toph - Setup and configuration for VPS and other personal server

	Commit message (Collapse)	Author	Age	Files	Lines
*	mv src/* src/infrastructure/	EuAndreh	2022-03-20	1	-1/+1
\|
*	mv src/curth0.scm src/lib/	EuAndreh	2022-03-14	1	-1/+1
\|
*	Add barely working Guix configuration for toph	EuAndreh	2022-03-07	1	-0/+4
\|
*	WIP reactivate nixvps with Terraform and nixos-rebuild on Vultr	EuAndreh	2021-07-29	1	-26/+0
\|
*	mv vps/ servers/vps/	EuAndreh	2021-02-21	1	-2/+2
\|
*	Update paths in .envrc	EuAndreh	2021-02-21	1	-7/+9
\|
*	Add vps_ prefix to existing resources	EuAndreh	2021-02-21	1	-6/+6
\|
*	.envrc: Get hostname from shared/hostname.txt	EuAndreh	2021-01-15	1	-3/+4
\|
*	.envrc: Move to POSIX sh	EuAndreh	2021-01-15	1	-4/+4
\|
*	Remove unnecessary curly braces from Bash variables	EuAndreh	2020-12-05	1	-1/+1
\|
*	Terraform: Add email DNS records (DKIM, DMARC, SPF)	EuAndreh	2020-11-26	1	-1/+8
\|
*	Add base Guix configuration and start switching to it	EuAndreh	2020-11-16	1	-6/+5
\| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \|	- remove NixOS stateVersion from .envrc; - add guix-reconfigure.sh; - add vps.scm with initial Guix system configuration; - update vps.tf to use the new "base-guix" snapshot. The "base-guix" image doesn't need a password. The "andreh" users has one, but it is configured for not requiring it when running commands as "sudo". The expected minimal steps one has to go through for privilege scalation is via the SSH private key, and accessing the VPS via SSH. Since password login is disabled and root can't login via SSH either, only the private SSH key allows access to the server. After that, the attacker will be able to run commands as root.
*	.envrc: Update TLD	EuAndreh	2020-11-02	1	-2/+1
\|
*	Add Vultr API KEY to .envrc to enable calling "terraform destroy" from shell	EuAndreh	2020-11-02	1	-0/+2
\|
*	Switch TLD for iteration	EuAndreh	2020-09-22	1	-1/+1
\|
*	Refactor: simplify configuration.nix and put everything under /data/	EuAndreh	2020-09-22	1	-10/+0
\| \| \| \|	Preparation for doing backups with borg of /data/ on cronjob.
*	Refactor vps-configuration.nix: Split secrets from config and envsubst vars	EuAndreh	2020-09-06	1	-1/+26
\| \| \| \|	Also rename thingTLD to thingDomain.
*	Migration: Remove Ansible and Docker code, move only to NixOS	EuAndreh	2020-08-10	1	-43/+1
\|
*	.envrc: Ignore missing 'file'	EuAndreh	2020-08-02	1	-1/+1
\|
*	Tweak early exit of .envrc	EuAndreh	2019-06-11	1	-1/+1
\| \| \| \|	I guess this is needed because =direnv= loads the .envrc in a non-conventional way.
*	Only access any secret file in .envrc when decrypted	EuAndreh	2019-06-11	1	-6/+8
\|
*	Only source ./secrets/secret-envrc.sh when decrypted.	EuAndreh	2019-06-11	1	-1/+6
\|
*	Turn off $DESTROY_VOLUME toggle	EuAndreh	2019-06-11	1	-1/+1
\|
*	Don't rely on git when running .buildenv and .envrc	EuAndreh	2019-06-11	1	-1/+1
\|
*	Set the directory before sourcing	EuAndreh	2019-06-11	1	-1/+0
\|
*	Allow envrc to be sourced in CI	EuAndreh	2019-06-10	1	-0/+1
\|
*	Remove call to =cd= in envrc files	EuAndreh	2019-06-10	1	-1/+0
\|
*	Switch $DESTROY_VOLUME back on	EuAndreh	2019-06-10	1	-1/+1
\|
*	Switch off $DESTROY_VOLUME toggle	EuAndreh	2019-06-10	1	-1/+1
\|
*	Output all generated files on ./generated/, refactor .envrc variables	EuAndreh	2019-06-10	1	-1/+37
\|
*	Add simple stub VM definition	EuAndreh	2019-05-25	1	-0/+1