245 commits

Author	SHA1	Message	Date
Matt Layher	beb1f99abf	nixos/servnerr-3: move Prometheus to server from Raspberry Pi ... Signed-off-by: Matt Layher <mdlayher@gmail.com>	2020-06-06 12:15:40 -04:00
Matt Layher	925462f4e1	nixos/servnerr-3: add /primary/vm ZFS filesystem ... Signed-off-by: Matt Layher <mdlayher@gmail.com>	2020-06-06 11:42:33 -04:00
Matt Layher	ead678a51f	nixos/routnerr-2: expose desktop IPv6 RTP through firewall ... Signed-off-by: Matt Layher <mdlayher@gmail.com>	2020-06-06 11:29:32 -04:00
Matt Layher	9d93b8c070	nixos/lib: install bandwhich	2020-06-06 10:04:44 -04:00
Matt Layher	4b2264de92	nixos/servnerr-3: add lab-corerad job, move existing alerts to prod job ... Signed-off-by: Matt Layher <mdlayher@gmail.com>	2020-06-03 11:37:40 -04:00
Matt Layher	50da252eef	nixos/routnerr-2: skip production CoreRAD advertising on lab0	2020-06-03 11:23:22 -04:00
Matt Layher	3afeb76861	nixos/servnerr-3: fix Prometheus alert label	2020-06-01 14:32:10 -04:00
Matt Layher	4b61d093e6	nixos/servnerr-3: nixfmt Prometheus alerts	2020-06-01 14:11:04 -04:00
Matt Layher	763be23fcf	nixos/servnerr-3: add CoreRAD upstream monitoring alerts ... Signed-off-by: Matt Layher <mdlayher@gmail.com>	2020-06-01 14:10:17 -04:00
Matt Layher	b643fb4351	nixos/servnerr-3: fix Prometheus CoreRAD advertising interface status alert ... Signed-off-by: Matt Layher <mdlayher@gmail.com>	2020-05-31 20:21:24 -04:00
Matt Layher	5b50c2bb73	nixos/routnerr-2: nixfmt ... Signed-off-by: Matt Layher <mdlayher@gmail.com>	2020-05-29 17:15:06 -04:00
Matt Layher	1c86195c61	nixos/lib/vargen: template out WireGuard configuration ... Signed-off-by: Matt Layher <mdlayher@gmail.com>	2020-05-29 17:13:43 -04:00
Matt Layher	d7121b4df9	nixos/lib/vargen: WIP WireGuard support ... Signed-off-by: Matt Layher <mdlayher@gmail.com>	2020-05-29 17:02:21 -04:00
Matt Layher	d084bd881e	Merge branch 'master' of github:mdlayher/homelab	2020-05-29 17:01:29 -04:00
Matt Layher	5879e84479	nixos/lib/vargen: move switch-office02 to management LAN ... Signed-off-by: Matt Layher <mdlayher@gmail.com>	2020-05-29 17:01:26 -04:00
Matt Layher	6d343cab9d	nixos/lib/vargen: infer server and WAN addresses automatically ... Signed-off-by: Matt Layher <mdlayher@gmail.com>	2020-05-29 16:22:40 -04:00
Matt Layher	e39cbef56a	nixos/lib: move nerr-3 to 10GbE VLAN ... Signed-off-by: Matt Layher <mdlayher@gmail.com>	2020-05-29 12:17:31 -04:00
Matt Layher	56a49c51e6	nixos: move servnerr-3 to 10GbE LAN, prioritize 10GbE LAN in RAs ... Signed-off-by: Matt Layher <mdlayher@gmail.com>	2020-05-29 11:52:19 -04:00
Matt Layher	6760123bde	nixos/servnerr-3: bump keylight_exporter, 15s Prometheus scrape interval ... Signed-off-by: Matt Layher <mdlayher@gmail.com>	2020-05-28 16:49:03 -04:00
Matt Layher	21590239df	nixos/servnerr-3: enable 10GbE NIC ... Signed-off-by: Matt Layher <mdlayher@gmail.com>	2020-05-28 13:35:32 -04:00
Matt Layher	539e385af2	nixos/lib: add keylight_exporter, install on servnerr-3	2020-05-28 12:29:19 -04:00
Matt Layher	802b2a7884	nixos/lib/vargen: add Elgato Key Light	2020-05-25 20:37:53 -04:00
Matt Layher	73d7921b2a	nixos/servnerr-3: scrape switch-office02 SNMP	2020-05-25 20:31:19 -04:00
Matt Layher	a9368c0787	nixos/lib/vargen: add 10GbE switch	2020-05-25 20:14:53 -04:00
Matt Layher	3089041870	nixos/routnerr-2: fix tengb0 DHCPv6-PD ID	2020-05-25 20:11:54 -04:00
Matt Layher	30a0ecd88a	nixos/lib/vargen: new convention for VLAN >= 100 ... Signed-off-by: Matt Layher <mdlayher@gmail.com>	2020-05-24 13:09:13 -04:00
Matt Layher	1cbb0f37b1	nixos/lib/vargen: add newSubnet helper ... Signed-off-by: Matt Layher <mdlayher@gmail.com>	2020-05-24 13:00:51 -04:00
Matt Layher	78154188a6	nixos/lib/vargen: remove ipv6Prefixes.MarshalJSON ... Signed-off-by: Matt Layher <mdlayher@gmail.com>	2020-05-24 12:44:29 -04:00
Matt Layher	d65445d858	lib/vargen: new location for eui64 package ... Signed-off-by: Matt Layher <mdlayher@gmail.com>	2020-05-24 12:41:15 -04:00
Matt Layher	ba2b575b5f	nixos/servnerr-3: nixfmt	2020-05-24 12:31:15 -04:00
Matt Layher	9746f3547b	nixos/routnerr-2: add tengb0 on VLAN 100 ... Signed-off-by: Matt Layher <mdlayher@gmail.com>	2020-05-24 12:30:08 -04:00
Matt Layher	48c0c7c164	nixos/routnerr-2: add cmatrix ... Signed-off-by: Matt Layher <mdlayher@gmail.com>	2020-05-24 11:38:54 -04:00
Matt Layher	0488182975	nixos/routnerr-2: add lan0 VLAN for trusted devices ... Signed-off-by: Matt Layher <mdlayher@gmail.com>	2020-05-24 10:20:45 -04:00
Matt Layher	58fde819f1	nixos/servnerr-3: fix relabelTarget logic ... Signed-off-by: Matt Layher <mdlayher@gmail.com>	2020-05-21 11:15:10 -04:00
Matt Layher	b4dc963d4f	nixos/servnerr-3: add Prometheus alerts, force IPv4 AP SNMP scrape ... Signed-off-by: Matt Layher <mdlayher@gmail.com>	2020-05-19 18:35:41 -04:00
Matt Layher	322b7046bc	nixos: apply nixfmt	2020-05-19 08:51:49 -04:00
Matt Layher	e2f8d0edfa	nixos/routnerr-2: add promlens traefik backend	2020-05-19 08:51:13 -04:00
Matt Layher	b3465798da	nixos/servnerr-3: deploy promlens docker container	2020-05-19 08:37:42 -04:00
Matt Layher	b1ee541b9e	Merge branch 'master' of github:mdlayher/homelab	2020-05-17 21:07:00 -04:00
Matt Layher	2ee80b1851	nixos/lib: add smartmontools and xxd	2020-05-17 21:06:48 -04:00
Matt Layher	66eec3e3af	nixos/servnerr-3: nixfmt prometheus config	2020-05-17 21:06:35 -04:00
Matt Layher	3dc8dcea3e	nixos/servnerr-3: use latest Linux kernel for better hwmon, modprobe drivetemp	2020-05-17 21:06:22 -04:00
Matt Layher	b459b61a05	nixos/lib/vargen: bump inet.af/netaddr, use new API ... Signed-off-by: Matt Layher <mdlayher@gmail.com>	2020-05-12 10:53:49 -04:00
Matt Layher	29eeb10344	nixos/servnerr-3: set ondemand CPU governor	2020-05-08 21:44:10 -04:00
Matt Layher	d476856acc	nixos/servnerr-3: add obs Prometheus job	2020-05-08 12:47:44 -04:00
Matt Layher	d764c73b7d	nixos/servnerr-3: retain Prometheus data for one year	2020-05-08 12:06:47 -04:00
Matt Layher	bfc2131052	nixos/servnerr-3: disable fwupd, no benefit and long compiles	2020-05-06 10:55:32 -04:00
Matt Layher	db06cce96c	lib/pkgs: bump wireguard_exporter	2020-05-01 11:04:08 -04:00
Matt Layher	83562806fe	Merge branch 'master' of github:mdlayher/homelab	2020-04-30 18:42:18 -04:00
Matt Layher	c446d6cce5	nixos/routnerr-2: enable wireguard_exporter	2020-04-30 18:42:04 -04:00
Matt Layher	6fdca2b235	lib: add wireguard_exporter package and module	2020-04-30 18:41:46 -04:00
Matt Layher	3ffadae769	nixos/servnerr-3: scrape wireguard exporter on router	2020-04-30 16:01:39 -04:00
Matt Layher	5d3b50d2a9	nixos/servnerr-3: hardcode NFS subnets again for now	2020-04-30 16:01:11 -04:00
Matt Layher	ca255a3a4e	nixos/routnerr-2: add nerr-3 WireGuard peer	2020-04-30 15:13:42 -04:00
Matt Layher	5ee4bc000f	nixos: nixfmt	2020-04-28 14:12:30 -04:00
Matt Layher	e57c3c99ea	nixos/lib/vargen: Go program to generate vars.nix data ... Signed-off-by: Matt Layher <mdlayher@gmail.com>	2020-04-28 14:08:59 -04:00
Matt Layher	973ef00bc9	nixos/lib: move vars, add lan0 subnets	2020-04-28 09:22:01 -04:00
Matt Layher	96b37fc7d5	nixos/lib: set matt password hash, force immutable users	2020-04-28 09:05:51 -04:00
Matt Layher	c8b9e61bc4	Merge branch 'master' of github:mdlayher/homelab	2020-04-28 08:51:47 -04:00
Matt Layher	c0d51e5482	nixos/routnerr-2: cleanup nix variables	2020-04-28 08:51:24 -04:00
Matt Layher	c30f04f452	nixos/servnerr-3: new remote build SSH key	2020-04-27 22:11:28 -04:00
Matt Layher	ddafa50943	nixos/routnerr-2: new IPv6 prefix, remove hdhomerun	2020-04-27 22:10:33 -04:00
Matt Layher	a0f2500559	nixos/routnerr-2: new hardware configuration	2020-04-27 20:55:42 -04:00
Matt Layher	12684e2527	nixos/routnerr-2: new WireGuard key location	2020-04-27 20:55:23 -04:00
Matt Layher	375ae54cd3	Merge branch 'master' of github:mdlayher/homelab	2020-04-27 15:24:52 -04:00
Matt Layher	0263f7c7fe	nixos/routnerr-2: simplify CoreRAD variables	2020-04-27 15:24:48 -04:00
Matt Layher	3a68ac4c22	nixos/lib: install mtr	2020-04-27 15:24:28 -04:00
Matt Layher	58007e2343	nixos/servnerr-3: fix nix-linter issues	2020-04-27 14:50:29 -04:00
Matt Layher	c600b142a0	nixos/routnerr-2: apply nix-linter fixes	2020-04-27 14:27:17 -04:00
Matt Layher	3db2306840	nixos/lib: add nix-linter package	2020-04-27 14:12:18 -04:00
Matt Layher	5ac5295add	nixos/servnerr-3: add zpool to hardware configuration	2020-04-27 13:32:39 -04:00
Matt Layher	d86963fb75	nixos/servnerr-3: enable automatic ZFS scrubbing	2020-04-27 13:28:32 -04:00
Matt Layher	3187995993	nixos/servnerr-3: enable apcupsd	2020-04-27 13:23:49 -04:00
Matt Layher	eaf3fff322	nixos/servnerr-3: enable NFS	2020-04-26 16:50:58 -04:00
Matt Layher	0656828add	nixos/servnerr-3: enable libvirtd	2020-04-26 16:45:55 -04:00
Matt Layher	304e2de809	nixos/servnerr-3: set up blackbox_exporter	2020-04-26 16:01:05 -04:00
Matt Layher	a6fadc654b	nixos/lib: factor out node exporter configuration	2020-04-26 14:43:21 -04:00
Matt Layher	f6a63a04bb	nixos/servnerr-3: break out prometheus configuration	2020-04-26 14:40:00 -04:00
Matt Layher	cef7bdd783	nixos/servnerr-3: set up snmp_exporter	2020-04-26 14:37:39 -04:00
Matt Layher	b54388e1ee	nixos/servnerr-3: always restart agetty	2020-04-26 14:14:17 -04:00
Matt Layher	a516d27788	nixos/servnerr-3: enable serial console and getty login	2020-04-26 13:52:05 -04:00
Matt Layher	c2a7ed8c75	nixos: add basic READMEs	2020-04-26 12:06:47 -04:00
Matt Layher	0a2663fb3e	nixos/lib: factor out nix configuration	2020-04-26 11:59:10 -04:00
Matt Layher	604cc01ad9	nixos/lib: factor out common system packages	2020-04-26 11:55:40 -04:00
Matt Layher	6bbf22c32f	nixos/lib: factor out base system configuration	2020-04-26 11:50:56 -04:00
Matt Layher	75d0f8af07	nixos/lib: factor out matt user configuration	2020-04-26 11:42:29 -04:00
Matt Layher	f7c2cb2afd	nixos/servnerr-3: initial commit	2020-04-26 11:37:26 -04:00
Matt Layher	4276a68271	nixos/routnerr-2: use servnerr-3 as a remote builder	2020-04-26 11:19:45 -04:00
Matt Layher	456c2f905f	nixos/routnerr-2: remove fwupd; not supported on hardware	2020-04-26 11:19:33 -04:00
Matt Layher	b34d9f2160	nixos/routnerr-2: replace screenfetch with neofetch, add nethogs	2020-04-26 11:19:13 -04:00
Matt Layher	701ef7ba6c	nixos/routnerr-2: auto optimize Nix store, 20.03 stateVersion	2020-04-22 15:21:09 -04:00
Matt Layher	acad297e04	nixos/routnerr-2: add lib symlink, remove Go version overlay	2020-04-22 10:19:56 -04:00
Matt Layher	0d6b295a1e	nixos/routnerr-2: move router configs to subdirectory ... Signed-off-by: Matt Layher <mdlayher@gmail.com>	2020-04-22 10:13:52 -04:00
Matt Layher	7678cbffce	nixos: configuration changes for 20.03	2020-04-21 16:35:30 -04:00
Matt Layher	aa9d4cc715	nixos: disable wgipamd for now	2020-04-05 13:24:57 -04:00
Matt Layher	15e472fd91	nixos/pkgs: bump wgipamd hash	2020-03-20 10:59:01 -04:00
Matt Layher	293e625429	nixos: more aggressive Nix GC	2020-03-11 15:05:56 -04:00
Matt Layher	ea343bca06	nixos: add {pci,usb}utils, no X11	2020-03-10 10:44:56 -04:00
Matt Layher	642c1151fc	nixos: set CoreRAD high router preference on primary LAN	2020-03-04 12:54:32 -05:00
Matt Layher	0a54dcca69	nixos: bump wgipamd checksum	2020-03-03 12:57:32 -05:00
Matt Layher	e362b88670	nixos: update CoreRAD configuration for beta	2020-02-20 11:22:11 -05:00
Matt Layher	73131cb02d	nixos: pull in nixos-hardware profile for quirks	2020-02-18 20:51:32 -05:00
Matt Layher	0df38d1c74	nixos: set up DHCPv6 for IPv6 PXE	2020-02-12 17:30:13 -05:00
Matt Layher	fe248b8f79	nixos: enable lldpd	2020-02-12 15:39:33 -05:00
Matt Layher	b98c7c05d3	nixos: simplify CoreDNS config, add IPv4/6 subdomains	2020-02-12 12:00:16 -05:00
Matt Layher	14426631e7	nixos: add ap-livingroom02, remove 01	2020-02-10 15:27:06 -05:00
Matt Layher	cd31bd0eb0	nixos/pkgs: update wgipamd package	2020-02-10 14:52:56 -05:00
Matt Layher	4a8b544a24	nixos: add screenfetch	2020-02-10 14:52:29 -05:00
Matt Layher	a94216b02c	nixos: move hdhomerun to IoT LAN	2020-02-06 12:34:06 -05:00
Matt Layher	e68e9c5c51	nixos: changes for server VMs on lab VLAN	2020-02-05 15:08:00 -05:00
Matt Layher	f57a789fca	nixos: factor out nftables ICMP rules	2020-02-05 15:07:05 -05:00
Matt Layher	9bdb271bb4	nixos: add nmap	2020-02-05 11:47:29 -05:00
Matt Layher	dbecd0ba87	nixos: remove overly aggressive mDNS firewalling	2020-02-05 11:39:44 -05:00
Matt Layher	35f8e5d1c4	nixos: enable mDNS reflection from IoT VLAN, better isolation	2020-02-04 16:46:49 -05:00
Matt Layher	8552e63af3	nixos/pkgs: updated wgipamd overlay package checksum	2020-02-03 19:06:50 -05:00
Matt Layher	8224a8e4bf	nixos: factor out nftables LAN groups	2020-01-24 17:42:21 -05:00
Matt Layher	58130a0701	nixos: enable PXE boot	2020-01-24 13:21:52 -05:00
Matt Layher	ef20bb32f6	nixos: refactor out network interface creation	2020-01-24 12:10:03 -05:00
Matt Layher	d72df0d9d5	nixos: add network infrastructure to hosts	2020-01-24 11:36:50 -05:00
Matt Layher	dd605c4955	nixos: factor out servers array in variables	2020-01-24 11:16:23 -05:00
Matt Layher	308f2a22bf	nixos: refactor vars.hosts, generate CoreDNS host records	2020-01-24 10:34:36 -05:00
Matt Layher	7b27006399	nixos: refactor CoreRAD config with nix functions	2020-01-23 16:52:55 -05:00
Matt Layher	858519338e	nixos: refactor dhcpd4 config with nix functions	2020-01-23 16:39:38 -05:00
Matt Layher	ba8b5bd379	nixos: inline CoreDNS internal zone hosts	2020-01-23 15:48:50 -05:00
Matt Layher	d5448675b5	nixos: move traefik configs to router	2020-01-23 14:47:42 -05:00
Matt Layher	b99fe81ab2	nixos: new CoreRAD config format	2020-01-23 12:26:59 -05:00
Matt Layher	adf6d0b994	nixos: enable automatic GC	2020-01-21 12:31:16 -05:00
Matt Layher	fa896789e6	nixos: enable automatic upgrades	2020-01-17 15:30:34 -05:00
Matt Layher	98025e9dd8	nixos/coredns: bind prometheus to all addresses	2020-01-17 15:15:28 -05:00
Matt Layher	f058e06a6d	nixos/corerad: bind debug to all addresses	2020-01-17 15:01:22 -05:00
Matt Layher	7c98a2e103	nixos: add iperf3	2020-01-17 14:17:53 -05:00
Matt Layher	3552d9644c	nixos: pull CoreRAD package and module from unstable	2020-01-17 10:29:51 -05:00
Matt Layher	a07880e259	nixos: sync CoreRAD module with nixpkgs copy	2020-01-16 13:41:05 -05:00
Matt Layher	7fd6c6db29	nixos: set CoreRAD unicast_only on lab0	2020-01-14 14:11:01 -05:00
Matt Layher	cbd3881f8f	nixos/pkgs: fix wgipamd module hash	2020-01-14 14:10:32 -05:00
Matt Layher	ce4455b06f	nixos/pkgs: CoreRAD v0.1.7	2020-01-14 13:41:57 -05:00
Matt Layher	40f4f284bb	nixos: enable fwupdmgr service	2020-01-13 09:38:27 -05:00
Matt Layher	b53856a30f	nixos: CoreRAD v0.1.6, adjust systemd unit	2020-01-12 17:27:02 -05:00
Matt Layher	acc5eb5468	nixos: add lshw	2020-01-12 17:20:15 -05:00
Matt Layher	9cc0aafac6	nixos/pkgs: CoreRAD v0.1.5	2020-01-12 11:20:11 -05:00
Matt Layher	8b0412f2c7	nixos: add jq	2020-01-07 16:58:46 -05:00
Matt Layher	bfcbc9905d	nixos/modules: make CoreRAD start after network-online.target	2020-01-07 15:35:44 -05:00
Matt Layher	e2e4095427	nixos: add ndisc6 package	2020-01-07 14:18:31 -05:00
Matt Layher	2c90e95e5a	nixos: bump CoreRAD v0.1.4	2020-01-06 10:38:16 -05:00
Matt Layher	492e24c0fd	nixos: initial commit of router configuration ... Signed-off-by: Matt Layher <mdlayher@gmail.com>	2020-01-04 17:16:31 -05:00