Commit Graph

1679 Commits

Author SHA1 Message Date
4a69bb6f5e
Remove zfs options now in nixos-modules 2023-01-03 00:20:51 +01:00
1a03c0196b
Convert prometheus to microvm 2023-01-03 00:20:32 +01:00
42cc20ff5f
Migrate simd.arch to nixos-modules 2023-01-02 17:37:29 +01:00
af055e2af1 change username 2023-01-02 14:59:15 +00:00
9566f77ec2
hydra: redo with full zfs 2023-01-02 05:06:46 +01:00
cfd36714ac server10: add znapzend backups of microvms to server8 2023-01-01 21:50:58 +01:00
046e6d4828 prometheus: make nginx strip /alert2muc when proxying 2023-01-01 21:50:18 +01:00
247171fc53
Bump nixos-modules 2023-01-01 20:52:45 +01:00
85c99f06f3
Add new zfs partition 2023-01-01 20:50:56 +01:00
c9c6e88ae8 prometheus: add caveman-gatherer 2022-12-30 02:59:37 +01:00
eb4161749f prometheus: proxy alert2muc thru nginx 2022-12-29 03:31:30 +01:00
a8aef7636a buzzrelay: enable collectd 2022-12-28 03:58:49 +01:00
a89ccd752a
Add machine-id's to config 2022-12-28 01:48:08 +01:00
f31bde14f7 freifunk: implement new gateway selection 2022-12-28 00:58:57 +01:00
41b9b509f9 caveman: triple hunter.max_workers 2022-12-27 20:43:48 +01:00
561139a175
Fix build 2022-12-27 05:15:36 +01:00
da3899719e
Fix eval 2022-12-27 02:54:20 +01:00
863ce0a1f0
Format 2022-12-27 02:54:14 +01:00
10c63686ff
Convert to sops 2022-12-27 02:25:02 +01:00
df2f866435
Reduce code duplication 2022-12-27 02:24:01 +01:00
ae3e6270bb
Move secrets to sops 2022-12-27 00:59:37 +01:00
a6b1e3cc22
Write jid into normal config 2022-12-26 23:23:18 +01:00
c476fad4d8
Remove default settings 2022-12-26 23:23:09 +01:00
45dea05d68
Migrate secrets to sops 2022-12-26 23:18:15 +01:00
ba622127b5
Add c3d2 secrets to web 2022-12-26 23:15:23 +01:00
5bcc9f2e29
Re-crypt 2022-12-26 20:10:42 +01:00
d46c1bb0f6
Remember dex session 2022-12-26 05:19:36 +01:00
33d680b404 prometheus: add caveman-hunter 2022-12-26 03:47:59 +01:00
4624b8945f
Cleanup 2022-12-26 02:54:15 +01:00
ac8355120b
Auto login into oauth and oauth only 2022-12-26 02:53:59 +01:00
98bf5db347
Enable enableRedistributableFirmware everywhere, remove duplicated kernelPackages 2022-12-26 02:53:19 +01:00
c6f7d77004
Enable tmux by default 2022-12-26 02:50:16 +01:00
1e743f68e6
Move schalter to file 2022-12-26 02:45:29 +01:00
be2ce8f89a kibana: add buzz2elastic 2022-12-26 02:27:44 +01:00
f18fa32b4a server10: comment dup boot.kernelPackages 2022-12-26 02:27:44 +01:00
33c6b7d8d5 Update 'hosts/gitea/Migration.md' 2022-12-26 02:17:10 +01:00
618d047df8
Fix group assignment 2022-12-26 02:04:36 +01:00
5e62b87f01
Add some documentation 2022-12-25 23:57:01 +01:00
7169365fd8 kibana: revive 2022-12-24 23:45:38 +01:00
73861f5f7e
Fix portunus hosts entries 2022-12-24 15:40:27 +01:00
d52398ced4 remove mail group from ldap 2022-12-24 15:24:46 +01:00
18dbb77f59 remove 10.0.0.0/8 network and add comment for root email user 2022-12-24 15:18:25 +01:00
036586fc16
Misc 2022-12-24 00:12:17 +01:00
d2dd70c48b
Move most of seed config out of sops 2022-12-24 00:12:06 +01:00
c82eeb32d4
Grant admin permissions based on group 2022-12-24 00:04:58 +01:00
22f49b4f3c
Use zfs mountpoints 2022-12-23 22:23:24 +01:00
5111e2ad6a server9, server10: fix services.nomad.settings.client.reserved.memory 2022-12-23 15:58:49 +01:00
37f67bb1ce mastodon: switch back to legacy microvm.nix for now 2022-12-23 13:49:50 +01:00
e017135180
Add basic OIDC for grafana 2022-12-23 08:31:44 +01:00
2ab8acc520
Remove options set by upstream module already 2022-12-22 22:47:34 +01:00
6827eea6d4
Upsi 2022-12-22 21:57:08 +01:00
24bc378143
Replace copy pasted hosts entry with option 2022-12-22 21:25:53 +01:00
1db84c2429
DROP 2022-12-22 02:20:07 +01:00
d7f2562459
Decrease oom kill to one day 2022-12-21 23:42:10 +01:00
f7bf9eb6c2
Exclude boot partition 2022-12-21 23:34:13 +01:00
2b2bf71305 c3d2-web: s/serv/flpk/ 2022-12-21 21:11:29 +01:00
d29686a841 rc3ticker: add dezentrale 2022-12-21 21:11:29 +01:00
861536c175 rc3ticker: wiggle hip color 2022-12-21 21:11:29 +01:00
e037a1fd55
Fix hashes 2022-12-21 21:06:50 +01:00
fe8683f01f
Drop c3d2.isInHq 2022-12-21 19:43:47 +01:00
3f493722ba public-access-proxy: add dezentrale-jahresendveranstaltungen.fyi 2022-12-20 20:58:41 +01:00
30a64b5a09 rc3ticker: fix ticker colors 2022-12-20 20:58:41 +01:00
4ee68b0d3c rc3ticker: add alias dezentrale-jahresendveranstaltungen.fyi by mcnesium 2022-12-20 20:58:41 +01:00
3e6512cd28
Fix eval 2022-12-20 20:49:42 +01:00
1079b5c722
Remove already opened ports 2022-12-20 19:59:51 +01:00
9a149b1521 rc3ticker: init 2022-12-20 13:59:55 +01:00
d4f9527b6b public-access-proxy: add rc3.ticker.c3d2.de 2022-12-20 13:59:46 +01:00
d2dcfdea66
Fix eval 2022-12-20 07:49:11 +01:00
fca5192432
Fix more evals 2022-12-20 07:36:04 +01:00
0028e20c55
Fix eval, remove useless attr hosts in hostRegistry, hosts are now directly at hostRegistry 2022-12-20 07:20:39 +01:00
a482b31bd4
Fix eval 2022-12-20 05:08:04 +01:00
1e29f7d473
Allow telnet port again 2022-12-20 04:55:17 +01:00
b74cf7f896
Use lib function 2022-12-20 04:55:04 +01:00
f7902022e9
Match default settings 2022-12-20 04:54:52 +01:00
aafc472a59
Handle nginx open firewall by nixos-modules 2022-12-20 04:32:18 +01:00
4fccad9eea buzzrelay: enable postgresql log_min_duration_statement 2022-12-20 04:16:45 +01:00
c15bd0e155
Remove mostly unused host-registry and combine ssh public keys with users.nix 2022-12-20 04:11:52 +01:00
3c8556c53d prometheus: add target relay.fedi.buzz 2022-12-20 03:15:30 +01:00
584ae23920 buzzrelay: import the actual buzzrelay flake 2022-12-20 02:29:48 +01:00
411d5ec6a0 buzzrelay: configure nginx 2022-12-20 02:29:48 +01:00
003e37582c
Format 2022-12-19 23:36:57 +01:00
0664722be2
Format 2022-12-19 23:21:54 +01:00
90ded927b1
Only alert when load is over 2 for 15m 2022-12-19 22:45:17 +01:00
09327a9c50
mastodon: add secrets to sops 2022-12-19 22:42:40 +01:00
8cc182d33c public-access-proxy: forward relay.fedi.buzz 2022-12-19 22:21:11 +01:00
971430afa2 buzzrelay: init 2022-12-19 20:57:43 +01:00
ae164b7947 fix maildir creation 2022-12-19 03:17:26 +01:00
7f736e5fc5 fix ldap 2022-12-19 02:32:57 +01:00
6e2e2d5f3d
Fix password 2022-12-19 02:31:04 +01:00
7c296593a3
Escape # 2022-12-19 02:15:10 +01:00
8dae717981
Fix sops secret 2022-12-19 01:33:40 +01:00
2ba0c75764
Delete old file 2022-12-19 01:08:57 +01:00
28694f4b5f
Don't repeat services.openssh.enable = true 2022-12-19 01:08:45 +01:00
fee4372499
Cleanup options 2022-12-19 01:08:36 +01:00
055401c6c4 server9, server10: add services.nomad.settings.client.reserved 2022-12-19 00:13:37 +01:00
d9f8657f55 make prefix proper 2022-12-19 00:09:54 +01:00
2d25a164ac
Fix eval + format 2022-12-18 23:55:41 +01:00
fdbea7fa35
Format 2022-12-18 23:47:42 +01:00
01909dc86e
Use live certs 2022-12-18 23:42:30 +01:00
489b932c56
Fix syntax 2022-12-18 23:42:30 +01:00
f6d3addd57 stream: enable proxyWebsockets for peerflix 2022-12-18 23:05:00 +01:00
77ba53ff79
Fix syntax 2022-12-18 22:40:30 +01:00
a3228b06b1
Open http ports for acme 2022-12-18 22:34:38 +01:00
ef8001e69d
Use staging acme server for testing 2022-12-18 22:33:01 +01:00
bc49e75fc4
Set stateVersion 2022-12-18 22:18:08 +01:00
c84d0da6e0
Fix domain 2022-12-18 22:18:08 +01:00
8e5f6731d4
Default microvm mounts to etc, home, var; random cleanups 2022-12-18 22:18:08 +01:00
ad983e7732 rename file 2022-12-18 21:54:55 +01:00
cd428d8816 fix ldap settings 2022-12-18 21:49:24 +01:00
e4ea813ddb
Fix hostname 2022-12-18 21:31:34 +01:00
aa4d9eadb9
hydra: avoid perl warning about undefined variable 2022-12-18 21:20:37 +01:00
cc7e228c00 fix eval 2022-12-18 20:45:51 +01:00
c60b5f0161 reformat 2022-12-18 20:34:20 +01:00
4a35734f66 tend to merge request comments 2022-12-18 20:27:30 +01:00
b3e12755eb add managesieve 2022-12-18 20:19:22 +01:00
1fce631c24
adding secrets for dnpass 2022-12-18 20:16:24 +01:00
16351819ca Merge remote-tracking branch 'origin/master' into mailtng 2022-12-18 19:56:04 +01:00
e43ce3b29b
hydra: combine default.nix and hydra.nix, remove nix store over ssh 2022-12-18 19:03:24 +01:00
38f69300bb prometheus: update alert2muc url 2022-12-18 03:19:40 +01:00
601c5c3716 grafana: update prosody dashboard 2022-12-18 02:16:25 +01:00
845bea7584
Increase repeat to 7 days 2022-12-18 00:48:01 +01:00
b549947a39
Extract rules to extra file, round oom kills 2022-12-18 00:43:53 +01:00
c2e19af7e8
Cleanup and improve prometheus alerts 2022-12-17 22:04:45 +01:00
24329a062e
prometheus: increase RAM 2022-12-17 21:56:20 +01:00
93c020f582
Cleanups 2022-12-17 21:56:07 +01:00
8ea43cc31d prometheus: restore half of the legacy xmpp alerter so that the alertmanager configuration builds at all 2022-12-17 01:17:01 +01:00
917b38a895 prometheus: feed alert2muc directly not through alertmanager 2022-12-17 01:15:42 +01:00
3571d962fa prometheus: add alert2muc 2022-12-17 00:58:20 +01:00
eb39c1d403
Migrate deprecated options 2022-12-16 21:56:22 +01:00
1affe00d39 public-access-proxy: fix c3d2-web addrs 2022-12-16 21:25:56 +01:00
a704213e59 mastodon: bump mem 2022-12-16 17:33:51 +01:00
77c6fb4dcd
Fix eval 2022-12-15 00:23:20 +01:00
a789ba633e
gitea: increase healthcheck timeout 2022-12-13 00:15:49 +01:00
0906569551 owncast: add archiver 2022-12-12 22:26:38 +01:00
233498c9ae owncast: fix? 2022-12-12 21:31:06 +01:00
fccd9d918d owncast: allow nginx access to archive 2022-12-12 21:29:07 +01:00
9f64181a58 owncast: location subdir needs alias not root 2022-12-12 21:24:31 +01:00
bfae8d96d5 owncast: fix nginx fancyindex 2022-12-12 21:20:41 +01:00
592d79a9e0 owncast: mount archive 2022-12-12 21:15:04 +01:00
fe4deea101 prometheus: add some alerts 2022-12-12 02:16:31 +01:00
8f192b81ff stream: increase deployment.mem from 2G to 4G
OOMs happened?
2022-12-12 01:46:24 +01:00
3d276740a2 Merge pull request 'master' (#94) from leon/nix-config:master into master
Reviewed-on: #94
2022-12-11 15:07:40 +01:00
585a5ce6e5 caveman: add nginx vhost "relay.fedi.buzz" 2022-12-11 04:11:15 +01:00
f12ee0f88e mobilizon, oparl: fix microvm.vm setting 2022-12-11 04:11:15 +01:00
7cd28db298 mastodon: set LOG_LEVEL=debug 2022-12-11 04:11:15 +01:00
add3740477
Add telme10 2022-12-11 02:07:56 +01:00
5eecc110af
Fix mixed intend 2022-12-11 01:38:17 +01:00
1e21c9e129 mobilizon, oparl: bump deployment.mem
these hosts have been ooming
2022-12-10 23:37:36 +01:00
82ecb7fea5
Fix alertmanager forwarding 2022-12-10 23:34:09 +01:00
d918cf7d86 prometheus: enable collectdBinary receiver 2022-12-10 22:03:27 +01:00
442c02f13e
Configure alertmanager 2022-12-10 20:59:01 +01:00
959a0931be remove nginx 2022-12-10 19:41:45 +00:00
03f9d82600 Merge https://gitea.c3d2.de/c3d2/nix-config 2022-12-10 19:41:08 +00:00
7f120207d5
Fix datasource 2022-12-10 19:52:03 +01:00
618e1ed9b9
Commit migrations done by grafana 2022-12-10 19:46:37 +01:00
37c98c9ae9
Use collectd-data package to reduce build time closure by 500 packages 2022-12-10 19:42:21 +01:00
7bc63111a2
grafana: fix eval 2022-12-10 19:42:05 +01:00
ff04c649c3
Actually enable noXlibs 2022-12-09 22:41:39 +01:00
78f5cb4feb add docker and docker-compose 2022-12-07 20:58:32 +00:00
0beda8f0e3 remove docker 2022-12-07 20:55:34 +00:00
3f45c026df glotzbert: add kernel module for hwmon2 2022-12-07 20:54:41 +01:00
2232760bb2 add stream site 2022-12-07 18:10:21 +00:00
4029190310 fixing ngix 2022-12-07 18:04:46 +00:00
e011ff965b fixing commit mesg && adding new config 2022-12-07 17:41:07 +00:00
eb21d0bbb3
hydra: add ldap login 2022-12-06 15:58:29 +01:00
e0a3393290
adding flake back 2022-12-05 22:05:46 +01:00
58c4f8bec5
Restrict secrets 2022-12-05 01:58:55 +01:00
2a0920904b
Fix hydra builder 2022-12-05 01:58:55 +01:00
870f91a3d1
Don't hardcode auth ip 2022-12-05 01:58:55 +01:00
92dc5ba222 dacbert: add stream-audio-to-owncast 2022-12-04 23:22:21 +01:00
875145884c server10: disable microvm-update@staging-data-hoarder.timer for now 2022-12-04 21:42:34 +01:00
b467bb4e74
Generate simd variants of each host, delete unused module 2022-12-04 08:55:28 +01:00
6b8d8541c6
Deadnix, statix, other cleanups 2022-12-04 08:55:27 +01:00
a9590e3242
hydra: unify localhost machine 2022-12-04 08:55:27 +01:00
e16bd28785
Convert nix settings 2022-12-04 06:38:47 +01:00
2621bd671f
web: add mastodon webfinger 2022-12-02 02:11:16 +01:00
9873b56a29
Fix ALTERNATE_DOMAINS 2022-12-02 01:03:09 +01:00
759df9e927
Add certificate social.c3d2.de 2022-12-02 00:55:11 +01:00
67a8de43f1 mastodon: revert broken custom theme 2022-12-01 22:39:38 +01:00
308dd5bd22 mastodon: remove packs to regenerate shit 2022-12-01 22:35:47 +01:00
486c2a3720 mastodon: also copy chaos.social's mascot.scss 2022-12-01 22:28:22 +01:00
3e6c35086c mastodon: install chaos.social theme 2022-12-01 22:18:27 +01:00
83b37db967 mastodon: attempt smtp configuration 2022-12-01 21:33:09 +01:00
202942d9d0
Add social.c3d2.de for frontend 2022-11-30 23:28:09 +01:00
263068fc32 mastodon: add collectd monitoring of sidekiq and postgresql 2022-11-30 22:23:46 +01:00
14d2855366 mastodon: more cpu 2022-11-30 22:07:45 +01:00
72d537b742 mastodon: move from serv to flpk 2022-11-30 21:15:23 +01:00
877d9f04c7 mastodon: bump mem from 4G to 8G 2022-11-30 20:42:23 +01:00
b421de33dd public-access-proxy: add c3d2.social 2022-11-30 18:13:08 +01:00
bf2933f574 mastodon: add elasticsearch 2022-11-30 17:52:33 +01:00
224ddc2631 mastodon: tune 2022-11-30 17:43:47 +01:00
897139a46b mastodon: enable ldap 2022-11-30 02:28:56 +01:00
9e97c34038 mastodon: use nixos' mastodon nginx config 2022-11-30 01:13:53 +01:00
a4474a5f39 mastodon:init 2022-11-30 00:50:09 +01:00
af51086c18 caveman: bump microvm.mem from 8G to 16G 2022-11-29 02:10:49 +01:00
b3caf1a39b Merge leon's branch 2022-11-28 00:49:52 +01:00
71a611467d stream: fix pub network 2022-11-27 17:23:47 +01:00
c469c46ffe prometheus: add scrape 2022-11-27 02:29:59 +01:00
da110aa138 prometheus: redeploy 2022-11-27 01:36:56 +01:00
4f785ca1c9 update 2022-11-26 21:28:30 +00:00
b53c53a6f7 update 2022-11-26 17:37:34 +00:00
97b7d2d71f update 2022-11-26 17:34:22 +00:00
b70d9bcb78 update 2022-11-26 17:30:36 +00:00
e141ce6ee0 update 2022-11-26 14:59:39 +00:00
6bc6834498 update 2022-11-26 14:58:50 +00:00
dadf8c72c7 update 2022-11-26 14:58:23 +00:00
966bb7389f update 2022-11-26 14:56:10 +00:00
8c1b350f1a update 2022-11-26 14:53:02 +00:00
c61bb308a3 Merge leon's branch 2022-11-26 03:06:58 +01:00
035617c112 sdrweb: enable needForSpeed to prefer server10's cpu 2022-11-26 02:52:14 +01:00
2b2982961c update 2022-11-26 01:51:49 +00:00
c67ba25488 update 2022-11-26 01:48:17 +00:00
a33b2abe29 update 2022-11-26 01:47:34 +00:00
65a91dc324 stream: skyflakify 2022-11-26 01:39:35 +01:00
e6ab80fc5e Merge https://gitea.c3d2.de/c3d2/nix-config 2022-11-26 00:33:20 +00:00
de9ce610e9 modules/cluster/deployment: add option deployment.needForSpeed 2022-11-26 00:34:41 +01:00
930c3a67e0 update 2022-11-25 23:27:45 +00:00
0669b29a23 Merge https://gitea.c3d2.de/c3d2/nix-config 2022-11-25 22:50:56 +00:00
572af7e31d leoncloud: skyflakify 2022-11-25 23:42:04 +01:00
9c9c52b659 Merge pull request 'leon' (#90) from leon/nix-config:leon into master
Reviewed-on: #90
2022-11-25 23:07:19 +01:00
3c0c101dd7 update 2022-11-25 18:33:58 +00:00
deb314f8e4 update 2022-11-25 18:05:46 +00:00
8c9afdf9b8 server8: init 2022-11-24 18:48:34 +01:00
69da87ecdb update 2022-11-24 02:07:13 +00:00
82c6de7b9d update 2022-11-24 02:04:18 +00:00
aa607866d1 update 2022-11-24 02:01:39 +00:00
e4262a4dab update 2022-11-24 02:00:58 +00:00
80c8ed5a45 update 2022-11-24 02:00:27 +00:00
65eba5ebf7 update 2022-11-24 01:53:55 +00:00
3d5e202ac0 update 2022-11-24 01:52:57 +00:00
afcd7f32a7 fix 2022-11-24 01:45:39 +00:00
4a1ac9dc9d fix 2022-11-24 01:44:34 +00:00
f1203f33df add html 2022-11-24 01:43:35 +00:00
3ef0df9608 sdrweb: allot 16 cores 2022-11-24 00:03:12 +01:00
f377c855c5 add domain to proxy 2022-11-23 18:33:24 +00:00
474c9f90da update
'
2022-11-23 12:52:45 +00:00
08c7664625 update 2022-11-22 23:51:09 +00:00
45d40e1e1b update 2022-11-22 23:31:39 +00:00
37dd2e0591 update 2022-11-22 23:30:10 +00:00
f2b57ee0ec update 2022-11-22 23:29:03 +00:00
bcd82e69fe update 2022-11-22 23:28:41 +00:00
50d29f7af3 update 2022-11-22 23:27:40 +00:00
056276a579 update 2022-11-22 21:52:00 +00:00
345960c777 update 2022-11-22 21:34:51 +00:00
ecd85a41e8 update 2022-11-22 21:34:16 +00:00
9ea5e27a42 update nginx 2022-11-22 21:14:14 +00:00
7a749c9a45 update 2022-11-22 20:43:42 +00:00
ac039e0367 update 2022-11-22 20:32:38 +00:00
c3d1cb2fa6 update 2022-11-22 20:31:51 +00:00
b2d52e18ea add nameserver 2022-11-22 20:30:48 +00:00