teutat3s
815033c764
treewide: apply nixpkgs-fmt
...
Used command:
nixpkgs-fmt .
2024-01-27 20:29:30 +01:00
teutat3s
b3b3725c9f
feat: php opcache tuning for nextcloud
...
Flake checks / Check (pull_request) Successful in 9m19s
https://docs.nextcloud.com/server/latest/admin_manual/installation/server_tuning.html#:~:text=opcache.jit%20%3D%201255%20opcache.jit_buffer_size%20%3D%20128m
2024-01-25 20:19:32 +01:00
teutat3s
be668fbb17
fix: nextcloud likes interned strings buffer > 8
...
Flake checks / Check (pull_request) Successful in 19m28s
7cf6f51516
2024-01-23 22:18:58 +01:00
teutat3s
ffdf55993f
fix(nginx): [warn] could not build optimal proxy_headers_hash
...
Flake checks / Check (pull_request) Successful in 10m14s
nginx: [warn] could not build optimal proxy_headers_hash, you should
increase either proxy_headers_hash_max_size: 2048 or
proxy_headers_hash_bucket_size: 64; ignoring
proxy_headers_hash_bucket_size
2024-01-17 15:16:06 +01:00
teutat3s
94ae6c9302
fix(mastodon): use working unix sockets for streaming api
...
Flake checks / Check (pull_request) Successful in 10m35s
The streaming API is currently unusable because we still pass traffic
to the old unix socket path.
Since c82195d9e8 (diff-157b1ef68573bbec951d6e551513a555e2d1ca7a161a68f1978b11d39a0bef1eR789-R803)
2024-01-17 10:32:03 +01:00
teutat3s
5590b5b1b3
fix: remove QuickInstantCommons extension
...
Flake checks / Check (pull_request) Successful in 4m34s
Docker image updated in 529554b4d1https://wiki.pub.solar/index.php/Special:RecentChanges with the
extension enabled throws:
Internal error LogicException: Backend with name 'wikimediacommons-backend' already registered.
2024-01-08 21:53:14 +01:00
teutat3s
8d06c61d2f
fix: remove duplicate wgLogo setting
Flake checks / Check (pull_request) Successful in 4m39s
2024-01-08 17:56:48 +01:00
teutat3s
1d018ade9b
feat: enable InstantCommons
...
https://www.mediawiki.org/wiki/InstantCommons
https://commons.wikimedia.org/wiki/Commons:Reusing_content_outside_Wikimedia/technical#InstantCommons
2024-01-08 17:56:33 +01:00
teutat3s
05f7dbe262
feat: enable wgUseInstantCommons
...
https://commons.wikimedia.org/wiki/Commons:Reusing_content_outside_Wikimedia/technical#InstantCommons
2024-01-08 17:42:57 +01:00
teutat3s
a7f98c2d45
fix: ensure mediawiki logo survives updates
Flake checks / Check (pull_request) Successful in 4m28s
2024-01-08 14:35:43 +01:00
teutat3s
a59e9cb6ea
feat: update mediawiki to 1.41.0, enable extension
...
Flake checks / Check (pull_request) Successful in 4m38s
TemplateStyles
https://gerrit.wikimedia.org/g/mediawiki/core/%2B/REL1_41/RELEASE-NOTES-1.41
2024-01-08 14:14:34 +01:00
teutat3s
f2217a1409
feat: shutdown freenode IRC bridge, use shorter
...
Flake checks / Check (pull_request) Successful in 4m39s
IRC aliases, use nixos matrix-synapse service config for homeserver port
2024-01-07 20:15:16 +01:00
Hendrik Sokolowski
0fe02a9f73
fix uploads path eventually ( #92 )
...
yeah yeah
Reviewed-on: #92
Reviewed-by: b12f <b12f@noreply.git.pub.solar>
Co-authored-by: Hendrik Sokolowski <hensoko@gssws.de>
Co-committed-by: Hendrik Sokolowski <hensoko@gssws.de>
2024-01-07 16:18:43 +00:00
Hendrik Sokolowski
b37ad608a4
update mediawiki config ( #91 )
...
* disable logging to /dev/stderr
* fix upload path
Reviewed-on: #91
Reviewed-by: b12f <b12f@noreply.git.pub.solar>
Co-authored-by: Hendrik Sokolowski <hensoko@gssws.de>
Co-committed-by: Hendrik Sokolowski <hensoko@gssws.de>
2024-01-07 15:44:21 +00:00
teutat3s
7e8f3c8cf5
fix: update forgejo-actions-runner token, use
...
docker image from https://git.pub.solar/pub-solar/actions-base-image
2023-12-29 19:26:43 +01:00
teutat3s
afca5c3735
chore: bump Nextcloud to version 28
Flake checks / Check (pull_request) Successful in 18m24s
2023-12-28 17:38:41 +01:00
teutat3s
a310b414f7
fix: update well-known for sliding-sync
Flake checks / Check (pull_request) Failing after 50m5s
2023-12-16 14:57:36 +01:00
teutat3s
768d4c78bc
fix: use nginx locations recommended by upstream
...
https://github.com/matrix-org/sliding-sync#same-hostname
2023-12-16 14:48:08 +01:00
teutat3s
14fa3fdec2
feat(matrix): enable sliding-sync
...
Flake checks / Check (pull_request) Successful in 16m25s
Sliding Sync is an implementation of MSC3575 and a prerequisite for
running the new (still beta) Element X clients (Element X iOS and
Element X Android).
https://github.com/matrix-org/sliding-sync
https://github.com/matrix-org/matrix-spec-proposals/blob/kegan/sync-v3/proposals/3575-sync.md
2023-12-16 13:53:34 +01:00
teutat3s
d734adce58
fix: new Greenbaum mail server is mail.greenbaum.zone
Flake checks / Check (pull_request) Successful in 4m12s
2023-12-13 20:45:35 +01:00
teutat3s
e3d4f61a42
feat(nachtigall): send logs to loki, https+basic auth
...
Flake checks / Check (pull_request) Successful in 4m5s
Use caddy as reverse proxy for loki on flora-6, add basic auth
Add promtail to nachtigall, push logs to flora-6
2023-12-13 19:18:56 +01:00
teutat3s
10bb3295de
fix: grafana editor role is unused for now
Flake checks / Check (pull_request) Successful in 4m21s
2023-12-13 17:52:01 +01:00
teutat3s
e8cf4dceb0
fix(flora-6): allow traffic from br-+ interfaces
2023-12-13 17:51:34 +01:00
teutat3s
1b9a6bb0c2
fix: don't ignore interfaces that can change
2023-12-13 02:12:12 +01:00
teutat3s
219b67df20
fix: add 4 logs retention for loki
2023-12-13 02:12:12 +01:00
teutat3s
6c1fa290e8
feat(prometheus): add job to scrape nachtigall.pub.solar
2023-12-13 02:12:12 +01:00
teutat3s
d5b59ea18a
feat(prometheus): add node-exporter to nachtigall,
...
protect endpoint https://nachtigall.pub.solar/metrics
with TLS and basic auth
2023-12-13 02:12:11 +01:00
teutat3s
fdda65eea9
feat: init loki
2023-12-13 02:12:11 +01:00
teutat3s
0e290f080e
feat(grafana): provision node-exporter dashboard
2023-12-13 02:12:11 +01:00
teutat3s
6b15d72d85
fix: systemd-networkd-wait-online timing out
2023-12-13 02:12:11 +01:00
teutat3s
2f7eccc970
fix: grafana root_url needs https://, role mapping
2023-12-13 02:12:11 +01:00
teutat3s
8dc908aabd
feat(flora-6): init grafana + prometheus on
...
grafana.pub.solar
2023-12-13 02:12:10 +01:00
teutat3s
6bfeb835c2
fix: type INI atom (null, bool, int, float or string)
...
Flake checks / Check (pull_request) Successful in 18m0s
option `services.gitea.settings.webhook.ALLOWED_HOST_LIST' is not of
type `INI atom (null, bool, int, float or string)'
2023-12-08 17:37:28 +01:00
Benjamin Bädorf
97a592a53e
forgejo: allow webhooks to all pub.solar subdomains
...
Flake checks / Check (pull_request) Failing after 1m54s
This should fix the following error that was occuring while trying to post
notices to matrix channels:
```
Delivery: Put "https://matrix.pub.solar/_matrix/client/r0/rooms/[...] ": dial tcp [::1]:443: webhook can only call allowed HTTP servers (check your webhook.ALLOWED_HOST_LIST setting), deny 'matrix.pub.solar([::1]:443)'
```
2023-12-08 17:12:02 +01:00
teutat3s
a3ce107c73
Merge pull request 'feat: backup matrix-synapse, matrix-appservice-irc, mautrix-telegram to storagebox' ( #76 ) from feat/matrix-backups into main
...
Reviewed-on: #76
Reviewed-by: Akshay Mankar <axeman@noreply.git.pub.solar>
2023-12-08 15:36:10 +00:00
teutat3s
caaab0e14d
fix: new Greenbaum mail server is mail.greenbaum.zone
Flake checks / Check (pull_request) Successful in 19m16s
2023-12-05 20:57:26 +01:00
teutat3s
3ac327a750
feat: backup matrix-synapse, matrix-appservice-irc,
...
Flake checks / Check (pull_request) Successful in 17m55s
mautrix-telegram to storagebox
2023-12-03 13:11:25 +01:00
Akshay Mankar
75270321d5
fix: Allow matrix-appservice-irc to chown things
...
Flake checks / Check (pull_request) Successful in 16m20s
@chown is part of @privileged. It is used by sed which is used to manage the
registration.yaml
2023-12-02 17:22:28 +01:00
teutat3s
becaa9d649
fix: revert mautrix-telegram changes
Flake checks / Check (pull_request) Successful in 16m9s
2023-12-02 16:09:15 +01:00
teutat3s
37528c0874
fix: mautrix-telegram ExecStart missing \
Flake checks / Check (pull_request) Successful in 16m3s
2023-12-02 15:44:40 +01:00
teutat3s
1cfe140e77
fix: mkForce mautrix-telegram ExecStart
Flake checks / Check (pull_request) Has been cancelled
2023-12-02 15:43:52 +01:00
teutat3s
f911ac7bad
fix(matrix-synapse): needs to defince oidc extras
...
after NixOS module updates
https://nixos.org/manual/nixos/stable/release-notes#sec-release-23.11-highlights
2023-12-02 15:35:02 +01:00
teutat3s
904a73b51d
fix(mautrix-telegram): should not try to update config
...
See: https://github.com/mautrix/python/pull/152
2023-12-02 15:33:58 +01:00
teutat3s
35a4ac5619
Merge pull request 'feat: NixOS 23.11 Tapir' ( #74 ) from feat/nixos-23.11 into main
...
Reviewed-on: #74
Reviewed-by: Akshay Mankar <axeman@noreply.git.pub.solar>
2023-12-02 12:53:18 +00:00
teutat3s
7cf6f51516
fix: nextcloud interned strings buffer defaults to 23 now
Flake checks / Check (pull_request) Successful in 22m24s
2023-12-02 11:58:48 +01:00
teutat3s
2ee4bc5682
feat: NixOS 23.11 Tapir
...
https://nixos.org/manual/nixos/stable/release-notes#sec-release-23.11-highlights
Track nixos-23.11 branch, remove unstable overlays
This will update our services to the following versions:
nextcloud: 27.1.3 -> 27.1.4
forgejo: 1.20.5-0 -> 1.20.6-0
keycloak: 21.1.2 -> 22.0.5
matrix-synapse: 1.95.1 -> 1.97.0
Internal:
postgresql: 14.9 -> 15.5
Flake inputs diff:
• Updated input 'home-manager':
'github:nix-community/home-manager/28535c3a34d79071f2ccb68671971ce0c0984d7e' (2023-11-19)
→ 'github:nix-community/home-manager/aeb2232d7a32530d3448318790534d196bf9427a' (2023-11-24)
• Updated input 'nixpkgs':
'github:nixos/nixpkgs/d2332963662edffacfddfad59ff4f709dde80ffe' (2023-11-30)
→ 'github:nixos/nixpkgs/5de0b32be6e85dc1a9404c75131316e4ffbc634c' (2023-12-01)
2023-12-02 11:13:56 +01:00
Benjamin Bädorf
1d3934693b
nextcloud: add skeleton directory that adds a good readme for new users
...
Flake checks / Check (pull_request) Successful in 16m18s
Co-authored-by: teutat3s <teutates@mailbox.org>
2023-12-02 11:11:16 +01:00
Akshay Mankar
2cbc46c154
matrix: Move the whole email section into the secret
...
Flake checks / Check (pull_request) Successful in 15m27s
Matrix doesn't deep merge the secrets, so this is necessary
2023-11-25 23:37:58 +01:00
teutat3s
9f633582d1
feat: add well-known for matrix support contacts
Flake checks / Check (pull_request) Successful in 16m52s
2023-11-25 14:28:23 +01:00
Akshay Mankar
8a2d946206
matrix: Use production domains
Flake checks / Check (pull_request) Successful in 18m59s
2023-11-19 18:17:58 +01:00
teutat3s
Hendrik Sokolowski
Benjamin Bädorf
Akshay Mankar