nixos

beatzaplenty/nixos

Archived

Fork 0

Commit Graph

Select branches

Hide Pull Requests

add-backup-admin-key-script

add-claude-builder-key

feature/ha-docker-swarm

fix-duplicate-host-self-match

fix-nix-cache-probe-retry

fix-proxmox-remote-build-bootstrap

fix-stale-docs

fix-stale-wording

fix-sync-host-keys-clan-vars

fix/static-ips

main

refactor/secrets

remove-deploy-status-from-readme

server-boot-fix

worktree-baremetal-emergency-access

worktree-baremetal-esp-unmount

worktree-beszel-tailscale-router

worktree-claude-md-pve-guardrails

worktree-clone-pve1-to-pve-test

worktree-crispy-churning-kernighan

worktree-docker-gui-fix

worktree-docker-ipa-group

worktree-docs-beszel-guide

worktree-fix-container-dns-search-domain

worktree-fix-duplicate-host-check-exitcode

worktree-fix-lxc-docker-nfs-mounts

worktree-fix-nix-cache-host-key

worktree-fix-pxe-netboot-hang

worktree-fix-tailscale-host-dir

worktree-fix-zfs-install-export

worktree-fizzy-juggling-sedgewick

worktree-flake-e2e-audit

worktree-full-sweep

worktree-functional-mapping-russell

worktree-gentle-cuddling-hippo

worktree-gui-wifi-module

worktree-ha-file-server-test

worktree-ha-resize-disk

worktree-harmonic-jingling-bee

worktree-ipa-client-module

worktree-ipa-common-config

worktree-ipa-lxc-kerberos-fix

worktree-lovely-spinning-bubble

worktree-maintenance-script-changed-files-only

worktree-migrate-vm-script

worktree-nix-cache-502-fix

worktree-nix-cache-client-script

worktree-nix-cache-lxc-migration

worktree-parallel-host-eval

worktree-parsed-mapping-raven

worktree-partitioned-swimming-pizza

worktree-peaceful-stirring-noodle

worktree-phase0-provision-ordering-fix

worktree-polished-wandering-toast

worktree-proxmox-remote-build

worktree-push-host-keys

worktree-pve1-nix-cache-builder

worktree-pxe-menu-rename-and-minimal

worktree-reactive-gliding-map

worktree-refactor-scripts-shared-lib

worktree-reflective-puzzling-frog

worktree-rippling-riding-snail

worktree-rotate-admin-key-script

worktree-scripts-dedup

worktree-starry-painting-whistle

worktree-tailscale-exit-node

worktree-tailscale-subnet-router-rename

worktree-tor-relay-beszel

worktree-warm-discovering-moon

worktree-zesty-wishing-knuth

#1

#10

#100

#101

#102

#103

#104

#105

#106

#107

#108

#11

#12

#13

#14

#15

#16

#17

#18

#19

#2

#20

#21

#22

#23

#24

#25

#26

#27

#28

#29

#3

#30

#31

#32

#33

#34

#35

#36

#37

#38

#39

#4

#40

#41

#42

#43

#44

#45

#46

#47

#48

#49

#5

#50

#51

#52

#53

#54

#55

#56

#57

#58

#59

#6

#60

#61

#62

#63

#64

#65

#66

#67

#68

#69

#7

#70

#71

#72

#73

#74

#75

#76

#77

#78

#79

#8

#80

#81

#82

#83

#84

#85

#86

#87

#88

#89

#9

#90

#91

#92

#93

#94

#95

#96

#97

#98

#99

7e4b2d33fb fix(pxe-boot): open UDP 4011 for PXE boot service discovery beatzaplentyandClaude Sonnet 4.6 2026-07-27 15:12:12 +10:00
288d50fd33 Merge pull request 'Fix/pxe dnsmasq port conflict' (#83) from fix/pxe-dnsmasq-port-conflict into main beatzaplenty 2026-07-27 05:05:42 +00:00
f0e76f8aff fix(pxe-boot): use pxe-service for proxy DHCP initial boot offers beatzaplentyandClaude Sonnet 4.6 2026-07-27 15:03:01 +10:00
e80d195284 Merge branch 'fix/pxe-dnsmasq-port-conflict' beatzaplenty 2026-07-27 14:32:00 +10:00
c770feebc9 fix(pxe-boot): disable dnsmasq DNS listener to avoid port 53 conflict beatzaplentyandClaude Sonnet 4.6 2026-07-27 14:29:30 +10:00
7fd6d558d5 updated dnsmasq service beatzaplenty 2026-07-27 14:07:28 +10:00
58c40292e2 fix(pxe-boot): move dnsmasq out of systemd.services into services.dnsmasq beatzaplentyandClaude Sonnet 4.6 2026-07-27 14:02:41 +10:00
94842875d0 Merge branch 'main' of https://gitea.lan.ddnsgeek.com/beatzaplenty/nixos into worktree-network-cutover-plan beatzaplenty 2026-07-27 14:01:24 +10:00
cfa36b97fc added dnsmasq to pxe-boot beatzaplenty 2026-07-27 13:44:29 +10:00
4444398cac fix(network): wire correct IPs throughout and add cutover plan beatzaplentyandClaude Sonnet 4.6 2026-07-27 12:32:54 +10:00
f80378f92f Merge pull request 'docs(network): establish IP addressing scheme and update infra IPs' (#82) from worktree-network-ip-scheme into main beatzaplenty 2026-07-27 02:23:01 +00:00
cd4997f429 docs(network): establish IP addressing scheme and update infra IPs beatzaplentyandClaude Sonnet 4.6 2026-07-27 12:19:45 +10:00
6ce4784376 Merge pull request 'Worktree ha file server test' (#81) from worktree-ha-file-server-test into main beatzaplenty 2026-07-27 02:18:06 +00:00
5856d45575 feat(ha): wire sops secrets and disable NetworkManager for HA servers beatzaplentyandClaude Sonnet 4.6 2026-07-27 11:45:36 +10:00
e3498b1087 feat(ha): promote HA file server to production flake targets beatzaplentyandClaude Sonnet 4.6 2026-07-27 11:26:37 +10:00
724d9a45af feat(ha): add NixOS modules for DRBD+XFS+LIO+Corosync+Pacemaker HA stack beatzaplentyandClaude Sonnet 4.6 2026-07-27 09:13:55 +10:00
109429c7da Merge pull request 'feat(pxe-boot): add FreeIPA Server (Rocky Linux 9) iPXE menu entry' (#80) from worktree-freeipa-pxe into main beatzaplenty 2026-07-26 21:36:58 +00:00
40856b2e5e feat(pxe-boot): add FreeIPA Server (Rocky Linux 9) iPXE menu entry beatzaplentyandClaude Sonnet 4.6 2026-07-27 07:35:13 +10:00
23634134f0 fix(ha-test): remove Debian LVM handlers and fix corosync authkey length beatzaplentyandClaude Sonnet 4.6 2026-07-27 06:40:57 +10:00
34c55f27ca test-lab/ha: nixpkgs-fmt formatting beatzaplentyandClaude Sonnet 4.6 2026-07-27 06:18:42 +10:00
dc36a47ac9 test-lab/ha: add session key + enable qemu-guest-agent beatzaplentyandClaude Sonnet 4.6 2026-07-27 06:06:53 +10:00
750121e9dd test-lab: add two-node HA file-server test cluster config beatzaplentyandClaude Sonnet 4.6 2026-07-27 05:46:04 +10:00
479444d26a Merge pull request 'fix(sops): hard-fail on missing admin key and expand literal ~ in key path' (#79) from worktree-structured-nibbling-nova into main beatzaplenty 2026-07-26 19:43:57 +00:00
8c19ee9d72 fix(sops): hard-fail on missing admin key and expand literal ~ in key path beatzaplentyandClaude Sonnet 4.6 2026-07-27 05:42:32 +10:00
2514d3bc89 Merge pull request 'fix(lxc-pxe-boot): make privileged so NFS mounts work' (#78) from worktree-debian-pxe into main beatzaplenty 2026-07-26 19:29:25 +00:00
48d6d6f7a2 fix(lxc): auto-derive privileged from NFS fileSystems, not hostname list beatzaplentyandClaude Sonnet 4.6 2026-07-27 05:27:56 +10:00
cf0d62696f fix(lxc-pxe-boot): make privileged so NFS mounts work beatzaplentyandClaude Sonnet 4.6 2026-07-27 05:23:22 +10:00
b2a3d5fbdd Merge pull request 'docs(pxe-boot): fix NFS path, note nesting=1 requirement for LXC' (#77) from worktree-debian-pxe into main beatzaplenty 2026-07-26 19:18:48 +00:00
86e55ff954 docs(pxe-boot): fix NFS path, clarify NFSv3/NFSv4 split, document nesting=1 requirement beatzaplentyandClaude Sonnet 4.6 2026-07-27 05:13:21 +10:00
d3d6382360 Merge pull request 'fix: wire vars.nfsShares.options and correct stale share key names' (#76) from worktree-tidy-giggling-pizza into main beatzaplenty 2026-07-26 18:45:53 +00:00
b8d21d78d9 fix: wire vars.nfsShares.options and correct stale share key names beatzaplentyandClaude Sonnet 4.6 2026-07-27 04:45:16 +10:00
dcce023b14 Merge branch 'main' of https://gitea.lan.ddnsgeek.com/beatzaplenty/nixos beatzaplenty 2026-07-27 04:34:53 +10:00
4c5ade5605 updated NFS shares and added vars.nfsShares.options beatzaplenty 2026-07-27 04:34:32 +10:00
b232daf5e1 Merge pull request 'fix(pxe-boot): fix NFS mount in LXC — NFSv3+nolock and skip rpc_pipefs' (#75) from worktree-debian-pxe into main beatzaplenty 2026-07-26 18:15:58 +00:00
b65736c0dc fix(pxe-boot): fix NFS mount in LXC — NFSv3+nolock and skip rpc_pipefs beatzaplentyandClaude Sonnet 4.6 2026-07-27 04:14:18 +10:00
4f54a1f0cd Merge branch 'main' of https://gitea.lan.ddnsgeek.com/beatzaplenty/nixos beatzaplenty 2026-07-27 04:05:15 +10:00
2d85ecec8f update pxe-boot images share path beatzaplenty 2026-07-27 04:04:59 +10:00
34bb14d9f6 Merge pull request 'fix(server): open mountd port 20048 so NFS clients can scan and mount' (#74) from worktree-fix-nfs-mountd-firewall into main beatzaplenty 2026-07-26 17:57:40 +00:00
515da66db9 Merge pull request 'Worktree debian pxe' (#73) from worktree-debian-pxe into main beatzaplenty 2026-07-26 17:57:31 +00:00
2e9d3da301 fix(server): open mountd port 20048 so NFS clients can scan and mount beatzaplentyandClaude Sonnet 4.6 2026-07-27 03:56:39 +10:00
321048626e feat(pxe-boot): mount pxe-images NFS share and symlink to /srv/pxe/http/images beatzaplentyandClaude Sonnet 4.6 2026-07-27 03:54:37 +10:00
16d6baea5f Merge remote-tracking branch 'origin/main' into worktree-debian-pxe beatzaplenty 2026-07-27 03:50:56 +10:00
d082c6a084 updated nfs shares on server build type beatzaplenty 2026-07-27 03:40:19 +10:00
ee93322ae2 add proxmox nfs shares beatzaplenty 2026-07-27 03:28:46 +10:00
d1ce8d3e71 add proxmox iso share beatzaplenty 2026-07-27 03:26:31 +10:00
f7c32aff12 feat(pxe-boot): add Debian bookworm minimal netboot menu entry beatzaplentyandClaude Sonnet 4.6 2026-07-27 03:23:14 +10:00
bf88a6ebb0 added tailscale-router beszel secret beatzaplenty 2026-07-26 11:14:05 +10:00
de508141a8 removed tailscale from docker updated secrets beatzaplenty 2026-07-26 11:12:46 +10:00
18cd9c2342 Merge pull request 'feat(beszel): add beszel agent to tailscale-router' (#72) from worktree-beszel-tailscale-router into main beatzaplenty 2026-07-26 01:08:29 +00:00
997918e2f7 feat(beszel): add beszel agent to tailscale-router worktree-beszel-tailscale-router beatzaplentyandClaude Sonnet 4.6 2026-07-26 11:07:51 +10:00
9872b8ff1d Merge pull request 'fix(tailscale-router): add MASQUERADE to POSTROUTING, not nixos-nat-post' (#71) from worktree-lovely-spinning-bubble into main beatzaplenty 2026-07-26 00:01:48 +00:00
e9b225d2d6 fix(tailscale-router): add MASQUERADE to POSTROUTING, not nixos-nat-post worktree-lovely-spinning-bubble beatzaplentyandClaude Sonnet 4.6 2026-07-26 10:00:47 +10:00
2860f750b4 Merge pull request 'fix(tailscale-router): actually insert MASQUERADE rule via extraCommands' (#70) from worktree-lovely-spinning-bubble into main beatzaplenty 2026-07-25 23:56:11 +00:00
781b1d324e fix(tailscale-router): actually insert MASQUERADE rule via extraCommands beatzaplentyandClaude Sonnet 4.6 2026-07-26 09:54:33 +10:00
3014a45936 Merge pull request 'fix(tailscale-router): masquerade LAN traffic into Tailscale' (#69) from worktree-lovely-spinning-bubble into main beatzaplenty 2026-07-25 23:48:13 +00:00
cda2132d6a fix(tailscale-router): masquerade LAN traffic into Tailscale beatzaplentyandClaude Sonnet 4.6 2026-07-26 09:45:07 +10:00
6c1cc821a0 Merge pull request 'feat(tailscale): enable UDP GRO forwarding on subnet router uplink' (#68) from worktree-polished-wandering-toast into main beatzaplenty 2026-07-25 23:14:33 +00:00
4be064572d feat(tailscale): enable UDP GRO forwarding on subnet router uplink worktree-polished-wandering-toast beatzaplentyandClaude Sonnet 4.6 2026-07-26 09:13:28 +10:00
89d506180d Merge pull request 'fix(create-proxmox-resource): fix VM disk never attaching after import' (#67) from worktree-warm-discovering-moon into main beatzaplenty 2026-07-25 22:57:21 +00:00
6e1e992652 fix(proxmox): embed SSH host key via NIXOS_HOST_KEYS_DIR so sops can decrypt on first boot worktree-warm-discovering-moon beatzaplentyandClaude Sonnet 4.6 2026-07-26 08:43:27 +10:00
5467c2e140 fix(create-proxmox-resource): fix VM disk never attaching after import beatzaplentyandClaude Sonnet 4.6 2026-07-26 08:19:05 +10:00
123cd2b3d7 Merge branch 'main' of https://gitea.lan.ddnsgeek.com/beatzaplenty/nixos beatzaplenty 2026-07-26 08:23:44 +10:00
006dd8097a updated vm HDD size beatzaplenty 2026-07-26 08:23:30 +10:00
18cd6e884e Merge pull request 'fix(common): set mutableUsers = false to fix password setup on disk images' (#65) from worktree-warm-discovering-moon into main beatzaplenty 2026-07-25 21:37:34 +00:00
3102d66337 Merge pull request 'fix(create-proxmox-resource): case-insensitive importdisk parse + warn on --disk-size for VMs' (#64) from worktree-gentle-cuddling-hippo into main beatzaplenty 2026-07-25 21:37:14 +00:00
dfa5452af5 fix(common): set mutableUsers = false to fix password setup on disk images beatzaplentyandClaude Sonnet 4.6 2026-07-26 07:36:06 +10:00
852ba2240f fix(create-proxmox-resource): case-insensitive importdisk parse + warn on --disk-size for VMs worktree-gentle-cuddling-hippo beatzaplentyandClaude Sonnet 4.6 2026-07-26 06:40:54 +10:00
096dff4fa0 Merge pull request 'docs(sync-host-keys): fix stale host-keys/ references in comments and usage' (#63) from fix-stale-wording into main beatzaplenty 2026-07-25 14:36:31 +00:00
b5f749daa9 docs(sync-host-keys): fix stale host-keys/ references in comments and usage fix-stale-wording beatzaplentyandClaude Sonnet 4.6 2026-07-26 00:11:03 +10:00
adaf53d647 Merge pull request 'fix(sync-host-keys): extend --remove/--regenerate to cover clan vars' (#62) from fix-sync-host-keys-clan-vars into main beatzaplenty 2026-07-25 14:02:11 +00:00
01679f1639 fix(sync-host-keys): extend --remove/--regenerate to cover clan vars fix-sync-host-keys-clan-vars beatzaplentyandClaude Sonnet 4.6 2026-07-25 23:50:38 +10:00
8f4c88347d Merge pull request 'Worktree phase0 provision ordering fix' (#61) from worktree-phase0-provision-ordering-fix into main beatzaplenty 2026-07-25 12:20:21 +00:00
e9832d87c4 chore(vars): bulk clan vars SSH host keys for all remaining 20 flake targets worktree-phase0-provision-ordering-fix beatzaplentyandClaude Sonnet 4.6 2026-07-25 21:54:37 +10:00
08aac4261f fix(secrets): correct corrupted sops fingerprints for proxmox-minimal and lxc-gui beatzaplentyandClaude Sonnet 4.6 2026-07-25 21:54:25 +10:00
2526b2dca7 Merge pull request 'chore(secrets): Phase 4 — remove stale sops.yaml anchors and re-encrypt' (#60) from worktree-phase0-provision-ordering-fix into main beatzaplenty 2026-07-25 11:32:25 +00:00
2df53fd5d7 chore(secrets): Phase 4 — remove stale sops.yaml anchors and re-encrypt beatzaplentyandClaude Sonnet 4.6 2026-07-25 21:31:56 +10:00
5e2ff76cf7 Merge pull request 'refactor(provision): Phase 3 — remove legacy host-keys/ fallback' (#59) from worktree-phase0-provision-ordering-fix into main beatzaplenty 2026-07-25 11:24:55 +00:00
e8c4122460 refactor(provision): Phase 3 — remove legacy host-keys/ fallback beatzaplentyandClaude Sonnet 4.6 2026-07-25 21:24:32 +10:00
5db41b1166 Merge pull request 'chore(vars): clan vars SSH host key for lxc-nix-cache' (#58) from worktree-phase0-provision-ordering-fix into main beatzaplenty 2026-07-25 11:18:19 +00:00
ea7794dc05 chore(vars): commit clan vars SSH host key for lxc-nix-cache beatzaplentyandClaude Sonnet 4.6 2026-07-25 21:10:46 +10:00
67752fb1e8 Merge pull request 'fix(lxc): clan vars for lxc-tor-relay + sops-reinstall service fix (network.target)' (#57) from worktree-phase0-provision-ordering-fix into main beatzaplenty 2026-07-25 09:55:25 +00:00
1a14b1d4d3 fix(lxc): move sops-reinstall service from sysinit to network.target beatzaplentyandClaude Sonnet 4.6 2026-07-25 19:50:35 +10:00
68aea4cdcc chore(vars): commit clan vars SSH host key for lxc-tor-relay beatzaplentyandClaude Sonnet 4.6 2026-07-25 19:29:21 +10:00
0853952269 Merge pull request 'feat(provision): Phase 0-2 + fix — clan-core SSH host keys, activation ordering, boot-time sops' (#56) from worktree-phase0-provision-ordering-fix into main beatzaplenty 2026-07-25 09:16:43 +00:00
055577ee91 fix(lxc): fix activation ordering and add boot-time sops reinstall beatzaplentyandClaude Sonnet 4.6 2026-07-25 19:07:30 +10:00
a63e1c70c3 feat(provision): Phase 2 — migrate SSH host keys to clan vars beatzaplentyandClaude Sonnet 4.6 2026-07-25 18:22:33 +10:00
a9745b594b feat(flake): add clan-core 26.05 as a flake input (Phase 1, no behavior change) beatzaplentyandClaude Sonnet 4.6 2026-07-25 17:29:29 +10:00
78bb784265 fix(provision): block build until sops changes are committed, guard missing host keys beatzaplentyandClaude Sonnet 4.6 2026-07-25 17:14:25 +10:00
784e064fa2 fix(create-proxmox-resource): use absolute path for --pre-format-files beatzaplentyandClaude Sonnet 4.6 2026-07-25 16:45:04 +10:00
4a5afa6c1c Merge pull request 'fix(tailscale): rename tailscale-subnet-router to tailscale-router everywhere' (#55) from worktree-fix-tailscale-host-dir into main beatzaplenty 2026-07-25 06:37:18 +00:00
c844ccc4e3 fix(tailscale): rename tailscale-subnet-router → tailscale-router everywhere worktree-fix-tailscale-host-dir beatzaplentyandClaude Sonnet 4.6 2026-07-25 16:33:03 +10:00
9a0aea8f89 fix(create-proxmox-resource): auto-generate missing host key before sync beatzaplentyandClaude Sonnet 4.6 2026-07-25 16:25:06 +10:00
b013e28dcd Merge pull request 'fix(tailscale): rename hosts/tailscale-subnet-router → hosts/tailscale-router' (#54) from worktree-fix-tailscale-host-dir into main beatzaplenty 2026-07-25 06:24:59 +00:00
5a56030f6e fix(tailscale): rename hosts/tailscale-subnet-router → hosts/tailscale-router beatzaplentyandClaude Sonnet 4.6 2026-07-25 16:24:13 +10:00
f8719437ba fix(nix-cache): use FQDN to fix hostname resolution on clients beatzaplentyandClaude Sonnet 4.6 2026-07-25 15:59:07 +10:00
9e34b9cbb9 fix(push-host-keys): detect non-interactive stdin, direct to SUDO_PASS beatzaplentyandClaude Sonnet 4.6 2026-07-25 15:55:06 +10:00
b65d78a515 fix(push-host-keys): detect non-interactive stdin, direct to SUDO_PASS worktree-push-host-keys beatzaplentyandClaude Sonnet 4.6 2026-07-25 15:55:06 +10:00
4dabd725f0 sync nix-cache ssh key beatzaplenty 2026-07-25 15:55:04 +10:00
2743d664a5 fix(push-host-keys): remove /dev/tty probe, plain read is sufficient beatzaplentyandClaude Sonnet 4.6 2026-07-25 15:52:09 +10:00
fa53d37360 fix(push-host-keys): remove /dev/tty probe, plain read is sufficient beatzaplentyandClaude Sonnet 4.6 2026-07-25 15:52:09 +10:00

1 2 3 4 5 ...