infra/common/default.nix

{
  imports = [
    ./admins.nix
    ./server-acl.nix
    ./base-server.nix
    ./hardening.nix
    ./nix.nix
    ./raito-proxy-aware-nginx.nix
    ./sysadmin
    ./hardware
    ./zsh.nix
    ./secrets.nix
  ];
}
meta01: init Includes: - Raito VM module - Raito proxy aware NGINX module - Base server module - Sysadmin module - New SSH keys - Netbox module Signed-off-by: Raito Bezarius <masterancpp@gmail.com> 2024-07-01 17:11:01 +00:00			`{`
			`imports = [`
			`./admins.nix`
feat: finer-grained ACLs for server accesses In the process of adding multi-tenant infrastructure, it seems relevant to add finer-grained ACLs. Signed-off-by: Raito Bezarius <masterancpp@gmail.com> 2024-08-01 21:41:05 +00:00			`./server-acl.nix`
meta01: init Includes: - Raito VM module - Raito proxy aware NGINX module - Base server module - Sysadmin module - New SSH keys - Netbox module Signed-off-by: Raito Bezarius <masterancpp@gmail.com> 2024-07-01 17:11:01 +00:00			`./base-server.nix`
add global hardening options 2024-07-09 22:46:20 +00:00			`./hardening.nix`
common: provide a pinned nixpkgs on all infra machines 2024-07-10 15:17:18 +00:00			`./nix.nix`
			`./raito-proxy-aware-nginx.nix`
			`./sysadmin`
feat: introduce Oracle VMs and Hetzner VMs as hardware types This includes aarch64-linux variants for these hosters. Signed-off-by: Raito Bezarius <masterancpp@gmail.com> 2024-10-05 15:36:52 +00:00			`./hardware`
change the default user shell to zsh 2024-07-12 17:20:41 +00:00			`./zsh.nix`
feat: multi-tenant secrets Lix may have its own secrets and we want to maintain a certain generalization level on the NixOS modules, so we can decorrelate which secret we select dynamically by having a simple tenancy hierarchy system. This unfortunately requires to rewrite all call sites with a floral prefix until we migrate them to the simple internal secret module which is aware of this. Signed-off-by: Raito Bezarius <masterancpp@gmail.com> 2024-10-05 16:03:41 +00:00			`./secrets.nix`
meta01: init Includes: - Raito VM module - Raito proxy aware NGINX module - Base server module - Sysadmin module - New SSH keys - Netbox module Signed-off-by: Raito Bezarius <masterancpp@gmail.com> 2024-07-01 17:11:01 +00:00			`];`
			`}`