Commits · c17552212195bd4a668292ddabc32fd8f0ae6181 · PrivateStorage / PrivateStorageio · GitLab

Snippets Groups Projects

Jun 01, 2021
- Instantiate key path in grid.nix · c1755221
  Florian Sesser authored 3 years ago
  
  c1755221
- Apply symlink-to-secrets changes also to local grid · 337f8c72
  Florian Sesser authored 3 years ago
  
  337f8c72
- Bring in production users too · 2bfab775
  Jean-Paul Calderone authored 3 years ago
  
  2bfab775
- Remove an implicit dependency on some ssh_config settings · 30912be3
  Jean-Paul Calderone authored 3 years ago
  
  30912be3
- Follow the staging payment server to its new address · 52e86f35
  Jean-Paul Calderone authored 3 years ago
  
  52e86f35
- regularize the naming a bit · 01628966
  Jean-Paul Calderone authored 3 years ago
  
  01628966
- make users non-secret · c6f0a564
  Jean-Paul Calderone authored 3 years ago
  
  The default case was actually catastrophically bad for any actual deployment since it would just lock everyone out of all the systems.
  c6f0a564
- Take the symlink out of git and add instructions about how to provide secrets · b0c7995c
  Jean-Paul Calderone authored 3 years ago
  
  b0c7995c
- Add symlink to secrets · 51b981bd
  Florian Sesser authored 3 years ago
  
  More flexibility and less dots in config files. Implements #65.
  51b981bd
May 30, 2021
- VPN: make endpoint setting mandatory · fa3bb7f2
  Florian Sesser authored 3 years ago
  
  fa3bb7f2
- Some more clean up: Shorten enableVpn · 2c1fd164
  Florian Sesser authored 3 years ago
  
  2c1fd164
- Also make VPN optional for monitoring host · 8125e977
  Florian Sesser authored 3 years ago
  
  8125e977
- Rename monitoringvpnSecretKeyDir -> monitoringvpnKeyDir · 525ddb5d
  Florian Sesser authored 3 years ago
  
  ... clean up
  525ddb5d
- Make VPN optional - fix testing and production grid configs · 671e9f0f
  Florian Sesser authored 3 years ago
  
  671e9f0f
- Add new private.storage domain to allowed charge origin · 0b375b55
  Florian Sesser authored 3 years ago
  
  We might want to merge this before turning on live payment. Related to privatestorageops#333.
  0b375b55
May 29, 2021
- Assume preshared key to reside where the other keys are · 5e99d8f4
  Florian Sesser authored 3 years ago
  
  Less (SLOC) is more
  5e99d8f4
May 26, 2021
- Paths don't end with slashes here · 18c5fc6d
  Florian Sesser authored 3 years ago
  
  18c5fc6d
May 25, 2021
- Move key generating docs into operations documentation · 73d379a6
  Florian Sesser authored 3 years ago
  
  73d379a6
- Add docs on how to create VPN keypairs · 97469b37
  Florian Sesser authored 3 years ago
  
  97469b37
- fix vpn private key path pointers · c1093ad8
  Florian Sesser authored 3 years ago
  
  c1093ad8
- Remove parameter from config.json · 45d02576
  Florian Sesser authored 3 years ago
  
  45d02576
May 19, 2021
- clean up server public key config leftovers · f0794576
  Florian Sesser authored 3 years ago
  
  f0794576
- Move secret key file locations into config.json · d39d3496
  Florian Sesser authored 3 years ago
  
  d39d3496
- Place keys on tmpfs · 96e6e291
  Florian Sesser authored 3 years ago
  
  sed -i 's|var/secrets|run/keys|' See Ops#193
  96e6e291
- JP is right, the rec isn't needed anymore · a7ff94b3
  Florian Sesser authored 3 years ago
  
  a7ff94b3
- README: mention config.json · 7d6bd70b
  Florian Sesser authored 3 years ago
  
  7d6bd70b
May 18, 2021
- Configuring VPN IPs for the testing grid as well to make CI work · 4441cb90
  Florian Sesser authored 3 years ago
  
  4441cb90
- Configure machine sets manually for now · cde65f5c
  Florian Sesser authored 3 years ago
  
  ... leave some coding fun for later!
  cde65f5c
May 17, 2021
- Try to create list of clients for VPN server using nix · 29b4570a
  Florian Sesser authored 3 years ago
  
  29b4570a
May 16, 2021
- VPN: Add remaining hosts, use files for client endpoint pubkeys · f9fe1170
  Florian Sesser authored 3 years ago
  
  f9fe1170
- VPN: Add IP parameter · 679ecdf0
  Florian Sesser authored 3 years ago
  
  679ecdf0
- vpn client: use more defaults · 296d219a
  Florian Sesser authored 3 years ago
  
  296d219a
- vpn: add global preshared key. post-quantum resistence sounds great! · 0faf6ac7
  Florian Sesser authored 3 years ago
  
  0faf6ac7
- vpn: ip (singular) · ef4a991f
  Florian Sesser authored 3 years ago
  
  ef4a991f
May 15, 2021
- WIP · f3656eff
  Florian Sesser authored 3 years ago
  
  f3656eff
- fix numbers · e6dc3541
  Florian Sesser authored 3 years ago
  
  e6dc3541
- monitoring vpn wip · ee7d7ca0
  Florian Sesser authored 3 years ago
  
  ee7d7ca0
May 14, 2021
- move all of the secrets onto transient (tmpfs) storage · e41dcb9e
  Jean-Paul Calderone authored 3 years ago
  
  e41dcb9e
- Avoid repetition of the secret destination paths in issuer config · 754f8d2d
  Jean-Paul Calderone authored 3 years ago
  
  754f8d2d
- Add monitoring host · 63c1d604
  Florian Sesser authored 3 years ago
  
  63c1d604