101677688e
trust-dns: note that --debug doesnt act as expected
2023-11-27 06:53:48 +00:00
275f1ba49f
trust-dns: 0.23.0 -> 0.24.0
2023-10-24 02:36:08 +00:00
77b4e7ff09
slightly better prosody + coturn integration
...
still not able to receive incoming calls, but i pass more prosody self-checks
2023-10-17 09:43:55 +00:00
827d9626d6
ports: actually forward ovpns ports into the root namespace
2023-10-17 09:42:13 +00:00
83586ce483
trust-dns: cleanup some typos
2023-10-02 22:33:54 +00:00
e20c4d01e6
trust-dns: fix missing "mkdir" during service startup
2023-10-02 22:12:09 +00:00
01cad7b702
trust-dns: perform more specialization via structured config instead of sed
2023-10-02 22:02:46 +00:00
48715546e2
trust-dns: split into separate (restartable) services
2023-10-02 21:30:51 +00:00
6d7ff7ea86
fix trust-dns to resolve when invoked from VPN
2023-09-22 18:54:12 +00:00
00d831e755
wg-home: fix DNS forwarding
...
ugh, this is a mess, but it seems to work
2023-09-22 14:36:56 +00:00
63d65a453c
trust-dns: spin up a separate server to wg-home requests, also forwarding them to upstream
2023-09-22 12:36:48 +00:00
f54d5a68ff
trust-dns: 0.22.1 -> 0.23.0
2023-09-13 02:53:06 +00:00
29b53d934f
trust-dns: apply PR feedback
2023-07-15 09:07:57 +00:00
41f4d8e85a
trust-dns: specify zone via shorthand
2023-07-13 10:04:20 +00:00
e38bf42506
trust-dns: migrate module to nixpkgs repo
2023-07-13 09:57:11 +00:00
452260f7c7
trust-dns: don't run as root
2023-07-10 09:00:37 +00:00
9777e5f83c
trust-dns: rework the module to be more suitable for upstreaming
...
still need to do hardening and docs
2023-07-02 08:21:33 +00:00
4fd4efa22f
DNS: split the zone generation out of trust-dns
...
this is in preparation for upstreaming parts of this into nixpkgs
2023-06-08 00:32:28 +00:00
287817056f
refactor: sane.services.wan-ports -> sane.ports
2023-05-31 04:25:39 +00:00
5cc7ced859
dns: rework so that we branch to the LAN v.s. WAN results based on source IP of the query -- not interface.
...
this simplifies the UPnP forwards and the OVPN routing
2023-05-31 00:56:52 +00:00
4dc5378b3e
dns: give different results based on which port the request arrives from
...
WAN and VPN requests are served by local port 1053 and `wan.uninsane.org`.
LAN requests are served by port 53 and `servo.lan.uninsane.org`.
i'm not *super* fond of this. a recursive resolver of uninsane.org via the VPN will only ever get WAN addresses (broken).
we may prefer to do IP-based responses, maybe via the same Linux firewall rules that forward from VPN namespace to root namespace
2023-05-30 12:00:30 +00:00
478002766e
trust-dns: fetch lan IP to listen on from config instead of repeating myself
2023-02-21 11:38:27 +00:00
499078e0f8
trust-dns: update the address we listen on
2023-02-21 11:25:16 +00:00
33d7819619
trust-dns: add a "quiet" option and enable it
2023-01-25 08:18:29 +00:00
d13bcc49ab
refactor hosts directory, and move ssh keys out of modules/data
...
longer-term, i want hosts/by-name to define host-specific data
that's accessible via the other hosts (things like pubkeys).
also the secrets management needs some rethinking. there's really not
much point in me specifiying where *exactly* a secret comes from at its
use site. i should really be specifying secret store manifests; i.e.
"servo.yaml contains secrets X Y and Z", and leaving the rest up to
auto-computing.
2023-01-19 23:23:43 +00:00
