pub-solar/infra
6
1
Fork 3
Code Issues 16 Pull requests 7 Actions Packages Projects 1 Releases Wiki Activity
185 commits 11 branches 0 tags 4 MiB
Commit graph

185 commits

This branch
This branch
All branches
Author SHA1 Message Date
teutat3s e950a9babc
Bump flake flake.parts input
Some checks failed
Flake checks / Check (push) Failing after 35s
Details
2023-11-09 04:05:16 +01:00
teutat3s 342c4cd7e0
wip: cachix actions needs USER env
Some checks failed
Flake checks / Check (push) Failing after 35s
Details
2023-11-09 04:01:12 +01:00
teutat3s 68c5639bff
wip: cachix actions needs USER env
Some checks failed
Flake checks / Check (push) Failing after 33s
Details
2023-11-09 03:54:41 +01:00
teutat3s 41b8259175
wip: cachix actions needs USER env
Some checks failed
Flake checks / Check (push) Failing after 31s
Details
2023-11-09 03:42:58 +01:00
teutat3s 72a12f2566
wip: Try to install sudo
Some checks failed
Flake checks / Check (push) Failing after 32s
Details
2023-11-09 03:36:56 +01:00
teutat3s 53be896a31
wip: Try to install Node.js via action?
Some checks failed
Flake checks / Check (push) Failing after 41s
Details
2023-11-09 03:24:57 +01:00
teutat3s 6b6d9b0266
wip: try to install cachix flake via ubuntu-latest
Some checks failed
Flake checks / Check (push) Failing after 10s
Details
2023-11-09 02:24:36 +01:00
teutat3s 7d9b932761
wip: try to install cachix flake
Some checks are pending
Flake checks / Check (push) Has started running
Details
2023-11-07 00:59:42 +01:00
teutat3s 233cf1127d
wip: try to install cachix flake via profiles
Some checks failed
Flake checks / Check (push) Failing after 57s
Details
2023-11-07 00:54:43 +01:00
teutat3s ff4b5a0391
wip: try to install cachix flake via profiles
Some checks failed
Flake checks / Check (push) Failing after 56s
Details
2023-11-07 00:50:29 +01:00
teutat3s 7bd735b020
wip: try to install cachix flake
Some checks failed
Flake checks / Check (push) Failing after 1m4s
Details
2023-11-07 00:12:26 +01:00
b12f 8f603dad45
Merge pull request 'fix/backup-repositories-droppie' (#50) from fix/backup-repositories-droppie into main
Some checks failed
Flake checks / Check (push) Failing after 13s
Details 
Reviewed-on: #50
Reviewed-by: teutat3s <teutat3s@noreply.git.pub.solar>
 2023-11-06 22:59:25 +00:00
Benjamin Bädorf d69e0350ef
fix: use clean new directory for backups on droppie
Some checks failed
Flake checks / Check (push) Failing after 13s
Details
2023-11-06 22:59:17 +00:00
Benjamin Bädorf 07df547f33
fix: specify sftp storage for droppie restic backups 2023-11-06 22:59:17 +00:00
b12f 77a4460a36
Merge pull request 'fix: store forgejo sessions in DB' (#49) from fix/forgejo-store-sessions-in-db into main
Some checks failed
Flake checks / Check (push) Failing after 13s
Details 
Reviewed-on: #49
Reviewed-by: b12f <b12f@noreply.git.pub.solar>
 2023-11-06 22:58:50 +00:00
teutat3s 428fcab009
fix: store forgejo sessions in DB
Some checks failed
Flake checks / Check (push) Failing after 14s
Details 
See:
https://docs.gitea.com/administration/config-cheat-sheet#session-session
 2023-11-06 22:34:51 +01:00
teutat3s f576c7385d
Merge pull request 'backups' (#47) from feat/backups into main 
Reviewed-on: #47
Reviewed-by: teutat3s <teutat3s@noreply.git.pub.solar>
 2023-11-06 21:24:03 +00:00
Benjamin Bädorf c8233cf6a7
chore: simplify sudo command for backups 2023-11-06 22:22:36 +01:00
Benjamin Bädorf 052d752d27
feat: add settings_local.json to mailman-web backup 2023-11-06 22:20:29 +01:00
Benjamin Bädorf e8f72b6cf7
fix: remove unlock zfs module from lib 2023-11-06 22:09:22 +01:00
Benjamin Bädorf 20fbcbb571
fix: two typos 2023-11-06 21:07:24 +00:00
Benjamin Bädorf 841757517f
refactor: small backup refactoring 2023-11-06 21:07:24 +00:00
Benjamin Bädorf 42fbde31e5
feat: droppie backups for all nachtigall services 2023-11-06 21:07:24 +00:00
Benjamin Bädorf e7c70c6cd0
fix: nachtigall root ssh key config fixes 2023-11-06 21:07:24 +00:00
teutat3s a63e0e2154
Merge pull request 'feat: enable gitea actions in forgejo' (#40) from feat/gitea-actions into main 
Reviewed-on: #40
Reviewed-by: b12f <b12f@noreply.git.pub.solar>
 2023-11-06 21:07:01 +00:00
teutat3s 487e12015a
ci: add pub-solar cachix 
https://app.cachix.org
 2023-11-06 22:06:32 +01:00
teutat3s 6a96345760
feat: enable gitea actions in forgejo 
See: https://docs.gitea.com/usage/actions/quickstart
 2023-11-06 22:06:16 +01:00
b12f 62e1e0cddc
Merge pull request 'refactor: change file structure to use modules dir' (#41) from refactor/file-structure into main 
Reviewed-on: #41
Reviewed-by: teutat3s <teutat3s@noreply.git.pub.solar>
 2023-11-06 12:11:46 +00:00
Benjamin Bädorf e8ad662631
refactor: change file structure to use modules dir 
This commit changes the file structure around, so that we have the
following parts:

`/modules` contains reusable logic blocks for hosts.
`/hosts` contains host configurations.
`/lib` contains nix library functions.
`/overlays` contains overlay files.
`/public-keys` contains all information regarding public keys.

This change reduces the complexity of flake.nix, instead delegating this
out to the `default.nix` files in the above directories.
 2023-11-06 13:11:30 +01:00
b12f 65a660117a
Merge pull request 'feat: add declarative root ssh key on nachtigall' (#46) from feat/declarative-root-ssh-nachtigall into main 
Reviewed-on: #46
Reviewed-by: teutat3s <teutat3s@noreply.git.pub.solar>
 2023-11-05 20:54:39 +00:00
Benjamin Bädorf d011cb04e1
feat: add declarative root ssh key on nachtigall 2023-11-05 19:35:37 +01:00
Akshay Mankar a9beccc31f
Merge pull request 'fix: keep forgejo email addresses private by default' (#45) from feat/hide-forgejo-email-by-default into main 
Reviewed-on: #45
Reviewed-by: Akshay Mankar <axeman@noreply.git.pub.solar>
 2023-11-05 14:08:44 +00:00
Benjamin Bädorf 633549159e
fix: keep forgejo email addresses private by default 2023-11-05 15:06:30 +01:00
b12f 90b0fb53e6
Merge pull request 'fix: enable websockets for collabora' (#43) from fix/collabora-websockets into main 
Reviewed-on: #43
Reviewed-by: b12f <hello@benjaminbaedorf.eu>
 2023-11-03 17:12:45 +00:00
b12f b8fb9fd867
Merge pull request 'fix: keycloak nginx buffer size' (#44) from fix/keycloak-nginx-buffer-size into main 
Reviewed-on: #44
Reviewed-by: b12f <hello@benjaminbaedorf.eu>
 2023-11-03 17:12:24 +00:00
teutat3s b9e18a167c
fix: keycloak nginx buffer size 
Tune according to
https://www.getpagespeed.com/server-setup/nginx/tuning-proxy_buffer_size-in-nginx
 2023-11-03 13:54:11 +01:00
teutat3s cd1fa3daef
fix: enable websockets for collabora 
Adopt upstream recommended nginx config
https://sdk.collaboraonline.com/docs/installation/Proxy_settings.html#reverse-proxy-with-nginx-webserver
 2023-11-03 12:52:32 +01:00
teutat3s 7a7e4ba4b4
Merge pull request 'fix: tune nextcloud / php-fpm pool settings' (#42) from fix/nextcloud-tuning into main 
Reviewed-on: #42
Reviewed-by: b12f <hello@benjaminbaedorf.eu>
 2023-10-31 22:35:37 +00:00
teutat3s 9fc42c44a8
fix: tune nextcloud / php-fpm pool settings 
Calculated on https://spot13.com/pmcalculator/
with 4GiB RAM available, average php-fpm process size 80MiB

Original settings are
pm = dynamic
pm.max_children = 32
pm.max_requests = 500
pm.max_spare_servers = 4
pm.min_spare_servers = 2
pm.start_servers = 2
 2023-10-31 21:24:27 +01:00
teutat3s 92996fb0c0
Merge pull request 'fix: Searx is running' (#39) from fix/searx into main 
Reviewed-on: #39
Reviewed-by: teutat3s <teutates@mailbox.org>
 2023-10-29 22:51:58 +00:00
Benjamin Bädorf cb26fa3d00
chore: disable uwsgi logging on searx 2023-10-29 23:51:28 +01:00
Benjamin Bädorf 1db27813dd
fix: Searx is running 2023-10-29 23:49:45 +01:00
teutat3s a7b3490c15
Merge pull request 'fix: owncast websockets, forgejo max body size in nginx' (#38) from fix-owncast into main 
Reviewed-on: #38
Reviewed-by: b12f <hello@benjaminbaedorf.eu>
 2023-10-29 22:12:21 +00:00
teutat3s 6f9df4d6c3
docs: use https URL for git checkout 2023-10-29 23:04:58 +01:00
teutat3s 505602bd73
fix: set max body size to 1G for forgejo 2023-10-29 23:04:33 +01:00
teutat3s 9898e35208
fix: enable websockets in nginx for owncast 2023-10-29 23:04:11 +01:00
teutat3s 5f32669fe8
Merge pull request 'feat: searx' (#35) from feat/searx into main 
Reviewed-on: pub-solar/infra-new#35
Reviewed-by: teutat3s <teutates@mailbox.org>
 2023-10-29 21:16:34 +00:00
Benjamin Bädorf edc76ebb1b
chore: add search.pub.solar dns entry 2023-10-29 22:14:13 +01:00
teutat3s e28cedb274
fix: owncast missing import, enable websockets 2023-10-29 22:10:29 +01:00
Benjamin Bädorf 8e5f5d425c
fix: add searx secret key 2023-10-29 20:57:52 +01:00