73 commits

Author	SHA1	Message	Date
Alex Auvolat	1172e8e511	Fix nomad talking to consul	2022-08-24 18:51:55 +02:00
Alex Auvolat	a0c8280c02	Fix access to consul for non-server nodes	2022-08-24 16:58:50 +02:00
Alex Auvolat	ec2020b71b	Disable bootstrap_expect unless specific deuxfleurs.bootstrap is set	2022-08-24 14:23:17 +02:00
Quentin Dufour	9e39677e1d	Fix IPv6	2022-08-24 11:06:55 +02:00
Alex Auvolat	ab901fc81d	Remove wesher, reconfigure staging without it	2022-08-23 23:55:15 +02:00
Alex Auvolat	02b1e6200c	Disable ipv6 temporary addresses	2022-08-23 13:12:07 +02:00
Alex Auvolat	7d7efab9ee	Update to nixos 22.05	2022-07-27 11:18:23 +02:00
Alex Auvolat	641a68715f	Configure Consul DNS	2022-06-01 14:48:16 +02:00
Alex Auvolat	d47d4e93ab	Work on drone runner as VM	2022-05-30 14:57:05 +02:00
Alex Auvolat	1e23341710	Fix firewall rule for IGD	2022-05-09 00:29:17 +02:00
Alex Auvolat	178107af0c	Network configuration updates	2022-05-09 00:20:02 +02:00
Alex Auvolat	83dd3ea25a	Update network configuration	2022-05-08 14:42:18 +02:00
Alex Auvolat	10d370491e	Replace ad-hoc wireguard by wesher on staging cluster	2022-04-20 18:04:57 +02:00
Alex Auvolat	50e9f0b589	Wesher secret key in /var/lib/wesher/secrets	2022-04-20 10:50:42 +02:00
Alex Auvolat	db081fad0e	First working Wesher configuration	2022-04-19 22:03:58 +02:00
Alex Auvolat	9ff81afd7e	Wesher package now works	2022-04-19 18:09:56 +02:00
Alex Auvolat	3d8989b9c9	nix infinite recursion	2022-04-19 17:41:18 +02:00
Alex Auvolat	fdb5210f88	Move configuration.nix to nix/ subfolder	2022-03-28 12:18:52 +02:00
Alex Auvolat	86b9873221	Wireguard directly using LAN addresses when possible	2022-02-26 00:13:08 +01:00
Alex Auvolat	33446d2148	Carcajou is encrypted	2022-02-25 19:11:25 +01:00
Alex Auvolat	6dc9281299	Add remote LUKS unlocking configuration	2022-02-25 17:52:17 +01:00
Alex Auvolat	b0010b309b	Config for prod cluster	2022-02-09 15:38:36 +01:00
Alex Auvolat	f03cafd49b	Modularize and prepare to support multiple clusters	2022-02-09 12:09:49 +01:00