Commit Graph

285 Commits

Author SHA1 Message Date
a9e617cd63 nixos-module/collectd: let collectd start after dhcpd4 2022-06-24 00:04:41 +02:00
03c2b37596 nixos-module/server: remove outdated nixpkgs-master overwrite for collectd 2022-06-21 23:39:47 +02:00
966442a327 nixos-module/container/dhcp-server: change rpi tftp server to nfsroot 2022-06-21 23:10:18 +02:00
d88d57cde6 nixos-module/collectd: allow access to dhcpd4 StateDirectory 2022-06-20 01:20:26 +02:00
7344fa925f nixos-module/collectd/dhcpcount.rb: fix path to dhcpd.leases 2022-06-20 01:06:54 +02:00
a0eb8a5f82 nixos-module/defaults: pin kernelPackage to 5.17 for zfs build compatibility 2022-06-10 20:05:19 +02:00
22e4e19a5b nixos-module/container/upstream/pppoe: add clamp-mss-to-pmtu for IPv6 2022-06-10 01:15:22 +02:00
4625eef8cb nixos-module/container/dns: remove IFD for obtaining serial
now 100% IFD free
2022-03-26 04:07:00 +01:00
2de02cc5bb *.nix: remove unused code 2022-03-22 18:13:17 +01:00
e16be776bb nixos-module/container/dhcp-server: change RPi4 tftp server from netboot to nix-build 2022-03-22 18:11:04 +01:00
a43c8e99b6 nixos-module/container/{dhcp-server,netboot}: prepare rpi4 netboot 2022-03-13 22:43:43 +01:00
bdca123b99 vpn-gw: init 2022-03-01 22:51:31 +01:00
b75633566d yggdrasil: remove pantoto peering
Peer instead from the pantoto side.
2022-01-18 23:35:48 +01:00
4bb8fe46e2 yggdrasil: change listening port to 1337
1/tcp didn't work :(
2022-01-14 20:37:42 +01:00
b50a051904 yggdrasil: don't listen on ipv4 and fail 2022-01-14 19:30:29 +01:00
64ee9d06bb yggdrasil: listen, add port forwarding on upstream4+upstream1 2022-01-14 19:23:03 +01:00
4bf0e2bf33 yggdrasil: reconfigure peers 2022-01-14 00:54:33 +01:00
6cc02abdb8 yggdrasil: properly add a static key 2022-01-13 23:40:43 +01:00
792426f22c nixos-module/container/yggdrasil: enable NAT66 2022-01-13 20:34:01 +01:00
0e3921d126 Yggdrasil: enable IPv6 forwarding 2022-01-13 20:24:38 +01:00
d8bd90e049 yggdrasil: prepare container deployment 2022-01-13 20:17:50 +01:00
29c74782c7 Add yggdrasil container 2022-01-13 19:49:33 +01:00
806820950f nixos-module/container/bird: fix direct interfaces 2022-01-11 23:57:35 +01:00
343fe8c429 nixos-module/defaults: remove journalbeat
the service caused excessive disk write traffic, and the target greylog
server is overloaded anyway.
2022-01-11 22:16:53 +01:00
e1bceca9ab nix/nixos-module/container/wireguard: rename file from anon.nix 2022-01-11 20:02:25 +01:00
53cd892531 nixos-module/container/bird: advertise upstream local subnet into ospf 2022-01-11 20:00:07 +01:00
3c44eeaab1 lib/config/options: move host wireguard setting to interface entries 2022-01-11 19:58:50 +01:00
a474577abd Revert "nix/nixos-module/defaults: use non-nft iptables-legacy for migration"
This reverts commit 48b050b283.
2021-12-11 00:51:05 +01:00
48b050b283 nix/nixos-module/defaults: use non-nft iptables-legacy for migration 2021-12-10 22:56:43 +01:00
7ac993f61e nixos-module/server/lxc-containers: fix scope 2021-11-20 22:10:35 +01:00
8d671d8dee nixos-module/server/lxc-containers: resolve lxc interface name issue by ensuring the type key comes first
it took very long to find this
2021-11-20 00:43:32 +01:00
eb6e47e505 nixos-module/server/network: enable STP and decrease forward_delay for bridges 2021-11-18 22:54:33 +01:00
14ddaeba45 nixos-module/network: configure addresses for all net interfaces 2021-11-18 21:36:57 +01:00
abb226bc5a server1, server2: allow building with zfs support 2021-11-18 20:39:52 +01:00
19674ea461 nixos-module/container/bird: revert to somewhat larger ospf intervals 2021-11-18 17:10:36 +01:00
f7dabd8e2d nixos-module/server/lxc-container: split container build and activation phases 2021-11-18 16:58:32 +01:00
15f7687d92 nixos-module/container/bird: drastically reduce ospf intervals 2021-11-15 23:23:38 +01:00
624f2e38f6 nixos-module/container/upstream/pppoe: fix user option 2021-11-13 03:23:45 +01:00
32c0def45b config: nixify everything 2021-11-13 01:23:23 +01:00
01f37cec9f lib/dns: add extraRecords 2021-11-10 20:12:45 +01:00
6b36f19af8 upstream: fix forwardPorts 2021-10-18 01:24:43 +02:00
2c3c0fa13c upstream: disable NAT reflection for DNS port forwards 2021-10-16 23:56:32 +02:00
e904c12847 nixos-module/container/dns: add local ns.c3d2.de 2021-10-15 23:38:33 +02:00
eae6cc680b nix: fix more names 2021-10-14 17:12:33 +02:00
0ca0a9e9fd nix: remove dangling .ip4 2021-10-14 17:10:11 +02:00
de4b674091 nixos-module/defaults: fix syntax 2021-10-14 17:08:09 +02:00
bd5ee9e7cd nixos-module/defaults: add journalbeat for central logging 2021-10-14 17:06:39 +02:00
8b6c7578e8 nixos-module/container/upstream: remove a lot of stuff by using loopbackIPs for forwarded ports 2021-09-06 23:41:45 +02:00
48cbaf5f08 nixos-module/container/upstream: fix SNAT for forwarded ports 2021-09-06 23:19:08 +02:00
501f96a225 nixos-module/container/upstream: specify externalIP to use SNAT instead of MASQUERADE 2021-09-06 23:17:46 +02:00
1b4f761de8 nixos-module/container/upstream: fix SNAT by adding a staticIpv4Address option 2021-09-06 22:58:52 +02:00
fd4c8ad65b nixos-module/container/upstream: do SNAT for forwarded ports 2021-09-06 22:11:39 +02:00
1d94fb4094 nixos-module/server/defaults: install ipmitool 2021-08-25 17:01:30 +02:00
5a012418dc nixos-module/server/defaults: enable IPMI monitoring with collectd from nixpkgs-master 2021-08-25 16:48:04 +02:00
ee2db449fd nixos-module/server: unify server1 and server2 2021-08-21 00:04:28 +02:00
6166d1ee3b nixos-module/server/server1: init 2021-08-20 23:49:04 +02:00
30aa03f07f nixos-module/server/lxc-containers: make container startup conditional
preparing for cold failover
2021-08-20 21:39:00 +02:00
cf3d9b4891 config: don't use location to select server for lxc containers 2021-08-20 21:37:43 +02:00
dbca546593 nixos-module/server/lxc-containers: sysctl only when enabled 2021-07-14 19:01:24 +02:00
0cee77c2b4 nixos-module/container/dhcp-server: fix 2021-06-18 21:41:03 +02:00
7253ae6b17 nixos-module/container/dhcp-server: fix 2021-06-18 21:39:35 +02:00
13334f087c netboot: support efi netboot 2021-06-18 21:31:17 +02:00
0e07293692 nixos-module/container/netboot: switch from xinetd to atftpd 2021-06-18 20:45:52 +02:00
250089b22f nixos-module/server/lxc-containers: bump kernel limits 2021-06-18 20:20:04 +02:00
6b679e1b22 nixos-module/container/dhcp-server: fix next-server option 2021-06-18 20:13:07 +02:00
7d7c89ddb1 server2: disable vga modesetting 2021-06-18 20:09:22 +02:00
a85c25b0e2 server2: openssh.permitRootLogin=prohibit-password 2021-06-18 19:59:09 +02:00
7c0205f47e netboot: init 2021-06-18 19:56:49 +02:00
efe6bf342a nixos-module/*/network: enable LLDP 2021-06-14 22:00:06 +02:00
ff6933fa1a nixos-module/network: disable IPv6AcceptRA by default 2021-06-14 21:56:58 +02:00
58047f565e nixos-module/server/lxc-containers: check and shorten ifnames more 2021-06-09 21:37:21 +02:00
e192781d2a nixos-module/defaults: enable unstable zfs 2021-06-09 18:43:40 +02:00
ee0c996ddc nix/lib/dns: update to up4 ipv6 addrs 2021-06-02 20:07:56 +02:00
45174545f2 nixos-module/container/bird: disable radvd in c3d2-gw{1,2} 2021-06-02 20:02:31 +02:00
aba5796a57 IPv6 renumbering 2021-06-02 19:56:24 +02:00
9c485db8c3 partially revert ec5bed6
speedtest-cli is already installed by ../defaults.nix
2021-06-01 19:28:42 +02:00
Daniel Poelzleithner
ec5bed6e65 Add more packages, speedtest-cli on upstreams 2021-05-31 13:44:28 +02:00
8b2d329067 nixos-module/container/bird: fix syntax 2021-05-31 01:03:51 +02:00
ac4b28f1e3 nixos-module/server/server2: modprobe pppoe 2021-05-31 00:51:14 +02:00
bd795b270a nixos-module/container/upstream/pppoe: init 2021-05-31 00:41:38 +02:00
b87b73d358 nixos-module/server/lxc-containers: update permissions 2021-05-31 00:40:19 +02:00
24b36568ca options: add physicalInterfaces 2021-05-31 00:06:56 +02:00
280292b631 nixos-module/container/bird: enable radvd for c3d2-gw* 2021-05-28 16:49:36 +02:00
762a9df69c nixos-module/collectd: add execUser workaround 2021-05-28 02:02:21 +02:00
9e16a4284f nixos-module/collectd/default: fix user 2021-05-27 03:47:14 +02:00
4f42b64b18 nixos-module/collectd/default: fix user 2021-05-27 03:41:22 +02:00
31334c4149 nixos-module/collectd/default: rm TODO 2021-05-27 03:40:56 +02:00
92f3be552d nixos-module/collectd/default: restore ping plugin 2021-05-27 03:25:45 +02:00
74dc00961b nixos-module/container/bird: enable authentication for OSPFv3 2021-05-27 02:14:26 +02:00
97bd7bc7d5 nixos-module/server/lxc-containers: revert lxc to 4.0.6 2021-05-27 01:54:54 +02:00
5267e4ab32 nixos-module/container/anon: fix wireguard network 2021-05-27 00:19:04 +02:00
51df2155de dnscache: update unbound settings for nixos-21.05 2021-05-26 23:32:11 +02:00
ef371b32c4 nixos-module/collectd: add starlink-stats 2021-05-23 23:16:28 +02:00
e6ba05d34c nixos-module/defaults: install speedtest-cli 2021-05-23 22:45:07 +02:00
cfb062063a nixos-module/container/upstream: fix DHCP for upstream3, upstream4 2021-05-22 01:19:16 +02:00
33a4e65f69 nixos-module/container/upstream: catch failures 2021-05-14 18:56:38 +02:00
b23b687dfb nixos-module/container/upstream: add proper networking.nat.extraStopCommands 2021-05-14 18:37:45 +02:00
5d97e85bf6 nixos-module/container/dns: add ns.spaceboyz.net over dn42 to slaves 2021-05-07 17:38:23 +02:00
90c9c9dd13 nixos-module/container/dns: set notify-source for zone xfer 2021-05-06 18:00:47 +02:00
27571cff72 nixos-module/container/dns, pkgs/dns-slaves: add explicit addresses for zone xfers 2021-05-06 17:52:49 +02:00