Greg Hellings
69651258d6
chore: connect buildbot and gitea by tailscale
2026-05-28 16:57:05 -05:00
Greg Hellings
95eea6fc26
fix: enable s3 DNS aliases
2026-05-19 23:47:42 -05:00
Greg Hellings
2932e9e335
chore: remove vm-gitlab which is no longer in use
2026-04-30 16:06:58 -05:00
Greg Hellings
3b78dfec41
chore: add printer to network
2026-04-20 16:18:20 -05:00
Greg Hellings
8509fff746
chore: upgrade from dnsmasq to bind
2026-04-19 01:04:41 -05:00
Greg Hellings
ec8c826565
chore: fix building
buildbot/nix-eval Build done. (1 warning)
buildbot/nix-build gitea:greg/nixos#checks.x86_64-linux.pkg-zim Build done.
buildbot/nix-build Build done.
buildbot/nix-build gitea:greg/nixos#checks.x86_64-linux.nixos-icdm-root Build done.
2026-04-17 15:54:48 -05:00
Greg Hellings
14c7f34108
chore: lithic stuff
buildbot/nix-eval Build done.
buildbot/nix-build gitea:greg/nixos#checks.aarch64-darwin Build done.
buildbot/nix-build gitea:greg/nixos#checks.aarch64-linux Build done.
buildbot/nix-build gitea:greg/nixos#checks.x86_64-linux Build done.
buildbot/nix-build Build done.
Update manifest chart versions / update-manifests (push) Has been cancelled
Update flake.lock / update-flake-lock (push) Has been cancelled
2026-04-08 08:00:35 -05:00
Greg Hellings
6b7f54d0a2
feat: pull dynamic names for Darwin/Home
2026-04-06 16:21:02 -05:00
Greg Hellings
0d70a9e018
feat: add li host
buildbot/nix-eval Build done. (1 warning)
buildbot/nix-build Build done.
buildbot/nix-effects Build done.
2026-04-06 08:43:41 -05:00
root
792217f640
feat: add Nebula mesh network overlay
...
buildbot/nix-eval Build done.
buildbot/nix-build gitea:greg/nixos#checks.x86_64-linux.nixos-exodus Build done.
buildbot/nix-build gitea:greg/nixos#checks.x86_64-linux.nixos-isaiah Build done.
buildbot/nix-build gitea:greg/nixos#checks.x86_64-linux.nixos-genesis Build done.
buildbot/nix-build gitea:greg/nixos#checks.x86_64-linux.nixos-linode Build done.
buildbot/nix-build gitea:greg/nixos#checks.x86_64-linux.nixos-jeremiah Build done.
buildbot/nix-build gitea:greg/nixos#checks.x86_64-linux.nixos-zeke Build done.
buildbot/nix-build gitea:greg/nixos#checks.x86_64-linux.nixos-hosea Build done.
buildbot/nix-build Build done.
Introduces a greg.nebula NixOS module and enables it across all managed
hosts for the nebula.thehellings.com overlay (CIDR: 10.157.0.0/16).
Architecture:
- linode: lighthouse + relay (public internet, UDP 4242)
- genesis: regular node + unsafe_routes router for 10.42.0.0/16 (home LAN)
- hosea, isaiah, jeremiah, zeke, exodus: regular nodes with unsafe_routes
pointing to genesis to reach the home LAN
Changes:
- modules/nixos/nebula.nix: new greg.nebula module
- isLighthouse / isRelay options
- unsafeRoutes option (tun.unsafe_routes)
- routesSubnet option: enables IP forwarding + nftables masquerade NAT
on the gateway host (genesis) so Nebula peers reach 10.42.0.0/16
- agenix secret reference per-host (secrets/nebula/<name>.key.age)
- opens UDP/4242 in the firewall
- modules/nixos/default.nix: import nebula.nix
- hosts/unstable/linode/default.nix: greg.nebula.isLighthouse = true
- hosts/unstable/genesis/default.nix: greg.nebula.routesSubnet = "10.42.0.0/16"
- hosts/unstable/{hosea,isaiah,jeremiah,zeke,exodus}/default.nix:
greg.nebula.enable = true with unsafeRoutes via genesis
- network.json: add nebulaIp field for each managed host
- secrets/secrets.nix: declare nebula/<host>.key.age entries
- secrets/nebula/README.md: full PKI bootstrap guide (CA, certs, agenix)
2026-03-28 23:24:52 -05:00
root
8e218a71e0
fix: add missing shire-zebra.ts.net DNS entries; update exodus Tailscale IP
...
buildbot/nix-eval Build done. (1 warning)
buildbot/nix-build Build done.
genesis, zeke, linode, and exodus were missing shire-zebra.ts.net
aliases in the genesis dnsmasq hosts file. Only hosea, isaiah,
jeremiah, gitlab, matrix, chronicles, and nas1 had them. Since
genesis is the DNS server for the whole network, Prometheus (and
everything else) couldn't resolve those four hostnames, causing
instant connection failures on scrape.
Also update exodus Tailscale IP from 100.80.99.48 to 100.70.99.91
(stale IP in both network.json and the hosts file).
2026-03-25 21:12:51 -05:00
Greg Hellings
e2181f124a
chore: dynamic hosts, builder targets
...
buildbot/nix-eval Build done.
buildbot/nix-build gitea:greg/nixos#checks.x86_64-linux.nixos-exodus Build done.
buildbot/nix-build gitea:greg/nixos#checks.x86_64-linux.nixos-isaiah Build done.
buildbot/nix-build gitea:greg/nixos#checks.x86_64-linux.nixos-linode Build done.
buildbot/nix-build gitea:greg/nixos#checks.x86_64-linux.nixos-zeke Build done.
buildbot/nix-build gitea:greg/nixos#checks.x86_64-linux.nixos-jeremiah Build done.
buildbot/nix-build gitea:greg/nixos#checks.aarch64-linux.nixos-nixos Build done.
buildbot/nix-build gitea:greg/nixos#checks.x86_64-linux.nixos-gitlab Build done.
buildbot/nix-build Build done.
Make hosts read from directories, to limit manual changes
Rename vm-gitlab -> gitlab
A few reformatting and lint changes due to altered files
Create builder targets for Darwin builders
2026-02-17 16:11:29 -06:00
Greg Hellings
85a338220c
Rekey with Exodus system key
2026-01-18 23:16:54 -06:00
Greg Hellings
ecf5b3e75f
Allow deploy of (almost) everything
buildbot/nix-eval Build done.
buildbot/nix-build Build done.
buildbot/nix-effects Build done.
2026-01-08 18:05:19 -06:00
Greg Hellings
c51e2e5810
fix for Genesis and Isaiah
...
buildbot/nix-eval Build done. (2 warnings)
buildbot/nix-build Build done.
buildbot/nix-effects Build done.
Get gitea-actions running on Isaiah
Fix adblock upate on Genesis
2025-12-30 20:21:16 -06:00
Greg Hellings
925d0018e6
Move pubkey info to network.json
2025-12-26 23:06:03 -06:00
Greg Hellings
d2328a559b
Fix typo in network.json
2025-12-25 15:55:28 -06:00
Greg Hellings
44ea82fe2c
Remove btc and use Albyhub
2025-12-23 18:13:25 -06:00
Greg Hellings
21f23945c6
Use metadata in home-manager configuration
2025-12-22 15:31:33 -06:00
Greg Hellings
856d4ec627
Fix building with Colmena.
...
Apply overlays and nixpkgs imports once
Do not set hostPlatform explicitly, set it from the network.json file
2025-12-22 15:27:36 -06:00
Greg Hellings
7f82dbebb7
Add greg to remote buiders auth keys
2025-12-17 23:10:54 -06:00
Greg Hellings
0b4f074f51
Give more colmena info
2025-12-16 19:09:26 -06:00
Greg Hellings
553957c35e
Move more data into metadata
2025-12-16 16:48:11 -06:00
Greg Hellings
854aed86e0
Updates to Flakes and Zeke
...
Add /dev/sda1 to Zeke
Update Flakes
Add initial colmena support
Add colmena to shells
Update kubernetes pins
2025-12-15 22:18:29 -06:00