infra

Author	SHA1	Message	Date
teutat3s	b2cb9755e1	monitoring: add prometheus-exporter, promtail to delite, blue-shell add instance labels to garage scrape jobs	2024-09-10 14:25:00 +02:00
teutat3s	b72384b8d1	loki: store logs in /var/lib/loki	2024-09-10 14:22:04 +02:00
b12f	529766413e	flora-6: remove Some checks failed Flake checks / Check (pull_request) Has been cancelled Details This commit removes the flora-6 host. All services are moved to trinkgenossin, with the drone service being removed completely in favour of forgejo actions.	2024-09-09 17:22:57 +02:00
teutat3s	2d94ed5a0d	Merge pull request 'obs-portal: add backups' (#228 ) from obs-portal-backups into main Reviewed-on: #228 Reviewed-by: b12f <b12f@noreply.git.pub.solar> Reviewed-by: Hendrik Sokolowski <hensoko@noreply.git.pub.solar>	2024-08-31 19:43:10 +00:00
teutat3s	2eb54a331e	backups: add storagebox to programs.ssh.knownHosts	2024-08-29 16:36:09 +02:00
teutat3s	77b642f646	garage: increase nginx client_body_size to 64m To make bigger garage uploads work well, avoiding error HTTP 413 Entity Too Large	2024-08-29 16:24:32 +02:00
teutat3s	2e16c77956	secrets: rename restic-repo-storagebox{,-nachtigall} To use a restic repository per host	2024-08-29 16:22:58 +02:00
teutat3s	e2ba1aacf4	mail: add backups to garage bucket + storagebox Restic backups to garage S3 bucket metronom-backups	2024-08-29 16:19:24 +02:00
teutat3s	27dc20dd04	obs-portal: add backups to garage bucket + storagebox All checks were successful Flake checks / Check (pull_request) Successful in 23m21s Details Restic backups to garage S3 bucket nachtigall-backups	2024-08-29 10:09:04 +02:00
teutat3s	d2389497c2	Merge pull request 'garage: initial cluster' (#222 ) from garage-cluster into main Reviewed-on: #222 Reviewed-by: b12f <b12f@noreply.git.pub.solar> Reviewed-by: Hendrik Sokolowski <hensoko@noreply.git.pub.solar>	2024-08-28 15:55:16 +00:00
teutat3s	4626fd85c0	mediawiki: add backups to garage bucket + storagebox All checks were successful Flake checks / Check (pull_request) Successful in 1m56s Details Restic backups to garage S3 bucket nachtigall-backups https://garagehq.deuxfleurs.fr/documentation/connect/backup/#restic	2024-08-28 17:13:34 +02:00
teutat3s	c0a3d90d63	backups: add environmentFile option	2024-08-28 17:13:34 +02:00
teutat3s	1d92ef53ca	backups: storeName -> repoName	2024-08-28 17:13:33 +02:00
teutat3s	751d82f7e3	backups: rename pub-solar-os.backups.backups -> pub-solar-os.backups.restic	2024-08-28 17:12:22 +02:00
teutat3s	88b76beb5c	keycloak: use backups module All checks were successful Flake checks / Check (pull_request) Successful in 19m4s Details Co-authored-by: b12f <b12f@noreply.git.pub.solar> Co-authored-by: Hendrik Sokolowski <hensoko@noreply.git.pub.solar>	2024-08-27 10:09:07 +02:00
teutat3s	e857c6198b	modules/backup: init Co-authored-by: b12f <b12f@noreply.git.pub.solar> Co-authored-by: Hendrik Sokolowski <hensoko@noreply.git.pub.solar>	2024-08-27 10:04:10 +02:00
teutat3s	998cf4c63d	website: force HTTPS Co-authored-by: b12f <b12f@noreply.git.pub.solar> Co-authored-by: Hendrik Sokolowski <hensoko@noreply.git.pub.solar>	2024-08-27 10:03:43 +02:00
teutat3s	a0b52d51e5	nachtigall: make postgres wait for zfs mount Co-authored-by: b12f <b12f@noreply.git.pub.solar> Co-authored-by: Hendrik Sokolowski <hensoko@noreply.git.pub.solar>	2024-08-27 10:00:42 +02:00
teutat3s	701c62dd69	tests: create keycloak test, add working test for website Co-authored-by: b12f <b12f@noreply.git.pub.solar> Co-authored-by: Hendrik Sokolowski <hensoko@noreply.git.pub.solar>	2024-08-27 09:55:25 +02:00
teutat3s	f236962e17	garage: add monitoring, connect to grafana + loki All checks were successful Flake checks / Check (pull_request) Successful in 7m10s Details https://garagehq.deuxfleurs.fr/documentation/reference-manual/monitoring/	2024-08-25 00:18:09 +02:00
teutat3s	15b507904f	garage: init buckets.pub.solar, use nginx as reverse proxy https://garagehq.deuxfleurs.fr/documentation/cookbook/reverse-proxy/	2024-08-24 21:48:48 +02:00
teutat3s	25827a97d3	modules: add unlock-luks-on-boot	2024-08-24 03:05:28 +02:00
teutat3s	4a3d3ce84b	garage: init module	2024-08-24 03:05:16 +02:00
teutat3s	7f2bfd923f	loki: move data dir to /data disk with more room All checks were successful Flake checks / Check (pull_request) Successful in 4m33s Details	2024-08-07 10:19:53 +02:00
teutat3s	79679720ff	tt-rss: lint with treefmt All checks were successful Flake checks / Check (pull_request) Successful in 7m11s Details	2024-07-18 17:49:29 +02:00
teutat3s	0fc0c6d595	tt-rss: use git.tt-rss.org instead of gitlab gitlab repo was throwing HTTP 500 errors	2024-07-18 17:35:05 +02:00
Benjamin Yule Bädorf	13c381ff3d	rss: fix auth build, fix nginx group rights, log to stdout Some checks failed Flake checks / Check (pull_request) Failing after 1m12s Details	2024-07-17 18:50:06 +02:00
Benjamin Yule Bädorf	68be6b9303	tt-rss: fix secret paths, add plugin sha	2024-07-17 15:22:59 +02:00
Benjamin Yule Bädorf	cf830a9770	tt-rss: module init	2024-07-17 15:22:57 +02:00
teutat3s	26e96dfac5	mediawiki: update to v1.42.1	2024-07-15 18:51:10 +02:00
teutat3s	7ce66f38fc	grafana: update dashboard json, select nachtigall by default All checks were successful Flake checks / Check (pull_request) Successful in 5m37s Details	2024-07-02 19:04:52 +02:00
teutat3s	2ebe4bd109	loki: fix invalid config max_look_back_period, All checks were successful Flake checks / Check (pull_request) Successful in 14m21s Details seems no longer used in loki 3	2024-06-23 15:19:20 +02:00
teutat3s	bc9ac6011e	flake: update to NixOS 24.05 Fix warnings: trace: warning: The option `services.nextcloud.extraOptions' defined in `/nix/store/a53lc1l5wy9vbv1d3n93903dq0wjgvfj-source/flake.nix#nixosModules.nextcloud' has been renamed to `services.nextcloud.settings'. trace: warning: The option `services.nextcloud.skeletonDirectory' defined in `/nix/store/a53lc1l5wy9vbv1d3n93903dq0wjgvfj-source/flake.nix#nixosModules.nextcloud' has been renamed to `services.nextcloud.settings.skeletondirectory'. trace: warning: The option `services.nextcloud.config.overwriteProtocol' defined in `/nix/store/a53lc1l5wy9vbv1d3n93903dq0wjgvfj-source/flake.nix#nixosModules.nextcloud' has been renamed to `services.nextcloud.settings.overwriteprotocol'. trace: warning: The option `services.matrix-synapse.sliding-sync' defined in `/nix/store/a53lc1l5wy9vbv1d3n93903dq0wjgvfj-source/flake.nix#nixosModules.matrix' has been renamed to `services.matrix-sliding-sync'. Fix errors: loki: fix config for version 3+ keycloak: declarative-user-profile feature is now enabled by default error: A definition for option `programs.gnupg.agent.pinentryPackage' is not of type `null or package'. Definition values: - In `/nix/store/a53lc1l5wy9vbv1d3n93903dq0wjgvfj-source/flake.nix#nixosModules.forgejo': "curses"	2024-06-23 15:19:18 +02:00
teutat3s	99f84268e7	nextcloud: fine tune for performance, following All checks were successful Flake checks / Check (pull_request) Successful in 4m1s Details https://docs.nextcloud.com/server/latest/admin_manual/installation/server_tuning.html	2024-06-23 15:01:37 +02:00
teutat3s	f38aa289ea	matrix-synapse: enable more useful logging	2024-06-23 15:00:40 +02:00
teutat3s	d21ae91c3e	postgresql: tune All checks were successful Flake checks / Check (pull_request) Successful in 13m50s Details	2024-06-22 16:42:38 +02:00
teutat3s	e2691988bf	nextcloud: use port 465 and TLS/SSL for mail transfer All checks were successful Flake checks / Check (pull_request) Successful in 3m56s Details	2024-06-08 23:54:05 +02:00
teutat3s	d3fedd84e9	loki: tune settings, enable cache	2024-06-08 23:53:43 +02:00
teutat3s	6ea916603c	networking: set networking.domain in core module All checks were successful Flake checks / Check (pull_request) Successful in 4m0s Details	2024-06-06 19:30:11 +02:00
teutat3s	bae41b07a8	promtail: use hostName to set label	2024-06-06 19:29:42 +02:00
teutat3s	eaed05c834	style: apply treefmt All checks were successful Flake checks / Check (pull_request) Successful in 4m41s Details	2024-06-06 12:56:55 +02:00
teutat3s	4350cbf7c4	tankstelle: add promtail, prometheus node-exporter for monitoring, configure wireguard between flora-6 and tankstelle	2024-06-06 12:53:49 +02:00
teutat3s	b93608a8fa	metronom: add promtail, prometheus node-exporter configure wireguard to push logs to and scrape metrics from flora-6 open firewall for node-exporter port on wg-ssh interface	2024-06-06 12:52:55 +02:00
teutat3s	6aa18b0a2c	flake: update inputs All checks were successful Flake checks / Check (pull_request) Successful in 14m32s Details • Updated input 'element-themes': 'github:aaronraimist/element-themes/2368b58c16d2c4aabb82a245f036d228cbb6e5f5' (2024-02-12) → 'github:aaronraimist/element-themes/6ed3a981191cbd59f03ea530f16e096b9a4c278c' (2024-05-28) • Updated input 'flake-parts': 'github:hercules-ci/flake-parts/8dc45382d5206bd292f9c2768b8058a8fd8311d9' (2024-05-16) → 'github:hercules-ci/flake-parts/2a55567fcf15b1b1c7ed712a2c6fadaec7412ea8' (2024-06-01) • Updated input 'flake-parts/nixpkgs-lib': '`50eb7ecf4c`.tar.gz?narHash=sha256-QBx10%2Bk6JWz6u7VsohfSw8g8hjdBZEf8CFzXH1/1Z94%3D' (2024-05-02) → '`eb9ceca17d`.tar.gz?narHash=sha256-lIbdfCsf8LMFloheeE6N31%2BBMIeixqyQWbSr2vk79EQ%3D' (2024-06-01) • Updated input 'home-manager': 'github:nix-community/home-manager/2c78a57c544dd19b07442350727ced097e1aa6e6' (2024-05-26) → 'github:nix-community/home-manager/095ef64aa3b2ab4a4f1bf07f29997e21e3a5576a' (2024-06-04) • Updated input 'nix-darwin': 'github:lnl7/nix-darwin/0bea8222f6e83247dd13b055d83e64bce02ee532' (2024-05-24) → 'github:lnl7/nix-darwin/c0d5b8c54d6828516c97f6be9f2d00c63a363df4' (2024-05-29) • Updated input 'nixpkgs': 'github:nixos/nixpkgs/46397778ef1f73414b03ed553a3368f0e7e33c2f' (2024-05-22) → 'github:nixos/nixpkgs/a62e6edd6d5e1fa0329b8653c801147986f8d446' (2024-05-31) • Updated input 'unstable': 'github:nixos/nixpkgs/bfb7a882678e518398ce9a31a881538679f6f092' (2024-05-24) → 'github:nixos/nixpkgs/57610d2f8f0937f39dbd72251e9614b1561942d8' (2024-05-31)	2024-06-05 02:08:13 +02:00
teutat3s	e93a56e594	nginx: use square brackets for IPv6 address All checks were successful Flake checks / Check (pull_request) Successful in 4m0s Details	2024-06-05 01:59:54 +02:00
teutat3s	27c239b985	loki: allow port 3100 in firewall for wg-ssh interface	2024-06-05 01:59:44 +02:00
teutat3s	61ea0ad7c2	networking: add internal IPv6 wireguard IPs to /etc/hosts All checks were successful Flake checks / Check (pull_request) Successful in 3m8s Details	2024-06-03 12:33:51 +02:00
teutat3s	56f692740e	networking: use *.wg.pub.solar in /etc/hosts instead of overriding IPs for existing DNS records, to reduce suprises when DNS records are different depending on the host. Add metronom + tankstelle internal wireguard IPs, too.	2024-06-03 12:28:33 +02:00
teutat3s	20ebf92f1f	loki, promtail, prometheus: remove basic auth, use wireguard to secure connections	2024-06-01 16:51:14 +02:00
teutat3s	9a9dccf5bb	mail: move NixOS module to modules	2024-05-31 16:52:04 +02:00

1 2

80 commits