pinpox/infra
1
0
Fork 0
forked from pub-solar/infra
Code Pull requests Activity
609 commits 15 branches 0 tags 13 MiB
Commit graph

609 commits

This branch
This branch
All branches
Author SHA1 Message Date
teutat3s 4350cbf7c4
tankstelle: add promtail, prometheus node-exporter 
for monitoring, configure wireguard between flora-6 and tankstelle
 2024-06-06 12:53:49 +02:00
teutat3s b93608a8fa
metronom: add promtail, prometheus node-exporter 
configure wireguard to push logs to and scrape metrics from flora-6

open firewall for node-exporter port on wg-ssh interface
 2024-06-06 12:52:55 +02:00
teutat3s 6143f56c01
flake: use DNS hostnames for deploy-rs 2024-06-06 12:50:24 +02:00
teutat3s 008e14f2d2
mail: add missing NixOS module to metronom 2024-06-06 12:49:58 +02:00
teutat3s 509a40b829
Merge pull request 'update mastodon, matrix-synapse, nextcloud, php, ruby, and others' (#201) from chore/updates into main 
Reviewed-on: pub-solar/infra#201
Reviewed-by: Hendrik Sokolowski <hensoko@noreply.git.pub.solar>
 2024-06-06 09:21:12 +00:00
teutat3s 6aa18b0a2c
flake: update inputs 
• Updated input 'element-themes':
    'github:aaronraimist/element-themes/2368b58c16d2c4aabb82a245f036d228cbb6e5f5' (2024-02-12)
  → 'github:aaronraimist/element-themes/6ed3a981191cbd59f03ea530f16e096b9a4c278c' (2024-05-28)
• Updated input 'flake-parts':
    'github:hercules-ci/flake-parts/8dc45382d5206bd292f9c2768b8058a8fd8311d9' (2024-05-16)
  → 'github:hercules-ci/flake-parts/2a55567fcf15b1b1c7ed712a2c6fadaec7412ea8' (2024-06-01)
• Updated input 'flake-parts/nixpkgs-lib':
    '50eb7ecf4c.tar.gz?narHash=sha256-QBx10%2Bk6JWz6u7VsohfSw8g8hjdBZEf8CFzXH1/1Z94%3D' (2024-05-02)
  → 'eb9ceca17d.tar.gz?narHash=sha256-lIbdfCsf8LMFloheeE6N31%2BBMIeixqyQWbSr2vk79EQ%3D' (2024-06-01)
• Updated input 'home-manager':
    'github:nix-community/home-manager/2c78a57c544dd19b07442350727ced097e1aa6e6' (2024-05-26)
  → 'github:nix-community/home-manager/095ef64aa3b2ab4a4f1bf07f29997e21e3a5576a' (2024-06-04)
• Updated input 'nix-darwin':
    'github:lnl7/nix-darwin/0bea8222f6e83247dd13b055d83e64bce02ee532' (2024-05-24)
  → 'github:lnl7/nix-darwin/c0d5b8c54d6828516c97f6be9f2d00c63a363df4' (2024-05-29)
• Updated input 'nixpkgs':
    'github:nixos/nixpkgs/46397778ef1f73414b03ed553a3368f0e7e33c2f' (2024-05-22)
  → 'github:nixos/nixpkgs/a62e6edd6d5e1fa0329b8653c801147986f8d446' (2024-05-31)
• Updated input 'unstable':
    'github:nixos/nixpkgs/bfb7a882678e518398ce9a31a881538679f6f092' (2024-05-24)
  → 'github:nixos/nixpkgs/57610d2f8f0937f39dbd72251e9614b1561942d8' (2024-05-31)
 2024-06-05 02:08:13 +02:00
teutat3s 10ed117dfe
Merge pull request 'loki, prometheus, promtail should connect via wireguard' (#200) from loki-prometheus-via-wireguard into main 
Reviewed-on: pub-solar/infra#200
Reviewed-by: Hendrik Sokolowski <hensoko@noreply.git.pub.solar>
Reviewed-by: b12f <b12f@noreply.git.pub.solar>
 2024-06-05 00:04:40 +00:00
teutat3s e93a56e594
nginx: use square brackets for IPv6 address 2024-06-05 01:59:54 +02:00
teutat3s 27c239b985
loki: allow port 3100 in firewall for wg-ssh interface 2024-06-05 01:59:44 +02:00
teutat3s 61ea0ad7c2
networking: add internal IPv6 wireguard IPs to /etc/hosts 2024-06-03 12:33:51 +02:00
teutat3s 8f1b932fdc
docs: update unlocking ZFS pool 2024-06-03 12:30:08 +02:00
teutat3s 56f692740e
networking: use *.wg.pub.solar in /etc/hosts 
instead of overriding IPs for existing DNS records, to reduce suprises
when DNS records are different depending on the host.

Add metronom + tankstelle internal wireguard IPs, too.
 2024-06-03 12:28:33 +02:00
teutat3s 0286719dce
dns: add internal *.wg.pub.solar VPN records 2024-06-01 16:51:49 +02:00
teutat3s 20ebf92f1f
loki, promtail, prometheus: remove basic auth, use 
wireguard to secure connections
 2024-06-01 16:51:14 +02:00
teutat3s a10027ed21
Merge pull request 'Init mail.pub.solar' (#196) from feat/mail into main 
Reviewed-on: pub-solar/infra#196
Reviewed-by: teutat3s <teutat3s@noreply.git.pub.solar>
 2024-05-31 15:22:28 +00:00
teutat3s 8f46e22636
docs: updates for metronom / mail 2024-05-31 16:52:04 +02:00
teutat3s 0038be3d2c
metronom: use wireguard IP for SSH, lock down SSH 
port access to wireguard only
 2024-05-31 16:52:04 +02:00
teutat3s 9a9dccf5bb
mail: move NixOS module to modules 2024-05-31 16:52:04 +02:00
teutat3s fcd9af314e
mail: update teutat3s password 2024-05-31 16:52:04 +02:00
teutat3s c5dfb472f8
style: treefmt 2024-05-31 16:52:04 +02:00
teutat3s 9d8026a31a
mail(treewide): update mail.greenbaum.zone -> mail.pub.solar 2024-05-31 16:52:04 +02:00
teutat3s 1ca1168d7a
mail: switch to mail.pub.solar 2024-05-31 16:52:04 +02:00
teutat3s a3f7afd7a0
docs: add metronom to deploy docs, style: format 2024-05-31 16:52:03 +02:00
teutat3s a424152f94
dns: add test mail records for metronom.pub.solar 
DKIM, DMARC, SPF, MX
 2024-05-31 16:52:03 +02:00
teutat3s b6f64a1e04
mail: add more @pub.solar mail accounts 2024-05-31 16:52:03 +02:00
teutat3s 9635367c82
dns: add metronom.pub.solar 2024-05-31 16:52:03 +02:00
Benjamin Yule Bädorf 3bcdd33b5a
deploy: use system from host configuration 2024-05-31 16:52:03 +02:00
Hendrik Sokolowski af233793fb
initial work on mail 2024-05-31 16:52:01 +02:00
teutat3s 6d8d34123f
Merge pull request 'ci: add self-hosted runner tankstelle' (#198) from feat/add-tankstelle into main 
Reviewed-on: pub-solar/infra#198
Reviewed-by: teutat3s <teutat3s@noreply.git.pub.solar>
 2024-05-31 14:49:20 +00:00
teutat3s 2b873f8d3e
Merge pull request 'alerts: alert for uptime after 90 days instead of 30 days' (#199) from alerts-tweak-uptime into main 
Reviewed-on: pub-solar/infra#199
Reviewed-by: Hendrik Sokolowski <hensoko@noreply.git.pub.solar>
 2024-05-31 14:48:12 +00:00
teutat3s 941eff6d87
tankstelle: configure wireguard 2024-05-30 19:17:21 +02:00
teutat3s b039dec111
ci: update results path to prevent garbage collection 2024-05-30 19:04:40 +02:00
teutat3s 5aa1276e85
ci: add nix to PATH 2024-05-30 19:04:40 +02:00
teutat3s cc70a740a1
ci: run actions runner as normal user 2024-05-30 19:04:40 +02:00
teutat3s 866785ef47
style: format using treefmt 2024-05-30 19:04:40 +02:00
teutat3s 692c152406
gitea-actions-runner: fix PATH in systemd 2024-05-30 19:04:40 +02:00
teutat3s e71cbfc461
ci: add self-hosted forgejo-actions-runner 
wip: add git.pub.solar to /etc/hosts

ci: add devshell with Node.js for forgejo actions

ci: add PATH

ci: add HOME
 2024-05-30 19:04:13 +02:00
Hendrik Sokolowski 946585d1ca
initial commit of tankstelle 2024-05-29 14:08:59 +02:00
teutat3s 2eeef069a2
alerts: alert for uptime after 90 days instead 2024-05-27 16:45:58 +02:00
teutat3s 1235a4f878
Merge pull request 'style: avoid usage of top-level "with lib;"' (#195) from style-avoid-top-level-lib into main 
Reviewed-on: pub-solar/infra#195
Reviewed-by: Hendrik Sokolowski <hensoko@noreply.git.pub.solar>
 2024-05-27 10:03:43 +00:00
teutat3s 9113f995e9
Merge pull request 'Update matrix-synapse, docker and others' (#197) from chore/updates into main 
Reviewed-on: pub-solar/infra#197
 2024-05-26 18:45:07 +00:00
teutat3s 04ee83737d
flake: update inputs 
• Updated input 'agenix':
    'github:ryantm/agenix/8d37c5bdeade12b6479c85acd133063ab53187a0' (2024-05-09)
  → 'github:ryantm/agenix/c2fc0762bbe8feb06a2e59a364fa81b3a57671c9' (2024-05-24)
• Updated input 'flake-parts':
    'github:hercules-ci/flake-parts/e5d10a24b66c3ea8f150e47dfdb0416ab7c3390e' (2024-05-02)
  → 'github:hercules-ci/flake-parts/8dc45382d5206bd292f9c2768b8058a8fd8311d9' (2024-05-16)
• Updated input 'home-manager':
    'github:nix-community/home-manager/ab5542e9dbd13d0100f8baae2bc2d68af901f4b4' (2024-05-10)
  → 'github:nix-community/home-manager/2c78a57c544dd19b07442350727ced097e1aa6e6' (2024-05-26)
• Updated input 'maunium-stickerpicker':
    'github:maunium/stickerpicker/f59406a47a6778cd402e656ffb64f667335f665a?dir=web' (2022-11-15)
  → 'github:maunium/stickerpicker/47f17fde452b5e9f0c9e96ce0e2c878dd0574b7f?dir=web' (2024-05-18)
• Updated input 'nix-darwin':
    'github:lnl7/nix-darwin/de8b0d60d6fd34f35abffc46adc94ebaa6996ce2' (2024-05-14)
  → 'github:lnl7/nix-darwin/0bea8222f6e83247dd13b055d83e64bce02ee532' (2024-05-24)
• Updated input 'nixos-flake':
    'github:srid/nixos-flake/7b19503e7f8c7cc0884fc2fbd669c0cc2e05aef5' (2024-03-25)
  → 'github:srid/nixos-flake/aa9100167350cbdffaa272b0fd382d7c23606b86' (2024-05-22)
• Updated input 'nixpkgs':
    'github:nixos/nixpkgs/44072e24566c5bcc0b7aa9178a0104f4cfffab19' (2024-05-12)
  → 'github:nixos/nixpkgs/46397778ef1f73414b03ed553a3368f0e7e33c2f' (2024-05-22)
• Updated input 'unstable':
    'github:nixos/nixpkgs/2057814051972fa1453ddfb0d98badbea9b83c06' (2024-05-12)
  → 'github:nixos/nixpkgs/bfb7a882678e518398ce9a31a881538679f6f092' (2024-05-24)
 2024-05-26 19:05:23 +02:00
teutat3s a86ce80c47
Merge pull request 'backups: remove droppie' (#194) from backups-disable-droppie into main 
Reviewed-on: pub-solar/infra#194
Reviewed-by: Hendrik Sokolowski <hensoko@noreply.git.pub.solar>
 2024-05-22 16:39:59 +00:00
teutat3s 708cf947de
backups: remove droppie 
There were no backups to droppie since December 2023. We can always add
it back, if desired.
 2024-05-19 15:31:20 +02:00
teutat3s c015a1ec2e
style: avoid usage of top-level "with lib"; 
See: https://github.com/NixOS/nixpkgs/issues/208242
 2024-05-19 15:27:19 +02:00
teutat3s 39221b3874
Merge pull request 'fix: nachtigall wants keycloak' (#192) from fix/keycloak into main 
Reviewed-on: pub-solar/infra#192
Reviewed-by: Hendrik Sokolowski <hensoko@noreply.git.pub.solar>
 2024-05-16 06:17:05 +00:00
teutat3s d7a6da30f5
Merge pull request 'backups: reduce chances for lock race' (#193) from backups-splay into main 
Reviewed-on: pub-solar/infra#193
Reviewed-by: Hendrik Sokolowski <hensoko@noreply.git.pub.solar>
 2024-05-16 06:10:11 +00:00
teutat3s 67b9b84e01
backups: reduce chances for lock race 
Start one backup per hour each night
 2024-05-15 21:00:41 +02:00
teutat3s 0cb89a9fe8
fix: nachtigall wants keycloak 2024-05-15 19:20:06 +02:00
teutat3s 47c9424459
Merge pull request 'Add alertmanager config - part 2' (#189) from alertmanager into main 
Reviewed-on: pub-solar/infra#189
Reviewed-by: Hendrik Sokolowski <hensoko@noreply.git.pub.solar>
 2024-05-15 15:23:59 +00:00