infra

Author	SHA1	Message	Date
teutat3s	05f7dbe262	feat: enable wgUseInstantCommons https://commons.wikimedia.org/wiki/Commons:Reusing_content_outside_Wikimedia/technical#InstantCommons	2024-01-08 17:42:57 +01:00
teutat3s	a7f98c2d45	fix: ensure mediawiki logo survives updates All checks were successful Flake checks / Check (pull_request) Successful in 4m28s Details	2024-01-08 14:35:43 +01:00
teutat3s	a59e9cb6ea	feat: update mediawiki to 1.41.0, enable extension All checks were successful Flake checks / Check (pull_request) Successful in 4m38s Details TemplateStyles https://gerrit.wikimedia.org/g/mediawiki/core/%2B/REL1_41/RELEASE-NOTES-1.41	2024-01-08 14:14:34 +01:00
teutat3s	f2217a1409	feat: shutdown freenode IRC bridge, use shorter All checks were successful Flake checks / Check (pull_request) Successful in 4m39s Details IRC aliases, use nixos matrix-synapse service config for homeserver port	2024-01-07 20:15:16 +01:00
Hendrik Sokolowski	0fe02a9f73	fix uploads path eventually (#92 ) yeah yeah Reviewed-on: #92 Reviewed-by: b12f <b12f@noreply.git.pub.solar> Co-authored-by: Hendrik Sokolowski <hensoko@gssws.de> Co-committed-by: Hendrik Sokolowski <hensoko@gssws.de>	2024-01-07 16:18:43 +00:00
Hendrik Sokolowski	b37ad608a4	update mediawiki config (#91 ) * disable logging to /dev/stderr * fix upload path Reviewed-on: #91 Reviewed-by: b12f <b12f@noreply.git.pub.solar> Co-authored-by: Hendrik Sokolowski <hensoko@gssws.de> Co-committed-by: Hendrik Sokolowski <hensoko@gssws.de>	2024-01-07 15:44:21 +00:00
teutat3s	7e8f3c8cf5	fix: update forgejo-actions-runner token, use docker image from https://git.pub.solar/pub-solar/actions-base-image	2023-12-29 19:26:43 +01:00
teutat3s	afca5c3735	chore: bump Nextcloud to version 28 All checks were successful Flake checks / Check (pull_request) Successful in 18m24s Details	2023-12-28 17:38:41 +01:00
teutat3s	a310b414f7	fix: update well-known for sliding-sync Some checks failed Flake checks / Check (pull_request) Failing after 50m5s Details	2023-12-16 14:57:36 +01:00
teutat3s	768d4c78bc	fix: use nginx locations recommended by upstream https://github.com/matrix-org/sliding-sync#same-hostname	2023-12-16 14:48:08 +01:00
teutat3s	14fa3fdec2	feat(matrix): enable sliding-sync All checks were successful Flake checks / Check (pull_request) Successful in 16m25s Details Sliding Sync is an implementation of MSC3575 and a prerequisite for running the new (still beta) Element X clients (Element X iOS and Element X Android). https://github.com/matrix-org/sliding-sync https://github.com/matrix-org/matrix-spec-proposals/blob/kegan/sync-v3/proposals/3575-sync.md	2023-12-16 13:53:34 +01:00
teutat3s	d734adce58	fix: new Greenbaum mail server is mail.greenbaum.zone All checks were successful Flake checks / Check (pull_request) Successful in 4m12s Details	2023-12-13 20:45:35 +01:00
teutat3s	e3d4f61a42	feat(nachtigall): send logs to loki, https+basic auth All checks were successful Flake checks / Check (pull_request) Successful in 4m5s Details Use caddy as reverse proxy for loki on flora-6, add basic auth Add promtail to nachtigall, push logs to flora-6	2023-12-13 19:18:56 +01:00
teutat3s	10bb3295de	fix: grafana editor role is unused for now All checks were successful Flake checks / Check (pull_request) Successful in 4m21s Details	2023-12-13 17:52:01 +01:00
teutat3s	e8cf4dceb0	fix(flora-6): allow traffic from br-+ interfaces	2023-12-13 17:51:34 +01:00
teutat3s	1b9a6bb0c2	fix: don't ignore interfaces that can change	2023-12-13 02:12:12 +01:00
teutat3s	219b67df20	fix: add 4 logs retention for loki	2023-12-13 02:12:12 +01:00
teutat3s	6c1fa290e8	feat(prometheus): add job to scrape nachtigall.pub.solar	2023-12-13 02:12:12 +01:00
teutat3s	d5b59ea18a	feat(prometheus): add node-exporter to nachtigall, protect endpoint https://nachtigall.pub.solar/metrics with TLS and basic auth	2023-12-13 02:12:11 +01:00
teutat3s	fdda65eea9	feat: init loki	2023-12-13 02:12:11 +01:00
teutat3s	0e290f080e	feat(grafana): provision node-exporter dashboard	2023-12-13 02:12:11 +01:00
teutat3s	6b15d72d85	fix: systemd-networkd-wait-online timing out	2023-12-13 02:12:11 +01:00
teutat3s	2f7eccc970	fix: grafana root_url needs https://, role mapping	2023-12-13 02:12:11 +01:00
teutat3s	8dc908aabd	feat(flora-6): init grafana + prometheus on grafana.pub.solar	2023-12-13 02:12:10 +01:00
teutat3s	6bfeb835c2	fix: type INI atom (null, bool, int, float or string) All checks were successful Flake checks / Check (pull_request) Successful in 18m0s Details option `services.gitea.settings.webhook.ALLOWED_HOST_LIST' is not of type `INI atom (null, bool, int, float or string)'	2023-12-08 17:37:28 +01:00
Benjamin Bädorf	97a592a53e	forgejo: allow webhooks to all pub.solar subdomains Some checks failed Flake checks / Check (pull_request) Failing after 1m54s Details This should fix the following error that was occuring while trying to post notices to matrix channels: ``` Delivery: Put "https://matrix.pub.solar/_matrix/client/r0/rooms/[...]": dial tcp [::1]:443: webhook can only call allowed HTTP servers (check your webhook.ALLOWED_HOST_LIST setting), deny 'matrix.pub.solar([::1]:443)' ```	2023-12-08 17:12:02 +01:00
teutat3s	a3ce107c73	Merge pull request 'feat: backup matrix-synapse, matrix-appservice-irc, mautrix-telegram to storagebox' (#76 ) from feat/matrix-backups into main Reviewed-on: #76 Reviewed-by: Akshay Mankar <axeman@noreply.git.pub.solar>	2023-12-08 15:36:10 +00:00
teutat3s	caaab0e14d	fix: new Greenbaum mail server is mail.greenbaum.zone All checks were successful Flake checks / Check (pull_request) Successful in 19m16s Details	2023-12-05 20:57:26 +01:00
teutat3s	3ac327a750	feat: backup matrix-synapse, matrix-appservice-irc, All checks were successful Flake checks / Check (pull_request) Successful in 17m55s Details mautrix-telegram to storagebox	2023-12-03 13:11:25 +01:00
Akshay Mankar	75270321d5	fix: Allow matrix-appservice-irc to chown things All checks were successful Flake checks / Check (pull_request) Successful in 16m20s Details @chown is part of @privileged. It is used by sed which is used to manage the registration.yaml	2023-12-02 17:22:28 +01:00
teutat3s	becaa9d649	fix: revert mautrix-telegram changes All checks were successful Flake checks / Check (pull_request) Successful in 16m9s Details	2023-12-02 16:09:15 +01:00
teutat3s	37528c0874	fix: mautrix-telegram ExecStart missing \ All checks were successful Flake checks / Check (pull_request) Successful in 16m3s Details	2023-12-02 15:44:40 +01:00
teutat3s	1cfe140e77	fix: mkForce mautrix-telegram ExecStart Some checks reported warnings Flake checks / Check (pull_request) Has been cancelled Details	2023-12-02 15:43:52 +01:00
teutat3s	f911ac7bad	fix(matrix-synapse): needs to defince oidc extras after NixOS module updates https://nixos.org/manual/nixos/stable/release-notes#sec-release-23.11-highlights	2023-12-02 15:35:02 +01:00
teutat3s	904a73b51d	fix(mautrix-telegram): should not try to update config See: https://github.com/mautrix/python/pull/152	2023-12-02 15:33:58 +01:00
teutat3s	35a4ac5619	Merge pull request 'feat: NixOS 23.11 Tapir' (#74 ) from feat/nixos-23.11 into main Reviewed-on: #74 Reviewed-by: Akshay Mankar <axeman@noreply.git.pub.solar>	2023-12-02 12:53:18 +00:00
teutat3s	7cf6f51516	fix: nextcloud interned strings buffer defaults to 23 now All checks were successful Flake checks / Check (pull_request) Successful in 22m24s Details	2023-12-02 11:58:48 +01:00
teutat3s	2ee4bc5682	feat: NixOS 23.11 Tapir https://nixos.org/manual/nixos/stable/release-notes#sec-release-23.11-highlights Track nixos-23.11 branch, remove unstable overlays This will update our services to the following versions: nextcloud: 27.1.3 -> 27.1.4 forgejo: 1.20.5-0 -> 1.20.6-0 keycloak: 21.1.2 -> 22.0.5 matrix-synapse: 1.95.1 -> 1.97.0 Internal: postgresql: 14.9 -> 15.5 Flake inputs diff: • Updated input 'home-manager': 'github:nix-community/home-manager/28535c3a34d79071f2ccb68671971ce0c0984d7e' (2023-11-19) → 'github:nix-community/home-manager/aeb2232d7a32530d3448318790534d196bf9427a' (2023-11-24) • Updated input 'nixpkgs': 'github:nixos/nixpkgs/d2332963662edffacfddfad59ff4f709dde80ffe' (2023-11-30) → 'github:nixos/nixpkgs/5de0b32be6e85dc1a9404c75131316e4ffbc634c' (2023-12-01)	2023-12-02 11:13:56 +01:00
Benjamin Bädorf	1d3934693b	nextcloud: add skeleton directory that adds a good readme for new users All checks were successful Flake checks / Check (pull_request) Successful in 16m18s Details Co-authored-by: teutat3s <teutates@mailbox.org>	2023-12-02 11:11:16 +01:00
Akshay Mankar	2cbc46c154	matrix: Move the whole email section into the secret All checks were successful Flake checks / Check (pull_request) Successful in 15m27s Details Matrix doesn't deep merge the secrets, so this is necessary	2023-11-25 23:37:58 +01:00
teutat3s	9f633582d1	feat: add well-known for matrix support contacts All checks were successful Flake checks / Check (pull_request) Successful in 16m52s Details	2023-11-25 14:28:23 +01:00
Akshay Mankar	8a2d946206	matrix: Use production domains All checks were successful Flake checks / Check (pull_request) Successful in 18m59s Details	2023-11-19 18:17:58 +01:00
Akshay Mankar	35afcd9682	matrix: Make public rooms discoverable over federation	2023-11-19 18:12:08 +01:00
Akshay Mankar	fe284a20d9	matrix: Fix typo	2023-11-19 18:12:08 +01:00
Akshay Mankar	f0c3178b4d	matrix: Use greenbaum cloud for sending emails	2023-11-19 18:12:07 +01:00
Akshay Mankar	7fcefe4b85	matrix: Use chat.pub.solar as invite_client_location	2023-11-19 18:12:07 +01:00
Akshay Mankar	8a2f83c96a	nachtigall: Deploy coturn and configure matrix to use it All checks were successful Flake checks / Check (pull_request) Successful in 19m20s Details	2023-11-19 18:08:15 +01:00
Akshay Mankar	a2e7adbc79	element: Add themes All checks were successful Flake checks / Check (pull_request) Successful in 22m49s Details	2023-11-19 16:03:24 +01:00
Akshay Mankar	e12b3d5c40	matrix: Import config for IRC All checks were successful Flake checks / Check (pull_request) Successful in 18m13s Details	2023-11-19 14:53:14 +01:00
teutat3s	7037abb8f3	fix: forgejo needs module from nixos-unstable All checks were successful Flake checks / Check (pull_request) Successful in 17m50s Details for SSH access	2023-11-19 02:23:34 +01:00
teutat3s	8bc731da6e	Merge pull request 'feat: backups to hetzner storagebox' (#66 ) from feat/backups-to-storagebox into main Reviewed-on: #66 Reviewed-by: b12f <b12f@noreply.git.pub.solar>	2023-11-18 22:13:17 +00:00
teutat3s	40ed46b05b	Merge pull request 'feat: pull in forgejo + mastodon updates early' (#64 ) from feat/early-forgejo-mastodon-updates into main Reviewed-on: #64 Reviewed-by: b12f <b12f@noreply.git.pub.solar>	2023-11-18 22:13:06 +00:00
teutat3s	e41127593b	Merge pull request 'fix(nextcloud): push server is not a trusted proxy' (#62 ) from fix/nextcloud-trusted-proxies into main Reviewed-on: #62 Reviewed-by: b12f <b12f@noreply.git.pub.solar>	2023-11-18 22:12:50 +00:00
teutat3s	a461fc72f6	feat(backups): start backups in 5 minute interval All checks were successful Flake checks / Check (pull_request) Successful in 19m42s Details	2023-11-18 22:41:48 +01:00
teutat3s	2195b7ed0a	feat: backups to hetzner storagebox All checks were successful Flake checks / Check (pull_request) Successful in 19m22s Details	2023-11-18 22:30:23 +01:00
teutat3s	37176a52ce	feat: mastodon module updates from nixos-unstable All checks were successful Flake checks / Check (pull_request) Successful in 18m34s Details Pull in changes from https://github.com/NixOS/nixpkgs/pull/251950 early	2023-11-18 18:46:23 +01:00
teutat3s	d26b3c12f4	fix(nextcloud): push server is not a trusted proxy All checks were successful Flake checks / Check (pull_request) Successful in 17m11s Details The nextcloud push service would fail with the following error message when deploying a new version: please add '2a01:4f8:172:1c25::1' to the list of trusted proxies or configure any existing reverse proxy to forward the 'x-forwarded-for' send by the push server The following x-forwarded-for header was received by Nextcloud: 1.2.3.4 The following trusted proxies are currently configured: "127.0.0.1", "::1" https://docs.nextcloud.com/server/stable/admin_manual/configuration_server/reverse_proxy_configuration.html#defining-trusted-proxies	2023-11-18 18:12:38 +01:00
teutat3s	c88a0608f6	fix: matrix delegation via well-known for test domain All checks were successful Flake checks / Check (pull_request) Successful in 17m14s Details We use pub.solar as our server_name and matrix.pub.solar:8448 for matrix federation traffic. The well-known record served at https://pub.solar/.well-known/matrix/server should point to matrix.pub.solar:8448. The same is true for test.pub.solar and matrix.test.pub.solar:8448. https://matrix-org.github.io/synapse/latest/delegate.html	2023-11-18 17:46:56 +01:00
Benjamin Bädorf	33e003d4b4	feat: add wellknown for matrix test domain	2023-11-18 17:32:56 +01:00
teutat3s	f2364b314a	fix: keycloak secret file permissions	2023-11-15 21:43:44 +01:00
b12f	f5185e5c15	feat: add mediawiki Some checks reported warnings Flake checks / Check (pull_request) Has been cancelled Details Co-authored-by: @teutat3s <teutates@mailbox.org>	2023-11-15 21:40:29 +01:00
teutat3s	25549fdc53	fix: link to our statutes / satzung All checks were successful Flake checks / Check (pull_request) Successful in 16m19s Details	2023-11-15 18:54:47 +00:00
teutat3s	9c1d19d49f	nachtigall: move SSH private key from user to host	2023-11-15 18:54:32 +00:00
teutat3s	43512ae6e7	forgejo-actions-runner: use Node.js docker images Regenerate auth token	2023-11-15 18:54:32 +00:00
teutat3s	1bd7e5c0e7	docs: clean up	2023-11-15 18:54:32 +00:00
teutat3s	7be3567e6d	flora-6: refactor to use flake.parts	2023-11-15 18:54:32 +00:00
teutat3s	e041f05505	feat: advertise sliding sync support to matrix clients All checks were successful Flake checks / Check (push) Successful in 17m48s Details	2023-11-10 19:02:13 +01:00
Benjamin Bädorf	b085c2e2b2	feat: add all matrix well-known data to nginx Some checks failed Flake checks / Check (push) Failing after 13s Details	2023-11-07 15:19:55 +01:00
Benjamin Bädorf	6fa03994b1	fix: add matrix well-known for pub.solar	2023-11-07 15:12:24 +01:00
Benjamin Bädorf	d69e0350ef	fix: use clean new directory for backups on droppie Some checks failed Flake checks / Check (push) Failing after 13s Details	2023-11-06 22:59:17 +00:00
Benjamin Bädorf	07df547f33	fix: specify sftp storage for droppie restic backups	2023-11-06 22:59:17 +00:00
teutat3s	428fcab009	fix: store forgejo sessions in DB Some checks failed Flake checks / Check (push) Failing after 14s Details See: https://docs.gitea.com/administration/config-cheat-sheet#session-session	2023-11-06 22:34:51 +01:00
Benjamin Bädorf	c8233cf6a7	chore: simplify sudo command for backups	2023-11-06 22:22:36 +01:00
Benjamin Bädorf	052d752d27	feat: add settings_local.json to mailman-web backup	2023-11-06 22:20:29 +01:00
Benjamin Bädorf	841757517f	refactor: small backup refactoring	2023-11-06 21:07:24 +00:00
Benjamin Bädorf	42fbde31e5	feat: droppie backups for all nachtigall services	2023-11-06 21:07:24 +00:00
Benjamin Bädorf	e7c70c6cd0	fix: nachtigall root ssh key config fixes	2023-11-06 21:07:24 +00:00
teutat3s	6a96345760	feat: enable gitea actions in forgejo See: https://docs.gitea.com/usage/actions/quickstart	2023-11-06 22:06:16 +01:00
Benjamin Bädorf	e8ad662631	refactor: change file structure to use modules dir This commit changes the file structure around, so that we have the following parts: `/modules` contains reusable logic blocks for hosts. `/hosts` contains host configurations. `/lib` contains nix library functions. `/overlays` contains overlay files. `/public-keys` contains all information regarding public keys. This change reduces the complexity of flake.nix, instead delegating this out to the `default.nix` files in the above directories.	2023-11-06 13:11:30 +01:00
Benjamin Bädorf	d011cb04e1	feat: add declarative root ssh key on nachtigall	2023-11-05 19:35:37 +01:00
Benjamin Bädorf	633549159e	fix: keep forgejo email addresses private by default	2023-11-05 15:06:30 +01:00
b12f	90b0fb53e6	Merge pull request 'fix: enable websockets for collabora' (#43 ) from fix/collabora-websockets into main Reviewed-on: #43 Reviewed-by: b12f <hello@benjaminbaedorf.eu>	2023-11-03 17:12:45 +00:00
teutat3s	b9e18a167c	fix: keycloak nginx buffer size Tune according to https://www.getpagespeed.com/server-setup/nginx/tuning-proxy_buffer_size-in-nginx	2023-11-03 13:54:11 +01:00
teutat3s	cd1fa3daef	fix: enable websockets for collabora Adopt upstream recommended nginx config https://sdk.collaboraonline.com/docs/installation/Proxy_settings.html#reverse-proxy-with-nginx-webserver	2023-11-03 12:52:32 +01:00
teutat3s	9fc42c44a8	fix: tune nextcloud / php-fpm pool settings Calculated on https://spot13.com/pmcalculator/ with 4GiB RAM available, average php-fpm process size 80MiB Original settings are pm = dynamic pm.max_children = 32 pm.max_requests = 500 pm.max_spare_servers = 4 pm.min_spare_servers = 2 pm.start_servers = 2	2023-10-31 21:24:27 +01:00
Benjamin Bädorf	cb26fa3d00	chore: disable uwsgi logging on searx	2023-10-29 23:51:28 +01:00
Benjamin Bädorf	1db27813dd	fix: Searx is running	2023-10-29 23:49:45 +01:00
teutat3s	a7b3490c15	Merge pull request 'fix: owncast websockets, forgejo max body size in nginx' (#38 ) from fix-owncast into main Reviewed-on: #38 Reviewed-by: b12f <hello@benjaminbaedorf.eu>	2023-10-29 22:12:21 +00:00
teutat3s	505602bd73	fix: set max body size to 1G for forgejo	2023-10-29 23:04:33 +01:00
teutat3s	9898e35208	fix: enable websockets in nginx for owncast	2023-10-29 23:04:11 +01:00
Benjamin Bädorf	edc76ebb1b	chore: add search.pub.solar dns entry	2023-10-29 22:14:13 +01:00
teutat3s	e28cedb274	fix: owncast missing import, enable websockets	2023-10-29 22:10:29 +01:00
Benjamin Bädorf	fe6edd54b1	feat: searx	2023-10-29 20:57:26 +01:00
teutat3s	94c7b6d7db	fix: postgresql service should always wait for ZFS mount	2023-10-29 20:53:16 +01:00
Benjamin Bädorf	f013c6e3f8	feat: make docker run on zfs, add unlocking docs	2023-10-29 19:39:48 +00:00
Benjamin Bädorf	a10d77dcf6	fix: increase php strings cache size for nextcloud https://github.com/nextcloud/server/issues/31223	2023-10-29 19:39:48 +00:00
Benjamin Bädorf	13d46c22c5	fix: nextcloud connections to other applications	2023-10-29 19:39:48 +00:00
Benjamin Bädorf	2c2d77456e	chore: update nextcloud to v27	2023-10-29 19:39:48 +00:00
Benjamin Bädorf	7b4b79f5d4	fix: add host header to collabora nginx proxy_pass	2023-10-29 19:39:48 +00:00
Benjamin Bädorf	8ad19f72fc	fix: small nextcloud fixes * Add admin pass * Increase max post size * Fix secret owner	2023-10-29 19:39:48 +00:00

1 2 3 4 5

225 commits