Commit graph

22 commits

Author SHA1 Message Date
2e07572759 Move matrix secrets to central secrets location 2025-08-27 17:52:15 +00:00
684f7e0910 Fully-specify defaultGateway for corp
This is required now that we're using networkd through the new base
module
2025-08-27 17:52:15 +00:00
8b669fe507 Add firewall configuration to sync 2025-08-23 18:33:57 +00:00
f8f8bc368a Add glitchtip self-hosted
This doesn't yet do SSO correctly, I'm still trying to figure out how to
configure Django allauth via environment variable.
2025-08-22 22:18:23 +00:00
3f509cc124 Add fieldseeker webserver 2025-08-20 23:58:18 +00:00
25739ab71b First inklings of fieldseeker-sync building for our sync host 2025-08-18 19:39:13 +00:00
63a8f1c81d Simplify the base configuration for sync, rely on other modules
All of this is redundant and defined in other modules, as it should be.
From here we can start building up what makes sync unique rather than
copy-pasting.
2025-08-18 19:39:13 +00:00
c427bda5b0 Create sync nidus host configuration
It has next to nothing in it, at this point.
2025-08-15 00:34:21 +00:00
99989ae4bd Enable librechat on corp 2025-07-22 17:01:09 +00:00
d4a75abe51 Get librechat working
With these changes I have librechat running and being properly
reverse-proxied and I can login via SSO. I was not able to get a
reasonable response yet from Claude.
2025-07-21 20:14:35 +00:00
2e69a67b2a Update test-corp modules for latest testing 2025-07-21 18:53:24 +00:00
a9f75cb5dc Flesh out cloudreve with secrets and caddy proxy 2025-07-19 00:45:50 +00:00
a26ed33b42 Switch to caddy, remove onlyoffice, add collabora
Most things work on this commit, except the integration between
collabora and seafile. I think it might be related to the timezone
change I made and a lack of access_token being passed in the URL.

I'm going to test that with a reboot. But first, checkpoint!
2025-07-18 22:45:02 +00:00
71d8bff1e6 Enable redis within the authentik pod, add redis to corp
We put it in the pod because I don't know how to make it accessible to
things in the bod without binding all host addresses. There's probably a
sophisticated way to do it correctly, but I don't want to figure it out
yet.
2025-07-18 19:04:50 +00:00
b94bea0a59 Remove redundant settings from corp
These are covered in the base image now.
2025-07-18 18:05:37 +00:00
9da3485bfd Add the authentik secrets to the authentik module 2025-07-18 15:55:17 +00:00
07d3b9d35e Make podman a separate module
We're going to hide more in there.
2025-07-18 15:46:21 +00:00
259c621a2f Create base test-corp environmnt
This creates more commonality between a nixos-anywhere bootstrapped
system and a locally built nixos image, which is good.
2025-07-17 19:39:38 +00:00
3e83a50e38 Move disabledModules specification into custom onlyoffice module
This is what allows us to override the way the module is defined in the
system
2025-07-17 17:07:17 +00:00
c022445849 Add more complex user setup for eliribble
Includes fish functions and neovim via nix
2025-07-16 15:19:35 -07:00
0c8fea347a Add secrets and home config to the corp machine 2025-07-16 09:55:20 -07:00
ecbb1b932c Migrate corp configuration to this repository and use flakes 2025-07-16 09:36:39 -07:00