|
a4b53d344d
|
freifunk: fix ip rules
|
2021-04-30 00:08:49 +02:00 |
|
|
b7456776b0
|
freifunk: enable nat for tunneled uplink
|
2021-04-29 23:08:28 +02:00 |
|
|
8bfb061785
|
freifunk: learn freifunk default route and share over OSPF
|
2021-04-29 22:55:50 +02:00 |
|
|
08b35d6f51
|
freifunk: name more bmx tables
|
2021-04-29 22:55:31 +02:00 |
|
|
8b0fb87025
|
freifunk: mknod /dev/net/tun
|
2021-04-29 21:56:37 +02:00 |
|
|
90c5c69ecb
|
freifunk: switch bmxd from gateway to node mode
|
2021-04-29 21:54:22 +02:00 |
|
|
5d2ce5be83
|
ticker: update
|
2021-04-16 00:58:19 +02:00 |
|
Daniel Poelzleithner
|
a8b83d0187
|
increase body size on pulsebert
|
2021-04-09 17:37:27 +02:00 |
|
|
b9f603eba8
|
hydra: useSubstitutes = true
reason: https://github.com/NixOS/nixpkgs/issues/118732
|
2021-04-08 13:53:11 +02:00 |
|
|
7e73c09ad7
|
yggdrasil: disable radv
|
2021-04-04 21:11:21 +02:00 |
|
|
1b10fdf03d
|
dn42: implement multiprotocol peering
|
2021-03-29 00:52:59 +02:00 |
|
|
d04f56f4c1
|
scrape: add luftqualitaet
|
2021-03-28 20:41:37 +02:00 |
|
|
ef5a03b68b
|
scrape: add impfee
|
2021-03-24 21:11:16 +01:00 |
|
|
6056b78ce6
|
hydra: add buildMachines
did I deploy that?
|
2021-03-24 21:09:51 +01:00 |
|
|
70774131f1
|
grafana: rm broken route configuration
|
2021-03-24 21:09:18 +01:00 |
|
|
906ef601d3
|
mucbot: flakify
|
2021-03-22 16:22:57 +01:00 |
|
|
446f93bf00
|
dn42: clean up bgp filters
|
2021-03-12 23:38:17 +01:00 |
|
|
e90c920103
|
dn42: add routecount collectd stats
|
2021-03-12 22:20:35 +01:00 |
|
|
fb5751220f
|
hail hydra!
|
2021-03-12 22:07:08 +01:00 |
|
|
b6bd649e45
|
dn42, dnscache: remove outdated nameservers
|
2021-03-12 21:07:45 +01:00 |
|
|
13ae483d22
|
dn42: enable collectd, clean up
|
2021-03-12 18:42:06 +01:00 |
|
|
4f6f47a30d
|
dn42: update secrets
|
2021-03-11 20:46:33 +01:00 |
|
|
4a10f571fb
|
dn42: enable forwarding
|
2021-03-11 16:54:40 +01:00 |
|
|
019c4487af
|
grafana: flakify
|
2021-03-11 16:40:39 +01:00 |
|
|
44ded16352
|
dn42: put in hq net
|
2021-03-11 16:25:03 +01:00 |
|
|
4633b71ca9
|
dn42: flakify
|
2021-03-11 15:59:00 +01:00 |
|
|
3a220d91a2
|
lib/default-gateway.nix: rm
this is done in lib/default.nix
|
2021-03-10 15:54:09 +01:00 |
|
|
7c834abb43
|
ssmtp for matemat
|
2021-03-06 20:59:08 +01:00 |
|
|
ae1c93404d
|
scrape: convert scrapers to flake input
|
2021-03-06 03:11:43 +01:00 |
|
|
4b8353c011
|
scrape: migrate from krops to flakes
|
2021-03-06 02:57:35 +01:00 |
|
|
f29dacb173
|
matemat: allow auth-less access from local subnets
|
2021-03-06 02:33:38 +01:00 |
|
|
8347def09b
|
matemat: add auth
|
2021-03-06 02:28:46 +01:00 |
|
|
b26478db13
|
matemat: 🎆 init
|
2021-03-06 01:14:02 +01:00 |
|
|
fca9a7f859
|
lib/default-gateway.nix: set only when running without systemd-networkd
this would need GatewayOnLink=yes for the route on the interface
|
2021-03-06 01:10:53 +01:00 |
|
|
d89788511a
|
freifunk: fix self reference
|
2021-03-05 01:20:56 +01:00 |
|
|
1a559b36e5
|
freifunk: obtain flaky secrets
|
2021-03-05 01:16:57 +01:00 |
|
|
1d3568bfe6
|
host-registry: add freifunk
|
2021-03-05 01:16:16 +01:00 |
|
|
f4b4dbb7a0
|
freifunk: add yggdrasil port-forwarding
|
2021-03-05 00:43:49 +01:00 |
|
|
4a15413ea0
|
freifunk: pin firmware/server revs
|
2021-03-05 00:43:12 +01:00 |
|
|
379b1851bb
|
yggdrasil: implement ospf, nat, name interfaces
|
2021-03-04 01:45:29 +01:00 |
|
|
6c28006440
|
yggdrasil: disable systemd-networkd with a reason
|
2021-03-04 01:44:39 +01:00 |
|
|
9264b271f2
|
yggdrasil: add listener
|
2021-03-04 00:02:59 +01:00 |
|
|
d2262715da
|
Add yggdrasil configurations
|
2021-03-03 22:53:19 +01:00 |
|
|
535478c160
|
Flakify freifunk container
|
2021-02-26 20:23:24 +01:00 |
|
|
f24e6d6700
|
pulsebert: remove mjpeg-proxy
|
2021-02-25 17:50:15 +01:00 |
|
|
b9a64af1b6
|
pulsebert: replace espCam with usb cam
|
2021-02-25 17:32:24 +01:00 |
|
|
0098f6a58b
|
Remove hydra
Proxmox is too congested and broken to host a hydra.
|
2021-02-24 14:20:16 +01:00 |
|
|
6c64ceec62
|
Put a non-authoritative DHCP server on Pulsebert
DHCP is an essential service and Pulsebert is more reliable than
anything in proxmox.
|
2021-02-24 14:16:42 +01:00 |
|
|
709d8e278e
|
Flakify dhcp
|
2021-02-24 14:14:48 +01:00 |
|
|
7126d09546
|
Pulsebert: install mpd but not as a service
|
2021-02-23 20:13:13 +01:00 |
|
|
ec81b6a28d
|
Flakify pulsebert
|
2021-02-22 13:28:47 +01:00 |
|
|
cc1d97ba4f
|
Flakify glotzbert
|
2021-02-22 13:13:08 +01:00 |
|
|
c01bf41df1
|
Remove hail
Hail is no longer in use
|
2021-02-22 12:12:00 +01:00 |
|
|
6170a9c4e0
|
Nixfmt everything
|
2021-02-22 11:45:12 +01:00 |
|
|
211106cf53
|
pulsebert: migrate from httpbounder to rust-mjpeg-proxy
|
2021-02-21 23:44:21 +01:00 |
|
|
ea5c17bd6a
|
pulsebert: extend pulseaudio allowedIpRanges
|
2021-02-19 16:06:34 +01:00 |
|
|
bc3bc98e61
|
comment out non existend file
|
2021-02-15 07:55:44 +01:00 |
|
|
71495bc257
|
pulsebert: double-proxy the espCam
|
2021-01-28 01:05:01 +01:00 |
|
|
c06710cf18
|
freifunk: change sysinfo.json location
nginx runs with PrivateTmp=yes since NixOS 20.09
|
2021-01-06 18:43:54 +01:00 |
|
|
02095467fb
|
freifunk: restore, rm accidental disk image
|
2021-01-06 18:17:57 +01:00 |
|
Daniel Poelzleithner
|
696181c97d
|
Allow larger files on octoprint
|
2021-01-06 17:02:15 +01:00 |
|
Daniel Poelzleithner
|
873a957e52
|
Merge branch 'master' of ssh://gitea.c3d2.de:2222/C3D2/nix-config into master
|
2021-01-03 15:00:55 +01:00 |
|
Daniel Poelzleithner
|
256dcd5ec9
|
Merge branch 'master' of ssh://gitea.c3d2.de:2222/C3D2/nix-config into master
|
2021-01-03 15:00:33 +01:00 |
|
|
780919c313
|
ticker: add exma feeds
|
2020-12-30 23:37:32 +01:00 |
|
|
af06036cc3
|
public-access-proxy: rm drkkr.hq.c3d2.de
haproxy breaks the websockets
|
2020-12-11 01:35:56 +01:00 |
|
|
6048ea42f1
|
pulsebert: serve drkkr.hq.c3d2.de
|
2020-12-10 17:26:47 +01:00 |
|
|
f4632a422c
|
pulsebert-access-proxy: add drkkr.hq.c3d2.de
|
2020-12-10 15:28:25 +01:00 |
|
|
3379116fc9
|
public-access-proxy: fix error.hq.c3d2.de.de domain
|
2020-12-10 15:28:11 +01:00 |
|
|
44c7b520fe
|
pulsebert: update to nixos-20.09 + working octoprint
|
2020-12-10 15:24:45 +01:00 |
|
Daniel Poelzleithner
|
60f270224b
|
Merge branch 'master' of ssh://gitea.c3d2.de:2222/C3D2/nix-config
|
2020-12-09 01:23:45 +01:00 |
|
|
e66639bad9
|
public-access-proxy: fix haproxy conf syntax
|
2020-12-03 16:52:12 +01:00 |
|
|
3475c13a56
|
public-access-proxy: update haproxy settings to 2.1
|
2020-12-03 16:48:28 +01:00 |
|
|
dcfa8cda56
|
public-access-proxy: add error.hq.c3d2.de vhost
|
2020-12-03 16:22:09 +01:00 |
|
|
9a01f098f2
|
ticker: update configuration.nix
|
2020-12-02 21:32:22 +01:00 |
|
|
971c267912
|
glotzbert: remove stale x11vnc-service.nix
|
2020-11-22 21:26:25 +01:00 |
|
|
02887763e7
|
glotzbert: update configuration.nix for 20.09
|
2020-11-19 17:53:08 +01:00 |
|
|
633a0e5b8c
|
glotzbert: revert to krops deployment
|
2020-11-19 17:52:20 +01:00 |
|
Daniel Poelzleithner
|
5f073a7394
|
update prometheus
|
2020-11-12 02:31:45 +01:00 |
|
Daniel Poelzleithner
|
b4c5afaecc
|
enable sftp on storage-ng
|
2020-11-11 20:50:46 +01:00 |
|
Daniel Poelzleithner
|
73b7aa33e6
|
Revert "Remove storage-ng"
This reverts commit babf880949 .
|
2020-11-11 20:20:44 +01:00 |
|
Daniel Poelzleithner
|
5f8bdae3a8
|
update elastic / logging
|
2020-11-11 20:19:40 +01:00 |
|
|
2bb9633559
|
Update flake nixpkgs input to 20.09
|
2020-10-26 16:06:42 +01:00 |
|
|
3148381e42
|
Add cachix to hydra
|
2020-10-26 16:00:26 +01:00 |
|
|
7dab4f4c8d
|
Remove server7
|
2020-10-26 16:00:08 +01:00 |
|
|
f7230c5829
|
deployer: activate autoOptimiseStore
|
2020-10-18 17:26:21 +02:00 |
|
|
13f735c0d7
|
public-access-proxy: add robots.datenspuren.de
|
2020-09-19 19:15:13 +02:00 |
|
bastiion
|
3202318820
|
adding a robot to ha-proxy robot1.hq.c3d2.de
|
2020-09-19 15:30:10 +02:00 |
|
Daniel Poelzleithner
|
bf568e9de3
|
use all mon servers for connecting. use preStart
|
2020-08-19 00:47:25 +02:00 |
|
Daniel Poelzleithner
|
3913c09782
|
fix systemd invocation for docker container
|
2020-08-19 00:30:34 +02:00 |
|
|
f121b5d4b2
|
pulsebert: add k-ot to audio group
this is needed for pulseaudio
|
2020-08-15 19:45:55 +02:00 |
|
|
7ce33808f2
|
Use modulesPath where appropriate
|
2020-08-04 17:16:35 +02:00 |
|
|
9b04ebedde
|
server7: update yggdrasil peers
|
2020-08-04 08:52:41 +02:00 |
|
|
c66946030e
|
server7: generate new hardware-configuration.nix
|
2020-07-29 13:35:13 +02:00 |
|
|
449a8175f3
|
server7: aarch64 emulation
|
2020-07-29 13:27:50 +02:00 |
|
|
5238abc7a7
|
server7: disable ceph mount
|
2020-07-07 20:52:05 +02:00 |
|
|
91078207fb
|
server7: uncomment systemd.services.docker-ceph-osd-7.serviceConfig
Wasn't me, I found it this way
|
2020-07-07 20:51:45 +02:00 |
|
|
7e01c98da2
|
server7: docker-containers.ceph-osd-7?
|
2020-07-07 20:51:45 +02:00 |
|
|
a3db001870
|
hosts/containers/dhcp: make dhcp server authoritative
Make the dhcp server explicitly authoritative before importing
the configuration from the secrets submodule.
|
2020-07-07 20:54:22 +05:30 |
|
|
cee19e7e3e
|
spaceapi: disable firewall
|
2020-06-24 18:30:11 +02:00 |
|
|
1fe0da3080
|
pulsebert: deploy with krops
|
2020-06-21 22:27:17 +02:00 |
|
|
eafa584ee8
|
pulsebert: remove broken services
|
2020-06-21 22:26:51 +02:00 |
|
|
73e129f72a
|
pulsebert: don't let journald write to fs
|
2020-06-21 22:26:30 +02:00 |
|
|
a376aaad01
|
glotzbert: setup
|
2020-06-19 19:32:53 +02:00 |
|
|
f8e232b2e4
|
add new pulsebert
|
2020-06-19 19:05:46 +02:00 |
|
|
611dabf653
|
server7: move yggaddr.nix out to shared lib/ directory
|
2020-06-19 18:20:10 +02:00 |
|
|
03a7ab421e
|
rename pulsebert to glotzbert
|
2020-06-19 18:12:42 +02:00 |
|
|
0a196b0d80
|
server7: serve nix-serve on yggdrasil
|
2020-06-05 19:53:54 +02:00 |
|
|
6ac2a2c6d4
|
Add static IPv4 to storage.hq
|
2020-06-05 19:45:16 +02:00 |
|
|
30b5584555
|
scrape: DRY
|
2020-06-04 01:18:06 +02:00 |
|
|
39562676b2
|
scrape: add freifunk node 1099
|
2020-06-03 17:20:18 +02:00 |
|
Daniel Poelzleithner
|
6c1cec431c
|
add osd.7 on server7
|
2020-05-25 01:55:04 +02:00 |
|
|
9de52f1c4f
|
freifunk: forward port 53
|
2020-05-24 22:33:07 +02:00 |
|
|
e5c1afdb6c
|
dnscache: allow query by freifunk range
|
2020-05-24 22:32:48 +02:00 |
|
|
c45a087dfd
|
freifunk: update to accommodate sysinfo changes in ffdd-server.git
|
2020-05-24 21:58:43 +02:00 |
|
|
e967ee77cb
|
dn42: fix tun interfaces
|
2020-05-24 18:37:06 +02:00 |
|
|
8a97a1c08a
|
dn42: DRY address6
|
2020-05-24 02:05:51 +02:00 |
|
|
243406e499
|
dn42: remove obsolete quagga pkg
|
2020-05-24 01:34:00 +02:00 |
|
|
d6842d607f
|
update grafana influxdb address
|
2020-05-23 02:35:29 +02:00 |
|
|
ef2f20658c
|
kibana: tidy proxy url
|
2020-05-23 02:35:16 +02:00 |
|
|
d69eee2b75
|
containers/kibana: init
|
2020-05-23 01:17:16 +02:00 |
|
|
672c8e5b13
|
public-access-proxy: add kibana.hq.c3d2.de
|
2020-05-22 20:30:30 +02:00 |
|
|
c3beabc363
|
public-access-proxy: fix addresses
|
2020-05-22 19:11:41 +02:00 |
|
|
f80c07aaa3
|
public-access-proxy: move to serv subnet
|
2020-05-22 19:07:07 +02:00 |
|
|
d90d5f428d
|
grafana: close signup
|
2020-05-22 18:34:26 +02:00 |
|
|
a2f05a1699
|
public-access-proxy: add grafana, kibana
|
2020-05-22 18:24:37 +02:00 |
|
|
ab38d328b7
|
grafana: switch to serv subnet
|
2020-05-22 18:07:39 +02:00 |
|
|
dcaa765651
|
grafana: switch to serv subnet
|
2020-05-22 17:56:30 +02:00 |
|
|
412bd84abd
|
spaceapi: rm default-gateway.nix
|
2020-05-22 17:53:16 +02:00 |
|
|
95b8272413
|
static ipv4 configuration for containers in the serv subnet
|
2020-05-22 17:24:56 +02:00 |
|
|
61f134d91f
|
server7: disable radvd default route
Radvd is not enabled, this is for purposes of documentation.
|
2020-05-21 13:54:09 +05:30 |
|
Daniel Poelzleithner
|
e179dbe0f7
|
Merge branch 'master' of ssh://gitea.c3d2.de:2222/C3D2/nix-config
|
2020-05-15 10:46:58 +02:00 |
|
|
f3ae530506
|
scrape: add freifunk node 1891
|
2020-04-30 20:59:11 +02:00 |
|
|
aae6da4299
|
scrape: update freifunk node
|
2020-04-29 22:24:23 +02:00 |
|
|
fa3e90f23f
|
dn42: fix command syntax
|
2020-04-24 20:55:43 +02:00 |
|
|
2a039a3b3c
|
dn42: fix wireguard pointopoint route
|
2020-04-24 20:54:50 +02:00 |
|
|
07779f2ff8
|
dn42: fix wireguard pointopoint route
|
2020-04-24 20:48:31 +02:00 |
|
|
b28eb471f8
|
dn42: fix wireguard pointopoint routes
|
2020-04-24 20:42:52 +02:00 |
|
|
5e34762669
|
dn42: set wireguard.allowedIPsAsRoutes=false
|
2020-04-24 20:38:35 +02:00 |
|
|
e9818d55c7
|
dn42: fix
|
2020-04-24 19:41:55 +02:00 |
|
|
150fd52178
|
dn42: make wireguard.endpoint optional
|
2020-04-24 19:40:49 +02:00 |
|
|
ea275446d5
|
dn42: fix wireguard
|
2020-04-24 19:28:37 +02:00 |
|
|
68f6b337c9
|
dn42: fix wireguard
|
2020-04-24 19:20:41 +02:00 |
|
|
52387b4db7
|
dn42: implement wireguard
|
2020-04-24 19:15:28 +02:00 |
|
|
2fc4716870
|
server7: remove missing collectd plugins
Something happened to collectd between 19.09 and 20.03
|
2020-04-24 10:14:37 +02:00 |
|
|
9b5b7432ca
|
server7: update hydra revision
|
2020-04-24 10:14:08 +02:00 |
|
|
b390162f36
|
hosts/hydra: upgrade to 20.03, use server7 builder
|
2020-04-24 13:41:35 +05:30 |
|
|
ac0bc652c5
|
freifunk: announce being a bmxd gateway
|
2020-04-23 20:13:32 +02:00 |
|
|
8adb86f47a
|
freifunk: improve nat rules
|
2020-04-23 20:13:18 +02:00 |
|
|
4ee1e24064
|
server7/storage: add git+borg to systemPackages
|
2020-04-23 18:46:35 +02:00 |
|
|
461a5680fd
|
remove lib/hq.nix remnants
|
2020-04-23 18:45:53 +02:00 |
|