summary refs log tree commit diff
path: root/modules
AgeCommit message (Collapse)Author
2026-06-16Add agent identity on accessible fleetMel
Signed-off-by: Mel <mel@rnrd.eu>
2026-06-16Extract renard agent configuration into a foundation module, allowing other ↵Mel
hosts to have it's user Signed-off-by: Mel <mel@rnrd.eu>
2026-06-16Add tools, user to agent, clean-up flake inputMel
Signed-off-by: Mel <mel@rnrd.eu>
2026-06-14Add a SOUL to the Renard agentMel
Signed-off-by: Mel <mel@rnrd.eu>
2026-06-14Run Renard agent in Hermes harnessMel
Signed-off-by: Mel <mel@rnrd.eu>
2026-05-17Add Claude CodeMel
Signed-off-by: Mel <mel@rnrd.eu>
2026-05-17Mitigate recent kernel exploits with kernel upgrade and blacklistingMel
Signed-off-by: Mel <mel@rnrd.eu>
2026-05-02Change Xray + Nginx ordering, hide Xray behind Nginx streamingMel
Signed-off-by: Mel <mel@rnrd.eu>
2026-05-01Add real domain to Xray server names to enable fallbacksMel
Signed-off-by: Mel <mel@rnrd.eu>
2026-05-01Use egress destination domains in ingress instead of their namesMel
Signed-off-by: Mel <mel@rnrd.eu>
2026-05-01Don't set real_ip headers for Cloudflare on Tunnel egress hostsMel
Signed-off-by: Mel <mel@rnrd.eu>
2026-05-01Add Docker 29 for nftables, clean-up daemon optionsMel
Signed-off-by: Mel <mel@rnrd.eu>
2026-05-01Add Tunnel egress Xray fallback to re-enable all web & Nginx functionalityMel
Signed-off-by: Mel <mel@rnrd.eu>
2026-05-01Re-add simple VPN and simplify module with shared users with tunnelMel
Signed-off-by: Mel <mel@rnrd.eu>
2026-04-24Migrate fully to systemd-networkd and nftablesMel
Signed-off-by: Mel <mel@rnrd.eu>
2026-04-24Remove generic foundation WireGuard server module, currently replaced by the ↵Mel
tunnel and not required Signed-off-by: Mel <mel@rnrd.eu>
2026-04-24Force disable Nginx on tunnel egress nodesMel
Signed-off-by: Mel <mel@rnrd.eu>
2026-04-24Set MTU on all tunnel interfaces on ingress nodeMel
Signed-off-by: Mel <mel@rnrd.eu>
2026-04-24Add nftables, iptables, and wireguard-toolsMel
Signed-off-by: Mel <mel@rnrd.eu>
2026-04-24Give the VPN its final name 'Tunnel'Mel
Signed-off-by: Mel <mel@rnrd.eu>
2026-04-24Add the ingress node public key to VPN definition as additional informationMel
Signed-off-by: Mel <mel@rnrd.eu>
2026-04-23Add new VPN user 'Fedor'Mel
Signed-off-by: Mel <mel@rnrd.eu>
2026-04-23Use sing-box gVisor stack for routing instead of system, fixing VPN TCPMel
Signed-off-by: Mel <mel@rnrd.eu>
2026-04-23Don't shatter VPN ingress packets on local transmission between interfacesMel
Signed-off-by: Mel <mel@rnrd.eu>
2026-04-23Define VPN egress & ingress default MTUs, routes, reverse paths, ...Mel
Signed-off-by: Mel <mel@rnrd.eu>
2026-04-22Extend Xray config generation serviceMel
Signed-off-by: Mel <mel@rnrd.eu>
2026-04-22Let systemd-networkd handle VPN egress interface on ingress machineMel
Signed-off-by: Mel <mel@rnrd.eu>
2026-04-22Fix VPN ingress private key file permissionsMel
Signed-off-by: Mel <mel@rnrd.eu>
2026-04-22Update sing-box deprecated seperate IPv4 TUN settings keyMel
Signed-off-by: Mel <mel@rnrd.eu>
2026-04-22Remove deprecated network config keys in VPN moduleMel
Signed-off-by: Mel <mel@rnrd.eu>
2026-03-31VLESS/Reality VPN configuration for DPI evasionMel
Signed-off-by: Mel <mel@rnrd.eu>
2026-02-17Fix ACME Tailnet certificate service override namingMel
Signed-off-by: Mel <mel@rnrd.eu>
2026-02-14Move over deprecated option paths to new paths for 25.11Mel
Signed-off-by: Mel <mel@rnrd.eu>
2026-02-14Remove options deleted in 25.11Mel
Signed-off-by: Mel <mel@rnrd.eu>
2026-01-16Nix/NixOS shortcut script `nx`Mel
Signed-off-by: Mel <mel@rnrd.eu>
2025-10-04Factor out common public VPN peers to own moduleMel
Signed-off-by: Mel <mel@rnrd.eu>
2025-10-03Make IPv6 forwarding sysctl options in service network configuration 'default'Mel
Signed-off-by: Mel <mel@rnrd.eu>
2025-09-15Add dmidecodeMel
Signed-off-by: Mel <mel@rnrd.eu>
2025-09-01Allow disabling IPv6 for foundation service networksMel
Signed-off-by: Mel <mel@rnrd.eu>
2025-08-31Make IPv6 custom docker foundation networks work with various ip6tables ↵Mel
rules... Phew... Signed-off-by: Mel <mel@rnrd.eu>
2025-08-31Define gateway for foundation docker networksMel
Signed-off-by: Mel <mel@rnrd.eu>
2025-08-31Add MTU option to foundation service network optionsMel
Signed-off-by: Mel <mel@rnrd.eu>
2025-08-31Clean up & integrate service network configuration into foundation moduleMel
Signed-off-by: Mel <mel@rnrd.eu>
2025-08-27Move WireGuard server peer definitions to configuration optionMel
Signed-off-by: Mel <mel@rnrd.eu>
2025-08-22Grab real remote IP through Cloudflare proxyMel
Signed-off-by: Mel <mel@rnrd.eu>
2025-08-22Add goatcounter tracker script to base renard HTMLMel
Signed-off-by: Mel <mel@rnrd.eu>
2025-08-08Update deprecated Klipper configuration options for 25.05Mel
Signed-off-by: Mel <mel@rnrd.eu>
2025-07-27Configure zibeline WireGuard VPN serverMel
Signed-off-by: Mel <mel@rnrd.eu>
2025-07-16Add WireGuard VPN configuration for taupeMel
Signed-off-by: Mel <mel@rnrd.eu>
2025-07-13Re-enable preliminary self-signed certificatesMel
Signed-off-by: Mel <mel@rnrd.eu>
generated by cgit-pink 1.4.1 (git 2.36.1) at 2026-07-21 23:27:12 +0000