summaryrefslogtreecommitdiff
AgeCommit message (Collapse)Author
2026-09-07Move AT PDS to Bunny DNS away from CloudflareMel
Signed-off-by: Mel <mel@rnrd.eu>
2026-09-07Set 'vm.mmap_rnd_bits' to 18 for LapinMel
Signed-off-by: Mel <mel@rnrd.eu>
2026-09-06Update ddnnssMel
Signed-off-by: Mel <mel@rnrd.eu>
2026-09-06Disable CNAME support in Lego challenge for rnrd.euMel
Signed-off-by: Mel <mel@rnrd.eu>
2026-09-06Shallow-ify my own flake inputs due to cgit dumb-HTTPMel
Signed-off-by: Mel <mel@rnrd.eu>
2026-09-06Move modded Minecraft to CurseForge from Modrinth due to upstream issueMel
Signed-off-by: Mel <mel@rnrd.eu>
2026-09-06Pin Modrinth `s_lib` dependency for modded Minecraft serverMel
Signed-off-by: Mel <mel@rnrd.eu>
2026-09-06Add modded Minecraft server (Prominence II)Mel
Signed-off-by: Mel <mel@rnrd.eu>
2026-09-06Use bunny.net for certificates and edge address unwrappingMel
Signed-off-by: Mel <mel@rnrd.eu>
2026-09-06Use my own DDNS service 'ddnnss' instead of deprecated ddclientMel
Signed-off-by: Mel <mel@rnrd.eu>
2026-09-05Move out Renard configuration as RenneMel
Signed-off-by: Mel <mel@rnrd.eu>
2026-09-05Add Mentha key removing the old Anise keyMel
Signed-off-by: Mel <mel@rnrd.eu>
2026-08-22Disable IPv6 privacy extensions on corsacMel
Signed-off-by: Mel <mel@rnrd.eu>
2026-07-18Replace deprecated 'max_accel_to_decel' printer optionMel
Signed-off-by: Mel <mel@rnrd.eu>
2026-07-18Add support for fourmi display via custom DRM kernel driver flakeMel
Signed-off-by: Mel <mel@rnrd.eu>
2026-07-06Disable nix-optimise on Fourmi due to extreme loadMel
Signed-off-by: Mel <mel@rnrd.eu>
2026-07-05Update hermes-agent flake inputMel
Signed-off-by: Mel <mel@rnrd.eu>
2026-06-17Fix nx script 'builders' argument escapeMel
Signed-off-by: Mel <mel@rnrd.eu>
2026-06-17Make VPN+Tunnel firewall chains work correctly when used in tandemMel
Signed-off-by: Mel <mel@rnrd.eu>
2026-06-16Add agent identity on accessible fleetMel
Signed-off-by: Mel <mel@rnrd.eu>
2026-06-16Extract renard agent configuration into a foundation module, allowing other ↵Mel
hosts to have it's user Signed-off-by: Mel <mel@rnrd.eu>
2026-06-16Add tools, user to agent, clean-up flake inputMel
Signed-off-by: Mel <mel@rnrd.eu>
2026-06-14Add a SOUL to the Renard agentMel
Signed-off-by: Mel <mel@rnrd.eu>
2026-06-14Run Renard agent in Hermes harnessMel
Signed-off-by: Mel <mel@rnrd.eu>
2026-06-13Sanitize Grafana+Victoria version tagsMel
Signed-off-by: Mel <mel@rnrd.eu>
2026-06-13Update flakeMel
Signed-off-by: Mel <mel@rnrd.eu>
2026-05-17Add Claude CodeMel
Signed-off-by: Mel <mel@rnrd.eu>
2026-05-17Mitigate recent kernel exploits with kernel upgrade and blacklistingMel
Signed-off-by: Mel <mel@rnrd.eu>
2026-05-02Change Xray + Nginx ordering, hide Xray behind Nginx streamingMel
Signed-off-by: Mel <mel@rnrd.eu>
2026-05-01Add real domain to Xray server names to enable fallbacksMel
Signed-off-by: Mel <mel@rnrd.eu>
2026-05-01Use egress destination domains in ingress instead of their namesMel
Signed-off-by: Mel <mel@rnrd.eu>
2026-05-01Don't set real_ip headers for Cloudflare on Tunnel egress hostsMel
Signed-off-by: Mel <mel@rnrd.eu>
2026-05-01Add Docker 29 for nftables, clean-up daemon optionsMel
Signed-off-by: Mel <mel@rnrd.eu>
2026-05-01Re-encrypt VPN & tunnel WireGuard private keyMel
Signed-off-by: Mel <mel@rnrd.eu>
2026-05-01Add Tunnel egress Xray fallback to re-enable all web & Nginx functionalityMel
Signed-off-by: Mel <mel@rnrd.eu>
2026-05-01Re-add simple VPN and simplify module with shared users with tunnelMel
Signed-off-by: Mel <mel@rnrd.eu>
2026-04-25Downgrade fedifetcher from unstable to stable, due to package removalMel
Signed-off-by: Mel <mel@rnrd.eu>
2026-04-25Update flakeMel
Signed-off-by: Mel <mel@rnrd.eu>
2026-04-24Migrate fully to systemd-networkd and nftablesMel
Signed-off-by: Mel <mel@rnrd.eu>
2026-04-24Remove generic foundation WireGuard server module, currently replaced by the ↵Mel
tunnel and not required Signed-off-by: Mel <mel@rnrd.eu>
2026-04-24Fix warning about read-only pkgs inputMel
Signed-off-by: Mel <mel@rnrd.eu>
2026-04-24Force disable Nginx on tunnel egress nodesMel
Signed-off-by: Mel <mel@rnrd.eu>
2026-04-24Set MTU on all tunnel interfaces on ingress nodeMel
Signed-off-by: Mel <mel@rnrd.eu>
2026-04-24Add nftables, iptables, and wireguard-toolsMel
Signed-off-by: Mel <mel@rnrd.eu>
2026-04-24Give the VPN its final name 'Tunnel'Mel
Signed-off-by: Mel <mel@rnrd.eu>
2026-04-24Add the ingress node public key to VPN definition as additional informationMel
Signed-off-by: Mel <mel@rnrd.eu>
2026-04-23Add new VPN user 'Fedor'Mel
Signed-off-by: Mel <mel@rnrd.eu>
2026-04-23Use sing-box gVisor stack for routing instead of system, fixing VPN TCPMel
Signed-off-by: Mel <mel@rnrd.eu>
2026-04-23Don't shatter VPN ingress packets on local transmission between interfacesMel
Signed-off-by: Mel <mel@rnrd.eu>
2026-04-23Define VPN egress & ingress default MTUs, routes, reverse paths, ...Mel
Signed-off-by: Mel <mel@rnrd.eu>
generated by cgit v1.3.1 (git 2.54.0) at 2026-10-18 17:38:08 +0000