teutat3s
7910f61dd5
dns: switch to opentofu + terraform-backend-git,
...
Flake checks / Check (pull_request) Failing after 14m46s
use opentofu encrypted state feature
https://opentofu.org/docs/language/state/encryption/#new-project
2024-09-10 10:49:13 +02:00
teutat3s
c4d95b625f
dns: remove old, unused DKIM key
...
Flake checks / Check (pull_request) Successful in 18m16s
We have our own mailserver now
2024-09-09 17:53:58 +02:00
teutat3s
4119a01f77
flake: remove triton-vmtools, no longer needed
...
It was only used on flora-6
2024-09-09 17:52:04 +02:00
b12f
529766413e
flora-6: remove
...
Flake checks / Check (pull_request) Has been cancelled
This commit removes the flora-6 host. All services are moved to
trinkgenossin, with the drone service being removed completely in favour
of forgejo actions.
2024-09-09 17:22:57 +02:00
teutat3s
2d94ed5a0d
Merge pull request 'obs-portal: add backups' ( #228 ) from obs-portal-backups into main
...
Reviewed-on: #228
Reviewed-by: b12f <b12f@noreply.git.pub.solar>
Reviewed-by: Hendrik Sokolowski <hensoko@noreply.git.pub.solar>
2024-08-31 19:43:10 +00:00
teutat3s
83e4bcd2df
Merge pull request 'mail: add backups' ( #226 ) from mail-backups into main
...
Reviewed-on: #226
Reviewed-by: b12f <b12f@noreply.git.pub.solar>
Reviewed-by: Hendrik Sokolowski <hensoko@noreply.git.pub.solar>
2024-08-31 19:39:25 +00:00
teutat3s
09804f5c25
docs: how-to add backups for new hosts
Flake checks / Check (pull_request) Successful in 3m43s
2024-08-29 16:36:11 +02:00
teutat3s
2eb54a331e
backups: add storagebox to programs.ssh.knownHosts
2024-08-29 16:36:09 +02:00
teutat3s
77b642f646
garage: increase nginx client_body_size to 64m
...
To make bigger garage uploads work well, avoiding error
HTTP 413 Entity Too Large
2024-08-29 16:24:32 +02:00
teutat3s
2e16c77956
secrets: rename restic-repo-storagebox{,-nachtigall}
...
To use a restic repository per host
2024-08-29 16:22:58 +02:00
teutat3s
e2ba1aacf4
mail: add backups to garage bucket + storagebox
...
Restic backups to garage S3 bucket metronom-backups
2024-08-29 16:19:24 +02:00
teutat3s
27dc20dd04
obs-portal: add backups to garage bucket + storagebox
...
Flake checks / Check (pull_request) Successful in 23m21s
Restic backups to garage S3 bucket nachtigall-backups
2024-08-29 10:09:04 +02:00
teutat3s
a0fb6a60c3
Merge pull request 'devshell: add terraform-ls' ( #227 ) from terraform-devshell into main
...
Reviewed-on: #227
Reviewed-by: b12f <b12f@noreply.git.pub.solar>
Reviewed-by: Hendrik Sokolowski <hensoko@noreply.git.pub.solar>
2024-08-28 15:55:29 +00:00
teutat3s
d2389497c2
Merge pull request 'garage: initial cluster' ( #222 ) from garage-cluster into main
...
Reviewed-on: #222
Reviewed-by: b12f <b12f@noreply.git.pub.solar>
Reviewed-by: Hendrik Sokolowski <hensoko@noreply.git.pub.solar>
2024-08-28 15:55:16 +00:00
teutat3s
c056d9c35e
Merge pull request 'mediawiki: add backups' ( #225 ) from mediawiki-backups into main
...
Reviewed-on: #225
Reviewed-by: Hendrik Sokolowski <hensoko@noreply.git.pub.solar>
2024-08-28 15:54:33 +00:00
teutat3s
4626fd85c0
mediawiki: add backups to garage bucket + storagebox
...
Flake checks / Check (pull_request) Successful in 1m56s
Restic backups to garage S3 bucket nachtigall-backups
https://garagehq.deuxfleurs.fr/documentation/connect/backup/#restic
2024-08-28 17:13:34 +02:00
teutat3s
c0a3d90d63
backups: add environmentFile option
2024-08-28 17:13:34 +02:00
teutat3s
1d92ef53ca
backups: storeName -> repoName
2024-08-28 17:13:33 +02:00
teutat3s
751d82f7e3
backups: rename pub-solar-os.backups.backups -> pub-solar-os.backups.restic
2024-08-28 17:12:22 +02:00
teutat3s
fb8ee1278a
Merge pull request 'feat/tests' ( #224 ) from feat/tests into main
...
Reviewed-on: #224
Reviewed-by: teutat3s <teutat3s@noreply.git.pub.solar>
2024-08-27 10:45:56 +00:00
teutat3s
66ed87e666
ci: avoid garbage collection of checks
Flake checks / Check (pull_request) Successful in 17m36s
2024-08-27 12:37:37 +02:00
teutat3s
88b76beb5c
keycloak: use backups module
...
Flake checks / Check (pull_request) Successful in 19m4s
Co-authored-by: b12f <b12f@noreply.git.pub.solar>
Co-authored-by: Hendrik Sokolowski <hensoko@noreply.git.pub.solar>
2024-08-27 10:09:07 +02:00
teutat3s
e857c6198b
modules/backup: init
...
Co-authored-by: b12f <b12f@noreply.git.pub.solar>
Co-authored-by: Hendrik Sokolowski <hensoko@noreply.git.pub.solar>
2024-08-27 10:04:10 +02:00
teutat3s
998cf4c63d
website: force HTTPS
...
Co-authored-by: b12f <b12f@noreply.git.pub.solar>
Co-authored-by: Hendrik Sokolowski <hensoko@noreply.git.pub.solar>
2024-08-27 10:03:43 +02:00
teutat3s
a0b52d51e5
nachtigall: make postgres wait for zfs mount
...
Co-authored-by: b12f <b12f@noreply.git.pub.solar>
Co-authored-by: Hendrik Sokolowski <hensoko@noreply.git.pub.solar>
2024-08-27 10:00:42 +02:00
teutat3s
701c62dd69
tests: create keycloak test, add working test for website
...
Co-authored-by: b12f <b12f@noreply.git.pub.solar>
Co-authored-by: Hendrik Sokolowski <hensoko@noreply.git.pub.solar>
2024-08-27 09:55:25 +02:00
teutat3s
711347abe6
docs: add how-to create garage bucket + key
...
Flake checks / Check (pull_request) Successful in 6m38s
add new hosts to WireGuard example config
2024-08-26 11:56:45 +02:00
teutat3s
13bf3f5beb
docs: SSH to trinkgenossin for garage command
Flake checks / Check (pull_request) Successful in 6m45s
2024-08-25 03:27:42 +02:00
teutat3s
f639fbe050
devshell: add terraform-ls
Flake checks / Check (pull_request) Successful in 5m49s
2024-08-25 02:37:36 +02:00
teutat3s
f236962e17
garage: add monitoring, connect to grafana + loki
...
Flake checks / Check (pull_request) Successful in 7m10s
https://garagehq.deuxfleurs.fr/documentation/reference-manual/monitoring/
2024-08-25 00:18:09 +02:00
teutat3s
d32abd7a7f
wireguard: add trinkgenossin, delite, blue-shell
2024-08-25 00:13:53 +02:00
teutat3s
15b507904f
garage: init buckets.pub.solar, use nginx as reverse proxy
...
https://garagehq.deuxfleurs.fr/documentation/cookbook/reverse-proxy/
2024-08-24 21:48:48 +02:00
teutat3s
b0790876ec
style: format using nixfmt-rfc-style
Flake checks / Check (pull_request) Successful in 7m42s
2024-08-24 17:39:49 +02:00
teutat3s
b6be95d032
Merge pull request 'Maintenance + security updates for element, forgejo, mastodon, matrix-synapse' ( #221 ) from flake-updates into main
...
Reviewed-on: #221
Reviewed-by: Akshay Mankar <axeman@noreply.git.pub.solar>
2024-08-24 01:11:41 +00:00
teutat3s
b6070d0f75
docs: initial docs for nixos-anywhere and garage setup
Flake checks / Check (pull_request) Failing after 2m26s
2024-08-24 03:06:17 +02:00
teutat3s
25827a97d3
modules: add unlock-luks-on-boot
2024-08-24 03:05:28 +02:00
teutat3s
4a3d3ce84b
garage: init module
2024-08-24 03:05:16 +02:00
teutat3s
9eb746313e
flake: add disko
...
https://github.com/nix-community/disko
And add hosts to deploy-rs
2024-08-24 03:04:19 +02:00
teutat3s
83b7e3e11e
hosts: init blue-shell
2024-08-24 03:02:15 +02:00
teutat3s
4ef9781d10
hosts: init delite
2024-08-24 03:01:46 +02:00
teutat3s
ca8e578b11
hosts: init trinkgenossin
2024-08-24 03:00:01 +02:00
teutat3s
49c21fe740
dns: add trinkgenossin, delite, blue-shell
2024-08-24 02:58:37 +02:00
teutat3s
99308bfe24
Merge pull request 'secrets: ensure no final newline in editorconfig' ( #220 ) from no-newline-for-secrets into main
...
Reviewed-on: #220
Reviewed-by: b12f <b12f@noreply.git.pub.solar>
2024-08-22 13:13:45 +00:00
teutat3s
50eb1d4f32
flake.lock: Update
...
Flake checks / Check (pull_request) Successful in 16m23s
Flake lock file updates:
• Updated input 'agenix':
'github:ryantm/agenix/3f1dae074a12feb7327b4bf43cbac0d124488bb7' (2024-07-30)
→ 'github:ryantm/agenix/f6291c5935fdc4e0bef208cfc0dcab7e3f7a1c41' (2024-08-10)
• Updated input 'nix-darwin':
'github:lnl7/nix-darwin/91010a5613ffd7ee23ee9263213157a1c422b705' (2024-08-06)
→ 'github:lnl7/nix-darwin/a8968d88e5a537b0491f68ce910749cd870bdbef' (2024-08-22)
• Updated input 'nixpkgs':
'github:nixos/nixpkgs/883180e6550c1723395a3a342f830bfc5c371f6b' (2024-08-05)
→ 'github:nixos/nixpkgs/224042e9a3039291f22f4f2ded12af95a616cca0' (2024-08-21)
• Updated input 'unstable':
'github:nixos/nixpkgs/cb9a96f23c491c081b38eab96d22fa958043c9fa' (2024-08-04)
→ 'github:nixos/nixpkgs/c374d94f1536013ca8e92341b540eba4c22f9c62' (2024-08-21)
2024-08-22 11:59:47 +02:00
teutat3s
c0fcf2352f
secrets: ensure no final newline
Flake checks / Check (pull_request) Successful in 9m2s
2024-08-21 16:39:14 +02:00
teutat3s
3708d77d9b
Merge pull request 'Update docker, forgejo, systemd and others' ( #219 ) from flake-updates into main
...
Reviewed-on: #219
Reviewed-by: b12f <b12f@noreply.git.pub.solar>
Reviewed-by: Hendrik Sokolowski <hensoko@noreply.git.pub.solar>
2024-08-07 11:55:29 +00:00
teutat3s
7f2bfd923f
loki: move data dir to /data disk with more room
Flake checks / Check (pull_request) Successful in 4m33s
2024-08-07 10:19:53 +02:00
teutat3s
30d18c725a
revert: overlay for element-web and matrix-synapse
...
both packages now have the desired version available in nixos-24.05
2024-08-07 10:09:37 +02:00
teutat3s
387d97a2ea
flake.lock: Update
...
Flake lock file updates:
• Updated input 'flake-parts':
'github:hercules-ci/flake-parts/9227223f6d922fee3c7b190b2cc238a99527bbb7' (2024-07-03)
→ 'github:hercules-ci/flake-parts/8471fe90ad337a8074e957b69ca4d0089218391d' (2024-08-01)
• Updated input 'flake-parts/nixpkgs-lib':
'5daf051448a5d394176e
2024-08-06 21:17:23 +02:00
teutat3s
6f2eeeb99e
Merge pull request 'Update element-web, matrix-synapse, nextcloud and misc packages' ( #218 ) from flake-input-updates into main
...
Reviewed-on: #218
Reviewed-by: Hendrik Sokolowski <hensoko@noreply.git.pub.solar>
2024-07-31 11:33:33 +00:00
teutat3s
b12f
