Commit Graph

  • 003c3cc41a Fix rnnoise after latest update. nix Tom Alexander 2026-05-07 17:00:03 -04:00
  • d83652bb9c Add rsync_clone script. Tom Alexander 2026-05-06 10:02:20 -04:00
  • 6fd09a712e Add git_fix_author script. Tom Alexander 2026-05-06 10:00:02 -04:00
  • d9c4f824d2 Add git_find_merged_branches script. Tom Alexander 2026-05-06 09:56:18 -04:00
  • 856e4daee6 Add the decode_jwt script. Tom Alexander 2026-05-06 09:49:47 -04:00
  • e900dc4199 Add secret for homepage-staging. kubernetes Tom Alexander 2026-05-03 17:03:04 -04:00
  • df2299d214 Add a secret for the harbor webhooks to flux. Tom Alexander 2026-05-03 16:25:01 -04:00
  • 8f0a273ee3 Update flux and install the image automation controller. Tom Alexander 2026-05-03 14:52:53 -04:00
  • 2a41b6c16e Add IP addresses to worker certs for the metrics server. Tom Alexander 2026-05-02 20:35:13 -04:00
  • e537825c54 Delete images after 24 hours of being unused. Tom Alexander 2026-05-02 15:53:35 -04:00
  • 6c4075e279 Set up containerd use harbor.fizz.buzz. Tom Alexander 2026-05-02 12:50:36 -04:00
  • 785f28a351 Add secrets for archive-box, webhook-bridge, and tekton. Tom Alexander 2026-04-28 17:45:02 -04:00
  • 5cfb2c3b6a Allow node-to-node communication. Tom Alexander 2026-04-26 12:44:24 -04:00
  • 2fdf0a0f63 Use numbers for folder order. Tom Alexander 2026-04-26 09:28:31 -04:00
  • d7c889a2d7 Add harbor secrets. Tom Alexander 2026-04-26 09:11:35 -04:00
  • d2c01c1223 Switch to the experimental gateway CRDs for TCPRoute support. Tom Alexander 2026-04-18 19:20:16 -04:00
  • f62f6bed00 Add oauth2 proxy secrets. Tom Alexander 2026-04-18 17:45:47 -04:00
  • efc4d0f12e Add dex secrets. Tom Alexander 2026-04-18 16:22:47 -04:00
  • f0e539f5ef Enable the firewall. Tom Alexander 2026-04-18 15:49:08 -04:00
  • abd795d8ae Add gitea secrets. Tom Alexander 2026-04-16 20:33:54 -04:00
  • 2d3c03e042 Add generation for in-repo secrets. Tom Alexander 2026-03-19 18:16:20 -04:00
  • a44e972701 Enforce cilium network policies. Tom Alexander 2026-03-16 19:04:56 -04:00
  • 7619c482ef Downgrade to gateway 1.4.1. Tom Alexander 2026-03-15 12:22:26 -04:00
  • 3ea1b59d59 Update packages in kubernetes/keys. Tom Alexander 2026-03-07 20:14:07 -05:00
  • 4457d35a63 Fix network for updated nix. Tom Alexander 2026-02-14 12:34:24 -05:00
  • dddf80273a Fix proxy auth tls Tom Alexander 2026-01-11 13:03:20 -05:00
  • 9751784e76 Generate certificates for the aggregation layer. Tom Alexander 2026-01-09 18:19:34 -05:00
  • 1195bf2aa5 Add a note for the cilium connectivity test. Tom Alexander 2026-01-09 17:32:28 -05:00
  • b6b5d5bd0f Temporarily disable the firewall for debugging. Tom Alexander 2026-01-04 22:27:46 -05:00
  • 893922959a Enable gateway support. Tom Alexander 2026-01-04 22:27:00 -05:00
  • 1fc4dd8f72 Enable hubble. Tom Alexander 2026-01-04 12:13:58 -05:00
  • 4b1a5c56ab Temporarily drop flux interval to 1 minute during early development. Tom Alexander 2026-01-03 15:00:44 -05:00
  • af478c9731 Install deferred manifests. Tom Alexander 2026-01-03 14:57:26 -05:00
  • 81e9386b9b Add a custom nftables firewall config. Tom Alexander 2026-01-02 23:28:29 -05:00
  • c89b5031c7 Enable the firewall. Tom Alexander 2026-01-01 10:21:36 -05:00
  • 9378bc3343 Fix CoreDNS IPv4 connectivity. Tom Alexander 2025-12-31 20:12:56 -05:00
  • 61cd0acc5e Increase timeout for coredns cache. Tom Alexander 2025-12-30 21:57:09 -05:00
  • 646fc44d8f More changes to try to fix coredns. Tom Alexander 2025-12-29 22:44:04 -05:00
  • 5d094246de Move the kubelet yaml config into nix. Tom Alexander 2025-12-29 21:54:27 -05:00
  • 8158b06e2d Implement a generic helm templater package. Tom Alexander 2025-12-29 21:41:23 -05:00
  • 423d429d0e Switch to generating the coredns manifests via nix. Tom Alexander 2025-12-29 21:19:50 -05:00
  • de5f2ec54d Use CoreDNS for in-cluster DNS requests and caching. Tom Alexander 2025-12-29 21:15:29 -05:00
  • 5871c72491 Enable native routing. Tom Alexander 2025-12-29 20:45:01 -05:00
  • ab179f2f49 Build the cilium manifest automatically in nix. Tom Alexander 2025-12-29 19:11:55 -05:00
  • 91cfb2a9c4 Allow pods to directly speak to the public internet on their own public IPv6 addresses. Tom Alexander 2025-12-29 18:35:20 -05:00
  • dfd43da93a Enable ipv4 and tunnel routing. Tom Alexander 2025-12-29 17:00:23 -05:00
  • 8a54291834 Switch to kubernetes ipam mode. Tom Alexander 2025-12-29 15:59:00 -05:00
  • ed786cf926 Fix service cluster ip range. Tom Alexander 2025-12-29 04:58:49 -05:00
  • 0f09d38212 Fix trailing line break in kubernetes encryption config. Tom Alexander 2025-12-27 21:22:06 -05:00
  • 0215812ee9 Move the yaml functions to their own file. Tom Alexander 2025-12-27 21:15:00 -05:00
  • d26b3d5ebf Introduce functions to generate yaml. Tom Alexander 2025-12-27 21:03:25 -05:00
  • 2861fddf6f Add missing cidr declarations. Tom Alexander 2025-12-23 06:48:06 -05:00
  • 0e8393762d Fix DNS resolution. Tom Alexander 2025-12-22 00:14:17 -05:00
  • 45cc48b3b5 Apply the git repo to the cluster. Tom Alexander 2025-12-21 23:48:17 -05:00
  • 0a112a931a Trust flux's ssh key in the yaml git repo. Tom Alexander 2025-12-21 23:26:15 -05:00
  • 3b3f27bd59 Generic secrets for ssh keys. Tom Alexander 2025-12-21 22:41:21 -05:00
  • f19d018a34 Generic secrets for pgp keys. Tom Alexander 2025-12-21 19:43:43 -05:00
  • d277ca5634 Generate kubernetes secrets for ssh keys. Tom Alexander 2025-12-21 18:45:49 -05:00
  • 1f02259850 Install CoreDNS. Tom Alexander 2025-12-21 18:23:27 -05:00
  • 9382057b47 Generate pgp keys for sops. Tom Alexander 2025-12-21 14:17:31 -05:00
  • 586198586b Generate ssh keys for flux bootstrap. Tom Alexander 2025-12-21 00:01:57 -05:00
  • 2efe37993a Move the cluster bootstrap into the keys flake. Tom Alexander 2025-12-20 23:13:51 -05:00
  • 61583f9eff Set up flux. Tom Alexander 2025-12-20 23:01:19 -05:00
  • 54782da612 Add a bootstrap role. Tom Alexander 2025-12-20 22:14:28 -05:00
  • 4d499c0210 Add a bootstrap role to load manifests into the cluster. Tom Alexander 2025-12-20 20:49:40 -05:00
  • 365566bf75 Fix launching of containers. Tom Alexander 2025-12-19 22:49:32 -05:00
  • 37de518169 Create a debugging role. Tom Alexander 2025-12-19 21:21:57 -05:00
  • 2bd134ab12 Some networking fixes. Tom Alexander 2025-12-18 22:28:03 -05:00
  • 827ef15c90 Add cilium bootstrap. Tom Alexander 2025-12-16 21:48:44 -05:00
  • f7d463947d Installing the cni plugins. Tom Alexander 2025-12-18 00:27:18 -05:00
  • a389547117 Add kube-proxy. Tom Alexander 2025-12-16 21:07:39 -05:00
  • 3cb65e76c0 Add kubelet. Tom Alexander 2025-12-16 19:31:33 -05:00
  • 6c05320380 Add worker nodes. Tom Alexander 2025-12-15 22:32:32 -05:00
  • d302ac96e2 Add kube-scheduler. Tom Alexander 2025-12-15 20:09:46 -05:00
  • 23ee194a84 Add kube-controller-manager. Tom Alexander 2025-12-15 19:47:35 -05:00
  • 0e111b500b Fix launching kube-apiserver. Tom Alexander 2025-12-14 23:24:23 -05:00
  • df9f526f9e Move the encryption config into a package. Tom Alexander 2025-12-14 20:28:48 -05:00
  • d8b7319348 Switch to generating certs with openssl. Tom Alexander 2025-12-14 18:24:24 -05:00
  • 2ac3cff2a1 Add controller proxy certs. Tom Alexander 2025-12-14 14:48:53 -05:00
  • f31260eb00 Add requestheader-client-ca. Tom Alexander 2025-12-14 13:44:56 -05:00
  • 38f6d3abf9 Add service account. Tom Alexander 2025-12-14 13:37:46 -05:00
  • 2522803300 Install kubernetes. Tom Alexander 2025-12-08 20:33:41 -05:00
  • f8a40ca20e Add additional controllers. Tom Alexander 2025-12-07 15:48:08 -05:00
  • 9fc2e682f4 Add configs for a new kubernetes cluster on NixOS. Tom Alexander 2025-11-30 14:32:36 -05:00
  • 9a9268f8cc Disable shipwright. Tom Alexander 2026-05-05 22:42:17 -04:00
  • 8d3ebf7ba2 Update packages. Tom Alexander 2026-05-01 20:16:45 -04:00
  • d35cfaacbd Add nix-pin-revision script. Tom Alexander 2026-04-19 13:26:02 -04:00
  • 8b1212e182 Support hardware accelerated RNG in qemurc. Tom Alexander 2026-04-10 09:08:20 -04:00
  • 7f0250cb9d Sync to the store before registering paths. Tom Alexander 2026-04-05 12:20:17 -04:00
  • bc2636a54c New VPN address for home server. Tom Alexander 2026-04-04 19:27:35 -04:00
  • c8147b5e9e Use direct paths for hydra's nix store. Tom Alexander 2026-04-03 07:55:23 -04:00
  • 4115e95bb6 Add a build of nixbsd to nix_builder. Tom Alexander 2026-03-29 21:31:40 -04:00
  • 4c1465c8d0 Update packages. Tom Alexander 2026-04-02 22:02:40 -04:00
  • a8822d0bfb Update for pkgbase rebuild of homeserver. main Tom Alexander 2026-04-11 12:49:59 -04:00
  • 5c2b0d8c2f Add mt7927 driver to quark. mt7927 Tom Alexander 2026-04-11 11:24:05 -04:00
  • 9550032c08 Support hardware accelerated RNG in qemurc. Tom Alexander 2026-04-10 09:08:20 -04:00
  • d46c2a0225 Revert "Update packages." Tom Alexander 2026-04-09 20:25:12 -04:00
  • 6430b1cc77 Sync to the store before registering paths. Tom Alexander 2026-04-05 12:20:17 -04:00
  • 157d4e4c94 New VPN address for home server. Tom Alexander 2026-04-04 19:27:35 -04:00
  • 075a4b8262 Use direct paths for hydra's nix store. Tom Alexander 2026-04-03 07:55:23 -04:00