Commit graph

244 commits

Author SHA1 Message Date
deployer@localhost
25372154af nix/pkgs/plex-pass: update version to 1.23.5.4862-0f739d462 2021-07-27 02:10:57 +00:00
a911a1f1be rundeck-bin: update to 3.4.1 2021-07-24 21:58:12 +01:00
2b9e07816b nix/pkgs/mercurial: drop pygit2, add hg-git 2021-07-03 10:28:34 +00:00
4ef3d2a8e6 lightspeed-react: fix for new nixpkgs 2021-06-29 23:07:32 +00:00
bd8cb149bc nix/pkgs/prometheus-snmp-config: fix hash 2021-05-22 00:51:55 +00:00
bdc009d86b nix/pkgs/prometheus-snmp-config: update hash 2021-05-22 00:46:14 +00:00
7b38430804 nix/pkgs/crane: update hash??? 2021-05-22 00:40:18 +00:00
47542c16e3 django-tailwind: 1.1.0 -> 2.0.1 2021-04-29 12:08:13 +00:00
fd2b47acf9 copybara: pin to jdk11 2021-04-18 13:54:14 +00:00
bc41ac0d88 nix/pkgs/plex-pass: update to 1.22.2.4282-a97b03fad 2021-04-11 03:23:55 +00:00
a2f95ffba2 nix/pkgs/plex-pass: convert to SRI for nix-update 2021-04-11 02:16:12 +00:00
db82683461 nix/pkgs/plex-pass: reorganise to make more nix-update friendly 2021-04-11 02:13:51 +00:00
e088dac620 nix/pkgs/rundeck-bin: fix 2021-04-10 22:25:28 +00:00
e0241545d2 add mercurial to rundeck path 2021-04-10 22:17:28 +00:00
15ed0197e3 rundeck: run as deployer 2021-04-10 21:59:29 +00:00
88e7bd85ed nix/pkgs/rundeck-bin: change wrapper to name 'rundeckd' 2021-04-10 17:26:42 +00:00
00cb06aff2 bvm-nixosmgmt: add rundeck 2021-04-10 17:20:35 +00:00
9c1c7ec985 nix/pkgs/rundeck-bin: init 2021-04-10 17:05:21 +00:00
0943931a6a nix/pkgs: remove pomerium, it's upstream now 2021-04-07 00:41:20 +00:00
13f2f79e6d graphical-client: add wallpapers
If I find more I like, I'll add them here, I guess. For the moment, there's
just the one.
2021-04-06 09:53:56 +01:00
f5622acaf7 nix/pkgs/flameshot: bump to my patched version 2021-04-05 14:57:59 +01:00
e11229d070 nix/pkgs: init my flameshot fork 2021-04-05 12:40:55 +01:00
017458ae2e bazel-run: back to Java 11, which is AdoptOpenJDK LTS 2021-03-26 03:52:35 +00:00
7273c31af5 nix/pkgs/pomerium: allow unitless 0 2021-03-14 14:40:54 +00:00
36577c5bba nix/pkgs/pomerium: add timeouts to policy 2021-03-14 14:38:56 +00:00
a71f4a47f9 nix/pkgs: add prometheus-snmp-config 2021-03-14 00:51:11 +00:00
4649556303 alertmanager-discord: init 2021-02-23 00:16:49 +00:00
0a38f01047 nix/pkgs/plex-pass: update to 1.21.4.4054 2021-02-21 03:18:53 +00:00
d8c29b0113 nix/pkgs: remove stdenv.lib from non-generated code 2021-02-13 13:56:02 +00:00
7558697bba nix/pkgs/unifi-hack: update 2021-02-07 23:39:46 +00:00
89e37ba633 nix/pkgs: enigma: init 2021-02-07 23:17:51 +00:00
efdf61b4e6 3p/nixpkgs: fix buildBazelPackage 2021-02-07 22:51:09 +00:00
78040f6c94 nix/pkgs: init hp-rom; add to netboot 2021-01-30 18:47:01 +00:00
b6a1403c04 nix/pkgs: add windows ISOs in prep for doing stuff with them for iPXE 2021-01-30 17:15:16 +00:00
ca27848285 web/quotes: add tailwind 2021-01-20 02:04:30 +00:00
c62b596078 nix/pkgs: remove envoy 2021-01-19 03:56:14 +00:00
1d41593ae2 nix/pkgs: add newer version of django-allauth 2021-01-19 03:51:07 +00:00
47c6327b4d nix/pkgs/copybara: switch to JDK15 after nixpkgs update 2021-01-11 17:44:05 +00:00
1e8eec28b1 nix/pkgs/sheepshaver: ensure STDC_HEADERS is set 2021-01-07 11:48:18 +00:00
0c713bbf64 nix/pkgs/envoy: fix under new nixpkgs 2021-01-07 11:28:45 +00:00
85c2c4d507 unifiHack: init
This package takes the upstream Unifi package, and then applies a AspectJ
aspect which replaces the auth logic with stuff which checks whether there's a
Pomerium header.
2021-01-04 20:49:04 +00:00
2d52be000f tiny-remapper: init 2021-01-04 20:48:20 +00:00
87e7dae108 nix/pkgs/lightspeed-react: add websocketURL parameter 2021-01-04 15:51:00 +00:00
c0245a68ca lightspeed-react: init 2021-01-04 15:05:55 +00:00
d629a3561c lightspeed-webrtc: init 2021-01-04 15:05:46 +00:00
294e7731d6 lightspeed-ingest: init 2021-01-04 15:05:32 +00:00
eb9d9f54a5 nix/pkgs/grafana-plugins: rework a bit 2020-12-30 03:30:24 +00:00
ca4f3c0013 nix/pkgs/grafana-plugins: init 2020-12-30 02:43:10 +00:00
26e379dfb7 depot-wide: create logged-out.int.lukegb.com 2020-12-30 00:57:53 +00:00
7d0493cacd deluge: patch deluge-web to try logging in with a fixed password first 2020-12-28 20:04:27 +00:00
9fc4be6a9c nix/pkgs/plex-pass: update to 1.21.1.3830 2020-12-28 19:45:14 +00:00
784138746f pomerium: document all known pomerium options as nixos module options 2020-12-28 18:54:00 +00:00
8956bc3207 pomerium: use /var/lib/pomerium for autocert state 2020-12-28 17:12:06 +00:00
8ed1d0665e pomerium: unbreak LuaJIT 2020-12-28 17:04:31 +00:00
41bdeda58a pomerium: various fixups to make this work 2020-12-28 15:27:18 +00:00
10c6ddc4c9 etheroute-lon01: install pomerium 2020-12-28 14:08:24 +00:00
f8031ab38c nix/pkgs/pomerium: move to separate folder 2020-12-28 12:20:51 +00:00
d4b439c523 nix/pkgs/pomerium: move envoy zip appending to postFixup phase
This ensures that we don't immediately remove it (because strip will otherwise
just strip it because it's trailing content).
2020-12-27 19:49:02 +00:00
a991f3dca9 nix/pkgs: init pomerium 2020-12-27 19:24:22 +00:00
483786f792 nix/pkgs: init envoy 2020-12-27 18:58:58 +00:00
f6428191cf nix/pkgs/javaws-env: patch JRE to enable RC4/SSLv3 2020-12-26 23:36:15 +00:00
dd27953d33 nix/pkgs: add intermec-cups-driver 2020-12-19 19:25:42 +00:00
8db16c9c60 erbium: fix derivation 2020-11-30 23:39:21 +00:00
8ff8546339 erbium: switch to using crate2nix from upstream 2020-11-30 19:41:39 +00:00
185ef2a819 plex-pass: update to debian, 1.21.0.3616 2020-11-30 19:34:08 +00:00
6d10a1cb0c nix/pkgs: init sheepshaver 2020-11-15 21:23:53 +00:00
d6f36cf247 nix/pkgs/erbium: sigh 2020-11-06 05:08:47 +00:00
fb6544f158 nix/pkgs: init python-emv at 1.0.9 2020-11-05 00:44:17 +00:00
46896bc2ed nix/pkgs/erbium: update deps hash 2020-11-04 18:59:36 +00:00
1c1152c874 erbium: update depsHash 2020-11-01 21:45:24 +00:00
75aef1e3ca nix/pkgs: add erbium 2020-11-01 21:22:52 +00:00
7b80b817dd copybara: depend on jdk14_headless instead of 'headful' jre 2020-10-18 13:26:29 +00:00
d0e40e4a6b nix/pkgs: add crane 2020-10-04 02:33:44 +01:00
225dfdc114 misc: fix up reuse lint 2020-10-04 01:08:07 +01:00
7b53535355 misc: fix up after nixpkgs update 2020-09-30 17:39:34 +00:00
9f90e567f2 nix/pkgs: update plex-pass 2020-09-04 16:54:53 +00:00
6b2df5840e nix/pkgs/copybara: update for new nixpkgs 2020-07-19 18:11:09 +01:00
218815e877 nix/pkgs: remove oven-media-engine
It's upstream now.
2020-07-19 17:57:33 +01:00
60f322d4a6 oven-media-engine: init at 0.10.4 2020-07-12 10:51:57 +00:00
f3d1fee59d nix/pkgs: add bazel-run userenv 2020-06-16 09:39:54 +01:00
48011ebba9 licensing: Apache-2.0, make almost reuse-lint clean 2020-06-07 15:03:12 +01:00
15c82b0498 local repo fixups after bump of nixpkgs 2020-06-06 13:12:39 +01:00
7100a39ee3 nix/pkgs/plexpass: update to 1.19.4.2902 2020-06-06 00:37:51 +00:00
abbbc2c216 hg-git: add 0.9.0a1 for py3, and use that 2020-05-17 03:23:54 +01:00
d796fe1dfd nix/pkgs: fix up copybara/secretsync for new nixpkgs 2020-05-16 19:20:59 +01:00
9b64e2c361 nix/pkgs/copybara: create 2020-05-16 16:37:45 +01:00
823eab4775 secretsync: escape $ in variable content
GitLab doesn't treat $ as literals in file content, which means that it
tries to do variable interpolation.

This is bad and annoying, because e.g. password hashes tend to contain $,
so they get variable-interpolated and thus corrupted.

Fix this by escaping $ on input to GitLab.
2020-05-10 12:11:26 +01:00
91d742c1cd gitlab-ci: try and get deploys works 2020-05-09 23:49:32 +01:00
a9cb53fa16 secretsync: add concept of manifest variable
This is a file-type variable which contains the original mapping of
VARIABLE_NAME to VARIABLE_DATA.

This can be used to automatically repopulate a repository with
secrets that were originally taken from it and transmitted via
GitLab variables (i.e. out-of-band).
2020-05-09 14:26:54 +01:00
ed8c77a9c6 heptapod-runner: make sure our wrapped Mercurial is on the PATH 2020-05-09 13:22:49 +01:00
6266b42b66 secretsync: add
This is a helper utility for syncing filesystem files into GitLab variables, for
deploy-time secrets.
2020-05-09 12:45:13 +01:00
5b96c181b2 heptapod-runner: add derivation 2020-05-09 01:10:49 +01:00
25956f7607 clouvider-fra01: add Plex Pass media server. 2020-05-06 10:02:00 +01:00
79c7b70a96 porcorosso: add javaws bin that drops into a FHS env.
This allows me to use Supermicro's BMC, which appears to drop a
stunnel binary into /tmp and then execute it, which doesn't work
properly in Nix because nothing is where it is expected to be.
2020-05-06 10:01:46 +01:00