| Age | Commit message (Collapse) | Author | |
|---|---|---|---|
| 7 days | Address deprecations in 26.05HEADmain | Mel | |
| Signed-off-by: Mel <mel@rnrd.eu> | |||
| 7 days | Update to NixOS 26.05 | Mel | |
| Signed-off-by: Mel <mel@rnrd.eu> | |||
| 7 days | Change renard tailnet IP | Mel | |
| Signed-off-by: Mel <mel@rnrd.eu> | |||
| 7 days | Re-structure renard for new host | Mel | |
| Signed-off-by: Mel <mel@rnrd.eu> | |||
| 7 days | Re-encrypt secrets for Renne & Renard migration | Mel | |
| Signed-off-by: Mel <mel@rnrd.eu> | |||
| 2026-09-07 | Move AT PDS to Bunny DNS away from Cloudflare | Mel | |
| Signed-off-by: Mel <mel@rnrd.eu> | |||
| 2026-09-07 | Set 'vm.mmap_rnd_bits' to 18 for Lapin | Mel | |
| Signed-off-by: Mel <mel@rnrd.eu> | |||
| 2026-09-06 | Update ddnnss | Mel | |
| Signed-off-by: Mel <mel@rnrd.eu> | |||
| 2026-09-06 | Disable CNAME support in Lego challenge for rnrd.eu | Mel | |
| Signed-off-by: Mel <mel@rnrd.eu> | |||
| 2026-09-06 | Shallow-ify my own flake inputs due to cgit dumb-HTTP | Mel | |
| Signed-off-by: Mel <mel@rnrd.eu> | |||
| 2026-09-06 | Move modded Minecraft to CurseForge from Modrinth due to upstream issue | Mel | |
| Signed-off-by: Mel <mel@rnrd.eu> | |||
| 2026-09-06 | Pin Modrinth `s_lib` dependency for modded Minecraft server | Mel | |
| Signed-off-by: Mel <mel@rnrd.eu> | |||
| 2026-09-06 | Add modded Minecraft server (Prominence II) | Mel | |
| Signed-off-by: Mel <mel@rnrd.eu> | |||
| 2026-09-06 | Use bunny.net for certificates and edge address unwrapping | Mel | |
| Signed-off-by: Mel <mel@rnrd.eu> | |||
| 2026-09-06 | Use my own DDNS service 'ddnnss' instead of deprecated ddclient | Mel | |
| Signed-off-by: Mel <mel@rnrd.eu> | |||
| 2026-09-05 | Move out Renard configuration as Renne | Mel | |
| Signed-off-by: Mel <mel@rnrd.eu> | |||
| 2026-09-05 | Add Mentha key removing the old Anise key | Mel | |
| Signed-off-by: Mel <mel@rnrd.eu> | |||
| 2026-08-22 | Disable IPv6 privacy extensions on corsac | Mel | |
| Signed-off-by: Mel <mel@rnrd.eu> | |||
| 2026-07-18 | Replace deprecated 'max_accel_to_decel' printer option | Mel | |
| Signed-off-by: Mel <mel@rnrd.eu> | |||
| 2026-07-18 | Add support for fourmi display via custom DRM kernel driver flake | Mel | |
| Signed-off-by: Mel <mel@rnrd.eu> | |||
| 2026-07-06 | Disable nix-optimise on Fourmi due to extreme load | Mel | |
| Signed-off-by: Mel <mel@rnrd.eu> | |||
| 2026-07-05 | Update hermes-agent flake input | Mel | |
| Signed-off-by: Mel <mel@rnrd.eu> | |||
| 2026-06-17 | Fix nx script 'builders' argument escape | Mel | |
| Signed-off-by: Mel <mel@rnrd.eu> | |||
| 2026-06-17 | Make VPN+Tunnel firewall chains work correctly when used in tandem | Mel | |
| Signed-off-by: Mel <mel@rnrd.eu> | |||
| 2026-06-16 | Add agent identity on accessible fleet | Mel | |
| Signed-off-by: Mel <mel@rnrd.eu> | |||
| 2026-06-16 | Extract renard agent configuration into a foundation module, allowing other ↵ | Mel | |
| hosts to have it's user Signed-off-by: Mel <mel@rnrd.eu> | |||
| 2026-06-16 | Add tools, user to agent, clean-up flake input | Mel | |
| Signed-off-by: Mel <mel@rnrd.eu> | |||
| 2026-06-14 | Add a SOUL to the Renard agent | Mel | |
| Signed-off-by: Mel <mel@rnrd.eu> | |||
| 2026-06-14 | Run Renard agent in Hermes harness | Mel | |
| Signed-off-by: Mel <mel@rnrd.eu> | |||
| 2026-06-13 | Sanitize Grafana+Victoria version tags | Mel | |
| Signed-off-by: Mel <mel@rnrd.eu> | |||
| 2026-06-13 | Update flake | Mel | |
| Signed-off-by: Mel <mel@rnrd.eu> | |||
| 2026-05-17 | Add Claude Code | Mel | |
| Signed-off-by: Mel <mel@rnrd.eu> | |||
| 2026-05-17 | Mitigate recent kernel exploits with kernel upgrade and blacklisting | Mel | |
| Signed-off-by: Mel <mel@rnrd.eu> | |||
| 2026-05-02 | Change Xray + Nginx ordering, hide Xray behind Nginx streaming | Mel | |
| Signed-off-by: Mel <mel@rnrd.eu> | |||
| 2026-05-01 | Add real domain to Xray server names to enable fallbacks | Mel | |
| Signed-off-by: Mel <mel@rnrd.eu> | |||
| 2026-05-01 | Use egress destination domains in ingress instead of their names | Mel | |
| Signed-off-by: Mel <mel@rnrd.eu> | |||
| 2026-05-01 | Don't set real_ip headers for Cloudflare on Tunnel egress hosts | Mel | |
| Signed-off-by: Mel <mel@rnrd.eu> | |||
| 2026-05-01 | Add Docker 29 for nftables, clean-up daemon options | Mel | |
| Signed-off-by: Mel <mel@rnrd.eu> | |||
| 2026-05-01 | Re-encrypt VPN & tunnel WireGuard private key | Mel | |
| Signed-off-by: Mel <mel@rnrd.eu> | |||
| 2026-05-01 | Add Tunnel egress Xray fallback to re-enable all web & Nginx functionality | Mel | |
| Signed-off-by: Mel <mel@rnrd.eu> | |||
| 2026-05-01 | Re-add simple VPN and simplify module with shared users with tunnel | Mel | |
| Signed-off-by: Mel <mel@rnrd.eu> | |||
| 2026-04-25 | Downgrade fedifetcher from unstable to stable, due to package removal | Mel | |
| Signed-off-by: Mel <mel@rnrd.eu> | |||
| 2026-04-25 | Update flake | Mel | |
| Signed-off-by: Mel <mel@rnrd.eu> | |||
| 2026-04-24 | Migrate fully to systemd-networkd and nftables | Mel | |
| Signed-off-by: Mel <mel@rnrd.eu> | |||
| 2026-04-24 | Remove generic foundation WireGuard server module, currently replaced by the ↵ | Mel | |
| tunnel and not required Signed-off-by: Mel <mel@rnrd.eu> | |||
| 2026-04-24 | Fix warning about read-only pkgs input | Mel | |
| Signed-off-by: Mel <mel@rnrd.eu> | |||
| 2026-04-24 | Force disable Nginx on tunnel egress nodes | Mel | |
| Signed-off-by: Mel <mel@rnrd.eu> | |||
| 2026-04-24 | Set MTU on all tunnel interfaces on ingress node | Mel | |
| Signed-off-by: Mel <mel@rnrd.eu> | |||
| 2026-04-24 | Add nftables, iptables, and wireguard-tools | Mel | |
| Signed-off-by: Mel <mel@rnrd.eu> | |||
| 2026-04-24 | Give the VPN its final name 'Tunnel' | Mel | |
| Signed-off-by: Mel <mel@rnrd.eu> | |||
