Commit graph

1013 commits

Author SHA1 Message Date
292bc10636
Merge pull request 'nachtigall: nscd / nsncd tweaks, add remote IP to /etc/hosts' (#359) from nachtigall-nscd into main
Reviewed-on: #359
Reviewed-by: hensoko <hensoko@noreply.git.pub.solar>
2025-04-28 19:04:06 +00:00
1881600ff5
delete-pubsolar-id: change order of matrix and forgejo deletions
Some checks failed
Flake checks / Check (pull_request) Failing after 42s
If forgejo has no user to delete, the command returns false, and the
`|| true` in the script does not appear to fix this. This commit is a
quick-fix for this issue.
2025-04-28 18:20:46 +02:00
4da085de0c
overlays/delete-pubsolar-id: convert to writeShellApplication,
Some checks failed
Flake checks / Check (pull_request) Failing after 43s
lint and clean up
2025-04-28 17:19:12 +02:00
a82d6b7e2a
nextcloud-notify_push: add remote IP to trusted_proxies
Some checks failed
Flake checks / Check (pull_request) Failing after 48m16s
2025-04-28 17:16:18 +02:00
6f3d9f3767
nachtigall: tune nscd/nsncd workers and timeout
https://github.com/twosigma/nsncd
2025-04-28 17:15:35 +02:00
703f199a6f
Merge pull request 'feat: add script for automated account deletion' (#356) from account-deletion-script into main
Reviewed-on: #356
Reviewed-by: teutat3s <teutat3s@noreply.git.pub.solar>
2025-04-27 01:48:33 +00:00
d9f1e3253f
chore: lint
All checks were successful
Flake checks / Check (pull_request) Successful in 27m53s
2025-04-27 02:43:24 +02:00
05c24b6418
feat: add script for automated account deletion
Some checks failed
Flake checks / Check (pull_request) Failing after 19s
Co-authored-by: releastninja <the@realest.ninja>
2025-04-27 02:41:16 +02:00
773e261732
Merge pull request 'nachtigall: Run mollysocket' (#355) from mollysocket into main
Reviewed-on: #355
Reviewed-by: teutat3s <teutat3s@noreply.git.pub.solar>
2025-04-26 18:10:49 +00:00
7fd022a4ee
nachtigall: Run mollysocket
Some checks failed
Flake checks / Check (pull_request) Has been cancelled
2025-04-26 19:50:57 +02:00
1ade182428
Merge pull request 'networking: don't add nachtigall.pub.solar to /etc/hosts' (#354) from networking-dont-set-domain into main
Reviewed-on: #354
Reviewed-by: Akshay Mankar <axeman@noreply.git.pub.solar>
2025-04-25 23:41:57 +00:00
761b326878
networking: don't add nachtigall.pub.solar to /etc/hosts
All checks were successful
Flake checks / Check (pull_request) Successful in 1h0m25s
2025-04-26 01:22:03 +02:00
b76c5a7f53
Merge pull request 'nextcloud/notify_push: Don't bend domain to localhost' (#353) from dont-bend-domain into main
Reviewed-on: #353
Reviewed-by: teutat3s <teutat3s@noreply.git.pub.solar>
2025-04-25 22:13:51 +00:00
e3a77b891a
nextcloud/notify_push: Don't bend domain to localhost
Some checks failed
Flake checks / Check (pull_request) Has been cancelled
Setting this value to true breaks matrix -> nextpush integration because matrix
doesn't like it if cloud.pub.solar resolves to localhost.
2025-04-26 00:11:57 +02:00
3c24dd25f5
Merge pull request 'nginx-website{,-miom}: ensure permissions for parent directory' (#350) from website-parent-dir-permissions into main
Reviewed-on: #350
Reviewed-by: Akshay Mankar <axeman@noreply.git.pub.solar>
2025-04-25 22:10:14 +00:00
552b30fa1e
Merge pull request 'element-stickerpicker: fix thumbnails after' (#348) from fix-element-stickers into main
Reviewed-on: #348
Reviewed-by: Akshay Mankar <axeman@noreply.git.pub.solar>
2025-04-25 22:10:05 +00:00
0260f86dd8
Merge pull request 'nginx(mastodon): set max body size to 99mb' (#352) from mastodon-max-body-size into main
Reviewed-on: #352
Reviewed-by: Akshay Mankar <axeman@noreply.git.pub.solar>
2025-04-25 22:06:39 +00:00
380b3cb9fb
Merge pull request 'loki: set log retention to 1w' (#349) from loki-logs-retention into main
Reviewed-on: #349
2025-04-25 22:03:33 +00:00
b06f370d3e
grafana: add declarative plugin lokiexplore-app
Some checks failed
Flake checks / Check (pull_request) Has been cancelled
2025-04-25 23:57:49 +02:00
85b7382009
loki: further tune for query performance
Try to fill more chunks by increasing timeouts that trigger chunk
creation before they fill.
2025-04-25 23:57:49 +02:00
184d562bd2
loki: tune for query performance
https://grafana.com/blog/2023/12/28/the-concise-guide-to-loki-how-to-get-the-most-out-of-your-query-performance/
2025-04-25 23:57:49 +02:00
af89d9f9b8
style: format using treefmt 2025-04-25 23:57:49 +02:00
34249a0e40
promtail: remove identifier from list of labels 2025-04-25 23:57:49 +02:00
08f5e22dd8
nextcloud: reduce loglevel to warning 2025-04-25 23:57:49 +02:00
1a75620006
docs: update notes about nextcloud logging 2025-04-25 23:57:49 +02:00
eda18f3a9e
promtail: reduce labels to a minimum to improve loki
query performance

https://grafana.com/docs/loki/latest/get-started/labels/
https://grafana.com/blog/2023/12/20/the-concise-guide-to-grafana-loki-everything-you-need-to-know-about-labels/
2025-04-25 23:57:48 +02:00
6dd0dc712c
trinkgenossin: should also use promtail module 2025-04-25 23:57:48 +02:00
237013c41d
journald, loki: set log retention to 3 days on host,
7 days in loki
2025-04-25 23:57:48 +02:00
d3559415a1
nginx(mastodon): set max body size to 99mb
Some checks failed
Flake checks / Check (pull_request) Has been cancelled
2025-04-25 23:53:52 +02:00
34d69445f5
Merge pull request 'update: element-web, forgejo, nextcloud etc.' (#351) from update/flake into main
Reviewed-on: #351
Reviewed-by: Akshay Mankar <axeman@noreply.git.pub.solar>
2025-04-25 21:52:03 +00:00
cf275ba8f2
flake.lock: Update
Some checks failed
Flake checks / Check (pull_request) Failing after 46m30s
Flake lock file updates:

• Updated input 'disko':
    'github:nix-community/disko/76c0a6dba345490508f36c1aa3c7ba5b6b460989' (2025-04-08)
  → 'github:nix-community/disko/ca27b88c88948d96feeee9ed814cbd34f53d0d70' (2025-04-24)
• Updated input 'element-stickers':
    'git+https://git.pub.solar/pub-solar/maunium-stickerpicker-nix?ref=main&rev=85716a9e30fb6fae47336ed0cae3d1425c80f17c' (2024-04-29)
  → 'git+https://git.pub.solar/pub-solar/maunium-stickerpicker-nix?ref=main&rev=5c65f0fef48ce8193767a5d0453e7cf6ad046de4' (2025-04-22)
• Updated input 'home-manager':
    'github:nix-community/home-manager/b4e98224ad1336751a2ac7493967a4c9f6d9cb3f' (2025-04-08)
  → 'github:nix-community/home-manager/dd26f75fb4ec1c731d4b1396eaf4439ce40a91c1' (2025-04-25)
• Updated input 'nixpkgs':
    'github:nixos/nixpkgs/26d499fc9f1d567283d5d56fcf367edd815dba1d' (2025-04-12)
  → 'github:nixos/nixpkgs/5630cf13cceac06cefe9fc607e8dfa8fb342dde3' (2025-04-24)
• Updated input 'unstable':
    'github:nixos/nixpkgs/2631b0b7abcea6e640ce31cd78ea58910d31e650' (2025-04-12)
  → 'github:nixos/nixpkgs/8a2f738d9d1f1d986b5a4cd2fd2061a7127237d7' (2025-04-23)
2025-04-25 21:29:57 +02:00
d9e6b9754b
nginx-website{,-miom}: ensure permissions for parent
Some checks failed
Flake checks / Check (pull_request) Failing after 42m36s
directory
2025-04-24 14:17:22 +02:00
d37f15e8d0
element-stickerpicker: fix thumbnails after
All checks were successful
Flake checks / Check (pull_request) Successful in 22m33s
https://github.com/maunium/stickerpicker/pull/88
2025-04-24 11:17:52 +02:00
fada245b8f
Merge pull request 'nextcloud/uppush: Configure' (#339) from nc-unified-push-settings into main
Reviewed-on: #339
Reviewed-by: teutat3s <teutat3s@noreply.git.pub.solar>
2025-04-21 08:36:16 +00:00
afe8746c8d
Merge pull request 'prometheus: refactor metrics scraping to use firewall rules' (#345) from refactor-prometheus-exporters into main
Reviewed-on: #345
Reviewed-by: b12f <b12f@noreply.git.pub.solar>
2025-04-18 12:38:06 +00:00
9e9c86d5c8
Merge pull request 'matrix-synapse: reduce log level to warning' (#346) from matrix-reduce-logs into main
Reviewed-on: #346
Reviewed-by: b12f <b12f@noreply.git.pub.solar>
2025-04-18 12:37:55 +00:00
3dcc2d95d4
matrix-synapse: reduce log level to warning
All checks were successful
Flake checks / Check (pull_request) Successful in 22m28s
2025-04-18 01:38:03 +02:00
5fb4af13de
grafana: add dashboards for nginx, nextcloud, postgres
All checks were successful
Flake checks / Check (pull_request) Successful in 22m47s
2025-04-18 01:12:28 +02:00
e7008713d1
prometheus: fix postgres scrape target 2025-04-18 01:11:36 +02:00
05c46a63e2
prometheus-exporters: disable php-fpm, unix socket
access probably needs fixes in systemd unit
2025-04-18 01:11:16 +02:00
17568cd49f
prometheus: don't export / scrape ZFS 2025-04-18 01:09:50 +02:00
def23e39be
prometheus-exporters: fix postgres dsn 2025-04-18 01:08:51 +02:00
4c13c23769
prometheus-exporters: use iptables firewallFilter 2025-04-18 01:08:05 +02:00
6434e5a6fd
nachtigall: remove unused variables 2025-04-18 01:06:42 +02:00
b315a22e03
trinkgenossin: add back node-exporter 2025-04-18 01:06:02 +02:00
259867f309
metrics: refactor to use firewall rules
All checks were successful
Flake checks / Check (pull_request) Successful in 22m45s
add additional prometheus-exporters for nextcloud, php-fpm, nginx,
postgres, zfs
2025-04-17 23:23:06 +02:00
efe18beefb
Merge pull request 'better backups' (#343) from better-backups into main
Reviewed-on: #343
Reviewed-by: teutat3s <teutat3s@noreply.git.pub.solar>
2025-04-17 21:21:38 +00:00
28a98de256
Merge pull request 'grafana: scrape loki metrics, add dashboards for loki' (#344) from loki-dashboards into main
Reviewed-on: #344
Reviewed-by: b12f <b12f@noreply.git.pub.solar>
2025-04-17 21:13:54 +00:00
091a68bbb7
treefmt: exclude grafana dashboards
All checks were successful
Flake checks / Check (pull_request) Successful in 22m11s
2025-04-17 23:09:07 +02:00
feb7475835
grafana: add loki metrics dashboards
Some checks failed
Flake checks / Check (pull_request) Failing after 21s
https://grafana.com/docs/loki/latest/operations/meta-monitoring/mixins/
https://github.com/grafana/loki/pull/16661
2025-04-17 23:05:11 +02:00