nixos

4 Commits

Include renames

Author	SHA1	Message	Date
Greg Hellings	985dd927c4	chore: move from attic to niks3 buildbot/nix-eval Build done. Details buildbot/nix-build Build done. Details buildbot/nix-effects Build done. Details	2026-05-12 21:25:24 -05:00
Greg Hellings	a1bef073cf	fix: generate linode certs buildbot/nix-eval Build done. (1 warning) Details buildbot/nix-build Build done. Details	2026-04-01 17:20:46 -05:00
Greg Hellings	2bb0177ffa	chore: add encrypted keys and unencrypted certs buildbot/nix-eval Build done. Details buildbot/nix-build Build started. Details buildbot/nix-build gitea:greg/nixos#checks.x86_64-linux.nixos-exodus Build done. Details buildbot/nix-build gitea:greg/nixos#checks.x86_64-linux.hm-exodus Build done. Details buildbot/nix-build gitea:greg/nixos#checks.x86_64-linux.nixos-genesis Build done. Details buildbot/nix-build gitea:greg/nixos#checks.x86_64-linux.nixos-isaiah Build done. Details buildbot/nix-build gitea:greg/nixos#checks.x86_64-linux.nixos-jeremiah Build done. Details	2026-04-01 16:33:59 -05:00
root	792217f640	feat: add Nebula mesh network overlay buildbot/nix-eval Build done. Details buildbot/nix-build gitea:greg/nixos#checks.x86_64-linux.nixos-exodus Build done. Details buildbot/nix-build gitea:greg/nixos#checks.x86_64-linux.nixos-isaiah Build done. Details buildbot/nix-build gitea:greg/nixos#checks.x86_64-linux.nixos-genesis Build done. Details buildbot/nix-build gitea:greg/nixos#checks.x86_64-linux.nixos-linode Build done. Details buildbot/nix-build gitea:greg/nixos#checks.x86_64-linux.nixos-jeremiah Build done. Details buildbot/nix-build gitea:greg/nixos#checks.x86_64-linux.nixos-zeke Build done. Details buildbot/nix-build gitea:greg/nixos#checks.x86_64-linux.nixos-hosea Build done. Details buildbot/nix-build Build done. Details Introduces a greg.nebula NixOS module and enables it across all managed hosts for the nebula.thehellings.com overlay (CIDR: 10.157.0.0/16). Architecture: - linode: lighthouse + relay (public internet, UDP 4242) - genesis: regular node + unsafe_routes router for 10.42.0.0/16 (home LAN) - hosea, isaiah, jeremiah, zeke, exodus: regular nodes with unsafe_routes pointing to genesis to reach the home LAN Changes: - modules/nixos/nebula.nix: new greg.nebula module - isLighthouse / isRelay options - unsafeRoutes option (tun.unsafe_routes) - routesSubnet option: enables IP forwarding + nftables masquerade NAT on the gateway host (genesis) so Nebula peers reach 10.42.0.0/16 - agenix secret reference per-host (secrets/nebula/<name>.key.age) - opens UDP/4242 in the firewall - modules/nixos/default.nix: import nebula.nix - hosts/unstable/linode/default.nix: greg.nebula.isLighthouse = true - hosts/unstable/genesis/default.nix: greg.nebula.routesSubnet = "10.42.0.0/16" - hosts/unstable/{hosea,isaiah,jeremiah,zeke,exodus}/default.nix: greg.nebula.enable = true with unsafeRoutes via genesis - network.json: add nebulaIp field for each managed host - secrets/secrets.nix: declare nebula/<host>.key.age entries - secrets/nebula/README.md: full PKI bootstrap guide (CA, certs, agenix)	2026-03-28 23:24:52 -05:00