45 commits

Author	SHA1	Message	Date
Gonne	e7154785dd	Disable TLS behind proxies and relays	2024-10-12 14:10:01 +00:00
Gonne	ace96d5f7c	Restrict HRZ allowlist update service privileges	2024-10-12 14:10:01 +00:00
Gonne	b50d7d0e6a	Mailman backups	2024-10-12 14:10:01 +00:00
Gonne	b9b7a1fa58	Add pushing to hrz allowlist	2024-10-12 14:10:01 +00:00
Gonne	1ab6e5d868	Setze Mailman-Maschine auf	2024-10-12 14:10:01 +00:00
Gonne	d1483131b8	Tausche Gonnes SSH-Key	2024-04-26 18:10:24 +02:00
Gonne	e69c8c6efb	Remove obsolete DNS resolver	2024-04-03 15:38:50 +02:00
Gonne	7bc8261cb6	Also sync deletion of files from fsaccount before taking the backup	2024-04-03 15:38:50 +02:00
Gonne	e91f417a29	Move secrets to machine config	2024-04-03 15:38:50 +02:00
Dennis Frieberg	cabd210aa6	[#33] Refactored existing network config	2024-04-02 16:01:57 +02:00
Gonne	326cc52c2e	Feedback: more comments	2024-03-30 19:52:11 +01:00
Gonne	1bf59168fb	Use sops for private key distribution	2024-03-30 09:01:16 +01:00
Gonne	e340a7eb75	Address Feedback	2024-03-30 09:01:16 +01:00
Gonne	b0af48a9d0	Backup des Fachschaftsaccounts	2024-03-30 09:01:16 +01:00
Gonne	b7b0e07f44	Create backuphost Bragi	2024-03-30 09:01:16 +01:00
Gonne	4197474fec	Differentiate hardware and vms in roles	2024-01-08 15:32:16 +01:00
Dennis Frieberg	238faa3e89	linting and formatting existing code	2023-11-09 15:58:43 +01:00
Dennis Frieberg	7acba2a5bb	removed .gitkeep	2023-11-06 22:10:13 +01:00
Gonne Kretschmer	22d8749f7a	Fix clock drift	2023-11-06 16:03:35 +01:00
Gonne Kretschmer	b2f0945473	Improve comment explaining metrics selection	2023-11-06 12:47:55 +01:00
Gonne Kretschmer	a41d377f96	Reenable nfs collector	2023-11-03 16:46:26 +01:00
Gonne Kretschmer	2c2b24d0a9	Setup Impermanence	2023-11-03 16:43:27 +01:00
Gonne Kretschmer	1de0d32860	Prometheus Node Exporter metrics configured.	2023-10-27 16:14:48 +02:00
Gonne Kretschmer	559c5a47ad	Enable prometheus node exporter by default	2023-10-25 10:25:18 +00:00
Gonne Kretschmer	bb93d3aed5	Move Jitsi to a module	2023-10-23 19:05:51 +02:00
Gonne Kretschmer	4318950142	Jitsi konfiguriert	2023-10-20 23:10:28 +02:00
Gonne Kretschmer	e8929ff159	Ghatanothoa (Neues Jitsi)	2023-10-20 09:35:11 +02:00
Gonne Kretschmer	8194722e2d	Nix build signing key	2023-10-20 09:34:29 +02:00
Gonne Kretschmer	26275e5552	Never Gonne Give You Admin	2023-10-18 17:22:13 +02:00
Dennis Frieberg	4404d74416	fixed ssh paths for impermanence	2023-10-05 23:43:46 +02:00
Dennis Frieberg	71e56143fa	changed impermanence config for subvolumes	2023-10-05 23:41:46 +02:00
Dennis Frieberg	d008620456	[#9] first impermanence config support	2023-10-05 23:41:31 +02:00
Dennis Frieberg	4f414fa1d7	use the nixpkgs xen module	2023-10-05 00:16:25 +02:00
Dennis Frieberg	3dc8c90a27	[#11] default role setup	2023-09-30 17:33:12 +02:00
Dennis Frieberg	4ccc9c83e6	removed leftover merge marker	2023-09-30 17:31:19 +02:00
Dennis Frieberg	d0d7237fa6	disable root login	2023-09-30 17:30:27 +02:00
Dennis Frieberg	c7825cbd01	make /tmp/ a tmpfs	2023-09-30 17:29:22 +02:00
Dennis Frieberg	16fee6f1f9	refactored xen_guest.nix	2023-09-30 17:23:56 +02:00
Dennis Frieberg	44a0ef0ecd	fixed small error in trusted nix keys handling	2023-09-30 17:22:39 +02:00
Dennis Frieberg	cba8cb1ce8	added nix_keys	2023-09-30 17:21:30 +02:00
Dennis Frieberg	4d7d32f7b6	first roles/default	2023-09-30 17:19:33 +02:00
Dennis Frieberg	d7b8d63f83	added sensible credentials to nerf user	2023-09-30 17:14:30 +02:00
Dennis Frieberg	cf537f3c7b	[#5] adding sops support	2023-09-25 21:03:23 +02:00
Dennis Frieberg	8132dae08a	added some beginning docu	2023-06-12 12:02:01 +02:00
Dennis Frieberg	22736986f6	initial flake structure	2023-06-12 08:34:47 +02:00