1
0
forked from c3d2/nix-config
Commit Graph

1823 Commits

Author SHA1 Message Date
5c56d05d5d
Add home-assistant 2023-04-07 01:43:01 +02:00
b86bb8d067
Rename nix-serve to nix-cache 2023-04-03 20:34:04 +02:00
f7d0fe3c74 buzzrelay: set journald storage to volatile 2023-03-31 22:00:52 +02:00
5a20cd1043 caveman: reduce the static mastodon-instances.txt 2023-03-31 20:30:25 +02:00
cf64c7c502 caveman: remove development vhost now served by buzzrelay 2023-03-31 20:29:57 +02:00
439f263813 caveman: move caveman-hunter prometheus_port 2023-03-31 20:29:36 +02:00
fb813a2130 caveman: set redis backup schedule 2023-03-31 20:21:47 +02:00
850f35dad9 buzzrelay: add collectd postgresql stats 2023-03-31 20:21:04 +02:00
662f487311
proxy node_exporter through nginx and drop none local traffic 2023-03-28 01:27:24 +02:00
a3b460f8aa
public-access-proxy: add element.c3d2.de 2023-03-25 16:23:00 +01:00
52fd6f4e03
c3d2-web: add matrix well-known entries 2023-03-25 16:22:49 +01:00
cf20a94462 Cleanup 2023-03-25 16:05:49 +01:00
fc56e5ff3e matrix: add element, fix ldap login 2023-03-25 16:05:30 +01:00
8cfdf8124e web: use regex's to have high priority 2023-03-25 16:05:01 +01:00
04f2bdf2f5 woodpecker: remove 2023-03-25 16:04:46 +01:00
f042fd77be Cleanup 2023-03-25 16:04:23 +01:00
ffa71115d5
matrix: add; bind: add missing file 2023-03-24 01:58:32 +01:00
5e88cbe4a5
public-access-proxy: add matrix 2023-03-24 01:56:23 +01:00
6dfa098c8a
Add todo 2023-03-24 01:56:11 +01:00
210d1a00d4
bind: fix paths, add ssh key declarative 2023-03-23 23:05:12 +01:00
a6f9000588
bind: sort 2023-03-23 21:36:53 +01:00
7819af404d
gitea: update shiny new and old settings 2023-03-23 20:29:18 +01:00
1df9fec4bb
bind: clone via ssh 2023-03-23 02:08:01 +01:00
5f1e34fcd2
bind: allow drone to log into dns user 2023-03-23 01:39:41 +01:00
3df5b42373
Fix 2023-03-23 01:35:19 +01:00
c2bf0e0a97
Add ssh secrets 2023-03-23 01:33:54 +01:00
19068120de
c3d2-web: reduce dependencies 2023-03-23 01:33:54 +01:00
61050634df
bind: use drone ci 2023-03-23 01:33:54 +01:00
29e13afd83 c3d2-web: add Mastodon Webfinger redirect for datenspuren.de 2023-03-22 23:09:02 +01:00
9be58af61f c3d2-web: fix Mastodon Webfinger redirect 2023-03-22 22:46:08 +01:00
8cd4626732
Remove factorio 2023-03-21 01:26:04 +01:00
35957073b0
gitea: add secret file 2023-03-18 01:35:58 +01:00
76883a973b
gitea: format, enable declarative ldap 2023-03-18 01:35:27 +01:00
9772890f59
data-hoarder-staging: deploy from master 2023-03-17 13:28:32 +01:00
f5fd030426
Correct module type 2023-03-10 20:25:47 +01:00
df8117b441
server7: cleanup 2023-03-09 21:57:13 +01:00
Markus Schmidl
c72a300651 deadnix 2023-03-09 21:47:10 +01:00
e413fcac75 server7: sops updatekeys *.yaml 2023-03-07 00:09:22 +01:00
49564713b6 server7: add server7_ssd0 luks 2023-03-07 00:06:57 +01:00
d96d0fb1fd server7: setup ceph 2023-03-07 00:05:22 +01:00
698fca39be server7: remove /var from manual mounting 2023-03-06 23:37:44 +01:00
6ca27604b6 server7: fix 2023-03-06 20:57:24 +01:00
ec245aa4e9 server7: switch to systemd-boot 2023-03-06 20:56:50 +01:00
6dd7514bee server7: enable grub uefi 2023-03-06 20:52:43 +01:00
559b7232aa server7: let grub device point to loop0 2023-03-06 20:49:59 +01:00
b14f17d407 server7: update grub device 2023-03-06 20:47:03 +01:00
b9a25bcc80 server7: update hardware-configuration to actual disk layout 2023-03-06 20:37:28 +01:00
6e7c0edda4 server7: add preparations 2023-03-06 19:07:51 +01:00
fa393831ab update gly-site 2023-03-03 19:59:12 +00:00
02f8019a4d add site 2023-03-03 19:59:12 +00:00
23325abbed Merge branch 'deploy-leon/leon' 2023-02-26 21:37:01 +01:00
0423572c90 pushing to overdose 2023-02-26 15:35:10 +00:00
015586b838 add client 2023-02-25 17:56:42 +00:00
8c2ed1ee04 udpate 2023-02-25 17:51:15 +00:00
bf9f4fc054 update repo 2023-02-25 13:44:46 +00:00
59469043df leon: turn back onto skyflake 2023-02-23 01:06:08 +01:00
f9000837bc
Delete direkhilfe, zengel 2023-02-23 00:04:10 +01:00
8cb5835594
gitea: fix deprecated option 2023-02-22 20:01:43 +01:00
63c451b8fd c3d2-web: fix evaluation... 2023-02-21 00:15:14 +01:00
0bd76deb35
c3d2-web: use lib.mkOptionDefault instead of options.*.default 2023-02-20 23:53:22 +01:00
19769c583e ticker: add jkpev feed 2023-02-20 10:53:27 +01:00
90d32bbe2f
jabber: add chatterboxtown.us to spam filter 2023-02-19 20:00:42 +01:00
7cfc141d36
jabber: remove hardcoded ip 2023-02-19 20:00:30 +01:00
a60f41df08
Bump matemat 2023-02-12 19:53:41 +01:00
df1b7ac6ce
owncast: redirect /archive to /archive/ 2023-02-01 00:29:13 +01:00
5151d81858
Add todo 2023-02-01 00:26:16 +01:00
d7f35bec7b
Allow c3d2 group, definitely void datadog 2023-01-30 00:46:19 +01:00
400b22ae3b
Make some room on /tmp for drones build directory 2023-01-30 00:36:01 +01:00
4c1d718f76
Cleanup old pipeline 2023-01-30 00:00:57 +01:00
1bcaf4714e
Combine allowUnfree into a single entry 2023-01-30 00:00:57 +01:00
03f9c98bf7
Add drone 2023-01-30 00:00:56 +01:00
ccc175e894 caveman: increase services.caveman.redis.maxmemory 2023-01-26 02:13:42 +01:00
e0dc85408f
Add woodpecker 2023-01-26 02:06:10 +01:00
9720353f7e
Add woodpecker 2023-01-26 00:55:17 +01:00
Sandro Jäckel
bf619eeb07
Remove default package 2023-01-25 15:45:58 +01:00
Sandro Jäckel
972c84c088
Don't build aarch64 on dacbert 2023-01-25 13:25:32 +01:00
2da0329221 oxigraph: leave note for how to ingest 2023-01-22 21:03:35 +01:00
8b6227ebbe caveman: enable caveman-butcher 2023-01-22 21:03:23 +01:00
15d1cecb24 stream: remove obsolete deployment.storage setting 2023-01-21 19:33:48 +01:00
44b9cdf963 oxigraph: bump deployment.vcpu from 4 to 16 for parallelized import 2023-01-21 19:14:03 +01:00
3f4a6c7a22
hydra: use gallium, disable binfmt container 2023-01-21 00:44:41 +01:00
6a4a3ca035 oxigraph: init 2023-01-20 22:55:33 +01:00
ea8bf43313 modules/cluster/customization/options: remove unused deployment.storage 2023-01-20 18:51:40 +01:00
892014a2dc stream: bump deployment.mem from 4G to 6G 2023-01-20 18:51:16 +01:00
e19f18dc77 tmppleroma: init 2023-01-19 16:55:34 +01:00
761cc76888
hydra: move slow binfmt builds into container to allow running some x86_64 builds along side 2023-01-19 01:12:19 +01:00
b05d8ca7c2
Disable proxy connect
Only worked with open http2 connection :(
2023-01-18 02:25:24 +01:00
b3475da2da
Test proxy protocol 2023-01-18 01:52:47 +01:00
e76232a081 kibana: remove 2023-01-17 00:52:16 +01:00
547ad2e011
Use security.ldap for ldap login 2023-01-17 00:26:49 +01:00
f05733be65
Move notification spam to its own channel 2023-01-16 20:50:17 +01:00
47a0808b97
Format 2023-01-16 01:51:24 +01:00
8c08febdb7 ticker: add gruene-jugend 2023-01-13 18:39:59 +01:00
972b562f78 owncast: move archive from glusterfs to cephfs 2023-01-13 01:30:53 +01:00
87698b1c63 ticker: remove terminal-dresden for now 2023-01-12 20:56:43 +01:00
669bafaf2f scrape, ticker: add kosmotique 2023-01-12 20:56:09 +01:00
9300e144b2 scrape, ticker: add criticalmass 2023-01-12 20:39:02 +01:00
d74a65d8b2 scrape, ticker: add museen-dresden 2023-01-12 19:34:50 +01:00
99766be2dc hydra: use hydra-queue-runner@localhost 2023-01-11 21:53:43 +01:00
63ba2165a3 c3d2-web: update datenspuren redirect to 2023 2023-01-11 21:53:29 +01:00
fdd3eeae01 ticker: add dgfk 2023-01-11 16:10:17 +01:00
837c185c05 hydra: fix ownership of the sops ssh keys 2023-01-10 22:21:44 +01:00
d9e5de54ef
Increase data retention time 2023-01-10 00:19:27 +01:00
5c00567283
hedgedoc: reduce log spam, disallow scraping 2023-01-10 00:18:32 +01:00
a38bc1a12b hydra: own updater ssh keys to updater user 2023-01-09 23:47:44 +01:00
f6fbb6ae04
Round throughput alerts to be less flappy 2023-01-09 23:40:24 +01:00
fb77c92330 c3d2-web: redirect rc3 vhosts to datenspuren.de 2023-01-08 23:10:22 +01:00
1a639fac62 rc3ticker: remove 2023-01-08 23:04:58 +01:00
34b3a07ded
Round metric 2023-01-07 19:19:19 +01:00
242d03c7ad
Check config again 2023-01-07 05:32:16 +01:00
f6b293e1a3
Upgrade postgres 2023-01-07 05:27:40 +01:00
8744b4dfe7
Upgrade postgres 2023-01-07 04:38:44 +01:00
75e63ac17a
wiki: add acpu, open firewall again, increase RAM
acpu probably needs configuration...
2023-01-07 04:36:28 +01:00
f83250f1e5 server8: add zfsutil option to zfs dataset mounts 2023-01-07 02:55:35 +01:00
c9ecfdc88d kibana: bump limits 2023-01-07 02:55:22 +01:00
c9316ac41c modules/cluster: add ceph 2023-01-07 02:54:35 +01:00
14febedd5d
Format 2023-01-07 02:42:30 +01:00
976fe6dee6
Upgrade postgres 2023-01-07 02:00:15 +01:00
6594bdea29
Upgrade mastodon 2023-01-07 01:45:37 +01:00
983f5687ae
Upgrade postgres 2023-01-07 01:09:28 +01:00
9d9cc81671
hydra: add github access token 2023-01-07 00:55:15 +01:00
6072dbca1b
Upgrade postgres 2023-01-07 00:54:40 +01:00
e9555b81cc
Format 2023-01-06 23:57:20 +01:00
0f02e95746
Upgrade postgres 2023-01-06 23:56:02 +01:00
d5e612c680
Format 2023-01-06 23:24:02 +01:00
e21af4caa6
hydra: upgrade postgres 2023-01-06 23:18:47 +01:00
83ca783593
hydra: add hydra ssh keys 2023-01-06 23:07:32 +01:00
ff9777fc19
hedgedoc: update postgres 2023-01-06 21:09:14 +01:00
193820e84f
Format 2023-01-06 21:08:58 +01:00
c880195be2 ticker: comment out spammy palaissommer 2023-01-06 02:51:46 +01:00
a64499b423
Fix deprecation warning 2023-01-05 22:14:22 +01:00
ca6fe29106
Fix conntrack issues in microvm
due to bad scaling with lower RAM
2023-01-05 22:13:59 +01:00
fc105bb0d9 hydra: set system-features for usage as a remote builder 2023-01-05 21:49:21 +01:00
aabf6a4d2c leon: switch back to legacy microvm.nix for now 2023-01-05 03:19:58 +01:00
5e657280ec Merge branch 'deploy/leon' 2023-01-05 03:16:42 +01:00
ea36c50654 buzzrelay: switch back to legacy microvm.nix for now 2023-01-05 03:15:34 +01:00
c020327913
Remove no longer required known_hosts workaround 2023-01-05 00:36:03 +01:00
c162f15462
Add ssh keys to sops 2023-01-05 00:33:53 +01:00
Sandro Jäckel
74198511ed
Fix ldap login names with minus 2023-01-04 11:29:06 +01:00
a5b462d4ed
Remove zfs from sd card image 2023-01-04 01:26:55 +01:00
1349e0a333 Merge https://gitea.c3d2.de/c3d2/nix-config 2023-01-03 19:38:24 +00:00
abccab1c47
Remove nixos-module option 2023-01-03 05:50:39 +01:00
0bccdeeebb
Statix 2023-01-03 03:04:54 +01:00
7a3e6062f2
Deadnix 2023-01-03 03:04:24 +01:00
4a69bb6f5e
Remove zfs options now in nixos-modules 2023-01-03 00:20:51 +01:00
1a03c0196b
Convert prometheus to microvm 2023-01-03 00:20:32 +01:00
42cc20ff5f
Migrate simd.arch to nixos-modules 2023-01-02 17:37:29 +01:00
af055e2af1 change username 2023-01-02 14:59:15 +00:00
9566f77ec2
hydra: redo with full zfs 2023-01-02 05:06:46 +01:00
cfd36714ac server10: add znapzend backups of microvms to server8 2023-01-01 21:50:58 +01:00
046e6d4828 prometheus: make nginx strip /alert2muc when proxying 2023-01-01 21:50:18 +01:00
247171fc53
Bump nixos-modules 2023-01-01 20:52:45 +01:00
85c99f06f3
Add new zfs partition 2023-01-01 20:50:56 +01:00
c9c6e88ae8 prometheus: add caveman-gatherer 2022-12-30 02:59:37 +01:00
eb4161749f prometheus: proxy alert2muc thru nginx 2022-12-29 03:31:30 +01:00
a8aef7636a buzzrelay: enable collectd 2022-12-28 03:58:49 +01:00
a89ccd752a
Add machine-id's to config 2022-12-28 01:48:08 +01:00
f31bde14f7 freifunk: implement new gateway selection 2022-12-28 00:58:57 +01:00
41b9b509f9 caveman: triple hunter.max_workers 2022-12-27 20:43:48 +01:00
561139a175
Fix build 2022-12-27 05:15:36 +01:00
da3899719e
Fix eval 2022-12-27 02:54:20 +01:00
863ce0a1f0
Format 2022-12-27 02:54:14 +01:00
10c63686ff
Convert to sops 2022-12-27 02:25:02 +01:00
df2f866435
Reduce code duplication 2022-12-27 02:24:01 +01:00
ae3e6270bb
Move secrets to sops 2022-12-27 00:59:37 +01:00
a6b1e3cc22
Write jid into normal config 2022-12-26 23:23:18 +01:00
c476fad4d8
Remove default settings 2022-12-26 23:23:09 +01:00
45dea05d68
Migrate secrets to sops 2022-12-26 23:18:15 +01:00
ba622127b5
Add c3d2 secrets to web 2022-12-26 23:15:23 +01:00
5bcc9f2e29
Re-crypt 2022-12-26 20:10:42 +01:00
d46c1bb0f6
Remember dex session 2022-12-26 05:19:36 +01:00
33d680b404 prometheus: add caveman-hunter 2022-12-26 03:47:59 +01:00
4624b8945f
Cleanup 2022-12-26 02:54:15 +01:00
ac8355120b
Auto login into oauth and oauth only 2022-12-26 02:53:59 +01:00
98bf5db347
Enable enableRedistributableFirmware everywhere, remove duplicated kernelPackages 2022-12-26 02:53:19 +01:00
c6f7d77004
Enable tmux by default 2022-12-26 02:50:16 +01:00
1e743f68e6
Move schalter to file 2022-12-26 02:45:29 +01:00
be2ce8f89a kibana: add buzz2elastic 2022-12-26 02:27:44 +01:00
f18fa32b4a server10: comment dup boot.kernelPackages 2022-12-26 02:27:44 +01:00
33c6b7d8d5 Update 'hosts/gitea/Migration.md' 2022-12-26 02:17:10 +01:00
618d047df8
Fix group assignment 2022-12-26 02:04:36 +01:00
5e62b87f01
Add some documentation 2022-12-25 23:57:01 +01:00
7169365fd8 kibana: revive 2022-12-24 23:45:38 +01:00
73861f5f7e
Fix portunus hosts entries 2022-12-24 15:40:27 +01:00
d52398ced4 remove mail group from ldap 2022-12-24 15:24:46 +01:00
18dbb77f59 remove 10.0.0.0/8 network and add comment for root email user 2022-12-24 15:18:25 +01:00
036586fc16
Misc 2022-12-24 00:12:17 +01:00
d2dd70c48b
Move most of seed config out of sops 2022-12-24 00:12:06 +01:00
c82eeb32d4
Grant admin permissions based on group 2022-12-24 00:04:58 +01:00
22f49b4f3c
Use zfs mountpoints 2022-12-23 22:23:24 +01:00
5111e2ad6a server9, server10: fix services.nomad.settings.client.reserved.memory 2022-12-23 15:58:49 +01:00
37f67bb1ce mastodon: switch back to legacy microvm.nix for now 2022-12-23 13:49:50 +01:00
e017135180
Add basic OIDC for grafana 2022-12-23 08:31:44 +01:00
2ab8acc520
Remove options set by upstream module already 2022-12-22 22:47:34 +01:00
6827eea6d4
Upsi 2022-12-22 21:57:08 +01:00
24bc378143
Replace copy pasted hosts entry with option 2022-12-22 21:25:53 +01:00
1db84c2429
DROP 2022-12-22 02:20:07 +01:00
d7f2562459
Decrease oom kill to one day 2022-12-21 23:42:10 +01:00
f7bf9eb6c2
Exclude boot partition 2022-12-21 23:34:13 +01:00
2b2bf71305 c3d2-web: s/serv/flpk/ 2022-12-21 21:11:29 +01:00
d29686a841 rc3ticker: add dezentrale 2022-12-21 21:11:29 +01:00
861536c175 rc3ticker: wiggle hip color 2022-12-21 21:11:29 +01:00
e037a1fd55
Fix hashes 2022-12-21 21:06:50 +01:00
fe8683f01f
Drop c3d2.isInHq 2022-12-21 19:43:47 +01:00
3f493722ba public-access-proxy: add dezentrale-jahresendveranstaltungen.fyi 2022-12-20 20:58:41 +01:00
30a64b5a09 rc3ticker: fix ticker colors 2022-12-20 20:58:41 +01:00
4ee68b0d3c rc3ticker: add alias dezentrale-jahresendveranstaltungen.fyi by mcnesium 2022-12-20 20:58:41 +01:00
3e6512cd28
Fix eval 2022-12-20 20:49:42 +01:00
1079b5c722
Remove already opened ports 2022-12-20 19:59:51 +01:00
9a149b1521 rc3ticker: init 2022-12-20 13:59:55 +01:00
d4f9527b6b public-access-proxy: add rc3.ticker.c3d2.de 2022-12-20 13:59:46 +01:00
d2dcfdea66
Fix eval 2022-12-20 07:49:11 +01:00
fca5192432
Fix more evals 2022-12-20 07:36:04 +01:00
0028e20c55
Fix eval, remove useless attr hosts in hostRegistry, hosts are now directly at hostRegistry 2022-12-20 07:20:39 +01:00
a482b31bd4
Fix eval 2022-12-20 05:08:04 +01:00
1e29f7d473
Allow telnet port again 2022-12-20 04:55:17 +01:00
b74cf7f896
Use lib function 2022-12-20 04:55:04 +01:00
f7902022e9
Match default settings 2022-12-20 04:54:52 +01:00
aafc472a59
Handle nginx open firewall by nixos-modules 2022-12-20 04:32:18 +01:00
4fccad9eea buzzrelay: enable postgresql log_min_duration_statement 2022-12-20 04:16:45 +01:00
c15bd0e155
Remove mostly unused host-registry and combine ssh public keys with users.nix 2022-12-20 04:11:52 +01:00
3c8556c53d prometheus: add target relay.fedi.buzz 2022-12-20 03:15:30 +01:00
584ae23920 buzzrelay: import the actual buzzrelay flake 2022-12-20 02:29:48 +01:00
411d5ec6a0 buzzrelay: configure nginx 2022-12-20 02:29:48 +01:00
003e37582c
Format 2022-12-19 23:36:57 +01:00
0664722be2
Format 2022-12-19 23:21:54 +01:00
90ded927b1
Only alert when load is over 2 for 15m 2022-12-19 22:45:17 +01:00
09327a9c50
mastodon: add secrets to sops 2022-12-19 22:42:40 +01:00
8cc182d33c public-access-proxy: forward relay.fedi.buzz 2022-12-19 22:21:11 +01:00
971430afa2 buzzrelay: init 2022-12-19 20:57:43 +01:00
ae164b7947 fix maildir creation 2022-12-19 03:17:26 +01:00
7f736e5fc5 fix ldap 2022-12-19 02:32:57 +01:00
6e2e2d5f3d
Fix password 2022-12-19 02:31:04 +01:00
7c296593a3
Escape # 2022-12-19 02:15:10 +01:00
8dae717981
Fix sops secret 2022-12-19 01:33:40 +01:00
2ba0c75764
Delete old file 2022-12-19 01:08:57 +01:00
28694f4b5f
Don't repeat services.openssh.enable = true 2022-12-19 01:08:45 +01:00
fee4372499
Cleanup options 2022-12-19 01:08:36 +01:00
055401c6c4 server9, server10: add services.nomad.settings.client.reserved 2022-12-19 00:13:37 +01:00
d9f8657f55 make prefix proper 2022-12-19 00:09:54 +01:00
2d25a164ac
Fix eval + format 2022-12-18 23:55:41 +01:00
fdbea7fa35
Format 2022-12-18 23:47:42 +01:00
01909dc86e
Use live certs 2022-12-18 23:42:30 +01:00
489b932c56
Fix syntax 2022-12-18 23:42:30 +01:00
f6d3addd57 stream: enable proxyWebsockets for peerflix 2022-12-18 23:05:00 +01:00
77ba53ff79
Fix syntax 2022-12-18 22:40:30 +01:00
a3228b06b1
Open http ports for acme 2022-12-18 22:34:38 +01:00
ef8001e69d
Use staging acme server for testing 2022-12-18 22:33:01 +01:00
bc49e75fc4
Set stateVersion 2022-12-18 22:18:08 +01:00
c84d0da6e0
Fix domain 2022-12-18 22:18:08 +01:00