Commit graph

53 commits

Author SHA1 Message Date
teutat3s e266d528f3
dns: add records for Nextcloud Talk backend 2023-05-13 16:55:07 +02:00
teutat3s b06e8ae556
Merge pull request 'Update 'www/caddy/Caddyfile'' (#6) from caddy-redirect-satzung into main
Reviewed-on: pub-solar/infra#6
Reviewed-by: teutat3s <teutates@mailbox.org>
2023-03-15 11:44:21 +01:00
teutat3s a1e2db0d3b
pub.solar now lives on flora-6
359a82a28e/hosts/flora-6/caddy.nix (L19)
2023-02-27 20:30:53 +01:00
hensoko a3e50d8b5e Update 'www/caddy/Caddyfile'
redirect pub.solar/satzung to pub.solar nextcloud
2023-02-26 21:56:26 +01:00
teutat3s deb4215fe7 Merge pull request 'Add factorio dns entry' (#5) from feature/factorio-dns into main
Reviewed-on: pub-solar/infra#5
Reviewed-by: teutat3s <teutates@mailbox.org>
2023-02-26 21:00:01 +01:00
Benjamin Bädorf 4a1f01c22e
Add factorio dns entry 2023-02-26 20:58:41 +01:00
b12f 61d7d6070a Merge pull request 'Update mastodon to v4.1.0' (#3) from mastodon/update-4.1.0 into main
Reviewed-on: pub-solar/infra#3
Reviewed-by: b12f <hello@benjaminbaedorf.eu>
2023-02-24 20:49:27 +01:00
b12f 9731b69cbb Merge pull request 'flora-6: init list.pub.solar mail DNS records' (#2) from dns/add-list-mail-records into main
Reviewed-on: pub-solar/infra#2
Reviewed-by: b12f <hello@benjaminbaedorf.eu>
2023-02-24 20:49:05 +01:00
teutat3s 47d0644065 Merge pull request 'Pin terraform version in flake' (#4) from fix/pin-terraform into main
Reviewed-on: pub-solar/infra#4
Reviewed-by: teutat3s <teutates@mailbox.org>
2023-02-24 20:46:19 +01:00
Benjamin Bädorf cf3a3da6c4
Pin terraform version in flake 2023-02-24 20:42:55 +01:00
teutat3s 6e14bc910c
mastodon: bump version to v4.1.0
Bump elasticsearch to 7.17.9

caddy: comment out access logging for mastodon
2023-02-19 19:04:57 +01:00
teutat3s 8079825ec5
Add .envrc for mastodon, setting correct triton
profile
2023-02-19 19:04:57 +01:00
teutat3s f3dd7be010
dns: add list.pub.solar to the SPF TXT record
for pub.solar, allowing flora-6 to send mails on behalf of
admins@pub.solar
2023-02-08 19:46:30 +01:00
teutat3s 132ceeecb0
dns: use new SPF record for greenbaum MX 2023-02-08 12:56:50 +01:00
teutat3s 9ee9345192
Fix DMARC policy for list.pub.solar
Our _dmarc TXT record by default protects all subdomains, so an
adversary can't send mails on behalf of any subdomains (p=reject, p
stands for policy). We add a _dmarc.list TXT record with the same policy
to allow sending mails via list.pub.solar's postfix.
See https://dmarcly.com/blog/how-dmarc-works-with-subdomains-dmarc-sp-tag
for more context
2023-02-03 13:08:56 +01:00
teutat3s db234cdb5b
flora-6: init list.pub.solar mail DNS records
- TXT spf record
- A record because mail servers don't like CNAME
- MX record for subdomain list.pub.solar
2023-02-02 22:50:34 +01:00
teutat3s e54844ef52
dns: add ci and list records to pub.solar 2023-01-31 21:42:17 +01:00
teutat3s 6c62589dd8
Update DNS records
The pub.solar website and www record now live on flora-6

mail.greenbaum.cloud -> mx2.greenbaum.cloud

Remove non-functional mail, imap and smtp records.
mx2.greenbaum.cloud is responsible for mails as per MX record

Namecheap likes to add the root dot to DNS records, let's follow its preference
2023-01-21 23:20:30 +01:00
Benjamin Bädorf 14982bd164
Add Team OBSKöln to the obs-portal banner 2022-12-29 13:59:27 +01:00
Benjamin Bädorf 1d5eeadce8
Change OBS portal banner for production 2022-12-07 20:33:00 +01:00
teutat3s 136adbae53
flora-6: create dirs for terraform files in DC
lev-1 and cgn-1
2022-11-29 02:38:10 +01:00
teutat3s 349882ba4b
mastodon: use caddy to redirect register, forgot
password, resend confirmation links
2022-11-29 02:33:27 +01:00
teutat3s fbb85d2f87
Update Readme 2022-11-29 02:33:27 +01:00
Benjamin Bädorf 9adc940d26
Update flake.lock and obs latlon 2022-11-28 21:24:25 +01:00
teutat3s 2feb393cc1
obs-portal: add README 2022-11-28 21:23:04 +01:00
teutat3s d78c4afe04
openbikesensor-portal: init 2022-11-28 16:08:31 +01:00
teutat3s 8648709ed9
Bump mastodon to version 4.0.2, elasticsearch to
version 7.17.4
2022-11-15 13:12:00 +01:00
teutat3s b6bb5c4f37
Switch to tritonshell devshell nix module 2022-10-12 15:15:23 +02:00
teutat3s f28bff0af4
Remove tritonshell, use it as git submodule instead 2022-10-05 16:24:45 +02:00
teutat3s 7546e1a25d
pub-solar-infra-vm-1 alias flora6: init and document terraform deployment 2022-10-05 16:20:01 +02:00
teutat3s d79cc27c90
pub.solar: use /os/download/ for PubSolarOS images 2022-10-03 15:31:26 +02:00
teutat3s 77d3b10fef
nextcloud: set opcache.interned_strings_buffer=32 2022-10-03 15:30:47 +02:00
teutat3s b80e34070b
prometheus: add helper script for pw hash 2022-07-11 16:28:55 +02:00
teutat3s 4564d1afe4
prometheus: docs for linting the config yml file 2022-07-11 16:27:13 +02:00
teutat3s c682a97746
prometheus: add matrix.pub.solar scrape endpoints
For docs, see:
https://github.com/spantaleev/matrix-docker-ansible-deploy/blob/master/docs/configuring-playbook-prometheus-grafana.md
2022-07-11 16:26:14 +02:00
teutat3s ee8281563f
gitignore: result 2022-07-11 16:25:54 +02:00
teutat3s 589ed68eef
Use new flake default packages.<system>.default
Introduced in nix 2.7.0
https://discourse.nixos.org/t/nix-2-7-0-released/18072
defaultPackage.<system> got renamed to packages.<system>.default
2022-07-04 22:52:53 +02:00
teutat3s ac21dc06cd
Add prometheus Readme, document how to build image 2022-07-03 17:00:53 +02:00
teutat3s 7bffbf537f
Use prom/prometheus docker image from DockerHub
nixpkgs prometheus version lags behind two minor versions at the moment
2022-07-03 17:00:53 +02:00
teutat3s f477f7fd31
Increase prometheus's scrape_interval to 60m
This is sufficient to track the status of backups, that only run daily
2022-07-03 17:00:52 +02:00
Benjamin Bädorf 8cfe7d8455
Fix fixupPhase overwrite 2022-06-06 03:11:02 +02:00
Benjamin Bädorf 9bca728a62
Fix fixupPhase overwrite 2022-06-06 03:05:05 +02:00
Benjamin Bädorf 41ee90351b
Fix fixupPhase overwrite 2022-06-06 03:03:12 +02:00
Benjamin Bädorf e71abe255c
Different interface to triton-vmtools derivation file 2022-06-06 00:13:55 +02:00
teutat3s 7c60da235a
Init triton vmtools flake 2022-06-05 23:43:44 +02:00
Hendrik Sokolowski 8e71f6c227 Use nix file to describe / build container 2022-06-05 04:02:43 +02:00
Hendrik Sokolowski 23bf1e54c7 Add target for nextcloud prometheus exporter 2022-06-05 02:43:57 +02:00
teutat3s 1a0768afe7
Fix nix-direnv 2022-06-05 01:39:44 +02:00
Hendrik Sokolowski 8d5e8f10ff Add Dockerfile for custom prometheus scraper 2022-06-04 20:54:20 +02:00
teutat3s 3384054508
Init www for pub.solar and pub.solar/os 2022-06-04 20:50:31 +02:00