| Age | Commit message (Collapse) | Author | |
|---|---|---|---|
| 2024-12-31 | Allow port 23 through firewall HEAD step-4 main | Mel | |
| Signed-off-by: Mel <einebeere@gmail.com> | |||
| 2024-12-31 | Add br_netfilter kernel module for Incus bridge | Mel | |
| Signed-off-by: Mel <einebeere@gmail.com> | |||
| 2024-12-31 | Add proxy device to VM for port forwarding SSH | Mel | |
| Signed-off-by: Mel <einebeere@gmail.com> | |||
| 2024-12-31 | Split default profile into a second, more specialized one | Mel | |
| Signed-off-by: Mel <einebeere@gmail.com> | |||
| 2024-12-31 | Install and enable sshd in Incus VMs | Mel | |
| Signed-off-by: Mel <einebeere@gmail.com> | |||
| 2024-12-31 | Add incus bridge to trusted interfaces | Mel | |
| Signed-off-by: Mel <einebeere@gmail.com> | |||
| 2024-12-31 | Make IPv6 gateway on-link | Mel | |
| Signed-off-by: Mel <einebeere@gmail.com> | |||
| 2024-12-30 | Add proper header to cloud-init in Incus preseed | Mel | |
| Signed-off-by: Mel <einebeere@gmail.com> | |||
| 2024-12-30 | Do not lock password for users in Incus VM | Mel | |
| Signed-off-by: Mel <einebeere@gmail.com> | |||
| 2024-12-30 | Add Incus patch to repair compatibility with QEMU 9.1.2 | Mel | |
| Signed-off-by: Mel <einebeere@gmail.com> | |||
| 2024-12-30 | Remove deprecated `grub.version` option | Mel | |
| Signed-off-by: Mel <einebeere@gmail.com> | |||
| 2024-12-30 | Use DHCP for IPv4 configuration, like OVH wants | Mel | |
| Signed-off-by: Mel <einebeere@gmail.com> | |||
| 2024-12-30 | Update server host key and rekey secret | Mel | |
| Signed-off-by: Mel <einebeere@gmail.com> | |||
| 2024-12-30 | Move server from Hetzner to OVH | Mel | |
| Signed-off-by: Mel <einebeere@gmail.com> | |||
| 2024-12-30 | Pass cloud-init preseed in a YAML string | Mel | |
| Signed-off-by: Mel <einebeere@gmail.com> | |||
| 2024-12-30 | Add initial LXC Incus configuration, with cloud-init preseed | Mel | |
| Signed-off-by: Mel <einebeere@gmail.com> | |||
| 2024-12-30 | Enable nftables as preparation for LXC Incus | Mel | |
| Signed-off-by: Mel <einebeere@gmail.com> | |||
| 2024-12-30 | Allow user public keys for SSH login | Mel | |
| Signed-off-by: Mel <einebeere@gmail.com> | |||
| 2024-12-30 | Move user passwords and keys out for easier reuse | Mel | |
| Signed-off-by: Mel <einebeere@gmail.com> | |||
| 2024-12-30 | Move secrets folder into configuration | Mel | |
| Signed-off-by: Mel <einebeere@gmail.com> | |||
| 2024-12-29 | Reload on name secret change step-3 | Mel | |
| Signed-off-by: Mel <einebeere@gmail.com> | |||
| 2024-12-29 | Create system user for specimen service, and allow it to read name secret | Mel | |
| Signed-off-by: Mel <einebeere@gmail.com> | |||
| 2024-12-29 | Use name secret in specimen application | Mel | |
| Signed-off-by: Mel <einebeere@gmail.com> | |||
| 2024-12-29 | Add name secret | Mel | |
| Signed-off-by: Mel <einebeere@gmail.com> | |||
| 2024-12-29 | Add secrets directory and list all keys | Mel | |
| Signed-off-by: Mel <einebeere@gmail.com> | |||
| 2024-12-29 | Forced to add IPv4, because to this day GitHub still does not support ↵ | Mel | |
| IPv6-only hosts!! :( Signed-off-by: Mel <einebeere@gmail.com> | |||
| 2024-12-29 | Add agenix module and package | Mel | |
| Signed-off-by: Mel <einebeere@gmail.com> | |||
| 2024-12-29 | Disable root login, lsit permitted SSH users | Mel | |
| Signed-off-by: Mel <einebeere@gmail.com> | |||
| 2024-12-29 | Add philip as user on server, force hashed passwords | Mel | |
| Signed-off-by: Mel <einebeere@gmail.com> | |||
| 2024-12-29 | Add overkill hardening to specimen systemd service step-2 | Mel | |
| Signed-off-by: Mel <einebeere@gmail.com> | |||
| 2024-12-29 | Run flake through nixfmt | Mel | |
| Signed-off-by: Mel <einebeere@gmail.com> | |||
| 2024-12-29 | Remove unnecessary debug logging from application | Mel | |
| Signed-off-by: Mel <einebeere@gmail.com> | |||
| 2024-12-29 | Pass default specimen package to module through flake self input | Mel | |
| Signed-off-by: Mel <einebeere@gmail.com> | |||
| 2024-12-29 | Stringify port for service exec, and pass through list to firewall | Mel | |
| Signed-off-by: Mel <einebeere@gmail.com> | |||
| 2024-12-29 | Correct service targets in specimen module | Mel | |
| Signed-off-by: Mel <einebeere@gmail.com> | |||
| 2024-12-29 | Enable specimen module on server | Mel | |
| Signed-off-by: Mel <einebeere@gmail.com> | |||
| 2024-12-29 | Enable flakes on NixOS server | Mel | |
| Signed-off-by: Mel <einebeere@gmail.com> | |||
| 2024-12-29 | Add git to server utilities | Mel | |
| Signed-off-by: Mel <einebeere@gmail.com> | |||
| 2024-12-29 | Generated system configuration from Hetzner server | Mel | |
| Signed-off-by: Mel <einebeere@gmail.com> | |||
| 2024-12-29 | Add first iteration of NixOS specimen service module | Mel | |
| Signed-off-by: Mel <einebeere@gmail.com> | |||
| 2024-12-29 | Fix up empty NixOS configuration in flake | Mel | |
| Signed-off-by: Mel <einebeere@gmail.com> | |||
| 2024-12-29 | Read configuration from flags and reply with configured name step-1 | Mel | |
| Signed-off-by: Mel <einebeere@gmail.com> | |||
| 2024-12-29 | Simple Go HTTP server with graceful signal handling | Mel | |
| Signed-off-by: Mel <einebeere@gmail.com> | |||
| 2024-12-29 | Add Taskfile for some useful command shortcuts | Mel | |
| Signed-off-by: Mel <einebeere@gmail.com> | |||
| 2024-12-29 | Break up basic go application into my preferred file hierarchy | Mel | |
| Signed-off-by: Mel <einebeere@gmail.com> | |||
| 2024-12-29 | Add .gitignore | Mel | |
| Signed-off-by: Mel <einebeere@gmail.com> | |||
| 2024-12-29 | Add direnv | Mel | |
| Signed-off-by: Mel <einebeere@gmail.com> | |||
| 2024-12-29 | Add dev shell with some useful tools to flake | Mel | |
| Signed-off-by: Mel <einebeere@gmail.com> | |||
| 2024-12-29 | Flake harness for application and server configuration | Mel | |
| Signed-off-by: Mel <einebeere@gmail.com> | |||
 |
index : specimen | |
| created as a practical coding test! |
| about summary refs log tree commit diff |