infra/hosts/nachtigall/default.nix

{ flake, ... }:

{
  imports =
    [
      # Include the results of the hardware scan.
      ./hardware-configuration.nix
      ./configuration.nix

      ./networking.nix
      ./wireguard.nix
      ./backups.nix
      ./apps/nginx.nix

      ./apps/collabora.nix
      ./apps/coturn.nix
      ./apps/forgejo.nix
      ./apps/keycloak.nix
      ./apps/mailman.nix
      ./apps/mastodon.nix
      ./apps/mediawiki.nix
      ./apps/nextcloud.nix
      ./apps/nginx-mastodon.nix
      ./apps/nginx-mastodon-files.nix
      ./apps/nginx-prometheus-exporters.nix
      ./apps/nginx-website.nix
      ./apps/nginx-website-miom.nix
      ./apps/opensearch.nix
      ./apps/owncast.nix
      ./apps/postgresql.nix
      ./apps/prometheus-exporters.nix
      ./apps/promtail.nix
      ./apps/searx.nix
      ./apps/tmate.nix
      ./apps/obs-portal.nix

      ./apps/matrix/irc.nix
      ./apps/matrix/mautrix-telegram.nix
      ./apps/matrix/synapse.nix
      ./apps/nginx-matrix.nix
    ];
}
feat: mastodon module updates from nixos-unstable Pull in changes from https://github.com/NixOS/nixpkgs/pull/251950 early 2023-11-18 17:46:23 +00:00			`{ flake, ... }:`
Add NixOS config for nachtigall 2023-10-27 21:06:55 +00:00
			`{`
			`imports =`
			`[`
			`# Include the results of the hardware scan.`
			`./hardware-configuration.nix`
hosts/nachtigall: Move config to configuration.nix 2023-10-28 09:28:41 +00:00			`./configuration.nix`
feat: caddy 2023-10-28 11:02:04 +00:00
fix: import networking and nix modules 2023-10-28 11:55:10 +00:00			`./networking.nix`
wireguard: add basic keys 2024-04-03 19:03:14 +00:00			`./wireguard.nix`
feat: droppie backups for all nachtigall services 2023-11-05 21:54:09 +00:00			`./backups.nix`
use nginx 2023-10-28 13:31:44 +00:00			`./apps/nginx.nix`
fix: address review comments 2023-10-28 16:18:06 +00:00
feat: add collabora 2023-10-28 19:39:13 +00:00			`./apps/collabora.nix`
nachtigall: Deploy coturn and configure matrix to use it 2023-11-19 16:22:09 +00:00			`./apps/coturn.nix`
forgejo: use iptables routing instead of ssh patch 2024-04-05 15:00:28 +00:00			`./apps/forgejo.nix`
fix: import keycloak module 2023-10-28 21:33:07 +00:00			`./apps/keycloak.nix`
feat: mailman initial commit 2023-10-28 22:31:09 +00:00			`./apps/mailman.nix`
			`./apps/mastodon.nix`
feat: add mediawiki Co-authored-by: @teutat3s <teutates@mailbox.org> 2023-10-30 00:22:34 +00:00			`./apps/mediawiki.nix`
feat: nextcloud initial commit 2023-10-28 00:46:38 +00:00			`./apps/nextcloud.nix`
fix: add nginx virtualHost for mastodon We use pub.solar as our LOCAL_DOMAIN and mastodon.pub.solar as our WEB_DOMAIN. The NixOS module does not support this special use case. See: https://github.com/NixOS/nixpkgs/issues/202399 2023-10-28 16:56:22 +00:00			`./apps/nginx-mastodon.nix`
add nginx virtual host for files.pub.solar 2023-10-28 15:21:54 +00:00			`./apps/nginx-mastodon-files.nix`
feat(prometheus): add node-exporter to nachtigall, protect endpoint https://nachtigall.pub.solar/metrics with TLS and basic auth 2023-12-06 18:11:45 +00:00			`./apps/nginx-prometheus-exporters.nix`
Add nginx configuration for pub.solar website 2023-10-28 14:26:02 +00:00			`./apps/nginx-website.nix`
nginx/miom: init miom.space website This adds an nginx configuration for https://miom.space/. MiOM is a creative collective in Cologne that frequently hosts our hakken.irl hackathons. They're already using our cloud to organize. This service is a bit more specific than most pub.solar services and falls into a similar category as the obs-portal. On the old miom website all logging was turned off, we might want to do the same thing in nginx here as well then. 2024-02-25 15:06:29 +00:00			`./apps/nginx-website-miom.nix`
fix: address review comments 2023-10-28 16:18:06 +00:00			`./apps/opensearch.nix`
feat(nachtigall): send logs to loki, https+basic auth Use caddy as reverse proxy for loki on flora-6, add basic auth Add promtail to nachtigall, push logs to flora-6 2023-12-13 18:18:56 +00:00			`./apps/owncast.nix`
Merge pull request 'feature/pub-solar-website' (#20) from feature/pub-solar-website into main Reviewed-on: https://git.pub.solar/pub-solar/infra-new/pulls/20 2023-10-28 14:45:30 +00:00			`./apps/postgresql.nix`
feat(prometheus): add node-exporter to nachtigall, protect endpoint https://nachtigall.pub.solar/metrics with TLS and basic auth 2023-12-06 18:11:45 +00:00			`./apps/prometheus-exporters.nix`
feat(nachtigall): send logs to loki, https+basic auth Use caddy as reverse proxy for loki on flora-6, add basic auth Add promtail to nachtigall, push logs to flora-6 2023-12-13 18:18:56 +00:00			`./apps/promtail.nix`
feat: searx 2023-10-29 14:34:25 +00:00			`./apps/searx.nix`
feat: init tmate-ssh-server https://tmate.io 2024-02-07 17:01:44 +00:00			`./apps/tmate.nix`
obs-portal: init obs-portal on nachtigall This follows the official installation instructions at https://github.com/openbikesensor/portal/blob/main/docs/production-deployment.md Unfortunately, the postgres database needs to have postgis enabled, so we'll have to start a second instance. To stay close to the official deployment instructions, this is running in docker. The secrets were taken from the old installation instance. During initial installation, we'll need to import data from the old instance into this one, which might take a while. 2024-02-22 18:20:24 +00:00			`./apps/obs-portal.nix`
nachtigall: Configure matrix-synapse with telegram integration 2023-10-28 00:21:34 +00:00
feat(nachtigall): send logs to loki, https+basic auth Use caddy as reverse proxy for loki on flora-6, add basic auth Add promtail to nachtigall, push logs to flora-6 2023-12-13 18:18:56 +00:00			`./apps/matrix/irc.nix`
feat: move matrix related files into subdir 2023-10-29 00:55:35 +00:00			`./apps/matrix/mautrix-telegram.nix`
			`./apps/matrix/synapse.nix`
nachtigall: Add nginx config for serving matrix-synapse 2023-10-29 03:48:26 +00:00			`./apps/nginx-matrix.nix`
Add NixOS config for nachtigall 2023-10-27 21:06:55 +00:00			`];`
			`}`