privatevoid.net/depot
1
1
Fork 0
Code Issues 23 Pull requests 2 Projects 3 Releases Packages Wiki Activity Actions
1751 commits 13 branches 0 tags 7.5 MiB
Commit graph

362 commits

Author SHA1 Message Date
Max
06e2f36f5e VEGAS/websites: remove unused 2022-08-07 21:59:54 +02:00
Max
52459c42c1 cluster/services/acme-client: init 2022-08-07 21:06:17 +02:00
Max
5356ba97c6 cluster/services/dns: init 2022-08-07 20:01:48 +02:00
Max
bc2118ed45 VEGAS/websites: host stop-using-nix-env 2022-08-06 16:18:10 +02:00
Max
90ac208ae7 VEGAS/websites: host landing page from packages 2022-08-06 00:46:37 +02:00
Max
dc1cee54b6 VEGAS/monitoring: fix Prometheus targets 2022-08-04 01:10:11 +02:00
Max
0ee7b151b3 hosts/prophet: enable SSS 2022-08-04 00:39:55 +02:00
Max
232ff31ded VEGAS/monitoring: adjust loki for new monitoring clients 2022-08-03 23:36:50 +02:00
Max
c001885bab VEGAS/fbi: use dedicated service accounts 2022-08-01 22:49:55 +02:00
Max
ad9ccc5ff3 VEGAS/mail: postfix-setup: wait for networking 2022-08-01 22:21:24 +02:00
Max
f1f819e92c VEGAS/ipfs: fix typo 2022-08-01 21:52:35 +02:00
Max
b4f6cdd697 VEGAS/ipfs: set IOSchedulingPriority 2022-08-01 21:52:19 +02:00
Max
0304498986 VEGAS/ipfs: raise LimitNOFILE 2022-08-01 21:22:50 +02:00
Max
52cff6f0c7 VEGAS/matrix: less log spam 2022-08-01 21:10:44 +02:00
Max
0a4dd13316 Revert "packages/oauth2-proxy: patch keycloak token bug" and "modules/oauth2-proxy: use patched package" 
Fix merged in version 7.3.0 upstream.
This reverts commit 1fb7853b52.
This reverts commit e847db9dc0.
 2022-08-01 17:51:58 +02:00
Max
453bca08b3 VEGAS/mc-num: use standard JRE 2022-07-31 22:57:46 +02:00
Max
8d4fabf934 meta: reduce overlay usage 2022-07-31 22:36:07 +02:00
Max
0178038278 VEGAS/database: disable unused MariaDB 2022-07-31 20:37:43 +02:00
Max
e11484050d VEGAS/blog: drop 2022-07-31 20:35:57 +02:00
Max
06fb64bd9d VEGAS/peering: switch to es1, rekey 2022-07-24 23:06:27 +02:00
Max
d905231a6a services/cdn-shield: optimize wttr.in caching 2022-07-11 21:51:13 +02:00
Max
2fee49cf71 services/cdn-shield: provide wttr.in cache 2022-07-11 21:35:02 +02:00
Max
183cd53e84 VEGAS/hydra: allow access to Sourcehut 2022-07-01 16:41:05 +02:00
Max
80936c5694
services/searxng: enable JSON response format 2022-06-22 18:39:01 +02:00
Max
91a29e5255 services/dns: add DNS-over-TLS resolver 2022-06-19 14:04:46 +02:00
Max
303532b2fb services/sso: add tracing 2022-06-19 00:16:25 +02:00
Max
60fca938fb services/monitoring: enable node graph and service graph 2022-06-18 23:24:12 +02:00
Max
b39418084f services/monitoring: enable experimental Grafana tracing features 2022-06-18 22:33:30 +02:00
Max
929262f400 services/monitoring: loki-grpc on localhost 2022-06-18 22:10:57 +02:00
Max
4ab8e32e94 packages/grafana: 8.5.6 -> 9.0.0 2022-06-18 21:50:27 +02:00
Max
6458dd76ef services/monitoring: enable trace searching 2022-06-18 21:03:04 +02:00
Max
b16fbed8a3 services/monitoring: tempo: run as tempo user 2022-06-18 20:53:08 +02:00
Max
cefabc1e93 services/{monitoring,ipfs}: tracing: use port-magic v2 2022-06-18 20:21:13 +02:00
Max
4a00c891af Merge branch 'tracing' 2022-06-18 20:11:51 +02:00
Max
df43950cb7 VEGAS/containers@soda: wait for the vmdefault interface 2022-06-18 19:48:22 +02:00
Max
cf9afa3042 services/mail: postfix: wait for primary interface 2022-06-18 19:42:27 +02:00
Max
cf713a6a9e services/sips: remove 2022-06-18 18:51:27 +02:00
Max
6c3b268306 Merge branch 'updates-20220618' 2022-06-18 18:51:27 +02:00
Max
35e3bb3e49 services/gitlab: gitlab-runner: wait for gitlab.target 2022-06-18 18:51:27 +02:00
Max
ed8e11c6f4 services/dns: coredns: wait for vstub 2022-06-18 18:51:27 +02:00
Max
376697ecae services/monitoring: loki: wait for hyprspace 2022-06-18 18:51:27 +02:00
Max
9911767ec1 VEGAS/containers@soda: wait for libvirtd 2022-06-18 18:51:27 +02:00
Max
5a3d67e6da services/mail: postfix: wait for vstub 2022-06-18 18:18:39 +02:00
Max
26ab120eaa services/mail: use addresses from hosts config 2022-06-18 17:26:32 +02:00
Max
59d5f9d884 treewide: implement port-magic v2 2022-06-18 02:44:51 +02:00
Max
3ff51f2f13 VEGAS/ipfs: log traces to Tempo 2022-06-17 21:29:22 +02:00
Max
a6f613dc31 services/monitoring: add tracing via Grafana Tempo 2022-06-17 21:22:47 +02:00
Max
12bec01363 services/fbi: add fbi-index 2022-06-08 21:03:18 +02:00
Max
282d2666cc services/meet: disable video by default 2022-06-07 19:10:33 +02:00
Max
e847db9dc0 modules/oauth2-proxy: use patched package 2022-06-07 18:39:37 +02:00
Max
8c72443ab1 services/monitoring: Reduce Loki log spam 2022-05-31 21:28:03 +02:00
Max
0c8612149e services/monitoring: Fix Loki frontend address 2022-05-31 21:27:31 +02:00
Max
21730a2365 services/matrix: log to main journal namespace 2022-05-31 21:17:22 +02:00
Max
a43f3fda01 services/sso: check keycloak 2022-05-31 11:48:07 +02:00
Max
4c45c05465 modules/redis: listen on default port 2022-05-31 10:23:57 +02:00
Max
90387c419d services/blog: wait for mysql 2022-05-31 10:17:53 +02:00
Max
3d64a7e429 services/dns: remove dnssec-enable 2022-05-31 09:38:48 +02:00
Max
e8fdf82b9a modules/redis: modify config for 22.05 2022-05-31 09:19:10 +02:00
Max
39c7d1acf6 services/nextcloud: nextcloud23 -> nextcloud24 2022-05-31 09:19:10 +02:00
Max
2ba609fdb5 services/api: modify config for 22.05 2022-05-31 09:19:10 +02:00
Max
45351f77da modules/nginx: modify config for 22.05 2022-05-31 09:19:10 +02:00
Max
27826f48e0 modules/mysql: modify config for 22.05 2022-05-31 09:19:10 +02:00
Max
399fb4b5d8 services/matrix: modify config for 22.05 2022-05-31 09:19:10 +02:00
Max
e223885972 services/sso: modify config for 22.05 2022-05-31 09:19:10 +02:00
Max
a496f5311b services/meet: log to main journal namespace 2022-05-29 14:44:34 +02:00
Max
551c6739a4 soda: fix package installation 2022-05-28 22:00:08 +02:00
Max
37258071e7 services/backbone-routing: forward soda container 2022-05-28 21:56:37 +02:00
Max
2abaa859ab soda: add all the ASCII art 2022-05-28 21:54:50 +02:00
Max
8d56f4aeb2 soda: custom shell profile 2022-05-28 21:54:12 +02:00
Max
bcf8a9ba96 hosts/VEGAS: run soda container 2022-05-28 21:53:15 +02:00
Max
5b01d00114 hosts/soda: init 2022-05-28 21:53:03 +02:00
Max
63eaced3a7 services/sso: use standard JRE 2022-05-27 18:31:00 +02:00
Max
afe2fd64ed services/warehouse: only use required OpenGL drivers 2022-05-27 18:15:34 +02:00
Max
a1d67266ca modules/virtualisation: use qemu_kvm package 2022-05-27 18:15:34 +02:00
Max
6a588b3853 services/minecraft/num: use standard JRE 2022-05-27 18:13:34 +02:00
Max
1872b092ec services/dns: use stevenblack-hosts package 2022-05-27 01:15:21 +02:00
Max
a547aa2fdd services/object-storage: fix console redirect 2022-05-26 23:59:29 +02:00
Max
77759e449c services/object-storage: use OpenID 2022-05-26 23:59:29 +02:00
Max
bcc2f53914 services/object-storage: use built-in console 2022-05-26 23:59:29 +02:00
Max
a370fd5436 services/searxng: use dark theme by default 2022-05-26 20:16:24 +02:00
Max
bb566a7b27 services/searxng: disable engines by default: bing, brave 2022-05-26 19:14:25 +02:00
Max
2052458c5c services/searxng: use Mullvad SOCKS proxies 2022-05-26 18:12:01 +02:00
Max
349bd0d307 services/backbone-routing: add Mullvad connection 2022-05-26 18:09:26 +02:00
Max
70dcacf828 hosts/VEGAS: load dm-raid1 2022-05-26 00:13:09 +02:00
Max
99a011514f services/searxng: disable logging 2022-05-25 20:50:55 +02:00
Max
09f3f85a6b services/searxng: init 2022-05-25 20:50:55 +02:00
Max
54116aafea services/websites: host ky.rip 2022-05-21 13:56:56 +02:00
Max
31b8a989fa modules/fail2ban: increase findtime to 12h 2022-05-18 22:39:40 +02:00
Max
b012ca1964 modules/fail2ban: global dynamic bantime 2022-05-17 10:40:35 +02:00
Max
256118c2b4 enable nix-builder 2022-05-16 23:13:57 +02:00
Max
5f13c5eb49 services/mail: use dynamically increasing fail2ban bantime for postfix 2022-05-16 19:11:53 +02:00
Max
917aec5b3a services/monitoring: allow WebSocket connections 2022-05-16 00:11:36 +02:00
Max
0cd40f0f47 VEGAS/ipfs: expose metrics 2022-05-16 00:10:58 +02:00
Max
1d32eb782e modules/nginx: log to syslog in logfmt format 2022-05-16 00:10:14 +02:00
Max
0249ecdcc3 services/monitoring: add Loki 2022-05-16 00:09:07 +02:00
Max
243b91babf services/meet: enable monitoring 2022-05-15 00:35:02 +02:00
Max
7c72acee59 hosts/VEGAS: add monitoring service 2022-05-15 00:34:09 +02:00
Max
e3887d0573 service/wireguard-server: bypass firewalls 2022-05-03 09:16:21 +02:00
Max
3268921a92 hosts/VEGAS: replace OpenVPN with WireGuard 2022-04-28 23:47:23 +02:00
Max
fd7ae38e66 hosts/VEGAS: add uptime-kuma 2022-04-27 22:08:49 +02:00
Max
f81493f0c8 hosts/prophet: Oracle VCN fuckup 2022-04-14 19:13:46 +02:00
Max
b2175bd0dc services/meet: bypass firewalls yet again 2022-04-08 14:42:14 +02:00
Max
e6070763fc hosts/prophet: add hercules-ci-agent 2022-03-31 19:43:17 +02:00
Max
2a3725af7a hosts/VEGAS: add hercules-ci-agent 2022-03-31 19:42:49 +02:00
Max
6555133984 VEGAS/minecraft: add instance for num 2022-03-25 21:32:30 +01:00
Max
80d5766eec services/meet: use a more common port to bypass outgoing firewalls 2022-03-18 19:24:49 +01:00
Max
4d1df18293 services/meet: use proper NAT address configuration 2022-03-18 19:24:14 +01:00
Max
54a8e04944 services/reflex: use all caches 2022-03-13 02:16:01 +01:00
Max
b15871d15f services/reflex: cleanup leftover file 2022-03-13 02:11:47 +01:00
Max
a4df66cba2 meta: style 2022-03-12 23:16:38 +01:00
Max
bd85de1d4f hosts/VEGAS: upgrade to Nextcloud 23 2022-03-12 18:27:39 +01:00
Max
260832637f hosts/VEGAS: new main storage 2022-03-12 13:53:00 +01:00
Max
f5f56a2f86 hosts/VEGAS: remove machines-storage 2022-03-11 14:46:40 +01:00
Max
a90f5ba92f services/mail: use aggressive fail2ban for postfix 2022-03-10 20:14:02 +01:00
Max
ac9f5f7522 services/mail: enable dovecot fail2ban 2022-03-10 19:47:15 +01:00
Max
e7ac9bb9b1 services/hydra: add github.com to allowed-uris 2022-03-01 22:55:57 +01:00
Max
8fb148697e VEGAS: remove janky Minecraft server 2022-02-26 15:08:35 +01:00
Max
90661a9a92 services/sips: wait for postgres 2022-02-26 14:59:47 +01:00
Max
8771355dd6 services/reflex: use reflex-cache package 2022-02-26 01:00:10 +01:00
Max
1de011fa23 services/reflex: move to prophet 2022-02-18 21:26:59 +01:00
Max
525aaa246b services/cdn-shield: move to prophet 2022-02-05 23:34:42 +01:00
Max
8d2963fe5c VEGAS/cdn-shield: use external domain 2022-02-05 23:21:32 +01:00
Max
6aa622c6c1 VEGAS/dns: slave for domain: imagine-using-oca.ml 2022-02-05 23:11:07 +01:00
Max
12b88d0015 hosts/prophet: enable hyprspace 2022-02-05 19:10:02 +01:00
Max
3f57cd9aa6 modules: extract hyprspace module 2022-02-05 19:09:56 +01:00
Max
7b065d47f0 meet: move service: VEGAS -> prophet 2022-02-05 17:13:22 +01:00
Max
58560480e7 hosts/prophet: enable IPFS 2022-02-05 17:13:22 +01:00
Max
699283c0ba modules: extract IPFS module 2022-02-05 17:13:22 +01:00
Max
8f69b14f66 hosts/prophet: init 2022-02-05 17:13:22 +01:00
Max
8088e4db39 meta: multi-arch support 2022-02-05 17:13:22 +01:00
Max
cc157090a8
Merge pull request #7 from privatevoid-net/pr-ipfs-pinning-service 
SIPS: Simple IPFS pinning service
 2022-02-05 17:09:41 +01:00
Max
4fbb8994bb
Merge pull request #6 from privatevoid-net/pr-reflex-cache 
"Reflex" Nix IPFS cache
 2022-02-05 17:08:16 +01:00
Max
02c571a1cd
Merge pull request #5 from privatevoid-net/pr-matrix-dimension 
VEGAS/matrix: use Dimension integrations
 2022-02-05 17:08:00 +01:00
Max
786afc3969 VEGAS/matrix: use Dimension integrations 2022-02-04 00:16:31 +01:00
Max
16283ae286 VEGAS/ipfs: tune IO performance 2022-02-04 00:16:00 +01:00
Max
5157c9bec1 VEGAS: add SIPS service 2022-02-04 00:16:00 +01:00
Max
24650556d8 VEGAS/gitlab: add GitLab Runner 2022-02-04 00:15:23 +01:00
Max
0961b893eb VEGAS: switch to GitLab 2022-02-04 00:15:23 +01:00
Max
26005dd03a VEGAS: add Nix IPFS cache service 2022-02-04 00:12:34 +01:00
Max
52883b964a packages/minio-console: 0.12.5 -> 0.13.2 2022-01-20 17:10:55 +01:00
Max
40e4407466 VEGAS: add blog service 2022-01-14 22:49:38 +01:00
Max
dcb8bdde59 VEGAS/database: provide MySQL as well 2022-01-14 22:49:38 +01:00
Max
77c1a0e407 meta: remove unused hosts 2022-01-14 22:49:38 +01:00
Max
74254d650b VEGAS/meet: open ICE ports in firewall 2022-01-14 22:49:38 +01:00
Max
5f1ebf2cc7 VEGAS: remove forum service 2022-01-14 22:49:38 +01:00
Max
0a84f532e2 VEGAS/minecraft-server: do not download modpack 2022-01-14 22:49:38 +01:00
Max
68d5dd1d63 VEGAS/nar-serve: improvements, nixos.org support 2022-01-14 22:49:38 +01:00
Max
87ac835148 VEGAS/api: init 2022-01-14 22:49:38 +01:00
Max
c31f061a65 VEGAS/ipfs: use a protected UDS for API access 2022-01-14 22:49:38 +01:00
Max
1e8246dad4 VEGAS/nginx: increase proxy header hash sizes 2022-01-14 22:49:38 +01:00
Max
89476da4c7 VEGAS/hydra: expose push API with rate limiting 2022-01-14 22:49:38 +01:00
Max
906d2aa99a VEGAS/nginx: wait for network-online 2022-01-14 22:49:38 +01:00
Max
a7cd2f455f VEGAS/git: wait for keycloak 2022-01-14 22:49:38 +01:00
Max
ea24121eb1 VEGAS/warehouse: mount NFS after wireguard is up 2022-01-14 22:49:38 +01:00
Max
19355c0f91 VEGAS/bitwarden: allow backup to read data dir 2022-01-14 22:49:38 +01:00
Max
8bad272eef VEGAS/nextcloud: wait for postgres 2022-01-14 22:49:38 +01:00
Max
95380ad0d2 VEGAS/hyprspace: wait for network-online 2022-01-14 22:49:38 +01:00
Max
07d12fc422 VEGAS/hydra: use local DB 2022-01-14 22:49:38 +01:00
Max
3cfd202409 VEGAS/mail: start postfix after network-online 2022-01-14 22:49:38 +01:00
Max
b654d37afa VEGAS: no more extra systemd unit links 2022-01-14 22:49:38 +01:00
Max
d9a9ff0265 VEGAS/bitwarden: bitwarden_rs -> vaultwarden 2022-01-14 22:49:38 +01:00
Max
40a33a1450 VEGAS/object-storage: set root credentials path in module option 2022-01-14 22:49:38 +01:00
Max
16a58587d1 VEGAS/meet: force large UDP receive buffer setting 2022-01-14 22:49:38 +01:00
Max
0cb29cf277 remove backported coturn module 2022-01-14 22:49:38 +01:00
Max
c47ce59efe VEGAS/oauth2-proxy: fix group 2022-01-14 22:49:38 +01:00
Max
66d5821897 VEGAS/minecraft: force group 2022-01-14 22:49:38 +01:00
Max
13c75aaea0 VEGAS: reintroduce Hydra 2022-01-14 22:49:38 +01:00
Max
bcdccb4b00 VEGAS/object-storage: allow big uploads 2022-01-14 22:49:38 +01:00
Max
324de47b9c VEGAS/object-storage: upgrade console to 0.12.5 2022-01-14 22:49:38 +01:00
Max
f3580748c5 VEGAS/coredns: download StevenBlack hosts inline 2022-01-14 22:49:38 +01:00
Max
61480c42f8 VEGAS: use port-magic where applicable 2022-01-14 22:49:38 +01:00
Max
711ed58dc6 VEGAS/database: use proper authentication 2022-01-14 22:49:38 +01:00
Max
f18cf36176 VEGAS: add Vault 2022-01-14 22:49:38 +01:00
Max
a38b4f2a8b VEGAS: add hyprspace service 2022-01-14 22:49:38 +01:00
Max
9e284cee3f VEGAS: quick-and-dirty minecraft server 2022-01-14 22:49:38 +01:00
Max
b8442d4763 VEGAS/cdn-shield: init 2022-01-14 22:49:38 +01:00
Max
95d88f9a15 move Jitsi to VEGAS 2022-01-14 22:49:38 +01:00
Max
00084be991 VEGAS/git: theming 2022-01-14 22:49:38 +01:00
Max
736467f600 VEGAS/ipfs: subdomain gateway 
BUG: ipfs config cannot escape domain dots, thus the following cannot be
applied with it:

PublicGateways.${domain} = {
  UseSubdomains = true;
  Paths = [
    "/ipfs"
    "/ipns"
  ];
};
 2022-01-14 22:49:38 +01:00
Max
3c4b8d92b4 VEGAS: add SSO service 2022-01-14 22:49:38 +01:00
Max
3c15c90258 VEGAS: add OpenVPN 2022-01-14 22:49:38 +01:00
Max
32e41ddcd9 VEGAS: add nar-serve 2022-01-14 22:49:38 +01:00
Max
7635bf6ff4 VEGAS: provide a Nix binary cache 2022-01-14 22:49:38 +01:00
Max
cf267ccbf8 VEGAS: add object storage service 2022-01-14 22:49:38 +01:00
Max
b22174e512 VEGAS: add Nextcloud service 2022-01-14 22:49:38 +01:00
Max
bdf1153359 VEGAS: add Redis 2022-01-14 22:49:38 +01:00
Max
de311567ec VEGAS/matrix: journal namespacing and slicing 2022-01-14 22:49:38 +01:00
Max
40e53114ea VEGAS/matrix: add coturn TURN server 2022-01-14 22:49:38 +01:00
Max
eea7ccf7a3 VEGAS/matrix: add Discord bridge 2022-01-14 22:49:38 +01:00
Max
3f93dbadf1 VEGAS: add matrix service 
Provides the following:
- Synapse homeserver
- Element web client
- Federation support
 2022-01-14 22:49:38 +01:00
Max
7d00d872ae VEGAS: add websites 2022-01-14 22:49:38 +01:00
Max
9b8f43fa28 VEGAS: add Warehouse 2022-01-14 22:49:38 +01:00
Max
ed80609997 VEGAS: full mail server 2022-01-14 22:49:38 +01:00
Max
6526279a5e VEGAS: NFS 2022-01-14 22:49:38 +01:00
Max
f322bee645 VEGAS: add humorous websites 2022-01-14 22:49:38 +01:00
Max
9de6850a3b VEGAS: add IFPS 2022-01-14 22:49:38 +01:00
Max
5b8c553c83 move Gitea to VEGAS 2022-01-14 22:49:38 +01:00
Max
d25c9bd74b VEGAS: add Discourse forum 2022-01-14 22:49:38 +01:00
Max
bddf3bfcf8 VEGAS: add Bitwarden service 2022-01-14 22:49:38 +01:00
Max
e149b8e16f VEGAS: add FBI services 2022-01-14 22:49:38 +01:00