|
5fb0285de2
|
VEGAS/fbi: use local mediamanagers group
|
2022-08-26 23:44:17 +02:00 |
|
|
4ae3618c0f
|
VEGAS/sso: remove expensive check
|
2022-08-25 23:04:41 +02:00 |
|
|
187a77b1e8
|
VEGAS/matrix: work around inaccurate assertions
|
2022-08-10 01:09:22 +02:00 |
|
|
5035bdaa09
|
VEGAS/database: disable postgres
|
2022-08-10 01:02:24 +02:00 |
|
|
2d9e5462a7
|
VEGAS/nextcloud: remove leftover postgres config
|
2022-08-10 01:01:49 +02:00 |
|
|
e038d8180d
|
VEGAS/matrix: use Patroni database, move dataDir
|
2022-08-10 00:31:17 +02:00 |
|
|
35189ed6de
|
VEGAS/gitlab: use Patroni database
|
2022-08-09 22:33:05 +02:00 |
|
|
0689f5586c
|
VEGAS/hydra: rekey DB credentials, use Patroni database
|
2022-08-09 22:03:48 +02:00 |
|
|
175d3c8b13
|
cluster/services/websites: init
|
2022-08-09 20:10:25 +02:00 |
|
|
3e1041ed85
|
VEGAS/fbi: start mediamanagement.slice after nss-user-lookup
|
2022-08-09 19:07:48 +02:00 |
|
|
5b4c240c80
|
VEGAS/nextcloud: restart setup service on failure
|
2022-08-08 23:15:08 +02:00 |
|
|
88b214bce1
|
VEGAS/matrix: fix CORS policy
|
2022-08-08 20:32:13 +02:00 |
|
|
50f689c2ec
|
VEGAS/matrix: switch to Cinny web client
|
2022-08-08 20:31:22 +02:00 |
|
|
0614be7afb
|
VEGAS/nextcloud: rekey secrets and move to Patroni database
|
2022-08-07 23:38:56 +02:00 |
|
|
df62cbfe93
|
VEGAS/sso: use Patroni database
|
2022-08-07 22:54:59 +02:00 |
|
|
06e2f36f5e
|
VEGAS/websites: remove unused
|
2022-08-07 21:59:54 +02:00 |
|
|
52459c42c1
|
cluster/services/acme-client: init
|
2022-08-07 21:06:17 +02:00 |
|
|
5356ba97c6
|
cluster/services/dns: init
|
2022-08-07 20:01:48 +02:00 |
|
|
bc2118ed45
|
VEGAS/websites: host stop-using-nix-env
|
2022-08-06 16:18:10 +02:00 |
|
|
90ac208ae7
|
VEGAS/websites: host landing page from packages
|
2022-08-06 00:46:37 +02:00 |
|
|
dc1cee54b6
|
VEGAS/monitoring: fix Prometheus targets
|
2022-08-04 01:10:11 +02:00 |
|
|
0ee7b151b3
|
hosts/prophet: enable SSS
|
2022-08-04 00:39:55 +02:00 |
|
|
232ff31ded
|
VEGAS/monitoring: adjust loki for new monitoring clients
|
2022-08-03 23:36:50 +02:00 |
|
|
c001885bab
|
VEGAS/fbi: use dedicated service accounts
|
2022-08-01 22:49:55 +02:00 |
|
|
ad9ccc5ff3
|
VEGAS/mail: postfix-setup: wait for networking
|
2022-08-01 22:21:24 +02:00 |
|
|
f1f819e92c
|
VEGAS/ipfs: fix typo
|
2022-08-01 21:52:35 +02:00 |
|
|
b4f6cdd697
|
VEGAS/ipfs: set IOSchedulingPriority
|
2022-08-01 21:52:19 +02:00 |
|
|
0304498986
|
VEGAS/ipfs: raise LimitNOFILE
|
2022-08-01 21:22:50 +02:00 |
|
|
52cff6f0c7
|
VEGAS/matrix: less log spam
|
2022-08-01 21:10:44 +02:00 |
|
|
0a4dd13316
|
Revert "packages/oauth2-proxy: patch keycloak token bug" and "modules/oauth2-proxy: use patched package"
Fix merged in version 7.3.0 upstream.
This reverts commit 1fb7853b52 .
This reverts commit e847db9dc0 .
|
2022-08-01 17:51:58 +02:00 |
|
|
453bca08b3
|
VEGAS/mc-num: use standard JRE
|
2022-07-31 22:57:46 +02:00 |
|
|
8d4fabf934
|
meta: reduce overlay usage
|
2022-07-31 22:36:07 +02:00 |
|
|
0178038278
|
VEGAS/database: disable unused MariaDB
|
2022-07-31 20:37:43 +02:00 |
|
|
e11484050d
|
VEGAS/blog: drop
|
2022-07-31 20:35:57 +02:00 |
|
|
06fb64bd9d
|
VEGAS/peering: switch to es1, rekey
|
2022-07-24 23:06:27 +02:00 |
|
|
d905231a6a
|
services/cdn-shield: optimize wttr.in caching
|
2022-07-11 21:51:13 +02:00 |
|
|
2fee49cf71
|
services/cdn-shield: provide wttr.in cache
|
2022-07-11 21:35:02 +02:00 |
|
|
183cd53e84
|
VEGAS/hydra: allow access to Sourcehut
|
2022-07-01 16:41:05 +02:00 |
|
|
80936c5694
|
services/searxng: enable JSON response format
|
2022-06-22 18:39:01 +02:00 |
|
|
91a29e5255
|
services/dns: add DNS-over-TLS resolver
|
2022-06-19 14:04:46 +02:00 |
|
|
303532b2fb
|
services/sso: add tracing
|
2022-06-19 00:16:25 +02:00 |
|
|
60fca938fb
|
services/monitoring: enable node graph and service graph
|
2022-06-18 23:24:12 +02:00 |
|
|
b39418084f
|
services/monitoring: enable experimental Grafana tracing features
|
2022-06-18 22:33:30 +02:00 |
|
|
929262f400
|
services/monitoring: loki-grpc on localhost
|
2022-06-18 22:10:57 +02:00 |
|
|
4ab8e32e94
|
packages/grafana: 8.5.6 -> 9.0.0
|
2022-06-18 21:50:27 +02:00 |
|
|
6458dd76ef
|
services/monitoring: enable trace searching
|
2022-06-18 21:03:04 +02:00 |
|
|
b16fbed8a3
|
services/monitoring: tempo: run as tempo user
|
2022-06-18 20:53:08 +02:00 |
|
|
cefabc1e93
|
services/{monitoring,ipfs}: tracing: use port-magic v2
|
2022-06-18 20:21:13 +02:00 |
|
|
4a00c891af
|
Merge branch 'tracing'
|
2022-06-18 20:11:51 +02:00 |
|
|
df43950cb7
|
VEGAS/containers@soda: wait for the vmdefault interface
|
2022-06-18 19:48:22 +02:00 |
|
|
cf9afa3042
|
services/mail: postfix: wait for primary interface
|
2022-06-18 19:42:27 +02:00 |
|
|
cf713a6a9e
|
services/sips: remove
|
2022-06-18 18:51:27 +02:00 |
|
|
6c3b268306
|
Merge branch 'updates-20220618'
|
2022-06-18 18:51:27 +02:00 |
|
|
35e3bb3e49
|
services/gitlab: gitlab-runner: wait for gitlab.target
|
2022-06-18 18:51:27 +02:00 |
|
|
ed8e11c6f4
|
services/dns: coredns: wait for vstub
|
2022-06-18 18:51:27 +02:00 |
|
|
376697ecae
|
services/monitoring: loki: wait for hyprspace
|
2022-06-18 18:51:27 +02:00 |
|
|
9911767ec1
|
VEGAS/containers@soda: wait for libvirtd
|
2022-06-18 18:51:27 +02:00 |
|
|
5a3d67e6da
|
services/mail: postfix: wait for vstub
|
2022-06-18 18:18:39 +02:00 |
|
|
26ab120eaa
|
services/mail: use addresses from hosts config
|
2022-06-18 17:26:32 +02:00 |
|
|
59d5f9d884
|
treewide: implement port-magic v2
|
2022-06-18 02:44:51 +02:00 |
|
|
3ff51f2f13
|
VEGAS/ipfs: log traces to Tempo
|
2022-06-17 21:29:22 +02:00 |
|
|
a6f613dc31
|
services/monitoring: add tracing via Grafana Tempo
|
2022-06-17 21:22:47 +02:00 |
|
|
12bec01363
|
services/fbi: add fbi-index
|
2022-06-08 21:03:18 +02:00 |
|
|
282d2666cc
|
services/meet: disable video by default
|
2022-06-07 19:10:33 +02:00 |
|
|
e847db9dc0
|
modules/oauth2-proxy: use patched package
|
2022-06-07 18:39:37 +02:00 |
|
|
8c72443ab1
|
services/monitoring: Reduce Loki log spam
|
2022-05-31 21:28:03 +02:00 |
|
|
0c8612149e
|
services/monitoring: Fix Loki frontend address
|
2022-05-31 21:27:31 +02:00 |
|
|
21730a2365
|
services/matrix: log to main journal namespace
|
2022-05-31 21:17:22 +02:00 |
|
|
a43f3fda01
|
services/sso: check keycloak
|
2022-05-31 11:48:07 +02:00 |
|
|
4c45c05465
|
modules/redis: listen on default port
|
2022-05-31 10:23:57 +02:00 |
|
|
90387c419d
|
services/blog: wait for mysql
|
2022-05-31 10:17:53 +02:00 |
|
|
3d64a7e429
|
services/dns: remove dnssec-enable
|
2022-05-31 09:38:48 +02:00 |
|
|
e8fdf82b9a
|
modules/redis: modify config for 22.05
|
2022-05-31 09:19:10 +02:00 |
|
|
39c7d1acf6
|
services/nextcloud: nextcloud23 -> nextcloud24
|
2022-05-31 09:19:10 +02:00 |
|
|
2ba609fdb5
|
services/api: modify config for 22.05
|
2022-05-31 09:19:10 +02:00 |
|
|
45351f77da
|
modules/nginx: modify config for 22.05
|
2022-05-31 09:19:10 +02:00 |
|
|
27826f48e0
|
modules/mysql: modify config for 22.05
|
2022-05-31 09:19:10 +02:00 |
|
|
399fb4b5d8
|
services/matrix: modify config for 22.05
|
2022-05-31 09:19:10 +02:00 |
|
|
e223885972
|
services/sso: modify config for 22.05
|
2022-05-31 09:19:10 +02:00 |
|
|
a496f5311b
|
services/meet: log to main journal namespace
|
2022-05-29 14:44:34 +02:00 |
|
|
551c6739a4
|
soda: fix package installation
|
2022-05-28 22:00:08 +02:00 |
|
|
37258071e7
|
services/backbone-routing: forward soda container
|
2022-05-28 21:56:37 +02:00 |
|
|
2abaa859ab
|
soda: add all the ASCII art
|
2022-05-28 21:54:50 +02:00 |
|
|
8d56f4aeb2
|
soda: custom shell profile
|
2022-05-28 21:54:12 +02:00 |
|
|
bcf8a9ba96
|
hosts/VEGAS: run soda container
|
2022-05-28 21:53:15 +02:00 |
|
|
5b01d00114
|
hosts/soda: init
|
2022-05-28 21:53:03 +02:00 |
|
|
63eaced3a7
|
services/sso: use standard JRE
|
2022-05-27 18:31:00 +02:00 |
|
|
afe2fd64ed
|
services/warehouse: only use required OpenGL drivers
|
2022-05-27 18:15:34 +02:00 |
|
|
a1d67266ca
|
modules/virtualisation: use qemu_kvm package
|
2022-05-27 18:15:34 +02:00 |
|
|
6a588b3853
|
services/minecraft/num: use standard JRE
|
2022-05-27 18:13:34 +02:00 |
|
|
1872b092ec
|
services/dns: use stevenblack-hosts package
|
2022-05-27 01:15:21 +02:00 |
|
|
a547aa2fdd
|
services/object-storage: fix console redirect
|
2022-05-26 23:59:29 +02:00 |
|
|
77759e449c
|
services/object-storage: use OpenID
|
2022-05-26 23:59:29 +02:00 |
|
|
bcc2f53914
|
services/object-storage: use built-in console
|
2022-05-26 23:59:29 +02:00 |
|
|
a370fd5436
|
services/searxng: use dark theme by default
|
2022-05-26 20:16:24 +02:00 |
|
|
bb566a7b27
|
services/searxng: disable engines by default: bing, brave
|
2022-05-26 19:14:25 +02:00 |
|
|
2052458c5c
|
services/searxng: use Mullvad SOCKS proxies
|
2022-05-26 18:12:01 +02:00 |
|
|
349bd0d307
|
services/backbone-routing: add Mullvad connection
|
2022-05-26 18:09:26 +02:00 |
|
|
70dcacf828
|
hosts/VEGAS: load dm-raid1
|
2022-05-26 00:13:09 +02:00 |
|
|
99a011514f
|
services/searxng: disable logging
|
2022-05-25 20:50:55 +02:00 |
|
|
09f3f85a6b
|
services/searxng: init
|
2022-05-25 20:50:55 +02:00 |
|
|
54116aafea
|
services/websites: host ky.rip
|
2022-05-21 13:56:56 +02:00 |
|
|
31b8a989fa
|
modules/fail2ban: increase findtime to 12h
|
2022-05-18 22:39:40 +02:00 |
|
|
b012ca1964
|
modules/fail2ban: global dynamic bantime
|
2022-05-17 10:40:35 +02:00 |
|
|
256118c2b4
|
enable nix-builder
|
2022-05-16 23:13:57 +02:00 |
|
|
5f13c5eb49
|
services/mail: use dynamically increasing fail2ban bantime for postfix
|
2022-05-16 19:11:53 +02:00 |
|
|
917aec5b3a
|
services/monitoring: allow WebSocket connections
|
2022-05-16 00:11:36 +02:00 |
|
|
0cd40f0f47
|
VEGAS/ipfs: expose metrics
|
2022-05-16 00:10:58 +02:00 |
|
|
1d32eb782e
|
modules/nginx: log to syslog in logfmt format
|
2022-05-16 00:10:14 +02:00 |
|
|
0249ecdcc3
|
services/monitoring: add Loki
|
2022-05-16 00:09:07 +02:00 |
|
|
243b91babf
|
services/meet: enable monitoring
|
2022-05-15 00:35:02 +02:00 |
|
|
7c72acee59
|
hosts/VEGAS: add monitoring service
|
2022-05-15 00:34:09 +02:00 |
|
|
e3887d0573
|
service/wireguard-server: bypass firewalls
|
2022-05-03 09:16:21 +02:00 |
|
|
3268921a92
|
hosts/VEGAS: replace OpenVPN with WireGuard
|
2022-04-28 23:47:23 +02:00 |
|
|
fd7ae38e66
|
hosts/VEGAS: add uptime-kuma
|
2022-04-27 22:08:49 +02:00 |
|
|
f81493f0c8
|
hosts/prophet: Oracle VCN fuckup
|
2022-04-14 19:13:46 +02:00 |
|
|
b2175bd0dc
|
services/meet: bypass firewalls yet again
|
2022-04-08 14:42:14 +02:00 |
|
|
e6070763fc
|
hosts/prophet: add hercules-ci-agent
|
2022-03-31 19:43:17 +02:00 |
|
|
2a3725af7a
|
hosts/VEGAS: add hercules-ci-agent
|
2022-03-31 19:42:49 +02:00 |
|
|
6555133984
|
VEGAS/minecraft: add instance for num
|
2022-03-25 21:32:30 +01:00 |
|
|
80d5766eec
|
services/meet: use a more common port to bypass outgoing firewalls
|
2022-03-18 19:24:49 +01:00 |
|
|
4d1df18293
|
services/meet: use proper NAT address configuration
|
2022-03-18 19:24:14 +01:00 |
|
|
54a8e04944
|
services/reflex: use all caches
|
2022-03-13 02:16:01 +01:00 |
|
|
b15871d15f
|
services/reflex: cleanup leftover file
|
2022-03-13 02:11:47 +01:00 |
|
|
a4df66cba2
|
meta: style
|
2022-03-12 23:16:38 +01:00 |
|
|
bd85de1d4f
|
hosts/VEGAS: upgrade to Nextcloud 23
|
2022-03-12 18:27:39 +01:00 |
|
|
260832637f
|
hosts/VEGAS: new main storage
|
2022-03-12 13:53:00 +01:00 |
|
|
f5f56a2f86
|
hosts/VEGAS: remove machines-storage
|
2022-03-11 14:46:40 +01:00 |
|
|
a90f5ba92f
|
services/mail: use aggressive fail2ban for postfix
|
2022-03-10 20:14:02 +01:00 |
|
|
ac9f5f7522
|
services/mail: enable dovecot fail2ban
|
2022-03-10 19:47:15 +01:00 |
|
|
e7ac9bb9b1
|
services/hydra: add github.com to allowed-uris
|
2022-03-01 22:55:57 +01:00 |
|
|
8fb148697e
|
VEGAS: remove janky Minecraft server
|
2022-02-26 15:08:35 +01:00 |
|
|
90661a9a92
|
services/sips: wait for postgres
|
2022-02-26 14:59:47 +01:00 |
|
|
8771355dd6
|
services/reflex: use reflex-cache package
|
2022-02-26 01:00:10 +01:00 |
|
|
1de011fa23
|
services/reflex: move to prophet
|
2022-02-18 21:26:59 +01:00 |
|
|
525aaa246b
|
services/cdn-shield: move to prophet
|
2022-02-05 23:34:42 +01:00 |
|
|
8d2963fe5c
|
VEGAS/cdn-shield: use external domain
|
2022-02-05 23:21:32 +01:00 |
|
|
6aa622c6c1
|
VEGAS/dns: slave for domain: imagine-using-oca.ml
|
2022-02-05 23:11:07 +01:00 |
|
|
12b88d0015
|
hosts/prophet: enable hyprspace
|
2022-02-05 19:10:02 +01:00 |
|
|
3f57cd9aa6
|
modules: extract hyprspace module
|
2022-02-05 19:09:56 +01:00 |
|
|
7b065d47f0
|
meet: move service: VEGAS -> prophet
|
2022-02-05 17:13:22 +01:00 |
|
|
58560480e7
|
hosts/prophet: enable IPFS
|
2022-02-05 17:13:22 +01:00 |
|
|
699283c0ba
|
modules: extract IPFS module
|
2022-02-05 17:13:22 +01:00 |
|
|
8f69b14f66
|
hosts/prophet: init
|
2022-02-05 17:13:22 +01:00 |
|
|
8088e4db39
|
meta: multi-arch support
|
2022-02-05 17:13:22 +01:00 |
|
|
cc157090a8
|
Merge pull request #7 from privatevoid-net/pr-ipfs-pinning-service
SIPS: Simple IPFS pinning service
|
2022-02-05 17:09:41 +01:00 |
|
|
4fbb8994bb
|
Merge pull request #6 from privatevoid-net/pr-reflex-cache
"Reflex" Nix IPFS cache
|
2022-02-05 17:08:16 +01:00 |
|
|
02c571a1cd
|
Merge pull request #5 from privatevoid-net/pr-matrix-dimension
VEGAS/matrix: use Dimension integrations
|
2022-02-05 17:08:00 +01:00 |
|
|
786afc3969
|
VEGAS/matrix: use Dimension integrations
|
2022-02-04 00:16:31 +01:00 |
|
|
16283ae286
|
VEGAS/ipfs: tune IO performance
|
2022-02-04 00:16:00 +01:00 |
|