nixos

Skynet/nixos

Fork 0

Commit graph

564fe272b1 fix: gonna need an extra field that is stable Brendan Golden 2023-06-15 02:45:13 +0100
6ddf3f2c2f fix: tidied up a tad Brendan Golden 2023-06-14 21:53:48 +0100
c77fcd5cf0 fix: this is a games host, not an ldap host Brendan Golden 2023-06-14 21:07:18 +0100
77ce631f07 fix: use the default value directly Brendan Golden 2023-06-14 21:06:44 +0100
f5b1cb33ef feat: add the ldap client to all servers Brendan Golden 2023-06-14 21:04:29 +0100
3028fe61d2 feat: kitt is now the ldap server Brendan Golden 2023-06-14 20:45:34 +0100
8443218d0b fix: ensure that servers are using our dns (if resolved is enabled) Brendan Golden 2023-06-14 20:30:33 +0100
883a6b239c feat: setup minecraft for both us and gsoc Brendan Golden 2023-06-11 22:11:57 +0100
d3dba7891d feat: useful tool to have Brendan Golden 2023-06-11 22:11:39 +0100
378b4d0b8f ldap: dir to back up Brendan Golden 2023-05-27 00:30:39 +0100
60d3025d88 gitlab: added useful commands Brendan Golden 2023-05-26 22:21:47 +0100
894837494c ldap: set password hash back to SSH512 Brendan Golden 2023-05-26 10:21:14 +0100
eb34303c7b ldap: set fields the user can change on their own Brendan Golden 2023-05-25 22:23:25 +0100
d1b79da77c ldap: only allow ssh key login on linux servers Brendan Golden 2023-05-25 16:53:59 +0100
e748eb306a ldap: add an attribute for the created date Brendan Golden 2023-05-25 12:12:30 +0100
1cbe71db12 gitlab: limit to only active members Brendan Golden 2023-05-24 22:01:01 +0100
749ee1b0dc gitlab: enable on optimus on an interm basis Brendan Golden 2023-05-24 21:40:37 +0100
d1cf49bb83 gitlab: would like to use ee, but sadly too expensive Brendan Golden 2023-05-24 21:37:16 +0100
3dc27bcf77 gitlab: properly use the username Brendan Golden 2023-05-24 21:08:42 +0100
59f4057698 gitlab: basic setup Brendan Golden 2023-05-24 20:57:49 +0100
2b2917d34b dns: set deploy target to be their IP not hostname, more reliable since theya re the dns servers Brendan Golden 2023-05-24 19:31:15 +0100
e0e1b83e12 gitlab: I think this is the right config Brendan Golden 2023-05-24 16:56:59 +0100
02fb3e28cd fix: needed the right imports Brendan Golden 2023-05-24 16:52:18 +0100
3df29a42d4 fix: need the dns imported Brendan Golden 2023-05-24 16:51:15 +0100
95cdbf2b4e feat: properly modularised games Brendan Golden 2023-05-24 16:39:02 +0100
920f6ab86e feat: dns fully modularised now Brendan Golden 2023-05-24 16:12:48 +0100
34de735720 feat: turned ulfm into a proper module Brendan Golden 2023-05-24 15:59:22 +0100
91a3eb6a1a ldap: use the home given in the ldap, will allow for custom homes Brendan Golden 2023-05-24 15:54:00 +0100
d63ebabc85 ldap: able to deal with up to ssha512 passwords Brendan Golden 2023-05-24 15:31:58 +0100
d056929a18 ldap: extended class Brendan Golden 2023-05-24 00:35:17 +0100
934b1ff1c4 ldap: using ladps seems to work Brendan Golden 2023-05-23 23:47:57 +0100
41449dd28c ldap: fixced the encryption key required Brendan Golden 2023-05-23 23:30:27 +0100
44921afecd acme: may as well be patient Brendan Golden 2023-05-21 22:45:40 +0100
de76e8eee6 ldap: now got secure mode Brendan Golden 2023-05-21 22:45:20 +0100
a660a60346 fix: group should be able to write to it as well Brendan Golden 2023-05-21 21:51:17 +0100
693043b081 dns: new functions work well Brendan Golden 2023-05-21 21:48:30 +0100
f8f2f6fa15 dns: better function for the etc files (basically using a nice wrapper) Brendan Golden 2023-05-21 21:30:14 +0100
c6b766bd65 dns: function to handle opn domains Brendan Golden 2023-05-21 21:25:21 +0100
e47f2c85f2 dns: a function to give thw whitelist for the cache networks Brendan Golden 2023-05-21 20:22:54 +0100
126db6e3cb dns: now have a proper primary and secondary Brendan Golden 2023-05-21 19:38:13 +0100
1e9b63e13d dns: added more otehr domains, will tidy up config better later Brendan Golden 2023-05-21 19:06:30 +0100
be0868b860 dns: added a reverse dns option Brendan Golden 2023-05-21 19:05:47 +0100
d3e1e3e67f dns: added csn.ul.ie Brendan Golden 2023-05-21 16:18:53 +0100
9618d87c67 dns: parametrised the config Brendan Golden 2023-05-21 16:18:39 +0100
c42b13b990 fix: ports are numbers not strings Brendan Golden 2023-05-21 12:23:57 +0100
81b41087fe feat: added ldaps Brendan Golden 2023-05-21 12:17:06 +0100
ad2c9dad6b fix: better handling of domain Brendan Golden 2023-05-21 12:08:26 +0100
6e58eac8c1 fix: properly use the port Brendan Golden 2023-05-21 12:05:19 +0100
b15b07ae36 fix: move base into teh config Brendan Golden 2023-05-21 12:02:52 +0100
48a23519e9 fix: got permissions "working" for teh password reset, not ideal though Brendan Golden 2023-05-21 03:09:24 +0100
60e33e2abb ldap: give users a home dir Brendan Golden 2023-05-21 01:39:01 +0100
e73e15f524 ldap: client is properly working now Brendan Golden 2023-05-21 01:38:19 +0100
67a0d1b8bf fix: had to give the file the right permissions Brendan Golden 2023-05-21 00:19:20 +0100
ee28f2047a fix: nano was adding a new line on close Brendan Golden 2023-05-21 00:18:29 +0100
32577ecebc fix: typo in name Brendan Golden 2023-05-20 22:20:06 +0100
47c615d7a5 fix: moved the group permissions into teh base config Brendan Golden 2023-05-20 22:17:21 +0100
4e664ce1bc feat: ldap now has secrets properly stored Brendan Golden 2023-05-20 21:33:04 +0100
b61a645824 secrets ldap: set up teh secrets for teh ldap Brendan Golden 2023-05-20 21:28:15 +0100
144f3bce54 ldap: got a tool to manage the password resets and ssh key Brendan Golden 2023-05-20 19:33:08 +0100
f8312b76ef ldap: working config to limit groups Brendan Golden 2023-05-20 17:26:14 +0100
c17a28d7a9 ldap: now got skMemberOf to replace memberof (memberof does not work on unixgroups) Brendan Golden 2023-05-20 15:26:03 +0100
0c57b35778 ldap: is working as intended, working on scripting to add and manage users Brendan Golden 2023-05-20 03:08:30 +0100
f6183c1b10 podman: was working, now it isnt AGHHHHHHHHH Brendan Golden 2023-05-19 19:15:22 +0100
bc8b294469 doc: added the commands to make them easier to follow Brendan Golden 2023-05-19 18:28:35 +0100
f8bb79adbd fix: typos Brendan Golden 2023-05-19 18:21:33 +0100
614d905dfd docker: now using podman Brendan Golden 2023-05-19 18:18:18 +0100
7e380d6932 ldap: a mostly working ldaish setup Brendan Golden 2023-05-18 21:59:23 +0100
baa226cacf ldap: cant have uppercase letters in username Brendan Golden 2023-05-16 23:58:34 +0100
a930a980dc secret: added kitt and rekeyed Brendan Golden 2023-05-16 23:18:40 +0100
1a08dd66f9 retired: if ash is dead then no need for this either Brendan Golden 2023-05-16 23:18:05 +0100
53696c927e ldap: first attempt at ldap Brendan Golden 2023-05-16 22:23:04 +0100
fbbefc1e2a retired: Ash never got a chance to be online Brendan Golden 2023-05-16 22:08:24 +0100
1738ed16a5 fmt: small tidyup Brendan Golden 2023-05-16 18:34:53 +0100
4ef6c14a32 feat: basic gitlab setup Brendan Golden 2023-05-16 16:40:49 +0100
960a5c8772 nodes: not using ash Brendan Golden 2023-05-10 11:41:30 +0100
a5d6ca55ed firewall: I think this is the correct network config for the firewall Brendan Golden 2023-05-10 11:40:28 +0100
5579de7e7c dns: fixed issue that could cause a DOS attach (via DNS amplification) Brendan Golden 2023-05-05 14:40:27 +0100
d750b046d1 dns: go back to basically an earlier config Brendan Golden 2023-04-29 02:35:58 +0100
ec8b458d75 dns: use a hash to make a unique config file Brendan Golden 2023-04-29 01:54:17 +0100
e8254a0d65 minecraft: got the classic server and maps up and running Brendan Golden 2023-04-27 01:47:17 +0100
f39934a437 secrets: reorganised it so it makes more sense who has access to what secrets Brendan Golden 2023-04-27 01:46:51 +0100
81afc614a3 minecraft: fix up the paths Brendan Golden 2023-04-27 00:49:55 +0100
b85410e895 minecraft: use a better proxy Brendan Golden 2023-04-26 02:18:21 +0100
de87d97fbc fmt: reduced nesting to make it easier to read/understand Brendan Golden 2023-04-26 02:01:29 +0100
3eac87bbd8 games: split it up into 3 different services for easier management Brendan Golden 2023-04-26 01:52:47 +0100
733b867f47 games: split minecraft out into its own folder for manageability Brendan Golden 2023-04-26 00:24:54 +0100
2603cf9584 games: turns out I wasnt treating it properly like a docker-compose file Brendan Golden 2023-04-26 00:09:31 +0100
4052aeac6b dns: setup dnssec (need to backup the required folders later) Brendan Golden 2023-04-25 15:11:02 +0100
c0f160faa3 dns: use epoch for the serial instead of YYYYMMDDSS. Brendan Golden 2023-04-25 14:31:19 +0100
612ba70bbf games: it is possible to have multiple minecraft servers running Brendan Golden 2023-04-25 00:44:17 +0100
d762001cb6 dns: some light reorganisation for clarity Brendan Golden 2023-04-24 20:40:48 +0100
695f9a5763 dns: no mailserver yet Brendan Golden 2023-04-24 20:38:36 +0100
e5e5350b90 dns: added a comment on teh indentation Brendan Golden 2023-04-24 20:24:17 +0100
78fcafc566 ssl: got the ssl certs riunning and live Brendan Golden 2023-04-24 20:21:36 +0100
43111f41b3 dns: swap the order of the nameservers Brendan Golden 2023-04-24 20:19:32 +0100
8de2b27099 dns: reduce te time that the record is alive for Brendan Golden 2023-04-24 20:19:16 +0100
94784ee6d2 dns: this is supposted to cut down spam logs but it dosent Brendan Golden 2023-04-24 20:17:24 +0100
70f3e03b74 dns: turns out this spacing is really really important Brendan Golden 2023-04-24 20:14:24 +0100
a474819992 ssh: added thenobrainer to the ssh keys and rekied the secrets Brendan Golden 2023-04-23 16:43:52 +0100
3d15446d63 dns: serial of therecord is now updated dynamically Brendan Golden 2023-04-23 13:37:42 +0100