Commit graph

64 commits

Author SHA1 Message Date
b2f59a9c77
Make some notes on how to bring up servers
All checks were successful
/ dev-shell (push) Successful in 30s
/ rust-packages (push) Successful in 37s
/ check (push) Successful in 1m11s
/ terraform-providers (push) Successful in 59s
/ systems (push) Successful in 3m33s
2025-07-19 23:03:40 +02:00
e7c73f98dd
Hardcode path to usermod
All checks were successful
/ dev-shell (push) Successful in 30s
/ rust-packages (push) Successful in 35s
/ check (push) Successful in 1m11s
/ terraform-providers (push) Successful in 58s
/ systems (push) Successful in 3m30s
Apparently adding dependency on `su` does not seem
to put usermod in path
2025-07-19 22:50:23 +02:00
ac1c6adc75
Attempt to fix some random bugs
All checks were successful
/ dev-shell (push) Successful in 30s
/ rust-packages (push) Successful in 37s
/ check (push) Successful in 1m13s
/ terraform-providers (push) Successful in 1m1s
/ systems (push) Successful in 3m34s
2025-07-19 22:46:51 +02:00
293dbdab94
Change set unix user command to service
All checks were successful
/ dev-shell (push) Successful in 29s
/ rust-packages (push) Successful in 36s
/ terraform-providers (push) Successful in 32s
/ check (push) Successful in 1m10s
/ systems (push) Successful in 3m33s
2025-07-19 22:41:55 +02:00
16cd4f241e
Fix another derp bug
All checks were successful
/ dev-shell (push) Successful in 29s
/ rust-packages (push) Successful in 37s
/ terraform-providers (push) Successful in 58s
/ check (push) Successful in 1m14s
/ systems (push) Successful in 3m32s
2025-07-19 22:36:22 +02:00
567098b4a4
Fix bug and add utility to store unix password
Some checks failed
/ dev-shell (push) Successful in 29s
/ rust-packages (push) Successful in 34s
/ terraform-providers (push) Successful in 30s
/ check (push) Successful in 1m10s
/ systems (push) Failing after 1m41s
2025-07-19 22:34:06 +02:00
9c828ea0e4
Clarify some code
Some checks failed
/ dev-shell (push) Successful in 30s
/ rust-packages (push) Successful in 35s
/ check (push) Failing after 52s
/ systems (push) Failing after 1m36s
/ terraform-providers (push) Successful in 30s
2025-07-19 22:07:07 +02:00
daf5aac32d
Add git to khs base
Some checks failed
/ dev-shell (push) Successful in 28s
/ rust-packages (push) Successful in 35s
/ check (push) Failing after 54s
/ terraform-providers (push) Successful in 1m0s
/ systems (push) Failing after 1m37s
2025-07-19 22:05:02 +02:00
8c3d372586
Support setting khs unix user password from vault
Some checks failed
/ rust-packages (push) Successful in 36s
/ terraform-providers (push) Successful in 57s
/ dev-shell (push) Successful in 29s
/ check (push) Failing after 52s
/ systems (push) Failing after 1m38s
2025-07-19 22:04:04 +02:00
57c4fd3d35
Begin adding support for setting unix password for users 2025-07-19 21:47:52 +02:00
a7339120a0
Fix double usage of same secret file
All checks were successful
/ dev-shell (push) Successful in 30s
/ rust-packages (push) Successful in 35s
/ check (push) Successful in 2m5s
/ systems (push) Successful in 3m31s
/ terraform-providers (push) Successful in 30s
2025-07-19 19:43:16 +02:00
a3eaca7fb0
Add git to nixos upgrade script
Some checks failed
/ dev-shell (push) Successful in 30s
/ rust-packages (push) Successful in 37s
/ terraform-providers (push) Successful in 56s
/ check (push) Failing after 2m0s
/ systems (push) Successful in 3m32s
2025-07-19 12:05:11 +02:00
9bd9eb328b
Get kas.codes minimally functioning
Some checks failed
/ systems (push) Successful in 31m26s
/ dev-shell (push) Successful in 1m48s
/ rust-packages (push) Successful in 4m13s
/ check (push) Failing after 5m8s
/ terraform-providers (push) Successful in 11m14s
2025-07-18 23:42:46 +02:00
dec0048a7b
Begin preparing kas.codes domain
Some checks are pending
/ check (push) Waiting to run
/ dev-shell (push) Waiting to run
/ rust-packages (push) Waiting to run
/ terraform-providers (push) Waiting to run
/ systems (push) Waiting to run
2025-07-18 22:58:35 +02:00
eff84d05da
Render secrets more often
All checks were successful
/ rust-packages (push) Successful in 36s
/ dev-shell (push) Successful in 28s
/ terraform-providers (push) Successful in 59s
/ check (push) Successful in 2m3s
/ systems (push) Successful in 3m47s
2025-07-18 13:56:21 +02:00
1f7139f793
Move monitoring.kaareskovgaard.net to new openbao setup
Some checks failed
/ dev-shell (push) Successful in 1m52s
/ rust-packages (push) Successful in 4m3s
/ check (push) Failing after 4m59s
/ terraform-providers (push) Successful in 11m1s
/ systems (push) Successful in 31m7s
2025-07-18 00:18:26 +02:00
905b1096ac
Fix some notes
Some checks failed
/ check (push) Failing after 2m22s
/ dev-shell (push) Successful in 25s
/ rust-packages (push) Successful in 33s
/ systems (push) Successful in 18m35s
/ terraform-providers (push) Successful in 2m23s
2025-07-17 01:28:58 +02:00
f3175b9b03
Begin setting up authentication and secrets engine
Some checks failed
/ dev-shell (push) Successful in 1m9s
/ rust-packages (push) Successful in 4m36s
/ check (push) Failing after 5m57s
/ systems (push) Successful in 27m33s
/ terraform-providers (push) Successful in 12m41s
2025-07-17 01:20:19 +02:00
81551dd791
Reenable systemd collectors
Some checks failed
/ dev-shell (push) Successful in 26s
/ rust-packages (push) Successful in 31s
/ terraform-providers (push) Successful in 27s
/ check (push) Successful in 1m19s
/ systems (push) Failing after 5m0s
2025-07-15 23:02:07 +02:00
005ac30c21
Fix prometheus/loki cache keys not writing to same file
Some checks failed
/ dev-shell (push) Successful in 26s
/ check (push) Successful in 1m19s
/ rust-packages (push) Successful in 33s
/ terraform-providers (push) Successful in 56s
/ systems (push) Has been cancelled
2025-07-15 22:59:37 +02:00
24c28283d4
Disable systemd metrics to see if it helps alloy not fail
Some checks failed
/ dev-shell (push) Successful in 26s
/ rust-packages (push) Successful in 31s
/ terraform-providers (push) Successful in 27s
/ check (push) Successful in 1m19s
/ systems (push) Has been cancelled
2025-07-15 22:51:54 +02:00
8fb47705f4
Add time zone to khs-base and collect systemd metrics
Some checks failed
/ dev-shell (push) Successful in 26s
/ rust-packages (push) Successful in 37s
/ terraform-providers (push) Successful in 1m2s
/ check (push) Successful in 1m24s
/ systems (push) Failing after 5m5s
2025-07-15 22:36:00 +02:00
0cb6ecb1f6
Prepare some post provisioning stuff
Some checks failed
/ dev-shell (push) Successful in 2m50s
/ rust-packages (push) Successful in 2m57s
/ systems (push) Failing after 7m45s
/ terraform-providers (push) Successful in 1m6s
/ check (push) Successful in 5m17s
2025-07-15 17:24:04 +02:00
11bb2af2bb Remove desktop.qcow2 from git
All checks were successful
/ systems (push) Successful in 1h29m35s
/ dev-shell (push) Successful in 25s
/ rust-packages (push) Successful in 32s
/ terraform-providers (push) Successful in 55s
/ check (push) Successful in 1m20s
Former-commit-id: de8ddee60c702f6877dca54180c22ec6574ee13b
2025-07-15 08:43:55 +02:00
749045904a Add to list of systems built
Former-commit-id: fbfbf97fc3
2025-07-15 08:33:57 +02:00
7e7ffbb4c4 Build authentik as well
Former-commit-id: 7cad695983
2025-07-15 08:30:57 +02:00
3e4db99246 Make openstack servers be a server
Former-commit-id: b83cfce0af
2025-07-15 08:25:43 +02:00
3c3e33b075 Restructure conditionals on desktop in homes
Former-commit-id: b0c972f5b3
2025-07-15 08:22:59 +02:00
a5384c8105 Fix wrong config path
Former-commit-id: 80af3c16e5
2025-07-15 08:16:39 +02:00
0b124838b2 More fixes
Former-commit-id: 5826c78a68
2025-07-15 08:13:26 +02:00
fee2017fd4 Fix some minor issues
Former-commit-id: f8a0434e2b
2025-07-14 23:41:25 +02:00
7a995baca4 Begin moving openbao and authentik server to new setup
Former-commit-id: 8cd2737aca
2025-07-14 23:34:02 +02:00
3a42f156f7 Add hetzner user-data url
Former-commit-id: a996ba3083
2025-07-13 00:58:40 +02:00
3deafa7317 Begin adding services to the monitoring stack
Former-commit-id: e360abdf4b
2025-07-13 00:51:31 +02:00
891558aebf Begin creating monitoring.kaareskovgaard.net
Former-commit-id: 32ece6eb43
2025-07-11 12:40:45 +02:00
5037d791db Get basic nginx and acme setup working
This should enable DNS-01 acme for all khs openstack servers,
thus removing the pain of setting up acme for those servers.

Do note that this might not really be needed that much anymore,
as I should be able to hit them over IPv6, but for ease of mind,
this will enable ACME trivially, also for non https workloads, as well
as servers without open ports.

Do note that currently there's a global unifi firewall rule in place to
allow port 80 and 443 to my own servers over ipv6, I'd like to remove this
and have Nix configure firewall rules for each server individually, as
requested in the setup.


Former-commit-id: c402ada8f7
2025-07-11 00:38:31 +02:00
ba28ad8d03 Begin working on nginx setup
Former-commit-id: 365b16c380
2025-07-10 21:42:33 +02:00
6d1c9ff2dc Attempt to fix compilation error on Macos
Former-commit-id: 12ab4ce918
2025-07-10 20:57:01 +02:00
bb93578b88 Get openstack working again
Also first instance of getting server up with working certificate
right away, through cloud user data.


Former-commit-id: 459b45ccc5
2025-07-10 00:51:28 +02:00
d406c83aa1 Begin testing bootstrapping of vault authentication
However, the nixos-install script fails on khs openstack
as the system won't boot up after installation due it
being unable to locate the root disk. I am not sure what disk
it ends up finding.


Former-commit-id: 608d758f30
2025-07-09 23:53:42 +02:00
07360c41da Make some more changes to machine setup
Work being done as an attempt to be able to
create a small monitoring server


Former-commit-id: f7d4bef46c
2025-07-09 15:12:11 +02:00
84818b01be Fix some test issues
Former-commit-id: 89d410cb6c
2025-07-08 23:47:54 +02:00
1f246337a1 Convert some older nixos-system code
Former-commit-id: 84bf6d0350
2025-07-08 23:43:17 +02:00
1a3c10ea78
Fix another syntax error
All checks were successful
/ dev-shell (push) Successful in 19s
/ terraform-providers (push) Successful in 11s
/ rust-packages (push) Successful in 24s
/ check (push) Successful in 43s
2025-07-08 16:48:58 +02:00
e17752f9b1
Remove unused expression
All checks were successful
/ dev-shell (push) Successful in 18s
/ terraform-providers (push) Successful in 11s
/ rust-packages (push) Successful in 23s
/ check (push) Successful in 42s
2025-07-08 16:48:19 +02:00
85f2b6c295
Fix minor syntax error
All checks were successful
/ dev-shell (push) Successful in 18s
/ rust-packages (push) Successful in 23s
/ check (push) Successful in 42s
/ terraform-providers (push) Successful in 10s
2025-07-08 16:47:32 +02:00
11e64a4267
Add simple README file
Some checks failed
/ dev-shell (push) Successful in 19s
/ terraform-providers (push) Successful in 11s
/ rust-packages (push) Successful in 24s
/ check (push) Has been cancelled
2025-07-08 16:47:03 +02:00
fbed2265dd
Begin getting unifi/openstack setup working
All checks were successful
/ dev-shell (push) Successful in 18s
/ terraform-providers (push) Successful in 11s
/ rust-packages (push) Successful in 23s
/ check (push) Successful in 1m29s
Now I can create an instance, get NixOS on it, with
working IPv6 connectivity
2025-07-08 16:33:18 +02:00
1945038c90
First PoC on provisioning instance end to end on openstack
Some checks failed
/ dev-shell (push) Successful in 19s
/ check (push) Failing after 18s
/ terraform-providers (push) Successful in 30s
/ rust-packages (push) Successful in 39s
2025-07-08 16:08:37 +02:00
1e8460c2ec
Fix some issues building non finished configuration
All checks were successful
/ dev-shell (push) Successful in 18s
/ terraform-providers (push) Successful in 10s
/ rust-packages (push) Successful in 23s
/ check (push) Successful in 2m12s
2025-07-08 12:27:00 +02:00