Commit Graph

17 Commits

Author SHA1 Message Date
Eli Ribble 1c10ea89d7 Add working proof-of-concept of frp server (frps)
This is working on a single IPv6 address of the two we now have
avaliable. Because nginx is still binding to port 80 on all addresses,
we have to test this on port 8081, which is less than ideal. Still, it's
progress.
2025-01-22 01:34:25 -07:00
Eli Ribble 3993b526a5 Convert from cloud-init networking to static networking
This is honestly pretty ugly. The issue is that I want two different
IPv6 addresses on this server. I get one address for free as part of my
hosting agreement. The other I have to pay $0.01 per month for. The
address is routable, but it's not provided via cloud-init like the
initial address.

I therefore took the data from /var/lib/cloud/instance/network-config.json
and translated it into this configuration manually. It's dangerous - I
don't know when any of this information may change.

However, it works, and both addresses are now bound to eth0.

Notice that I set the network configuration name to "09-wan". This is
because the previous configuration using cloud-init created a network
configuration at /etc/systemd/network/10-cloud-init that has to be
manually removed or superseded.
2025-01-22 00:40:43 -07:00
Eli Ribble 99f0311a38 Fix error around --impure
I was seeing a stack trace with this at the bottom:

       error: cannot look up '<home-manager/nixos>' in pure evaluation mode (use '--impure' to override)

After reading a bit at https://nixos-and-flakes.thiscute.world/nixos-with-flakes/start-using-home-manager
I was able to craft this shape which uses home-manager in a flake and
doesn't have the same problem.
2025-01-21 23:31:00 -07:00
Eli Ribble 37c8d92d05 Add personal config files through home-manager
I'm doing more development on this server, it's nice to have my configs.
2025-01-13 06:26:32 -07:00
Eli Ribble 5421eccc0b Disable password auth in SSH and root login
More secure.
2025-01-05 19:06:15 -07:00
Eli Ribble a154a67ac8 Re-enable the bare 'sovr.cloud' certificate
It works now that our DNS entries are correct.
2025-01-05 19:05:10 -07:00
Eli Ribble 7c7b53349a Disable the firewall.
Apparently it's blocking port 80 which is making Let's Encrypt certs
fail as well as screwing with our redirect for web browsers.
2025-01-03 09:02:48 -07:00
Eli Ribble d7aabdf198 Add ACME-based Let's Encrypt certificate for TLS
The bare "sovr.cloud" certificate doesn't work yet, but I'm leaving it
there for now.
2025-01-03 09:02:07 -07:00
Eli Ribble f57f7097c1 Add ssh key for eliribble, sort properties alhpabetically 2025-01-02 10:17:39 -07:00
Eli Ribble 4ae53fe701 Add sovr session secret to sovr-server config 2025-01-02 10:17:16 -07:00
Eli Ribble c26aef1700 Add 'deploy' user
We'll use this to run our server process
2025-01-02 10:16:32 -07:00
Eli Ribble e2461e9149 Initial sovr-server systemd service config
This also changes to directly referencing the local git checkout of my
flake definition which makes it faster and safer to iterate on the
logic.

At this point I am creating a systemd unit file, but it's not correct at
all.
2025-01-02 07:35:32 -07:00
Eli Ribble e3779851bb Move timezone to be alpha-sorted 2025-01-02 07:20:42 -07:00
Eli Ribble 1f3d84e37c Add working config for sovr flake.
This builds the sovr-server software from the flake defined in its root.
2025-01-02 07:20:14 -07:00
Eli Ribble 9a0d2bac7b Add neovim to sovr 2025-01-02 07:19:55 -07:00
Eli Ribble 2f950e883d Switch sovr cloud to management via flakes. 2024-12-28 21:37:57 -07:00
Eli Ribble 235a6d3ce9 Add initial working just.hosting cloud config 2024-12-27 05:50:43 -07:00