Commit Graph

472 Commits

Author SHA1 Message Date
a4b53d344d freifunk: fix ip rules 2021-04-30 00:08:49 +02:00
b7456776b0 freifunk: enable nat for tunneled uplink 2021-04-29 23:08:28 +02:00
8bfb061785 freifunk: learn freifunk default route and share over OSPF 2021-04-29 22:55:50 +02:00
08b35d6f51 freifunk: name more bmx tables 2021-04-29 22:55:31 +02:00
8b0fb87025 freifunk: mknod /dev/net/tun 2021-04-29 21:56:37 +02:00
90c5c69ecb freifunk: switch bmxd from gateway to node mode 2021-04-29 21:54:22 +02:00
5d2ce5be83 ticker: update 2021-04-16 00:58:19 +02:00
Daniel Poelzleithner
a8b83d0187 increase body size on pulsebert 2021-04-09 17:37:27 +02:00
b9f603eba8 hydra: useSubstitutes = true
reason: https://github.com/NixOS/nixpkgs/issues/118732
2021-04-08 13:53:11 +02:00
7e73c09ad7 yggdrasil: disable radv 2021-04-04 21:11:21 +02:00
1b10fdf03d dn42: implement multiprotocol peering 2021-03-29 00:52:59 +02:00
d04f56f4c1 scrape: add luftqualitaet 2021-03-28 20:41:37 +02:00
ef5a03b68b scrape: add impfee 2021-03-24 21:11:16 +01:00
6056b78ce6 hydra: add buildMachines
did I deploy that?
2021-03-24 21:09:51 +01:00
70774131f1 grafana: rm broken route configuration 2021-03-24 21:09:18 +01:00
906ef601d3 mucbot: flakify 2021-03-22 16:22:57 +01:00
446f93bf00 dn42: clean up bgp filters 2021-03-12 23:38:17 +01:00
e90c920103 dn42: add routecount collectd stats 2021-03-12 22:20:35 +01:00
fb5751220f hail hydra! 2021-03-12 22:07:08 +01:00
b6bd649e45 dn42, dnscache: remove outdated nameservers 2021-03-12 21:07:45 +01:00
13ae483d22 dn42: enable collectd, clean up 2021-03-12 18:42:06 +01:00
4f6f47a30d dn42: update secrets 2021-03-11 20:46:33 +01:00
4a10f571fb dn42: enable forwarding 2021-03-11 16:54:40 +01:00
019c4487af grafana: flakify 2021-03-11 16:40:39 +01:00
44ded16352 dn42: put in hq net 2021-03-11 16:25:03 +01:00
4633b71ca9 dn42: flakify 2021-03-11 15:59:00 +01:00
3a220d91a2 lib/default-gateway.nix: rm
this is done in lib/default.nix
2021-03-10 15:54:09 +01:00
7c834abb43 ssmtp for matemat 2021-03-06 20:59:08 +01:00
ae1c93404d scrape: convert scrapers to flake input 2021-03-06 03:11:43 +01:00
4b8353c011 scrape: migrate from krops to flakes 2021-03-06 02:57:35 +01:00
f29dacb173 matemat: allow auth-less access from local subnets 2021-03-06 02:33:38 +01:00
8347def09b matemat: add auth 2021-03-06 02:28:46 +01:00
b26478db13 matemat: 🎆 init 2021-03-06 01:14:02 +01:00
fca9a7f859 lib/default-gateway.nix: set only when running without systemd-networkd
this would need GatewayOnLink=yes for the route on the interface
2021-03-06 01:10:53 +01:00
d89788511a freifunk: fix self reference 2021-03-05 01:20:56 +01:00
1a559b36e5 freifunk: obtain flaky secrets 2021-03-05 01:16:57 +01:00
1d3568bfe6 host-registry: add freifunk 2021-03-05 01:16:16 +01:00
f4b4dbb7a0 freifunk: add yggdrasil port-forwarding 2021-03-05 00:43:49 +01:00
4a15413ea0 freifunk: pin firmware/server revs 2021-03-05 00:43:12 +01:00
379b1851bb yggdrasil: implement ospf, nat, name interfaces 2021-03-04 01:45:29 +01:00
6c28006440 yggdrasil: disable systemd-networkd with a reason 2021-03-04 01:44:39 +01:00
9264b271f2 yggdrasil: add listener 2021-03-04 00:02:59 +01:00
d2262715da Add yggdrasil configurations 2021-03-03 22:53:19 +01:00
535478c160 Flakify freifunk container 2021-02-26 20:23:24 +01:00
f24e6d6700 pulsebert: remove mjpeg-proxy 2021-02-25 17:50:15 +01:00
b9a64af1b6 pulsebert: replace espCam with usb cam 2021-02-25 17:32:24 +01:00
0098f6a58b Remove hydra
Proxmox is too congested and broken to host a hydra.
2021-02-24 14:20:16 +01:00
6c64ceec62 Put a non-authoritative DHCP server on Pulsebert
DHCP is an essential service and Pulsebert is more reliable than
anything in proxmox.
2021-02-24 14:16:42 +01:00
709d8e278e Flakify dhcp 2021-02-24 14:14:48 +01:00
7126d09546 Pulsebert: install mpd but not as a service 2021-02-23 20:13:13 +01:00
ec81b6a28d Flakify pulsebert 2021-02-22 13:28:47 +01:00
cc1d97ba4f Flakify glotzbert 2021-02-22 13:13:08 +01:00
c01bf41df1 Remove hail
Hail is no longer in use
2021-02-22 12:12:00 +01:00
6170a9c4e0 Nixfmt everything 2021-02-22 11:45:12 +01:00
211106cf53 pulsebert: migrate from httpbounder to rust-mjpeg-proxy 2021-02-21 23:44:21 +01:00
ea5c17bd6a pulsebert: extend pulseaudio allowedIpRanges 2021-02-19 16:06:34 +01:00
bc3bc98e61
comment out non existend file 2021-02-15 07:55:44 +01:00
71495bc257 pulsebert: double-proxy the espCam 2021-01-28 01:05:01 +01:00
c06710cf18 freifunk: change sysinfo.json location
nginx runs with PrivateTmp=yes since NixOS 20.09
2021-01-06 18:43:54 +01:00
02095467fb freifunk: restore, rm accidental disk image 2021-01-06 18:17:57 +01:00
Daniel Poelzleithner
696181c97d Allow larger files on octoprint 2021-01-06 17:02:15 +01:00
Daniel Poelzleithner
873a957e52 Merge branch 'master' of ssh://gitea.c3d2.de:2222/C3D2/nix-config into master 2021-01-03 15:00:55 +01:00
Daniel Poelzleithner
256dcd5ec9 Merge branch 'master' of ssh://gitea.c3d2.de:2222/C3D2/nix-config into master 2021-01-03 15:00:33 +01:00
780919c313 ticker: add exma feeds 2020-12-30 23:37:32 +01:00
af06036cc3 public-access-proxy: rm drkkr.hq.c3d2.de
haproxy breaks the websockets
2020-12-11 01:35:56 +01:00
6048ea42f1 pulsebert: serve drkkr.hq.c3d2.de 2020-12-10 17:26:47 +01:00
f4632a422c pulsebert-access-proxy: add drkkr.hq.c3d2.de 2020-12-10 15:28:25 +01:00
3379116fc9 public-access-proxy: fix error.hq.c3d2.de.de domain 2020-12-10 15:28:11 +01:00
44c7b520fe pulsebert: update to nixos-20.09 + working octoprint 2020-12-10 15:24:45 +01:00
Daniel Poelzleithner
60f270224b Merge branch 'master' of ssh://gitea.c3d2.de:2222/C3D2/nix-config 2020-12-09 01:23:45 +01:00
e66639bad9 public-access-proxy: fix haproxy conf syntax 2020-12-03 16:52:12 +01:00
3475c13a56 public-access-proxy: update haproxy settings to 2.1 2020-12-03 16:48:28 +01:00
dcfa8cda56 public-access-proxy: add error.hq.c3d2.de vhost 2020-12-03 16:22:09 +01:00
9a01f098f2 ticker: update configuration.nix 2020-12-02 21:32:22 +01:00
971c267912 glotzbert: remove stale x11vnc-service.nix 2020-11-22 21:26:25 +01:00
02887763e7 glotzbert: update configuration.nix for 20.09 2020-11-19 17:53:08 +01:00
633a0e5b8c glotzbert: revert to krops deployment 2020-11-19 17:52:20 +01:00
Daniel Poelzleithner
5f073a7394 update prometheus 2020-11-12 02:31:45 +01:00
Daniel Poelzleithner
b4c5afaecc enable sftp on storage-ng 2020-11-11 20:50:46 +01:00
Daniel Poelzleithner
73b7aa33e6 Revert "Remove storage-ng"
This reverts commit babf880949.
2020-11-11 20:20:44 +01:00
Daniel Poelzleithner
5f8bdae3a8 update elastic / logging 2020-11-11 20:19:40 +01:00
2bb9633559 Update flake nixpkgs input to 20.09 2020-10-26 16:06:42 +01:00
3148381e42 Add cachix to hydra 2020-10-26 16:00:26 +01:00
7dab4f4c8d Remove server7 2020-10-26 16:00:08 +01:00
f7230c5829
deployer: activate autoOptimiseStore 2020-10-18 17:26:21 +02:00
13f735c0d7 public-access-proxy: add robots.datenspuren.de 2020-09-19 19:15:13 +02:00
bastiion
3202318820 adding a robot to ha-proxy robot1.hq.c3d2.de 2020-09-19 15:30:10 +02:00
Daniel Poelzleithner
bf568e9de3 use all mon servers for connecting. use preStart 2020-08-19 00:47:25 +02:00
Daniel Poelzleithner
3913c09782 fix systemd invocation for docker container 2020-08-19 00:30:34 +02:00
f121b5d4b2
pulsebert: add k-ot to audio group
this is needed for pulseaudio
2020-08-15 19:45:55 +02:00
7ce33808f2 Use modulesPath where appropriate 2020-08-04 17:16:35 +02:00
9b04ebedde server7: update yggdrasil peers 2020-08-04 08:52:41 +02:00
c66946030e server7: generate new hardware-configuration.nix 2020-07-29 13:35:13 +02:00
449a8175f3 server7: aarch64 emulation 2020-07-29 13:27:50 +02:00
5238abc7a7 server7: disable ceph mount 2020-07-07 20:52:05 +02:00
91078207fb server7: uncomment systemd.services.docker-ceph-osd-7.serviceConfig
Wasn't me, I found it this way
2020-07-07 20:51:45 +02:00
7e01c98da2 server7: docker-containers.ceph-osd-7? 2020-07-07 20:51:45 +02:00
a3db001870 hosts/containers/dhcp: make dhcp server authoritative
Make the dhcp server explicitly authoritative before importing
the configuration from the secrets submodule.
2020-07-07 20:54:22 +05:30
cee19e7e3e spaceapi: disable firewall 2020-06-24 18:30:11 +02:00
1fe0da3080 pulsebert: deploy with krops 2020-06-21 22:27:17 +02:00
eafa584ee8 pulsebert: remove broken services 2020-06-21 22:26:51 +02:00
73e129f72a pulsebert: don't let journald write to fs 2020-06-21 22:26:30 +02:00
a376aaad01 glotzbert: setup 2020-06-19 19:32:53 +02:00
f8e232b2e4 add new pulsebert 2020-06-19 19:05:46 +02:00
611dabf653 server7: move yggaddr.nix out to shared lib/ directory 2020-06-19 18:20:10 +02:00
03a7ab421e rename pulsebert to glotzbert 2020-06-19 18:12:42 +02:00
0a196b0d80 server7: serve nix-serve on yggdrasil 2020-06-05 19:53:54 +02:00
6ac2a2c6d4 Add static IPv4 to storage.hq 2020-06-05 19:45:16 +02:00
30b5584555 scrape: DRY 2020-06-04 01:18:06 +02:00
39562676b2 scrape: add freifunk node 1099 2020-06-03 17:20:18 +02:00
Daniel Poelzleithner
6c1cec431c add osd.7 on server7 2020-05-25 01:55:04 +02:00
9de52f1c4f freifunk: forward port 53 2020-05-24 22:33:07 +02:00
e5c1afdb6c dnscache: allow query by freifunk range 2020-05-24 22:32:48 +02:00
c45a087dfd freifunk: update to accommodate sysinfo changes in ffdd-server.git 2020-05-24 21:58:43 +02:00
e967ee77cb dn42: fix tun interfaces 2020-05-24 18:37:06 +02:00
8a97a1c08a dn42: DRY address6 2020-05-24 02:05:51 +02:00
243406e499 dn42: remove obsolete quagga pkg 2020-05-24 01:34:00 +02:00
d6842d607f update grafana influxdb address 2020-05-23 02:35:29 +02:00
ef2f20658c kibana: tidy proxy url 2020-05-23 02:35:16 +02:00
d69eee2b75 containers/kibana: init 2020-05-23 01:17:16 +02:00
672c8e5b13 public-access-proxy: add kibana.hq.c3d2.de 2020-05-22 20:30:30 +02:00
c3beabc363 public-access-proxy: fix addresses 2020-05-22 19:11:41 +02:00
f80c07aaa3 public-access-proxy: move to serv subnet 2020-05-22 19:07:07 +02:00
d90d5f428d grafana: close signup 2020-05-22 18:34:26 +02:00
a2f05a1699 public-access-proxy: add grafana, kibana 2020-05-22 18:24:37 +02:00
ab38d328b7 grafana: switch to serv subnet 2020-05-22 18:07:39 +02:00
dcaa765651 grafana: switch to serv subnet 2020-05-22 17:56:30 +02:00
412bd84abd spaceapi: rm default-gateway.nix 2020-05-22 17:53:16 +02:00
95b8272413 static ipv4 configuration for containers in the serv subnet 2020-05-22 17:24:56 +02:00
61f134d91f server7: disable radvd default route
Radvd is not enabled, this is for purposes of documentation.
2020-05-21 13:54:09 +05:30
Daniel Poelzleithner
e179dbe0f7 Merge branch 'master' of ssh://gitea.c3d2.de:2222/C3D2/nix-config 2020-05-15 10:46:58 +02:00
f3ae530506 scrape: add freifunk node 1891 2020-04-30 20:59:11 +02:00
aae6da4299 scrape: update freifunk node 2020-04-29 22:24:23 +02:00
fa3e90f23f dn42: fix command syntax 2020-04-24 20:55:43 +02:00
2a039a3b3c dn42: fix wireguard pointopoint route 2020-04-24 20:54:50 +02:00
07779f2ff8 dn42: fix wireguard pointopoint route 2020-04-24 20:48:31 +02:00
b28eb471f8 dn42: fix wireguard pointopoint routes 2020-04-24 20:42:52 +02:00
5e34762669 dn42: set wireguard.allowedIPsAsRoutes=false 2020-04-24 20:38:35 +02:00
e9818d55c7 dn42: fix 2020-04-24 19:41:55 +02:00
150fd52178 dn42: make wireguard.endpoint optional 2020-04-24 19:40:49 +02:00
ea275446d5 dn42: fix wireguard 2020-04-24 19:28:37 +02:00
68f6b337c9 dn42: fix wireguard 2020-04-24 19:20:41 +02:00
52387b4db7 dn42: implement wireguard 2020-04-24 19:15:28 +02:00
2fc4716870 server7: remove missing collectd plugins
Something happened to collectd between 19.09 and 20.03
2020-04-24 10:14:37 +02:00
9b5b7432ca server7: update hydra revision 2020-04-24 10:14:08 +02:00
b390162f36 hosts/hydra: upgrade to 20.03, use server7 builder 2020-04-24 13:41:35 +05:30
ac0bc652c5 freifunk: announce being a bmxd gateway 2020-04-23 20:13:32 +02:00
8adb86f47a freifunk: improve nat rules 2020-04-23 20:13:18 +02:00
4ee1e24064 server7/storage: add git+borg to systemPackages 2020-04-23 18:46:35 +02:00
461a5680fd remove lib/hq.nix remnants 2020-04-23 18:45:53 +02:00