11 Commits

Author SHA1 Message Date
Tom Alexander
72084f1a7e
Enable the firewall.
Now that we have networking working, I can enable the firewall and confirm nothing breaks.
2026-02-06 11:28:44 -05:00
Tom Alexander
96112bd40a
Build the cilium manifest automatically in nix. 2026-02-06 11:28:43 -05:00
Tom Alexander
6551fee05b
Allow pods to directly speak to the public internet on their own public IPv6 addresses. 2026-02-06 11:28:42 -05:00
Tom Alexander
f62e36b5af
Enable ipv4 and tunnel routing. 2026-02-06 11:28:42 -05:00
Tom Alexander
6d38265412
Switch to kubernetes ipam mode. 2026-02-06 11:28:42 -05:00
Tom Alexander
32fda29efe
Generate kubernetes secrets for ssh keys. 2026-02-06 11:28:41 -05:00
Tom Alexander
c9450ff9fa
Set up flux. 2026-02-06 11:28:40 -05:00
Tom Alexander
95f0a891ac
Some networking fixes. 2026-02-06 11:28:39 -05:00
Tom Alexander
816e72eac7
Add cilium bootstrap. 2026-02-06 11:28:39 -05:00
Tom Alexander
c61da527f2
Add kube-proxy. 2026-02-06 11:28:39 -05:00
Tom Alexander
2b29530047
Add configs for a new kubernetes cluster on NixOS. 2026-02-06 08:53:23 -05:00