DavHau
8f520f1806
vars: add generators.<name>.finalScript
2024-07-02 16:37:31 +07:00
DavHau
1235aa42d9
secrets: add settings, generator submodules, improve tests
2024-07-02 15:38:46 +07:00
DavHau
268adbe100
vars: simplify eval tests by using submodule directly
2024-07-02 13:55:00 +07:00
clan-bot
f21c4569b4
Merge pull request 'fix secret generation on macos' ( #1669 ) from fix-macos-deploy into main
2024-06-30 06:25:39 +00:00
Jörg Thalheim
cb9fbc969b
introduce minifakeroot that also works on macos
2024-06-27 18:53:10 +02:00
Jörg Thalheim
2ed8bba017
make bubblewrap in fact generation optional
2024-06-27 18:23:05 +02:00
DavHau
dfcf4d8309
vars: init
...
- init eval tests
- init basic interface
2024-06-27 21:09:55 +07:00
Johannes Kirschbauer
0d4928ab73
Inventory: init module merge & validation logic for inventory
2024-06-25 12:23:29 +00:00
Johannes Kirschbauer
eb221244e6
Extend build-clan interface
2024-06-25 12:23:29 +00:00
Johannes Kirschbauer
4db65921fe
inventory: rename clan.services
2024-06-25 12:23:29 +00:00
Johannes Kirschbauer
1b226c9e09
update inventory implementation
2024-06-25 12:23:29 +00:00
Jörg Thalheim
5b351da166
fix fake-etc build on machines without sandbox
...
If we have no sandbox enabled or on macos with sandbox enabled, /etc
contains a lot more files than we actually want.
Instead of copying some random files, we now just create those files
ourself.
2024-06-21 17:01:40 +02:00
Jörg Thalheim
e68ebc8d6c
clan.core.state: wrap all commands in shell scripts
...
Otherwise we cannot execute them via ssh and also have nix store
dependencies.
2024-06-19 17:54:46 +02:00
DavHau
4db2e8303f
refactor: rename clanCore -> clan.core
2024-06-18 18:32:40 +07:00
DavHau
93f0ee9dd3
vm.nix: fix typo in comment
2024-06-11 14:44:08 -07:00
Jörg Thalheim
70c86efe6f
backup: add a way to stop services before restoring a state.
2024-06-06 17:30:35 +02:00
Jörg Thalheim
46530a0a9c
postgresql: add backup and restore
2024-06-06 14:28:50 +02:00
Jörg Thalheim
4822fbc80e
add postgresql backup hooks
2024-06-06 13:27:30 +02:00
Jörg Thalheim
908fdb444f
drop deprecated mdDoc
2024-05-28 13:35:11 +02:00
Qubasa
edcc92c75b
Add package function-schema and module-schema. Add check for module jsonschema.
2024-05-01 23:16:17 +02:00
lassulus
44b25fc08f
clanCore: remove repl-flake as it is now stable
2024-04-27 16:28:23 +02:00
lassulus
552db78555
facts password-store: take path from variable
2024-04-21 19:09:46 +02:00
Jörg Thalheim
751f676079
rework multicast support
2024-04-17 10:57:17 +02:00
Jörg Thalheim
139adc7a72
sops/compat: fix name reference
2024-04-12 13:23:52 +02:00
Jörg Thalheim
b8d474402a
sops: fix secret path generation
2024-04-12 13:12:31 +02:00
Jörg Thalheim
d974da9fee
also enable LLMNR
2024-04-10 15:14:30 +00:00
Jörg Thalheim
d049067096
factstore: secret backends now can return the path to a secret dynamically
...
try to move path function out
2024-04-10 15:14:30 +00:00
Jörg Thalheim
42b482d572
fix multicast dns for ethernet
2024-04-10 15:14:30 +00:00
Jörg Thalheim
544c618958
enable multicast fore default dhcp network
2024-04-09 13:35:51 +00:00
Jörg Thalheim
aa0db5dc6d
sops: strip out clanCore.machineName instead of networking.hostName
2024-04-09 15:10:27 +02:00
Jörg Thalheim
184ecbebec
drop custom systemd-networkd unit
...
We no longer use multicast dns. This one doesn't
conflict with nixos-generate-config.
2024-04-09 12:31:57 +02:00
Jörg Thalheim
4c6280553c
sops: fix decrypte path on machine
2024-04-02 13:50:24 +02:00
DavHau
46afc1879c
docs: render module options docs
...
fix errors while rendering some modules
2024-03-31 00:26:08 +07:00
DavHau
25977f6074
secrets: improve description of generator script
2024-03-30 17:16:26 +07:00
Jörg Thalheim
237fb9234d
migrate secrets to new api
2024-03-28 11:02:14 +01:00
lassulus
2893025f3f
refactor clanCore.secrets -> clanCore.facts
2024-03-27 16:03:16 +01:00
DavHau
90a504936c
checks: add check for rendering docs
2024-03-27 16:59:42 +07:00
DavHau
1edc8678f5
clanCore/packages.nix: add gitMinimal
...
WIthout this, deployment via `clan machines update` will fail on the remote machine if the flake.nix has a git input
2024-03-25 11:47:32 +07:00
lassulus
8d34c51df2
refactor secrets & facts -> secret_facts & public_facts
2024-03-23 05:46:54 +01:00
Jörg Thalheim
c69a9e05a6
backups: skip preRestore and postRestore if not specified by a service
2024-03-20 09:32:01 +01:00
Jörg Thalheim
56760f0e8d
rework backup interface to no longer need to list backups to restore them
2024-03-20 09:32:01 +01:00
Jörg Thalheim
ede4d3f6e5
re-format with nixfmt
2024-03-17 19:48:49 +01:00
Jörg Thalheim
7fb05130c9
don't use impure builtins.storePath
2024-03-17 18:10:23 +01:00
Jörg Thalheim
789bb82835
change facts path to be reachable as a store path
2024-03-17 18:10:23 +01:00
Jörg Thalheim
406033b69a
fix openssh secrets
...
change facts path to be the full path
sshd: fixup store path
2024-03-13 14:59:46 +01:00
Jörg Thalheim
c52cffca37
allow fact-only secrets
2024-03-13 11:08:36 +01:00
a-kenji
20074bf5ec
enable: spice-vdagent if xserver is enable
2024-03-12 16:00:54 +00:00
Jörg Thalheim
c23a878dfd
drop meshnamed from repository
...
It's not super useful and we can always add it back later if we need it.
2024-03-06 10:02:21 +01:00
a-kenji
ee41416697
secrets: fix typo
2024-03-05 11:59:55 +01:00
lassulus
9880dede41
clan-cli: add interactive secrets/fact generation
2024-03-03 04:06:18 +01:00
