Commit graph

330 commits

Author SHA1 Message Date
Max
3e804e48d0 VEGAS/mail: update admins alias 2022-09-01 13:02:21 +02:00
Max
bee83b5ced VEGAS/mail: discard unsolicited messages from trypioneer 2022-08-31 21:37:08 +02:00
Max
dac9c2fb3c VEGAS/websites: add back custom Soda error pages 2022-08-28 22:32:47 +02:00
Max
5fb0285de2 VEGAS/fbi: use local mediamanagers group 2022-08-26 23:44:17 +02:00
Max
4ae3618c0f VEGAS/sso: remove expensive check 2022-08-25 23:04:41 +02:00
Max
187a77b1e8 VEGAS/matrix: work around inaccurate assertions 2022-08-10 01:09:22 +02:00
Max
5035bdaa09 VEGAS/database: disable postgres 2022-08-10 01:02:24 +02:00
Max
2d9e5462a7 VEGAS/nextcloud: remove leftover postgres config 2022-08-10 01:01:49 +02:00
Max
e038d8180d VEGAS/matrix: use Patroni database, move dataDir 2022-08-10 00:31:17 +02:00
Max
35189ed6de VEGAS/gitlab: use Patroni database 2022-08-09 22:33:05 +02:00
Max
0689f5586c VEGAS/hydra: rekey DB credentials, use Patroni database 2022-08-09 22:03:48 +02:00
Max
175d3c8b13 cluster/services/websites: init 2022-08-09 20:10:25 +02:00
Max
3e1041ed85 VEGAS/fbi: start mediamanagement.slice after nss-user-lookup 2022-08-09 19:07:48 +02:00
Max
5b4c240c80 VEGAS/nextcloud: restart setup service on failure 2022-08-08 23:15:08 +02:00
Max
88b214bce1 VEGAS/matrix: fix CORS policy 2022-08-08 20:32:13 +02:00
Max
50f689c2ec VEGAS/matrix: switch to Cinny web client 2022-08-08 20:31:22 +02:00
Max
0614be7afb VEGAS/nextcloud: rekey secrets and move to Patroni database 2022-08-07 23:38:56 +02:00
Max
df62cbfe93 VEGAS/sso: use Patroni database 2022-08-07 22:54:59 +02:00
Max
06e2f36f5e VEGAS/websites: remove unused 2022-08-07 21:59:54 +02:00
Max
52459c42c1 cluster/services/acme-client: init 2022-08-07 21:06:17 +02:00
Max
5356ba97c6 cluster/services/dns: init 2022-08-07 20:01:48 +02:00
Max
bc2118ed45 VEGAS/websites: host stop-using-nix-env 2022-08-06 16:18:10 +02:00
Max
90ac208ae7 VEGAS/websites: host landing page from packages 2022-08-06 00:46:37 +02:00
Max
dc1cee54b6 VEGAS/monitoring: fix Prometheus targets 2022-08-04 01:10:11 +02:00
Max
0ee7b151b3 hosts/prophet: enable SSS 2022-08-04 00:39:55 +02:00
Max
232ff31ded VEGAS/monitoring: adjust loki for new monitoring clients 2022-08-03 23:36:50 +02:00
Max
c001885bab VEGAS/fbi: use dedicated service accounts 2022-08-01 22:49:55 +02:00
Max
ad9ccc5ff3 VEGAS/mail: postfix-setup: wait for networking 2022-08-01 22:21:24 +02:00
Max
f1f819e92c VEGAS/ipfs: fix typo 2022-08-01 21:52:35 +02:00
Max
b4f6cdd697 VEGAS/ipfs: set IOSchedulingPriority 2022-08-01 21:52:19 +02:00
Max
0304498986 VEGAS/ipfs: raise LimitNOFILE 2022-08-01 21:22:50 +02:00
Max
52cff6f0c7 VEGAS/matrix: less log spam 2022-08-01 21:10:44 +02:00
Max
0a4dd13316 Revert "packages/oauth2-proxy: patch keycloak token bug" and "modules/oauth2-proxy: use patched package"
Fix merged in version 7.3.0 upstream.
This reverts commit 1fb7853b52.
This reverts commit e847db9dc0.
2022-08-01 17:51:58 +02:00
Max
453bca08b3 VEGAS/mc-num: use standard JRE 2022-07-31 22:57:46 +02:00
Max
8d4fabf934 meta: reduce overlay usage 2022-07-31 22:36:07 +02:00
Max
0178038278 VEGAS/database: disable unused MariaDB 2022-07-31 20:37:43 +02:00
Max
e11484050d VEGAS/blog: drop 2022-07-31 20:35:57 +02:00
Max
06fb64bd9d VEGAS/peering: switch to es1, rekey 2022-07-24 23:06:27 +02:00
Max
d905231a6a services/cdn-shield: optimize wttr.in caching 2022-07-11 21:51:13 +02:00
Max
2fee49cf71 services/cdn-shield: provide wttr.in cache 2022-07-11 21:35:02 +02:00
Max
183cd53e84 VEGAS/hydra: allow access to Sourcehut 2022-07-01 16:41:05 +02:00
Max
80936c5694
services/searxng: enable JSON response format 2022-06-22 18:39:01 +02:00
Max
91a29e5255 services/dns: add DNS-over-TLS resolver 2022-06-19 14:04:46 +02:00
Max
303532b2fb services/sso: add tracing 2022-06-19 00:16:25 +02:00
Max
60fca938fb services/monitoring: enable node graph and service graph 2022-06-18 23:24:12 +02:00
Max
b39418084f services/monitoring: enable experimental Grafana tracing features 2022-06-18 22:33:30 +02:00
Max
929262f400 services/monitoring: loki-grpc on localhost 2022-06-18 22:10:57 +02:00
Max
4ab8e32e94 packages/grafana: 8.5.6 -> 9.0.0 2022-06-18 21:50:27 +02:00
Max
6458dd76ef services/monitoring: enable trace searching 2022-06-18 21:03:04 +02:00
Max
b16fbed8a3 services/monitoring: tempo: run as tempo user 2022-06-18 20:53:08 +02:00
Max
cefabc1e93 services/{monitoring,ipfs}: tracing: use port-magic v2 2022-06-18 20:21:13 +02:00
Max
4a00c891af Merge branch 'tracing' 2022-06-18 20:11:51 +02:00
Max
df43950cb7 VEGAS/containers@soda: wait for the vmdefault interface 2022-06-18 19:48:22 +02:00
Max
cf9afa3042 services/mail: postfix: wait for primary interface 2022-06-18 19:42:27 +02:00
Max
cf713a6a9e services/sips: remove 2022-06-18 18:51:27 +02:00
Max
6c3b268306 Merge branch 'updates-20220618' 2022-06-18 18:51:27 +02:00
Max
35e3bb3e49 services/gitlab: gitlab-runner: wait for gitlab.target 2022-06-18 18:51:27 +02:00
Max
ed8e11c6f4 services/dns: coredns: wait for vstub 2022-06-18 18:51:27 +02:00
Max
376697ecae services/monitoring: loki: wait for hyprspace 2022-06-18 18:51:27 +02:00
Max
9911767ec1 VEGAS/containers@soda: wait for libvirtd 2022-06-18 18:51:27 +02:00
Max
5a3d67e6da services/mail: postfix: wait for vstub 2022-06-18 18:18:39 +02:00
Max
26ab120eaa services/mail: use addresses from hosts config 2022-06-18 17:26:32 +02:00
Max
59d5f9d884 treewide: implement port-magic v2 2022-06-18 02:44:51 +02:00
Max
3ff51f2f13 VEGAS/ipfs: log traces to Tempo 2022-06-17 21:29:22 +02:00
Max
a6f613dc31 services/monitoring: add tracing via Grafana Tempo 2022-06-17 21:22:47 +02:00
Max
12bec01363 services/fbi: add fbi-index 2022-06-08 21:03:18 +02:00
Max
282d2666cc services/meet: disable video by default 2022-06-07 19:10:33 +02:00
Max
e847db9dc0 modules/oauth2-proxy: use patched package 2022-06-07 18:39:37 +02:00
Max
8c72443ab1 services/monitoring: Reduce Loki log spam 2022-05-31 21:28:03 +02:00
Max
0c8612149e services/monitoring: Fix Loki frontend address 2022-05-31 21:27:31 +02:00
Max
21730a2365 services/matrix: log to main journal namespace 2022-05-31 21:17:22 +02:00
Max
a43f3fda01 services/sso: check keycloak 2022-05-31 11:48:07 +02:00
Max
4c45c05465 modules/redis: listen on default port 2022-05-31 10:23:57 +02:00
Max
90387c419d services/blog: wait for mysql 2022-05-31 10:17:53 +02:00
Max
3d64a7e429 services/dns: remove dnssec-enable 2022-05-31 09:38:48 +02:00
Max
e8fdf82b9a modules/redis: modify config for 22.05 2022-05-31 09:19:10 +02:00
Max
39c7d1acf6 services/nextcloud: nextcloud23 -> nextcloud24 2022-05-31 09:19:10 +02:00
Max
2ba609fdb5 services/api: modify config for 22.05 2022-05-31 09:19:10 +02:00
Max
45351f77da modules/nginx: modify config for 22.05 2022-05-31 09:19:10 +02:00
Max
27826f48e0 modules/mysql: modify config for 22.05 2022-05-31 09:19:10 +02:00
Max
399fb4b5d8 services/matrix: modify config for 22.05 2022-05-31 09:19:10 +02:00
Max
e223885972 services/sso: modify config for 22.05 2022-05-31 09:19:10 +02:00
Max
a496f5311b services/meet: log to main journal namespace 2022-05-29 14:44:34 +02:00
Max
551c6739a4 soda: fix package installation 2022-05-28 22:00:08 +02:00
Max
37258071e7 services/backbone-routing: forward soda container 2022-05-28 21:56:37 +02:00
Max
2abaa859ab soda: add all the ASCII art 2022-05-28 21:54:50 +02:00
Max
8d56f4aeb2 soda: custom shell profile 2022-05-28 21:54:12 +02:00
Max
bcf8a9ba96 hosts/VEGAS: run soda container 2022-05-28 21:53:15 +02:00
Max
5b01d00114 hosts/soda: init 2022-05-28 21:53:03 +02:00
Max
63eaced3a7 services/sso: use standard JRE 2022-05-27 18:31:00 +02:00
Max
afe2fd64ed services/warehouse: only use required OpenGL drivers 2022-05-27 18:15:34 +02:00
Max
a1d67266ca modules/virtualisation: use qemu_kvm package 2022-05-27 18:15:34 +02:00
Max
6a588b3853 services/minecraft/num: use standard JRE 2022-05-27 18:13:34 +02:00
Max
1872b092ec services/dns: use stevenblack-hosts package 2022-05-27 01:15:21 +02:00
Max
a547aa2fdd services/object-storage: fix console redirect 2022-05-26 23:59:29 +02:00
Max
77759e449c services/object-storage: use OpenID 2022-05-26 23:59:29 +02:00
Max
bcc2f53914 services/object-storage: use built-in console 2022-05-26 23:59:29 +02:00
Max
a370fd5436 services/searxng: use dark theme by default 2022-05-26 20:16:24 +02:00
Max
bb566a7b27 services/searxng: disable engines by default: bing, brave 2022-05-26 19:14:25 +02:00
Max
2052458c5c services/searxng: use Mullvad SOCKS proxies 2022-05-26 18:12:01 +02:00
Max
349bd0d307 services/backbone-routing: add Mullvad connection 2022-05-26 18:09:26 +02:00
Max
70dcacf828 hosts/VEGAS: load dm-raid1 2022-05-26 00:13:09 +02:00
Max
99a011514f services/searxng: disable logging 2022-05-25 20:50:55 +02:00
Max
09f3f85a6b services/searxng: init 2022-05-25 20:50:55 +02:00
Max
54116aafea services/websites: host ky.rip 2022-05-21 13:56:56 +02:00
Max
31b8a989fa modules/fail2ban: increase findtime to 12h 2022-05-18 22:39:40 +02:00
Max
b012ca1964 modules/fail2ban: global dynamic bantime 2022-05-17 10:40:35 +02:00
Max
256118c2b4 enable nix-builder 2022-05-16 23:13:57 +02:00
Max
5f13c5eb49 services/mail: use dynamically increasing fail2ban bantime for postfix 2022-05-16 19:11:53 +02:00
Max
917aec5b3a services/monitoring: allow WebSocket connections 2022-05-16 00:11:36 +02:00
Max
0cd40f0f47 VEGAS/ipfs: expose metrics 2022-05-16 00:10:58 +02:00
Max
1d32eb782e modules/nginx: log to syslog in logfmt format 2022-05-16 00:10:14 +02:00
Max
0249ecdcc3 services/monitoring: add Loki 2022-05-16 00:09:07 +02:00
Max
243b91babf services/meet: enable monitoring 2022-05-15 00:35:02 +02:00
Max
7c72acee59 hosts/VEGAS: add monitoring service 2022-05-15 00:34:09 +02:00
Max
e3887d0573 service/wireguard-server: bypass firewalls 2022-05-03 09:16:21 +02:00
Max
3268921a92 hosts/VEGAS: replace OpenVPN with WireGuard 2022-04-28 23:47:23 +02:00
Max
fd7ae38e66 hosts/VEGAS: add uptime-kuma 2022-04-27 22:08:49 +02:00
Max
f81493f0c8 hosts/prophet: Oracle VCN fuckup 2022-04-14 19:13:46 +02:00
Max
b2175bd0dc services/meet: bypass firewalls yet again 2022-04-08 14:42:14 +02:00
Max
e6070763fc hosts/prophet: add hercules-ci-agent 2022-03-31 19:43:17 +02:00
Max
2a3725af7a hosts/VEGAS: add hercules-ci-agent 2022-03-31 19:42:49 +02:00
Max
6555133984 VEGAS/minecraft: add instance for num 2022-03-25 21:32:30 +01:00
Max
80d5766eec services/meet: use a more common port to bypass outgoing firewalls 2022-03-18 19:24:49 +01:00
Max
4d1df18293 services/meet: use proper NAT address configuration 2022-03-18 19:24:14 +01:00
Max
54a8e04944 services/reflex: use all caches 2022-03-13 02:16:01 +01:00
Max
b15871d15f services/reflex: cleanup leftover file 2022-03-13 02:11:47 +01:00
Max
a4df66cba2 meta: style 2022-03-12 23:16:38 +01:00
Max
bd85de1d4f hosts/VEGAS: upgrade to Nextcloud 23 2022-03-12 18:27:39 +01:00
Max
260832637f hosts/VEGAS: new main storage 2022-03-12 13:53:00 +01:00
Max
f5f56a2f86 hosts/VEGAS: remove machines-storage 2022-03-11 14:46:40 +01:00
Max
a90f5ba92f services/mail: use aggressive fail2ban for postfix 2022-03-10 20:14:02 +01:00
Max
ac9f5f7522 services/mail: enable dovecot fail2ban 2022-03-10 19:47:15 +01:00
Max
e7ac9bb9b1 services/hydra: add github.com to allowed-uris 2022-03-01 22:55:57 +01:00
Max
8fb148697e VEGAS: remove janky Minecraft server 2022-02-26 15:08:35 +01:00
Max
90661a9a92 services/sips: wait for postgres 2022-02-26 14:59:47 +01:00
Max
8771355dd6 services/reflex: use reflex-cache package 2022-02-26 01:00:10 +01:00
Max
1de011fa23 services/reflex: move to prophet 2022-02-18 21:26:59 +01:00
Max
525aaa246b services/cdn-shield: move to prophet 2022-02-05 23:34:42 +01:00
Max
8d2963fe5c VEGAS/cdn-shield: use external domain 2022-02-05 23:21:32 +01:00
Max
6aa622c6c1 VEGAS/dns: slave for domain: imagine-using-oca.ml 2022-02-05 23:11:07 +01:00
Max
12b88d0015 hosts/prophet: enable hyprspace 2022-02-05 19:10:02 +01:00
Max
3f57cd9aa6 modules: extract hyprspace module 2022-02-05 19:09:56 +01:00
Max
7b065d47f0 meet: move service: VEGAS -> prophet 2022-02-05 17:13:22 +01:00
Max
58560480e7 hosts/prophet: enable IPFS 2022-02-05 17:13:22 +01:00
Max
699283c0ba modules: extract IPFS module 2022-02-05 17:13:22 +01:00
Max
8f69b14f66 hosts/prophet: init 2022-02-05 17:13:22 +01:00
Max
8088e4db39 meta: multi-arch support 2022-02-05 17:13:22 +01:00
Max
cc157090a8
Merge pull request #7 from privatevoid-net/pr-ipfs-pinning-service
SIPS: Simple IPFS pinning service
2022-02-05 17:09:41 +01:00
Max
4fbb8994bb
Merge pull request #6 from privatevoid-net/pr-reflex-cache
"Reflex" Nix IPFS cache
2022-02-05 17:08:16 +01:00