4 ae3c7019ef base: disable hibernation and sleep 2026-01-22 14:54:35 +09:00
h7x4 73dc9306f1 base: no mutable users by default 2026-01-22 14:51:24 +09:00
h7x4 09d72305e2 base/nginx: return 444 on fqdn virtualHost by default 2026-01-21 23:17:47 +09:00
h7x4 2ace7b649f nix-topology: remove postgresql icon override 2026-01-21 14:56:41 +09:00
h7x4 7703a94b19 flake.lock: bump 2026-01-21 14:49:00 +09:00
h7x4 ebd40fc2d7 bekkalokk/well-known: reply to well-known for all domains 2026-01-21 14:47:31 +09:00
h7x4 9eb5cd869a bicep/element: fetch correct well-known file 2026-01-21 14:34:35 +09:00
h7x4 fa37f34028 packages/ooye: bump 2026-01-21 13:46:06 +09:00
h7x4 7111d00df8 modules/ooye: calm yo ass (set restart timer + counter) 2026-01-21 13:17:28 +09:00
h7x4 833a74a6fb bicep/matrix: remove some whitespace lol 2026-01-21 13:14:41 +09:00
h7x4 d82cc2e605 update and fix `packages.out-of-your-element 2026-01-21 12:49:13 +09:00
h7x4 93cf6f4a63 bicep/sshguard: disable
sshguard doesn't actually work as it currently stands, also the builtin
PerSourcePenalty functionality in SSH is more aggressive than sshguard
is able to catch anyway. It might've been reasonable if we were using it
for anything other than SSH, but it doesn't seem like we are.
2026-01-21 11:13:27 +09:00
h7x4 0f11cca8ec bicep/matrix: use sops templates to render structured files 2026-01-21 11:08:26 +09:00
h7x4 d892acb331 bicep/matrix: have element-web source well-known from config 2026-01-21 10:49:09 +09:00
h7x4 aa07687a94 bicep/matrix: add synapse config to help with livekit 2026-01-21 10:48:37 +09:00