Commit graph

869 commits

Author SHA1 Message Date
3ea210e884 marukuru: tweak GitLab Puma settings for low-mem
Per the GitLab docs
(https://docs.gitlab.com/ee/install/requirements.html#puma-settings):

> If the operating system has a maximum 2 GB of memory, the recommended number
> of threads is 1. A higher value will result in excess swapping, and decrease
> performance.

and

> In a memory-constrained environment with less than 4GB of RAM available,
> consider disabling Puma Clustered mode.
>
> Configuring Puma by setting the amount of workers to 0 could reduce memory
> usage by hundreds of MB. For details on Puma worker and thread settings, see
> Puma settings.
2021-03-28 23:25:14 +00:00
a3ed8a6da3 hm: add ntfy everywhere 2021-03-28 23:08:02 +00:00
0b1ccae353 bvm-prosody: actually name depot... 2021-03-28 22:52:04 +00:00
a44b09fb46 bvm-twitterchiver: create twitterchiver user 2021-03-28 22:48:43 +00:00
5a3a55e302 bvm-prosody: add coturn 2021-03-28 22:46:55 +00:00
efe1aa51db bvm-twitterchiver: add postgresql 2021-03-28 22:46:44 +00:00
d32585bff6 bvm-ipfs: enable ipfs 2021-03-28 15:34:54 +00:00
fe4b95c532 gitlab-ci: block parent pipeline until child is complete
Without strategy: depend, the parent pipeline will succeed immediately after
triggering the child.  It's more useful to mirror the status, so the commit
status is rendered correctly.
2021-03-28 15:30:15 +00:00
2b8dce0920 depot-wide: overhaul GitLab CI configuration
We now use a stub configuration to kick off the pipeline, which is dynamically
generated using Nix config.
2021-03-28 15:27:46 +00:00
f8b4903286 bvm-prosody: add tailscale IP 2021-03-28 14:33:54 +00:00
2eeba92d9e bvm-twitterchiver: add tailscale IP 2021-03-28 14:32:16 +00:00
e6c56c9a74 bvm-ipfs: add tailscale IP 2021-03-28 14:00:25 +00:00
7979d936a4 ops/nixos: init bvm-{twitterchiver,prosody,ipfs} 2021-03-28 13:10:27 +00:00
f27a8f8f1a ops/nixos: mkBefore needs lib. in bvm.nix/blade.nix 2021-03-28 12:32:01 +00:00
f34d539462 bvm-nixosmgmt: condense down and abstract out 2021-03-28 12:26:11 +00:00
c1f450eb33 ops/nixos: flesh out DNS for internal blade IPs 2021-03-28 12:18:06 +00:00
0b60a516b4 bvm-nixosmgmt: actually change the hostname 2021-03-28 02:04:41 +00:00
ca02dda602 gitlab-ci: update for newer GitLab
We now have resource_groups, and environment.name. We don't yet have
environment.deployment_tier, though, but that can live in the base template and
be enabled once Heptapod is at GitLab 13.10.
2021-03-28 01:31:35 +00:00
701ab955af coredns: update serial for as205479.net 2021-03-28 01:16:10 +00:00
ea927a8c34 depot: make version build faster
We don't need the entire depot to get the build version.
2021-03-28 01:14:59 +00:00
b2e2f965c5 ops/nixos: rename various machines to comply with naming convention
* *-frantech should be frantech-*, it's provider first
* blade VMs now all begin bvm-
2021-03-28 00:34:36 +00:00
6a80243cce fup: add favicon and logo graphics 2021-03-27 20:54:40 +00:00
e4872918d5 fup: fix relative URLs in base template 2021-03-27 20:49:28 +00:00
5ddd41ac94 fup: add title to base template 2021-03-27 00:33:29 +00:00
d8e001922a fup: don't crash on view if we don't have a cheddar
Classic Go typed-nil bug.
2021-03-26 21:44:13 +00:00
fa086419c8 fup: allow for pasting text content from clipboard 2021-03-26 21:42:42 +00:00
6e539188ac fup: add paste handler for uploading things from the clipboard 2021-03-26 21:35:37 +00:00
017458ae2e bazel-run: back to Java 11, which is AdoptOpenJDK LTS 2021-03-26 03:52:35 +00:00
Default email
d0d8e8fc71 Project import generated by Copybara.
GitOrigin-RevId: d3f7e969b9860fb80750147aeb56dab1c730e756
2021-03-23 19:22:30 +00:00
8b173ec8a3 ci-root: remove windows for the moment 2021-03-25 18:27:40 +00:00
0e4894096a 3p/nixpkgs: openssl 1.1.1j->k 2021-03-25 17:30:22 +00:00
1883186bb8 hm/graphical-client: switch to google-chrome-beta from chromium 2021-03-25 10:54:01 +00:00
7b5ac688b8 fup: add test for disabled TokenAuthMiddleware 2021-03-23 01:31:42 +00:00
affe252f73 fup: fix config file handling
Whoops! Before, config files were being read but all the contents were basically
being discarded.

Now, we both load and actually use the config file, leading to a much more positive
experience for everyone involved :)
2021-03-23 01:21:39 +00:00
a99e0309c5 ops/nixos/fup: switch to using config file 2021-03-23 00:58:18 +00:00
8271714a18 fup: allow Fup-Token header for carrying auth credentials 2021-03-23 00:58:06 +00:00
dbd711ded8 fup: add TokenAuthMiddleware
This is an example middleware which can be used as an AuthMiddleware for only
allowing requests to non-view pages which are accompanied by an auth token via
HTTP basic auth.
2021-03-23 00:46:33 +00:00
d96cf3d34d fup/cmd/serve: add viper bindings for all the flags 2021-03-23 00:45:51 +00:00
5b74ceec4e fup: add auth middleware machinery
This allows clients to register an authentication middleware which will be
provided values in the context that it can use to make an authn/authz decision.
2021-03-23 00:45:28 +00:00
ccb7d81f1a fup: allow PUT without filename 2021-03-22 23:31:58 +00:00
48be007f79 fup: clear the file input when we start the upload
This prevents the back button from upload the same files *again*.
2021-03-22 19:33:03 +00:00
75afddacc4 fup/hashfs: actually hash the thing
This previous behaviour was to, instead of hashing the file, just return the
first few bytes of it, which is neither intuitive nor the behaviour I was
looking for.
2021-03-22 19:25:55 +00:00
11ed74003a nixos/fup: allow large file uploads 2021-03-22 13:56:16 +00:00
86d9292cd1 blade-tuvok: change fup to listen on wildcard
It's broken otherwise, since the default server is based on the incoming IP,
and the precise listed IPs are more tightly binding.
2021-03-22 13:46:28 +00:00
ff5ea120e5 blade-tuvok/fup: override listen IPs 2021-03-22 02:50:27 +00:00
ca642bfa5e blade-tuvok: add fup 2021-03-22 02:43:17 +00:00
b4e785af8a fup: fix minor issue with shorter-than-512 byte file uploads
Reader.Read is permitted to return EOF on short reads, which had not been
anticipated by this code. There's probably more instances of this lurking...
2021-03-22 02:42:34 +00:00
a9a437cee4 fup: add systemd socket activation support to fup serve 2021-03-22 02:41:59 +00:00
ba95046e84 fup: add additional mimetypes to pretty page 2021-03-22 01:09:00 +00:00
01fb49549b fup: add drag and drop uploads
There's no UI indication that this is happening yet, but...
2021-03-22 01:08:42 +00:00