B4L/cnx-network-clan
5
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Commit Graph

  • 8171207e9c mob next [ci-skip] [ci skip] [skip ci] mob/clanService-router kurogeek 2026-08-05 11:31:09 +07:00
  • 53c03af2a0 mob next [ci-skip] [ci skip] [skip ci] kurogeek 2026-08-05 10:57:28 +07:00
  • 1a56a2d24b mob next [ci-skip] [ci skip] [skip ci] kurogeek 2026-08-05 10:21:39 +07:00
  • e316ec56ce flake: use flake-parts main clanService-router kurogeek 2026-08-05 10:19:32 +07:00
  • 559115e52b inventory.json: update install time of gw-cnx-1 kurogeek 2026-07-31 17:37:47 +07:00
  • 9cfcf91b51 inventory.json: update install time of gw-cnx-1 kurogeek 2026-07-31 16:08:14 +07:00
  • 570fe64497 inventory.json: update install time of gw-cnx-1 kurogeek 2026-07-31 15:09:07 +07:00
  • 2ac4215237 inventory.json: update install time of gw-cnx-1 kurogeek 2026-07-31 13:03:43 +07:00
  • d51a334ec6 inventory.json: update install time of gw-cnx-1 kurogeek 2026-07-31 10:21:52 +07:00
  • b81c0aaa89 machines/gw-cnx-1/facter.json: update hardware configuration kurogeek 2026-07-31 10:21:52 +07:00
  • fcd8e55024 Add untagged access ports and a staging uplink for gw-cnx-1 Berwn 2026-07-31 12:57:34 +07:00
  • 19e1acda51 Renumber gw-cnx-1 to the fleet addressing scheme (OPNsense replacement) Berwn 2026-07-31 11:39:54 +07:00
  • f5b6b4b55e Serve newedge.house from the fleet nameservers Berwn 2026-07-31 11:39:54 +07:00
  • 3646d43ac5 Add CNX WAN Speed dashboard for the gateway speed tests Berwn 2026-07-31 11:03:31 +07:00
  • d8d4a686eb Add gateway diagnostics: iperf3, CLI toolkit, periodic WAN speed test Berwn 2026-07-31 10:44:52 +07:00
  • b11ff75ca6 Add internal reverse proxy for gateways (Caddy, wildcard via DNS-01) Berwn 2026-07-31 10:09:04 +07:00
  • 4735968433 vars: update via generator dns-acme-gw-cnx-1-knot (machine: ns1) Berwn 2026-07-31 10:07:42 +07:00
  • 02efeb454b vars: update via generator dns-acme-gw-cnx-1-rfc2136 (machine: gw-cnx-1) Berwn 2026-07-31 10:07:42 +07:00
  • 868cd9eebd vars: update via generator dns-acme-gw-cnx-1-secret (shared) Berwn 2026-07-31 10:07:39 +07:00
  • 99fdde666c secrets: add group admins to secret gw-cnx-1-age.key Berwn 2026-07-31 10:07:29 +07:00
  • 7b706eb3e7 secrets: add group admins to secret ns2-age.key Berwn 2026-07-31 10:07:24 +07:00
  • 6c89a7031a secrets: add group admins to secret ns1-age.key Berwn 2026-07-31 10:07:14 +07:00
  • 4ca5fd3afd secrets: add group admins to secret control-age.key Berwn 2026-07-31 10:07:07 +07:00
  • 7958ddd771 .gitignore kurogeek 2026-07-31 09:38:57 +07:00
  • 0c11aca91f machines/gw-cnx-1: disko update kurogeek 2026-07-31 09:38:07 +07:00
  • 292a699a2b clan.core.sops.defaultGroups to all machines kurogeek 2026-07-31 09:18:18 +07:00
  • 7d549a9c17 Migrate deprecated admin service to sshd + users Berwn 2026-07-28 17:17:56 +07:00
  • ac60d527ae vars: update via generator openssh-cert (machine: web01) Berwn 2026-07-28 17:15:55 +07:00
  • 3471faa466 vars: update via generator openssh-cert (machine: ns2) Berwn 2026-07-28 17:15:54 +07:00
  • db22afc6e3 vars: update via generator openssh-cert (machine: ns1) Berwn 2026-07-28 17:15:54 +07:00
  • 04d3518c03 vars: update via generator openssh-cert (machine: mx1) Berwn 2026-07-28 17:15:53 +07:00
  • 94daf06814 vars: update via generator openssh-cert (machine: gw-cnx-1) Berwn 2026-07-28 17:15:53 +07:00
  • 3093ed7044 vars: update via generator openssh-cert (machine: control) Berwn 2026-07-28 17:15:52 +07:00
  • c1fad33ad7 vars: update via generator user-password-root (machine: web01) Berwn 2026-07-28 17:15:47 +07:00
  • 60f6884f35 vars: update via generator user-password-root (machine: ns2) Berwn 2026-07-28 17:15:47 +07:00
  • d2b352543b vars: update via generator user-password-root (machine: ns1) Berwn 2026-07-28 17:15:46 +07:00
  • 7639d477c8 vars: update via generator user-password-root (machine: mx1) Berwn 2026-07-28 17:15:45 +07:00
  • 8327e4997a vars: update via generator user-password-root (machine: gw-cnx-1) Berwn 2026-07-28 17:15:44 +07:00
  • 060091247a vars: update via generator user-password-root (machine: control) Berwn 2026-07-28 17:15:43 +07:00
  • 9ccfbc3959 vars: update via generator openssh-ca (shared) Berwn 2026-07-28 17:15:43 +07:00
  • 4585fe7b7f Update flake inputs (clan-core 2026-07-08, nixos-mailserver, treefmt-nix) Berwn 2026-07-28 17:11:00 +07:00
  • 89eb50fcd7 vars: re-encrypt gw-cnx-1 emergency-access and openssh for admins group Berwn 2026-07-28 17:06:11 +07:00
  • 430c9996ae devshell: run multi-machine clan updates sequentially Berwn 2026-07-28 17:06:11 +07:00
  • 158252323f Add site gateway role (modules/router) and gw-cnx-1 Berwn 2026-07-28 17:06:07 +07:00
  • a87b579eb7 docs: add mail runbook page (mailbox and domain add procedures) Berwn 2026-07-28 17:06:07 +07:00
  • 7cd44d957c vars: update via generator pppoe-credentials (machine: gw-cnx-1) Berwn 2026-07-28 16:34:28 +07:00
  • dc2183a83a vars: update via generator pppoe-credentials (machine: gw-cnx-1) Berwn 2026-07-28 16:31:09 +07:00
  • b0aa12ac07 secrets: fix vars for gw-cnx-1 Berwn 2026-07-28 16:30:29 +07:00
  • 745b82a4ee secrets: fix vars for gw-cnx-1 Berwn 2026-07-28 16:30:16 +07:00
  • 88bbba0eae secrets: fix vars for gw-cnx-1 Berwn 2026-07-28 16:30:04 +07:00
  • 3f9559766f vars: update via generator zerotier-ip-gw-cnx-1-zerotier (shared) Berwn 2026-07-28 16:03:23 +07:00
  • d53a1e6524 vars: update via generator tor_tor (machine: gw-cnx-1) Berwn 2026-07-28 16:03:18 +07:00
  • b7317ea4ff vars: update via generator state-version (machine: gw-cnx-1) Berwn 2026-07-28 16:03:15 +07:00
  • 832dcb1af9 vars: update via generator root-password (machine: gw-cnx-1) Berwn 2026-07-28 16:03:15 +07:00
  • 41a2d22be0 vars: update via generator openssh (machine: gw-cnx-1) Berwn 2026-07-28 16:03:14 +07:00
  • 2fbdd8e2c0 vars: update via generator emergency-access (machine: gw-cnx-1) Berwn 2026-07-28 16:03:14 +07:00
  • 62b0b81d19 vars: update via generator zerotier-identity-gw-cnx-1 (shared) Berwn 2026-07-28 16:03:13 +07:00
  • 4fa491fd63 secrets: add machine gw-cnx-1 Berwn 2026-07-28 16:03:13 +07:00
  • b8622b3e93 secrets: update gw-cnx-1-age.key Berwn 2026-07-28 16:03:13 +07:00
  • 4bafc64b84 fix(monitoring): restore DMARC dashboard under Grafana 13 Berwn 2026-06-26 11:34:08 +07:00
  • 48fcc3058b Upgrade clan to 26.05 Berwn 2026-06-25 10:17:32 +07:00
  • 9bcc5ae2e3 vars: update via generator grafana-secret-key (machine: control) Berwn 2026-06-25 07:27:59 +07:00
  • 97a586df4d migrate: move zerotier vars to all-shared layout Berwn 2026-06-25 07:19:00 +07:00
  • d8bbf08c7a Add mx1 to secret vars/shared/mail-dmarc-cred/passphrase Berwn 2026-06-21 03:28:02 +07:00
  • e6036d9d1b Add mx1 to secret vars/shared/mail-dmarc-cred/hash Berwn 2026-06-21 03:28:01 +07:00
  • f7b64617b9 Update vars via generator mail-dmarc-cred for machine control Berwn 2026-06-21 03:27:56 +07:00
  • 60db8c60b0 Add parsedmarc DMARC report analyzer on control Berwn 2026-06-21 03:27:23 +07:00
  • b8bea27a9c Update runbook docs for web01 reverse proxy and per-host ACME keys Berwn 2026-06-21 03:17:51 +07:00
  • 415a050f6a Scrape web01 node_exporter into VictoriaMetrics Berwn 2026-06-21 03:08:56 +07:00
  • 3f3f4118c1 Use Singapore time (UTC+8) for mx1 and web01 Berwn 2026-06-21 03:07:57 +07:00
  • dfdeb84ab8 Set time.timeZone on mx1 and web01 Berwn 2026-06-21 03:07:31 +07:00
  • 48bf7fb250 Add web01 public reverse proxy with DNS-01 wildcard TLS Berwn 2026-06-21 03:05:54 +07:00
  • 86a2928825 update(inventory.json): Installed web01 Berwn 2026-06-21 02:28:43 +07:00
  • f6da01ba18 Add web01 to secret vars/shared/dns-acme-web01-secret/secret Berwn 2026-06-21 02:26:44 +07:00
  • eeed40bcb5 Update vars via generator dns-acme-web01-rfc2136 for machine web01 Berwn 2026-06-21 02:26:44 +07:00
  • aac8f9d8e6 Update vars via generator dns-acme-web01-knot for machine ns1 Berwn 2026-06-21 02:26:43 +07:00
  • f5874bc337 Update vars via generator zerotier for machine web01 Berwn 2026-06-21 02:26:33 +07:00
  • 2481d4bf92 Update vars via generator tor_tor for machine web01 Berwn 2026-06-21 02:26:32 +07:00
  • 2d8096ee57 Update vars via generator state-version for machine web01 Berwn 2026-06-21 02:26:30 +07:00
  • 1a4a749d78 Update vars via generator root-password for machine web01 Berwn 2026-06-21 02:26:30 +07:00
  • 1c779d8013 Update vars via generator openssh for machine web01 Berwn 2026-06-21 02:26:30 +07:00
  • 9c4e036b09 Update vars via generator emergency-access for machine web01 Berwn 2026-06-21 02:26:30 +07:00
  • 8139b91fbc Add machine web01 to secrets Berwn 2026-06-21 02:26:30 +07:00
  • c436389619 Update secret web01-age.key Berwn 2026-06-21 02:26:29 +07:00
  • 9fc97e65b2 Update vars via generator dns-acme-web01-secret for machine ns1 Berwn 2026-06-21 02:26:29 +07:00
  • bd84bf7c85 Set disk schema of machine: web01 to single-disk Berwn 2026-06-21 02:25:24 +07:00
  • 848dc0dff7 machines/web01/facter.json: update hardware configuration Berwn 2026-06-21 02:23:00 +07:00
  • 95aff44f86 Add machine web01 Berwn 2026-06-21 01:58:59 +07:00
  • f42569e992 Add provisioned Grafana uptime dashboard for all hosts Berwn 2026-06-21 01:57:08 +07:00
  • 1dd3aadb97 Add mail.cnx.email client alias as a cert SAN Berwn 2026-06-18 15:01:03 +07:00
  • dc21348727 Format drifted files to satisfy the treefmt flake-check gate Berwn 2026-06-18 14:49:48 +07:00
  • 1cb6f39ea2 Add declarative SNM mail stack on mx1 with DNS-01, DANE, MTA-STS Berwn 2026-06-18 14:47:20 +07:00
  • 026a26dd53 Add ns1 to secret vars/shared/dns-acme-mx1-secret/secret Berwn 2026-06-18 14:11:40 +07:00
  • 7e5d50b260 Update vars via generator dns-acme-mx1-knot for machine ns1 Berwn 2026-06-18 14:11:40 +07:00
  • 312de984c1 Update vars via generator dns-acme-rfc2136 for machine mx1 Berwn 2026-06-18 14:11:40 +07:00
  • d76aa8cc8d Update vars via generator mail-passwd-postmaster-at-cnx-email for machine mx1 Berwn 2026-06-18 14:11:36 +07:00
  • 0a78cad06e Update vars via generator dns-acme-mx1-secret for machine mx1 Berwn 2026-06-18 14:11:36 +07:00
  • d1b24017aa Use no-store for docs: epoch mtimes make revalidation serve stale Berwn 2026-06-18 12:24:38 +07:00
  • 77a18df257 Stop browsers serving stale docs by forcing revalidation Berwn 2026-06-18 12:19:42 +07:00
  • a4fe2a7b3a Document how to pull registrar DS records from Knot on ns1 Berwn 2026-06-18 12:12:10 +07:00