kurogeek 596ac1f4bb router: make CrowdSec opt-in (crowdsec.enable, default off) ...

Not every site wants the ban engine (hub sync needs internet at
activation, and it is one more moving part on a small box). Gate
crowdsec.nix on a new `crowdsec.enable` option like `omada.enable`.

gw-cnx-1 keeps it on; the VM test drops its mkForce overrides.

2026-09-21 07:20:17 +00:00

docs

router: make CrowdSec opt-in (crowdsec.enable, default off)

2026-09-21 07:20:17 +00:00

machines

services/router: init

2026-09-17 08:57:32 +07:00

modules

router: make CrowdSec opt-in (crowdsec.enable, default off)

2026-09-21 07:20:17 +00:00

sops

secrets: add group admins to secret gw-cnx-1-age.key

2026-07-31 10:09:08 +07:00

vars

vars: update via generator dns-acme-gw-cnx-1-knot (machine: ns1)

2026-07-31 10:09:08 +07:00

.envrc

Initial commit

2026-06-14 12:11:16 +07:00

.gitignore

.gitignore

2026-07-31 09:38:57 +07:00

clan.nix

services/router: init

2026-09-17 08:57:32 +07:00

flake.lock

flake: use flake-parts

2026-08-05 10:19:32 +07:00

flake.nix

services/router: init

2026-09-17 08:57:32 +07:00

fmt.nix

Add declarative SNM mail stack on mx1 with DNS-01, DANE, MTA-STS

2026-06-18 14:47:20 +07:00

inventory.json

inventory.json: update install time of gw-cnx-1

2026-07-31 17:37:47 +07:00

inventory.nix

router: make CrowdSec opt-in (crowdsec.enable, default off)

2026-09-21 07:20:17 +00:00

TODO.md

Add VictoriaLogs for centralized journald across all hosts

2026-06-17 16:53:52 +07:00

S

Description

No description provided

1.1 MiB

Languages

Nix 100%