10978 Commits

Author SHA1 Message Date
Jörg Thalheim
410eecb988 monitoring: regenerate test certificates with 100-year expiration
Regenerated telegraf test certificates to use the new 100-year
expiration period instead of the default 30-day expiration.

Related to #5605
2025-10-21 15:28:41 +02:00
Jörg Thalheim
98136142b4 monitoring: extend telegraf certificate expiration to 100 years
The default 30-day expiration was causing certificates to expire
frequently, breaking monitoring. Setting to 100 years provides a
temporary solution until automated certificate rotation is implemented.

Fixes #5605
2025-10-21 15:28:41 +02:00
Jörg Thalheim
37da9fb3e4 sshd: client role inherits searchDomains from all servers
The client role now automatically collects and merges searchDomains from
ALL servers in the instance when not explicitly configured. This eliminates
redundant configuration and ensures clients trust certificates from all
servers.

Also uses lib.mkIf with .exists check to safely handle the openssh-cert
generator access, checking searchDomains first to enable lazy evaluation.
2025-10-21 15:28:41 +02:00
clan-bot
4566ad9789 Merge pull request 'Update nixpkgs-dev in devFlake' (#5602) from update-devFlake-nixpkgs-dev into main 2025-10-21 12:47:33 +00:00
clan-bot
6faacc7dde Update nixpkgs-dev in devFlake 2025-10-21 10:02:01 +00:00
hsjobeki
0d088cac7e Merge pull request 'modules-1' (#5598) from modules-1 into main
Reviewed-on: https://git.clan.lol/clan/clan-core/pulls/5598
2025-10-20 16:56:29 +00:00
Johannes Kirschbauer
3ffad3f97f inventory: add docs for available specialArgs in service submodules 2025-10-20 16:53:56 +00:00
Johannes Kirschbauer
3d0c281fd6 inventory: add clanLib to specialArgs 2025-10-20 16:53:56 +00:00
Mic92
5b399fd447 Merge pull request 'vars: respect deploy flag for shared secrets' (#5572) from oneingan/clan-core:vars-no-deploy into main
Reviewed-on: https://git.clan.lol/clan/clan-core/pulls/5572
2025-10-20 15:37:03 +00:00
clan-bot
bfedc93f2c Merge pull request 'Update test-fixtures in devFlake' (#5597) from update-devFlake-test-fixtures into main 2025-10-20 15:06:46 +00:00
clan-bot
c63e706fe9 Merge pull request 'Update nixpkgs-dev in devFlake' (#5596) from update-devFlake-nixpkgs-dev into main 2025-10-20 15:06:26 +00:00
clan-bot
dfc241c62d Update test-fixtures in devFlake 2025-10-20 15:01:44 +00:00
clan-bot
6fcdc05911 Update nixpkgs-dev in devFlake 2025-10-20 15:01:40 +00:00
hsjobeki
137f22b39e Merge pull request 'docs: add docs for clanLib' (#5594) from inventory-fixes-3 into main
Reviewed-on: https://git.clan.lol/clan/clan-core/pulls/5594
2025-10-20 14:24:57 +00:00
Johannes Kirschbauer
9857a395f1 docs: add docs for clanLib 2025-10-20 14:57:10 +02:00
hsjobeki
4302b06715 Merge pull request 'docs: add docs for finalSettings' (#5593) from inventory-fixes-3 into main
Reviewed-on: https://git.clan.lol/clan/clan-core/pulls/5593
2025-10-20 12:46:06 +00:00
Johannes Kirschbauer
064bc43f27 docs: add docs for finalSettings 2025-10-20 14:41:06 +02:00
hsjobeki
7ab1b6823f Merge pull request 'inventory: expose finalSettings of every machine' (#5581) from inventory-fixes-3 into main
Reviewed-on: https://git.clan.lol/clan/clan-core/pulls/5581
2025-10-20 12:38:50 +00:00
Johannes Kirschbauer
f96a487bc3 inventory: expose finalSettings of every machine 2025-10-20 14:32:49 +02:00
Mic92
e6a1953785 Merge pull request 'ci/build-clan-app: drop --system' (#5592) from mic92-patch-1 into main
Reviewed-on: https://git.clan.lol/clan/clan-core/pulls/5592
2025-10-20 12:30:03 +00:00
Mic92
4bedb380b8 ci/build-clan-app: drop --system
this changes nix into believing it can run darwin, when it cannot, it should however do remote builds
2025-10-20 12:27:12 +00:00
clan-bot
3b070ae1f3 Merge pull request 'Update treefmt-nix' (#5587) from update-treefmt-nix into main 2025-10-20 10:10:25 +00:00
clan-bot
bdb0a97285 Merge pull request 'Update flake-parts' (#5586) from update-flake-parts into main 2025-10-20 10:10:03 +00:00
clan-bot
a0cce07259 Merge pull request 'Update treefmt-nix in devFlake' (#5588) from update-devFlake-treefmt-nix into main 2025-10-20 10:09:53 +00:00
clan-bot
1edf576702 Update treefmt-nix in devFlake 2025-10-20 10:01:43 +00:00
clan-bot
7824ee99cb Update treefmt-nix 2025-10-20 10:01:21 +00:00
clan-bot
13c20242ad Update flake-parts 2025-10-20 10:00:47 +00:00
clan-bot
ba81b1ae12 Merge pull request 'Update nixpkgs-dev in devFlake' (#5585) from update-devFlake-nixpkgs-dev into main 2025-10-20 05:07:22 +00:00
clan-bot
7eb54b6564 Update nixpkgs-dev in devFlake 2025-10-20 05:01:42 +00:00
clan-bot
5c007edd9f Merge pull request 'Update treefmt-nix' (#5583) from update-treefmt-nix into main 2025-10-19 20:07:55 +00:00
clan-bot
03ba598842 Merge pull request 'Update treefmt-nix in devFlake' (#5584) from update-devFlake-treefmt-nix into main 2025-10-19 20:07:52 +00:00
clan-bot
d699f0b66a Update treefmt-nix in devFlake 2025-10-19 20:01:46 +00:00
clan-bot
65e599b92a Update treefmt-nix 2025-10-19 20:01:21 +00:00
hsjobeki
788f8beea4 Merge pull request 'inventory: remove role.settings' (#5579) from inventory-fixes-2 into main
Reviewed-on: https://git.clan.lol/clan/clan-core/pulls/5579
2025-10-19 16:54:31 +00:00
hsjobeki
da8768c4c0 Merge pull request 'helloWorld: bring back example code' (#5582) from dos into main
Reviewed-on: https://git.clan.lol/clan/clan-core/pulls/5582
2025-10-19 16:12:00 +00:00
Johannes Kirschbauer
eb11054f65 helloWorld: bring back example code 2025-10-19 18:07:14 +02:00
clan-bot
5922b4617c Merge pull request 'Update nixpkgs-dev in devFlake' (#5580) from update-devFlake-nixpkgs-dev into main 2025-10-19 15:06:11 +00:00
clan-bot
5286994288 Update nixpkgs-dev in devFlake 2025-10-19 15:01:39 +00:00
pinpox
8ad025b462 Merge pull request 'Fix deprecated test names' (#5575) from fix-borgbackup-vars into main
Reviewed-on: https://git.clan.lol/clan/clan-core/pulls/5575
Reviewed-by: Kenji Berthold <aks.kenji@protonmail.com>
Reviewed-by: hsjobeki <hsjobeki@gmail.com>
2025-10-19 14:47:22 +00:00
Johannes Kirschbauer
4442cb2fe0 inventory: remove role.settings
Within a clan.service the module can access 'role.peer.settings' and 'role.peer.machine.jon.settings'
While the current machine is jon, accessing the role settings is arguably a design mistake.
I didn't catch that problem, unfortunately this might be a breaking change
2025-10-19 16:43:21 +02:00
hsjobeki
460c6d4fc9 Merge pull request 'inventory: fix internal indentifier' (#5576) from inventory-fixes-2 into main
Reviewed-on: https://git.clan.lol/clan/clan-core/pulls/5576
2025-10-19 14:25:45 +00:00
pinpox
893fa47a50 Run treefmt 2025-10-19 15:17:41 +02:00
pinpox
62d3a18783 clanServices/wireguard: fix deprecated test name
- fix test name to new format
- regenerate vars via update-vars
2025-10-19 15:09:42 +02:00
pinpox
ac1cd5114a clanServices/admin: fix deprecated test name
- fix test name to new format
- regenerate vars via update-vars
2025-10-19 15:07:25 +02:00
pinpox
e0b5855013 clanServices/trusted-nix-caches: fix deprecated test name
- fix test name to new format
- regenerate vars via update-vars
2025-10-19 15:01:39 +02:00
pinpox
4fd057413f clanServices/sshd: fix deprecated test name
- fix test name to new format
- regenrate vars via update-vars
2025-10-19 14:59:40 +02:00
pinpox
96fcc41b19 clanServices/zerotier: fix deprecated test name
- fix test name to new format
- regenerate vars via update-vars
2025-10-19 14:55:03 +02:00
pinpox
811b994d57 clanServices/wireguard: fix deprecated test name
- fix test name to new format
2025-10-19 14:54:01 +02:00
pinpox
87aa62e128 clanServices/wifi: fix deprecated test name
- fix test name to new format
- regenerate vars via update-vars
2025-10-19 14:53:48 +02:00
pinpox
612275477a clanServices/users: fix deprecated test name
- fix test name to new format
- regenerate vars via update-vars
2025-10-19 14:52:55 +02:00