greg/nixos
1
0
Fork 1
Code Issues Pull Requests 2 Actions Packages Projects Releases Wiki Activity
1,571 Commits 12 Branches 0 Tags
eabead05ab6b18ff0e9150211da0d719f61860c7
Commit Graph
16 Commits
Author SHA1 Message Date
root 4eebf07f6b fix: scope prometheus exporter firewall rules to home hosts only
buildbot/nix-eval Build done.
Details 
Move allowedTCPPorts for node/ping/systemd/blackbox exporters from
hosts/baseline.nix (applies to ALL hosts including linode) into
modules/nixos/home.nix (applies only to greg.home = true hosts).

This prevents ports 9100/9115/9427/9558 from being opened on linode,
which is internet-facing. All LAN hosts set greg.home = true and will
still get the ports opened; linode sets greg.home = false and will not.
 2026-03-25 09:46:26 -05:00
root ab6e1d24fe feat: comprehensive observability stack 
- Add restic_backups and mattermost scrape jobs to Prometheus config
- Add UnPoller deployment+service+secret for UniFi metrics (unpoller.yaml)
- Add unifi scrape job targeting unpoller in-cluster
- Add 4 Grafana dashboards as NixOS-managed etc files on hosea:
  - system-health: CPU, memory, disk, network per host
  - backup-health: restic backup freshness and duration
  - kubernetes: pod counts, restart rates, node resources
  - network: DNS queries, DHCP leases, UniFi ports, ping latency
- Add grafana-api-token agenix secret placeholder on hosea
- Open firewall ports 9100/9427/9558 for prometheus exporters in baseline.nix
 2026-03-25 09:23:31 -05:00
Greg Hellings f58ef063be Add nfs-utils everywhere for mounting 2026-02-02 10:41:04 -06:00
Greg Hellings 925d0018e6 Move pubkey info to network.json 2025-12-26 23:06:03 -06:00
Greg Hellings 553957c35e Move more data into metadata 2025-12-16 16:48:11 -06:00
Greg Hellings 1a528f10de Simplify nixpkgs eval 2025-12-16 09:07:55 -06:00
Greg Hellings 01e6aa22d5 Simplify evaluations a bit 2025-12-07 17:50:55 -06:00
Greg Hellings d0163c4dd7 Add gnupg agent to baseline and Zed to FHS 2025-12-02 15:05:46 -06:00
Greg Hellings 5ae91f18ba Update my exporters 2025-11-20 23:14:15 -06:00
Greg Hellings b8d3d11e06 Enable prometheus everywhere 2025-11-19 22:43:10 -06:00
Greg Hellings 3046178f6b Add gcc-tune script 2025-10-02 23:06:58 -05:00
Greg Hellings f9f1357b8e Rename of Jude to Zeke 
Since Jude is a now a server, we rename it to Zeke, for Ezekiel
Update of tailscale to auto-register nodes
Update kubernetes to install the etcd application
Update Zeke IP address and DNS bindings
 2025-07-02 12:01:27 -05:00
Greg Hellings 2443429454 Fix Jeremiah and hms 
Add Jeremiah to the users page
Remove unnecessary home-manager configuration
Convert hms into a shell application
 2025-06-11 01:24:15 -05:00
Greg Hellings 559d619abd Fix path to auth file 2025-06-10 21:48:12 -05:00
Greg Hellings 1c44dfad6f Make it build correctly 2025-06-10 15:05:09 -05:00
Greg Hellings eecd6e6d5d Separate system from home-manager again 2025-06-10 14:28:46 -05:00