37 Commits

Include renames

Author	SHA1	Message	Date
Greg Hellings	029b71d0d4	Pass traffic through genesis ... * keepalived does not work with Nebula VPN * update Genesis firewall to allow passing through local traffic * target all traffic directly to the LAN IP using genesis's routing	2026-08-05 22:57:58 -05:00
Greg Hellings	93a847c658	chore: get kuma up and running	2026-07-28 22:40:17 -05:00
Greg Hellings	389798c4f0	chore: buildbot over Nebula	2026-07-25 15:38:28 -05:00
Greg Hellings	475fe50d19	Expand Nebula ... * Add Nebula to Kubernetes node * Update k3s nodes to support nebula keepalived * Move external IPs to a separate structure	2026-07-25 15:18:15 -05:00
Greg Hellings	7388715d30	chore: where possible, use nebula	2026-07-25 12:05:07 -05:00
Greg Hellings	b3304c0ef5	chore: migrate to Garage	2026-07-25 11:40:35 -05:00
Greg Hellings	d2f7b85283	chore: bring hermes into nebula	2026-07-21 17:16:37 -05:00
Greg Hellings	d12ef9faec	chore: rekey to add hermes visibility	2026-07-21 16:15:32 -05:00
Greg Hellings	bc986f0e51	chore: add hermes	2026-07-21 16:00:52 -05:00
Greg Hellings	214f6a4d2a	chore: add bmc IP addresses	2026-07-20 08:50:03 -05:00
Greg Hellings	4f79033b04	chore: add Proxmox CT baseline	2026-07-13 18:18:54 -05:00
Greg Hellings	d7e98290c3	chore: add new pve hosts	2026-07-07 14:09:05 -05:00
Greg Hellings	307dbbe044	fix: do not claim mastery of TS net	2026-05-30 00:24:36 -05:00
Greg Hellings	69651258d6	chore: connect buildbot and gitea by tailscale	2026-05-28 16:57:05 -05:00
Greg Hellings	95eea6fc26	fix: enable s3 DNS aliases	2026-05-19 23:47:42 -05:00
Greg Hellings	2932e9e335	chore: remove vm-gitlab which is no longer in use	2026-04-30 16:06:58 -05:00
Greg Hellings	3b78dfec41	chore: add printer to network	2026-04-20 16:18:20 -05:00
Greg Hellings	8509fff746	chore: upgrade from dnsmasq to bind	2026-04-19 01:04:41 -05:00
Greg Hellings	ec8c826565	chore: fix building	2026-04-17 15:54:48 -05:00
Greg Hellings	14c7f34108	chore: lithic stuff	2026-04-08 08:00:35 -05:00
Greg Hellings	6b7f54d0a2	feat: pull dynamic names for Darwin/Home	2026-04-06 16:21:02 -05:00
Greg Hellings	0d70a9e018	feat: add li host	2026-04-06 08:43:41 -05:00
root	792217f640	feat: add Nebula mesh network overlay ... Introduces a greg.nebula NixOS module and enables it across all managed hosts for the nebula.thehellings.com overlay (CIDR: 10.157.0.0/16). Architecture: - linode: lighthouse + relay (public internet, UDP 4242) - genesis: regular node + unsafe_routes router for 10.42.0.0/16 (home LAN) - hosea, isaiah, jeremiah, zeke, exodus: regular nodes with unsafe_routes pointing to genesis to reach the home LAN Changes: - modules/nixos/nebula.nix: new greg.nebula module - isLighthouse / isRelay options - unsafeRoutes option (tun.unsafe_routes) - routesSubnet option: enables IP forwarding + nftables masquerade NAT on the gateway host (genesis) so Nebula peers reach 10.42.0.0/16 - agenix secret reference per-host (secrets/nebula/<name>.key.age) - opens UDP/4242 in the firewall - modules/nixos/default.nix: import nebula.nix - hosts/unstable/linode/default.nix: greg.nebula.isLighthouse = true - hosts/unstable/genesis/default.nix: greg.nebula.routesSubnet = "10.42.0.0/16" - hosts/unstable/{hosea,isaiah,jeremiah,zeke,exodus}/default.nix: greg.nebula.enable = true with unsafeRoutes via genesis - network.json: add nebulaIp field for each managed host - secrets/secrets.nix: declare nebula/<host>.key.age entries - secrets/nebula/README.md: full PKI bootstrap guide (CA, certs, agenix)	2026-03-28 23:24:52 -05:00
root	8e218a71e0	fix: add missing shire-zebra.ts.net DNS entries; update exodus Tailscale IP ... genesis, zeke, linode, and exodus were missing shire-zebra.ts.net aliases in the genesis dnsmasq hosts file. Only hosea, isaiah, jeremiah, gitlab, matrix, chronicles, and nas1 had them. Since genesis is the DNS server for the whole network, Prometheus (and everything else) couldn't resolve those four hostnames, causing instant connection failures on scrape. Also update exodus Tailscale IP from 100.80.99.48 to 100.70.99.91 (stale IP in both network.json and the hosts file).	2026-03-25 21:12:51 -05:00
Greg Hellings	e2181f124a	chore: dynamic hosts, builder targets ... Make hosts read from directories, to limit manual changes Rename vm-gitlab -> gitlab A few reformatting and lint changes due to altered files Create builder targets for Darwin builders	2026-02-17 16:11:29 -06:00
Greg Hellings	85a338220c	Rekey with Exodus system key	2026-01-18 23:16:54 -06:00
Greg Hellings	ecf5b3e75f	Allow deploy of (almost) everything	2026-01-08 18:05:19 -06:00
Greg Hellings	c51e2e5810	fix for Genesis and Isaiah ... Get gitea-actions running on Isaiah Fix adblock upate on Genesis	2025-12-30 20:21:16 -06:00
Greg Hellings	925d0018e6	Move pubkey info to network.json	2025-12-26 23:06:03 -06:00
Greg Hellings	d2328a559b	Fix typo in network.json	2025-12-25 15:55:28 -06:00
Greg Hellings	44ea82fe2c	Remove btc and use Albyhub	2025-12-23 18:13:25 -06:00
Greg Hellings	21f23945c6	Use metadata in home-manager configuration	2025-12-22 15:31:33 -06:00
Greg Hellings	856d4ec627	Fix building with Colmena. ... Apply overlays and nixpkgs imports once Do not set hostPlatform explicitly, set it from the network.json file	2025-12-22 15:27:36 -06:00
Greg Hellings	7f82dbebb7	Add greg to remote buiders auth keys	2025-12-17 23:10:54 -06:00
Greg Hellings	0b4f074f51	Give more colmena info	2025-12-16 19:09:26 -06:00
Greg Hellings	553957c35e	Move more data into metadata	2025-12-16 16:48:11 -06:00
Greg Hellings	854aed86e0	Updates to Flakes and Zeke ... Add /dev/sda1 to Zeke Update Flakes Add initial colmena support Add colmena to shells Update kubernetes pins	2025-12-15 22:18:29 -06:00