Commit Graph

1679 Commits

Author SHA1 Message Date
87698b1c63 ticker: remove terminal-dresden for now 2023-01-12 20:56:43 +01:00
669bafaf2f scrape, ticker: add kosmotique 2023-01-12 20:56:09 +01:00
9300e144b2 scrape, ticker: add criticalmass 2023-01-12 20:39:02 +01:00
d74a65d8b2 scrape, ticker: add museen-dresden 2023-01-12 19:34:50 +01:00
99766be2dc hydra: use hydra-queue-runner@localhost 2023-01-11 21:53:43 +01:00
63ba2165a3 c3d2-web: update datenspuren redirect to 2023 2023-01-11 21:53:29 +01:00
fdd3eeae01 ticker: add dgfk 2023-01-11 16:10:17 +01:00
837c185c05 hydra: fix ownership of the sops ssh keys 2023-01-10 22:21:44 +01:00
d9e5de54ef
Increase data retention time 2023-01-10 00:19:27 +01:00
5c00567283
hedgedoc: reduce log spam, disallow scraping 2023-01-10 00:18:32 +01:00
a38bc1a12b hydra: own updater ssh keys to updater user 2023-01-09 23:47:44 +01:00
f6fbb6ae04
Round throughput alerts to be less flappy 2023-01-09 23:40:24 +01:00
fb77c92330 c3d2-web: redirect rc3 vhosts to datenspuren.de 2023-01-08 23:10:22 +01:00
1a639fac62 rc3ticker: remove 2023-01-08 23:04:58 +01:00
34b3a07ded
Round metric 2023-01-07 19:19:19 +01:00
242d03c7ad
Check config again 2023-01-07 05:32:16 +01:00
f6b293e1a3
Upgrade postgres 2023-01-07 05:27:40 +01:00
8744b4dfe7
Upgrade postgres 2023-01-07 04:38:44 +01:00
75e63ac17a
wiki: add acpu, open firewall again, increase RAM
acpu probably needs configuration...
2023-01-07 04:36:28 +01:00
f83250f1e5 server8: add zfsutil option to zfs dataset mounts 2023-01-07 02:55:35 +01:00
c9ecfdc88d kibana: bump limits 2023-01-07 02:55:22 +01:00
c9316ac41c modules/cluster: add ceph 2023-01-07 02:54:35 +01:00
14febedd5d
Format 2023-01-07 02:42:30 +01:00
976fe6dee6
Upgrade postgres 2023-01-07 02:00:15 +01:00
6594bdea29
Upgrade mastodon 2023-01-07 01:45:37 +01:00
983f5687ae
Upgrade postgres 2023-01-07 01:09:28 +01:00
9d9cc81671
hydra: add github access token 2023-01-07 00:55:15 +01:00
6072dbca1b
Upgrade postgres 2023-01-07 00:54:40 +01:00
e9555b81cc
Format 2023-01-06 23:57:20 +01:00
0f02e95746
Upgrade postgres 2023-01-06 23:56:02 +01:00
d5e612c680
Format 2023-01-06 23:24:02 +01:00
e21af4caa6
hydra: upgrade postgres 2023-01-06 23:18:47 +01:00
83ca783593
hydra: add hydra ssh keys 2023-01-06 23:07:32 +01:00
ff9777fc19
hedgedoc: update postgres 2023-01-06 21:09:14 +01:00
193820e84f
Format 2023-01-06 21:08:58 +01:00
c880195be2 ticker: comment out spammy palaissommer 2023-01-06 02:51:46 +01:00
a64499b423
Fix deprecation warning 2023-01-05 22:14:22 +01:00
ca6fe29106
Fix conntrack issues in microvm
due to bad scaling with lower RAM
2023-01-05 22:13:59 +01:00
fc105bb0d9 hydra: set system-features for usage as a remote builder 2023-01-05 21:49:21 +01:00
aabf6a4d2c leon: switch back to legacy microvm.nix for now 2023-01-05 03:19:58 +01:00
5e657280ec Merge branch 'deploy/leon' 2023-01-05 03:16:42 +01:00
ea36c50654 buzzrelay: switch back to legacy microvm.nix for now 2023-01-05 03:15:34 +01:00
c020327913
Remove no longer required known_hosts workaround 2023-01-05 00:36:03 +01:00
c162f15462
Add ssh keys to sops 2023-01-05 00:33:53 +01:00
Sandro Jäckel
74198511ed
Fix ldap login names with minus 2023-01-04 11:29:06 +01:00
a5b462d4ed
Remove zfs from sd card image 2023-01-04 01:26:55 +01:00
1349e0a333 Merge https://gitea.c3d2.de/c3d2/nix-config 2023-01-03 19:38:24 +00:00
abccab1c47
Remove nixos-module option 2023-01-03 05:50:39 +01:00
0bccdeeebb
Statix 2023-01-03 03:04:54 +01:00
7a3e6062f2
Deadnix 2023-01-03 03:04:24 +01:00
4a69bb6f5e
Remove zfs options now in nixos-modules 2023-01-03 00:20:51 +01:00
1a03c0196b
Convert prometheus to microvm 2023-01-03 00:20:32 +01:00
42cc20ff5f
Migrate simd.arch to nixos-modules 2023-01-02 17:37:29 +01:00
af055e2af1 change username 2023-01-02 14:59:15 +00:00
9566f77ec2
hydra: redo with full zfs 2023-01-02 05:06:46 +01:00
cfd36714ac server10: add znapzend backups of microvms to server8 2023-01-01 21:50:58 +01:00
046e6d4828 prometheus: make nginx strip /alert2muc when proxying 2023-01-01 21:50:18 +01:00
247171fc53
Bump nixos-modules 2023-01-01 20:52:45 +01:00
85c99f06f3
Add new zfs partition 2023-01-01 20:50:56 +01:00
c9c6e88ae8 prometheus: add caveman-gatherer 2022-12-30 02:59:37 +01:00
eb4161749f prometheus: proxy alert2muc thru nginx 2022-12-29 03:31:30 +01:00
a8aef7636a buzzrelay: enable collectd 2022-12-28 03:58:49 +01:00
a89ccd752a
Add machine-id's to config 2022-12-28 01:48:08 +01:00
f31bde14f7 freifunk: implement new gateway selection 2022-12-28 00:58:57 +01:00
41b9b509f9 caveman: triple hunter.max_workers 2022-12-27 20:43:48 +01:00
561139a175
Fix build 2022-12-27 05:15:36 +01:00
da3899719e
Fix eval 2022-12-27 02:54:20 +01:00
863ce0a1f0
Format 2022-12-27 02:54:14 +01:00
10c63686ff
Convert to sops 2022-12-27 02:25:02 +01:00
df2f866435
Reduce code duplication 2022-12-27 02:24:01 +01:00
ae3e6270bb
Move secrets to sops 2022-12-27 00:59:37 +01:00
a6b1e3cc22
Write jid into normal config 2022-12-26 23:23:18 +01:00
c476fad4d8
Remove default settings 2022-12-26 23:23:09 +01:00
45dea05d68
Migrate secrets to sops 2022-12-26 23:18:15 +01:00
ba622127b5
Add c3d2 secrets to web 2022-12-26 23:15:23 +01:00
5bcc9f2e29
Re-crypt 2022-12-26 20:10:42 +01:00
d46c1bb0f6
Remember dex session 2022-12-26 05:19:36 +01:00
33d680b404 prometheus: add caveman-hunter 2022-12-26 03:47:59 +01:00
4624b8945f
Cleanup 2022-12-26 02:54:15 +01:00
ac8355120b
Auto login into oauth and oauth only 2022-12-26 02:53:59 +01:00
98bf5db347
Enable enableRedistributableFirmware everywhere, remove duplicated kernelPackages 2022-12-26 02:53:19 +01:00
c6f7d77004
Enable tmux by default 2022-12-26 02:50:16 +01:00
1e743f68e6
Move schalter to file 2022-12-26 02:45:29 +01:00
be2ce8f89a kibana: add buzz2elastic 2022-12-26 02:27:44 +01:00
f18fa32b4a server10: comment dup boot.kernelPackages 2022-12-26 02:27:44 +01:00
33c6b7d8d5 Update 'hosts/gitea/Migration.md' 2022-12-26 02:17:10 +01:00
618d047df8
Fix group assignment 2022-12-26 02:04:36 +01:00
5e62b87f01
Add some documentation 2022-12-25 23:57:01 +01:00
7169365fd8 kibana: revive 2022-12-24 23:45:38 +01:00
73861f5f7e
Fix portunus hosts entries 2022-12-24 15:40:27 +01:00
d52398ced4 remove mail group from ldap 2022-12-24 15:24:46 +01:00
18dbb77f59 remove 10.0.0.0/8 network and add comment for root email user 2022-12-24 15:18:25 +01:00
036586fc16
Misc 2022-12-24 00:12:17 +01:00
d2dd70c48b
Move most of seed config out of sops 2022-12-24 00:12:06 +01:00
c82eeb32d4
Grant admin permissions based on group 2022-12-24 00:04:58 +01:00
22f49b4f3c
Use zfs mountpoints 2022-12-23 22:23:24 +01:00
5111e2ad6a server9, server10: fix services.nomad.settings.client.reserved.memory 2022-12-23 15:58:49 +01:00
37f67bb1ce mastodon: switch back to legacy microvm.nix for now 2022-12-23 13:49:50 +01:00
e017135180
Add basic OIDC for grafana 2022-12-23 08:31:44 +01:00
2ab8acc520
Remove options set by upstream module already 2022-12-22 22:47:34 +01:00
6827eea6d4
Upsi 2022-12-22 21:57:08 +01:00
24bc378143
Replace copy pasted hosts entry with option 2022-12-22 21:25:53 +01:00
1db84c2429
DROP 2022-12-22 02:20:07 +01:00
d7f2562459
Decrease oom kill to one day 2022-12-21 23:42:10 +01:00
f7bf9eb6c2
Exclude boot partition 2022-12-21 23:34:13 +01:00
2b2bf71305 c3d2-web: s/serv/flpk/ 2022-12-21 21:11:29 +01:00
d29686a841 rc3ticker: add dezentrale 2022-12-21 21:11:29 +01:00
861536c175 rc3ticker: wiggle hip color 2022-12-21 21:11:29 +01:00
e037a1fd55
Fix hashes 2022-12-21 21:06:50 +01:00
fe8683f01f
Drop c3d2.isInHq 2022-12-21 19:43:47 +01:00
3f493722ba public-access-proxy: add dezentrale-jahresendveranstaltungen.fyi 2022-12-20 20:58:41 +01:00
30a64b5a09 rc3ticker: fix ticker colors 2022-12-20 20:58:41 +01:00
4ee68b0d3c rc3ticker: add alias dezentrale-jahresendveranstaltungen.fyi by mcnesium 2022-12-20 20:58:41 +01:00
3e6512cd28
Fix eval 2022-12-20 20:49:42 +01:00
1079b5c722
Remove already opened ports 2022-12-20 19:59:51 +01:00
9a149b1521 rc3ticker: init 2022-12-20 13:59:55 +01:00
d4f9527b6b public-access-proxy: add rc3.ticker.c3d2.de 2022-12-20 13:59:46 +01:00
d2dcfdea66
Fix eval 2022-12-20 07:49:11 +01:00
fca5192432
Fix more evals 2022-12-20 07:36:04 +01:00
0028e20c55
Fix eval, remove useless attr hosts in hostRegistry, hosts are now directly at hostRegistry 2022-12-20 07:20:39 +01:00
a482b31bd4
Fix eval 2022-12-20 05:08:04 +01:00
1e29f7d473
Allow telnet port again 2022-12-20 04:55:17 +01:00
b74cf7f896
Use lib function 2022-12-20 04:55:04 +01:00
f7902022e9
Match default settings 2022-12-20 04:54:52 +01:00
aafc472a59
Handle nginx open firewall by nixos-modules 2022-12-20 04:32:18 +01:00
4fccad9eea buzzrelay: enable postgresql log_min_duration_statement 2022-12-20 04:16:45 +01:00
c15bd0e155
Remove mostly unused host-registry and combine ssh public keys with users.nix 2022-12-20 04:11:52 +01:00
3c8556c53d prometheus: add target relay.fedi.buzz 2022-12-20 03:15:30 +01:00
584ae23920 buzzrelay: import the actual buzzrelay flake 2022-12-20 02:29:48 +01:00
411d5ec6a0 buzzrelay: configure nginx 2022-12-20 02:29:48 +01:00
003e37582c
Format 2022-12-19 23:36:57 +01:00
0664722be2
Format 2022-12-19 23:21:54 +01:00
90ded927b1
Only alert when load is over 2 for 15m 2022-12-19 22:45:17 +01:00
09327a9c50
mastodon: add secrets to sops 2022-12-19 22:42:40 +01:00
8cc182d33c public-access-proxy: forward relay.fedi.buzz 2022-12-19 22:21:11 +01:00
971430afa2 buzzrelay: init 2022-12-19 20:57:43 +01:00
ae164b7947 fix maildir creation 2022-12-19 03:17:26 +01:00
7f736e5fc5 fix ldap 2022-12-19 02:32:57 +01:00
6e2e2d5f3d
Fix password 2022-12-19 02:31:04 +01:00
7c296593a3
Escape # 2022-12-19 02:15:10 +01:00
8dae717981
Fix sops secret 2022-12-19 01:33:40 +01:00
2ba0c75764
Delete old file 2022-12-19 01:08:57 +01:00
28694f4b5f
Don't repeat services.openssh.enable = true 2022-12-19 01:08:45 +01:00
fee4372499
Cleanup options 2022-12-19 01:08:36 +01:00
055401c6c4 server9, server10: add services.nomad.settings.client.reserved 2022-12-19 00:13:37 +01:00
d9f8657f55 make prefix proper 2022-12-19 00:09:54 +01:00
2d25a164ac
Fix eval + format 2022-12-18 23:55:41 +01:00
fdbea7fa35
Format 2022-12-18 23:47:42 +01:00
01909dc86e
Use live certs 2022-12-18 23:42:30 +01:00
489b932c56
Fix syntax 2022-12-18 23:42:30 +01:00
f6d3addd57 stream: enable proxyWebsockets for peerflix 2022-12-18 23:05:00 +01:00
77ba53ff79
Fix syntax 2022-12-18 22:40:30 +01:00
a3228b06b1
Open http ports for acme 2022-12-18 22:34:38 +01:00
ef8001e69d
Use staging acme server for testing 2022-12-18 22:33:01 +01:00
bc49e75fc4
Set stateVersion 2022-12-18 22:18:08 +01:00
c84d0da6e0
Fix domain 2022-12-18 22:18:08 +01:00
8e5f6731d4
Default microvm mounts to etc, home, var; random cleanups 2022-12-18 22:18:08 +01:00
ad983e7732 rename file 2022-12-18 21:54:55 +01:00
cd428d8816 fix ldap settings 2022-12-18 21:49:24 +01:00
e4ea813ddb
Fix hostname 2022-12-18 21:31:34 +01:00
aa4d9eadb9
hydra: avoid perl warning about undefined variable 2022-12-18 21:20:37 +01:00
cc7e228c00 fix eval 2022-12-18 20:45:51 +01:00
c60b5f0161 reformat 2022-12-18 20:34:20 +01:00
4a35734f66 tend to merge request comments 2022-12-18 20:27:30 +01:00
b3e12755eb add managesieve 2022-12-18 20:19:22 +01:00
1fce631c24
adding secrets for dnpass 2022-12-18 20:16:24 +01:00
16351819ca Merge remote-tracking branch 'origin/master' into mailtng 2022-12-18 19:56:04 +01:00
e43ce3b29b
hydra: combine default.nix and hydra.nix, remove nix store over ssh 2022-12-18 19:03:24 +01:00
38f69300bb prometheus: update alert2muc url 2022-12-18 03:19:40 +01:00
601c5c3716 grafana: update prosody dashboard 2022-12-18 02:16:25 +01:00
845bea7584
Increase repeat to 7 days 2022-12-18 00:48:01 +01:00
b549947a39
Extract rules to extra file, round oom kills 2022-12-18 00:43:53 +01:00
c2e19af7e8
Cleanup and improve prometheus alerts 2022-12-17 22:04:45 +01:00
24329a062e
prometheus: increase RAM 2022-12-17 21:56:20 +01:00
93c020f582
Cleanups 2022-12-17 21:56:07 +01:00
8ea43cc31d prometheus: restore half of the legacy xmpp alerter so that the alertmanager configuration builds at all 2022-12-17 01:17:01 +01:00
917b38a895 prometheus: feed alert2muc directly not through alertmanager 2022-12-17 01:15:42 +01:00
3571d962fa prometheus: add alert2muc 2022-12-17 00:58:20 +01:00
eb39c1d403
Migrate deprecated options 2022-12-16 21:56:22 +01:00
1affe00d39 public-access-proxy: fix c3d2-web addrs 2022-12-16 21:25:56 +01:00
a704213e59 mastodon: bump mem 2022-12-16 17:33:51 +01:00
77c6fb4dcd
Fix eval 2022-12-15 00:23:20 +01:00
a789ba633e
gitea: increase healthcheck timeout 2022-12-13 00:15:49 +01:00
0906569551 owncast: add archiver 2022-12-12 22:26:38 +01:00
233498c9ae owncast: fix? 2022-12-12 21:31:06 +01:00
fccd9d918d owncast: allow nginx access to archive 2022-12-12 21:29:07 +01:00
9f64181a58 owncast: location subdir needs alias not root 2022-12-12 21:24:31 +01:00
bfae8d96d5 owncast: fix nginx fancyindex 2022-12-12 21:20:41 +01:00
592d79a9e0 owncast: mount archive 2022-12-12 21:15:04 +01:00
fe4deea101 prometheus: add some alerts 2022-12-12 02:16:31 +01:00
8f192b81ff stream: increase deployment.mem from 2G to 4G
OOMs happened?
2022-12-12 01:46:24 +01:00
3d276740a2 Merge pull request 'master' (#94) from leon/nix-config:master into master
Reviewed-on: #94
2022-12-11 15:07:40 +01:00
585a5ce6e5 caveman: add nginx vhost "relay.fedi.buzz" 2022-12-11 04:11:15 +01:00
f12ee0f88e mobilizon, oparl: fix microvm.vm setting 2022-12-11 04:11:15 +01:00
7cd28db298 mastodon: set LOG_LEVEL=debug 2022-12-11 04:11:15 +01:00
add3740477
Add telme10 2022-12-11 02:07:56 +01:00
5eecc110af
Fix mixed intend 2022-12-11 01:38:17 +01:00
1e21c9e129 mobilizon, oparl: bump deployment.mem
these hosts have been ooming
2022-12-10 23:37:36 +01:00
82ecb7fea5
Fix alertmanager forwarding 2022-12-10 23:34:09 +01:00
d918cf7d86 prometheus: enable collectdBinary receiver 2022-12-10 22:03:27 +01:00