| Commit message (Collapse) | Author | Files | Lines | ||
|---|---|---|---|---|---|
| 2022-11-27 | .envrc: Remove unused file | EuAndreh | 1 | -4/+0 | |
| 2022-03-20 | mv src/* src/infrastructure/ | EuAndreh | 1 | -1/+1 | |
| 2022-03-14 | mv src/curth0.scm src/lib/ | EuAndreh | 1 | -1/+1 | |
| 2022-03-07 | Add barely working Guix configuration for toph | EuAndreh | 1 | -0/+4 | |
| 2021-07-29 | WIP reactivate nixvps with Terraform and nixos-rebuild on Vultr | EuAndreh | 1 | -26/+0 | |
| 2021-02-21 | mv vps/ servers/vps/ | EuAndreh | 1 | -2/+2 | |
| 2021-02-21 | Update paths in .envrc | EuAndreh | 1 | -7/+9 | |
| 2021-02-21 | Add vps_ prefix to existing resources | EuAndreh | 1 | -6/+6 | |
| 2021-01-15 | .envrc: Get hostname from shared/hostname.txt | EuAndreh | 1 | -3/+4 | |
| 2021-01-15 | .envrc: Move to POSIX sh | EuAndreh | 1 | -4/+4 | |
| 2020-12-05 | Remove unnecessary curly braces from Bash variables | EuAndreh | 1 | -1/+1 | |
| 2020-11-26 | Terraform: Add email DNS records (DKIM, DMARC, SPF) | EuAndreh | 1 | -1/+8 | |
| 2020-11-16 | Add base Guix configuration and start switching to it | EuAndreh | 1 | -6/+5 | |
| - remove NixOS stateVersion from .envrc; - add guix-reconfigure.sh; - add vps.scm with initial Guix system configuration; - update vps.tf to use the new "base-guix" snapshot. The "base-guix" image doesn't need a password. The "andreh" users has one, but it is configured for not requiring it when running commands as "sudo". The expected minimal steps one has to go through for privilege scalation is via the SSH private key, and accessing the VPS via SSH. Since password login is disabled and root can't login via SSH either, only the private SSH key allows access to the server. After that, the attacker will be able to run commands as root. | |||||
| 2020-11-02 | .envrc: Update TLD | EuAndreh | 1 | -2/+1 | |
| 2020-11-02 | Add Vultr API KEY to .envrc to enable calling "terraform destroy" from shell | EuAndreh | 1 | -0/+2 | |
| 2020-09-22 | Switch TLD for iteration | EuAndreh | 1 | -1/+1 | |
| 2020-09-22 | Refactor: simplify configuration.nix and put everything under /data/ | EuAndreh | 1 | -10/+0 | |
| Preparation for doing backups with borg of /data/ on cronjob. | |||||
| 2020-09-06 | Refactor vps-configuration.nix: Split secrets from config and envsubst vars | EuAndreh | 1 | -1/+26 | |
| Also rename thingTLD to thingDomain. | |||||
| 2020-08-10 | Migration: Remove Ansible and Docker code, move only to NixOS | EuAndreh | 1 | -43/+1 | |
| 2020-08-02 | .envrc: Ignore missing 'file' | EuAndreh | 1 | -1/+1 | |
| 2019-06-11 | Tweak early exit of .envrc | EuAndreh | 1 | -1/+1 | |
| I guess this is needed because =direnv= loads the .envrc in a non-conventional way. | |||||
| 2019-06-11 | Only access any secret file in .envrc when decrypted | EuAndreh | 1 | -6/+8 | |
| 2019-06-11 | Only source ./secrets/secret-envrc.sh when decrypted. | EuAndreh | 1 | -1/+6 | |
| 2019-06-11 | Turn off $DESTROY_VOLUME toggle | EuAndreh | 1 | -1/+1 | |
| 2019-06-11 | Don't rely on git when running .buildenv and .envrc | EuAndreh | 1 | -1/+1 | |
| 2019-06-11 | Set the directory before sourcing | EuAndreh | 1 | -1/+0 | |
| 2019-06-10 | Allow envrc to be sourced in CI | EuAndreh | 1 | -0/+1 | |
| 2019-06-10 | Remove call to =cd= in envrc files | EuAndreh | 1 | -1/+0 | |
| 2019-06-10 | Switch $DESTROY_VOLUME back on | EuAndreh | 1 | -1/+1 | |
| 2019-06-10 | Switch off $DESTROY_VOLUME toggle | EuAndreh | 1 | -1/+1 | |
| 2019-06-10 | Output all generated files on ./generated/, refactor .envrc variables | EuAndreh | 1 | -1/+37 | |
| 2019-05-25 | Add simple stub VM definition | EuAndreh | 1 | -0/+1 | |
 |
index : server | |
| Unnamed repository; edit this file 'description' to name the repository. | External SSH Git service user |
| aboutsummaryrefslogtreecommitdiff |