Commit graph

807 commits

Author SHA1 Message Date
3c7f759773 blade-paris/blade-tuvok: change v4/v6 announcements 2021-03-29 12:06:39 +00:00
b559512200 blade-paris/blade-tuvok: add BGP config 2021-03-29 11:47:44 +00:00
3ea210e884 marukuru: tweak GitLab Puma settings for low-mem
Per the GitLab docs
(https://docs.gitlab.com/ee/install/requirements.html#puma-settings):

> If the operating system has a maximum 2 GB of memory, the recommended number
> of threads is 1. A higher value will result in excess swapping, and decrease
> performance.

and

> In a memory-constrained environment with less than 4GB of RAM available,
> consider disabling Puma Clustered mode.
>
> Configuring Puma by setting the amount of workers to 0 could reduce memory
> usage by hundreds of MB. For details on Puma worker and thread settings, see
> Puma settings.
2021-03-28 23:25:14 +00:00
a3ed8a6da3 hm: add ntfy everywhere 2021-03-28 23:08:02 +00:00
0b1ccae353 bvm-prosody: actually name depot... 2021-03-28 22:52:04 +00:00
a44b09fb46 bvm-twitterchiver: create twitterchiver user 2021-03-28 22:48:43 +00:00
5a3a55e302 bvm-prosody: add coturn 2021-03-28 22:46:55 +00:00
efe1aa51db bvm-twitterchiver: add postgresql 2021-03-28 22:46:44 +00:00
d32585bff6 bvm-ipfs: enable ipfs 2021-03-28 15:34:54 +00:00
2b8dce0920 depot-wide: overhaul GitLab CI configuration
We now use a stub configuration to kick off the pipeline, which is dynamically
generated using Nix config.
2021-03-28 15:27:46 +00:00
f8b4903286 bvm-prosody: add tailscale IP 2021-03-28 14:33:54 +00:00
2eeba92d9e bvm-twitterchiver: add tailscale IP 2021-03-28 14:32:16 +00:00
e6c56c9a74 bvm-ipfs: add tailscale IP 2021-03-28 14:00:25 +00:00
7979d936a4 ops/nixos: init bvm-{twitterchiver,prosody,ipfs} 2021-03-28 13:10:27 +00:00
f27a8f8f1a ops/nixos: mkBefore needs lib. in bvm.nix/blade.nix 2021-03-28 12:32:01 +00:00
f34d539462 bvm-nixosmgmt: condense down and abstract out 2021-03-28 12:26:11 +00:00
c1f450eb33 ops/nixos: flesh out DNS for internal blade IPs 2021-03-28 12:18:06 +00:00
0b60a516b4 bvm-nixosmgmt: actually change the hostname 2021-03-28 02:04:41 +00:00
701ab955af coredns: update serial for as205479.net 2021-03-28 01:16:10 +00:00
b2e2f965c5 ops/nixos: rename various machines to comply with naming convention
* *-frantech should be frantech-*, it's provider first
* blade VMs now all begin bvm-
2021-03-28 00:34:36 +00:00
1883186bb8 hm/graphical-client: switch to google-chrome-beta from chromium 2021-03-25 10:54:01 +00:00
a99e0309c5 ops/nixos/fup: switch to using config file 2021-03-23 00:58:18 +00:00
11ed74003a nixos/fup: allow large file uploads 2021-03-22 13:56:16 +00:00
86d9292cd1 blade-tuvok: change fup to listen on wildcard
It's broken otherwise, since the default server is based on the incoming IP,
and the precise listed IPs are more tightly binding.
2021-03-22 13:46:28 +00:00
ff5ea120e5 blade-tuvok/fup: override listen IPs 2021-03-22 02:50:27 +00:00
ca642bfa5e blade-tuvok: add fup 2021-03-22 02:43:17 +00:00
787b04737e treewide: add some SPDX headers 2021-03-20 20:46:56 +00:00
35cc195717 common: remove everything from hosts files 2021-03-20 16:42:08 +00:00
99dce2de2a as205479.net: add totoro.int 2021-03-20 16:41:26 +00:00
33fd1da091 dns: add blades to zone 2021-03-20 15:22:09 +00:00
4c78164384 ops/nixos/common: set search domains 2021-03-20 15:01:28 +00:00
5cf89fbc2f switch-prebuilt: check for existence before nix copy 2021-03-20 13:37:08 +00:00
422c47c3e0 switch-prebuilt: run stuff assuming we're a trusted-user 2021-03-20 13:22:17 +00:00
be5eee48b3 switch-prebuilt: init 2021-03-20 12:39:23 +00:00
154db9706a lib/common: add deployer to trustedUsers 2021-03-20 12:34:01 +00:00
7737f962a9 marukuru/deployer: add jq somewhere more sensible 2021-03-20 12:17:41 +00:00
d8086e7042 ops/nixos: add jq everywhere 2021-03-20 12:11:45 +00:00
705bcd9446 marukuru/deployer: add jq 2021-03-20 11:57:21 +00:00
627c8bf17c lib/coredns: fix firewall 2021-03-20 02:06:08 +00:00
b0a6ebe52d ops/nixos: add coredns 2021-03-20 02:03:23 +00:00
7f27f9fb79 tuvok/paris: enable keepalived 2021-03-20 01:08:33 +00:00
c51e5d478d lib/common: add --delete-older-than 2021-03-19 21:29:54 +00:00
9036f02fd0 blade-tuvok: allow 80/443 2021-03-19 21:27:42 +00:00
9ddb5d75f2 blade: restrict ceph firewall rules to storage network 2021-03-19 21:27:15 +00:00
4f5f2a780a nixos-mgmt: init 2021-03-19 20:28:24 +00:00
3f3c92addc blade-tuvok: serve objdump directly 2021-03-19 19:45:03 +00:00
10c7ee76b3 {las,lux,nyc}01-frantech: add tailscale IPs 2021-03-19 16:16:06 +00:00
0f0f61f2df installcd: add to ci-root; tweak store 2021-03-19 01:19:14 +00:00
db1b568d63 {lux,las,nyc}01-frantech: init 2021-03-19 01:11:37 +00:00
c26a321f5f home-manager: drop enableVaapi 2021-03-18 23:56:25 +00:00
4a381f03d3 ops/nixos: create installcd 2021-03-18 23:51:38 +00:00
665dc16239 etheroute-lon01: bump timeout, which is just 'timeout' 2021-03-18 23:50:54 +00:00
04a7792ad1 totoro: add NodeExporterDown alerts 2021-03-15 01:25:19 +00:00
dc2fb8e2b1 totoro: add power use alerts for blade system 2021-03-15 01:20:26 +00:00
238d3ad7a8 totoro: add pushover alertmanager output 2021-03-15 00:58:37 +00:00
c682fc0422 blade: fix serial console 2021-03-14 17:39:07 +00:00
bb1178e82c blade: enable serial console for GRUB and boot 2021-03-14 17:34:08 +00:00
ff2be56561 blade: disable coredump writing 2021-03-14 17:25:03 +00:00
f3c5990de4 blade: nit: forgot a ) 2021-03-14 15:56:58 +00:00
22dadde50a blade-torres: remap en-storage onto a vlan 2021-03-14 15:52:53 +00:00
b3def9be96 ceph: add /var/lib/ceph mount 2021-03-14 14:35:36 +00:00
22cb1575b4 ceph: set up storage network 10.100.2.0/24 2021-03-14 14:35:32 +00:00
a51b864d0d etheroute-lon01: set more finegrained timeouts 2021-03-14 13:00:37 +00:00
da6c3854bd etheroute-lon01: move to objdump.zxcvbnm.ninja 2021-03-14 11:46:05 +00:00
38e34e2210 etheroute-lon01: add objdump.lukegb.com 2021-03-14 11:44:17 +00:00
f300882cea ixvm-fra01: delete 2021-03-14 02:04:09 +00:00
dc68fb7305 blade: correct IP 2021-03-14 02:01:42 +00:00
74fd32c0b8 ops/nixos/blade: switch mon IPs in config 2021-03-14 01:23:24 +00:00
b51cf06282 totoro: prometheus: remove valveindexinstock, add snmp 2021-03-14 01:13:37 +00:00
a763c85e3d blade: allow tailscale 41641/udp 2021-03-13 20:58:43 +00:00
e979f4e83e blade: move journald storage to volatile 2021-03-13 20:57:04 +00:00
82655bcb8a porcorosso: remove /home/lukegb/mnt 2021-03-13 20:56:57 +00:00
2f183e56dd ops/nixos: fix systemPathJSON by using writeText instead of toFile 2021-03-13 17:05:49 +00:00
b01c15b85f ops/nixos: make systems.json refer to the actual paths 2021-03-13 17:02:13 +00:00
9df7818dc5 ops/nixos: add systemPathJSON
This is a file which contains a mapping of system name to their store path, to
allow for easier retrieval from GCS.
2021-03-13 16:57:28 +00:00
cd29df194a blade-paris: set default gateway for final resting place 2021-03-13 16:41:21 +00:00
b2a085f84c ops/nixos/blade: enable NAT on routers 2021-03-13 16:41:05 +00:00
53b7ca1c8a ops/nixos: revamp blade network config 2021-03-12 14:47:08 +00:00
b014ef780b clouvider-lon01: give minotarproxy more IPs 2021-03-01 17:16:06 +00:00
7cd70420c6 blade-janeway: fix interfaces 2021-02-25 12:29:05 +00:00
a7094217ba blade: tweak networking 2021-02-24 19:58:15 +00:00
e6c0cdc415 totoro: fix up valve index alerting 2021-02-23 01:07:33 +00:00
dc996b324b totoro: add valveindexinstock 2021-02-23 00:16:41 +00:00
7c4334591a kusakabe: disable send-proxy-v2 for openshift 2021-02-17 04:33:08 +00:00
5018ba70cd home-manager/common: add iotop/iftop 2021-02-14 21:40:41 +00:00
caea9c19c4 lib/blade: mount boot drive to /boot 2021-02-13 16:07:33 +00:00
2596579835 lib/blade: add a ceph-osd-lvm-activate to prep the OSDs 2021-02-13 16:29:18 +00:00
0b865c968e porcorosso: add lukegb to video group 2021-02-13 13:55:28 +00:00
6c9b15e908 porcorosso: enable acpilight 2021-02-13 13:50:13 +00:00
93b5d2c288 ops/nixos: enable ceph in libvirtd 2021-02-11 02:21:59 +00:00
a484168097 lib/blade: add ceph support to libvirtd 2021-02-11 00:34:27 +00:00
c94e94284f lib/blade: decrease miimon 2021-02-11 00:27:25 +00:00
fc14641404 lib/blade: enable libvirtd group for lukegb 2021-02-11 00:22:47 +00:00
e81c71b85f lib/blade: enable acpi_power_meter 2021-02-11 00:22:39 +00:00
82503b6192 ops/nixos/lib/blade: enable polkit for libvirtd access 2021-02-11 00:13:32 +00:00
4a53baab51 ops/nixos: fix lib/blade.nix 2021-02-10 23:39:36 +00:00
270b461b97 ops/nixos: create br-ext and put everything on it 2021-02-10 23:38:05 +00:00
5aa39f0693 ops/nixos: add osd daemons 2021-02-09 22:29:11 +00:00
4f043bb45a ops/nixos: disable osd on hosts where I haven't set it up yet 2021-02-09 21:57:49 +00:00
372aed550f ops/nixos: enable osds on blade-janeway 2021-02-09 21:47:04 +00:00
1ed83bd25a ops/nixos/blade: add ceph 2021-02-09 01:17:54 +00:00
3239c4b0b6 blade-kim,blade-paris: add config 2021-02-09 00:00:18 +00:00
d2b95065e0 ops/nixos: populate tailscale IPs for chakotay, torres, tuvok 2021-02-08 22:33:42 +00:00
dad04a0062 ops/nixos: add other blade hosts
blade-paris and blade-kim are TBD
2021-02-08 22:26:22 +00:00
36bb93a80e blade-janeway: add prefixLength (oops) 2021-02-08 20:46:39 +00:00
51a4d4bf36 porcorosso: enable avahi 2021-02-08 20:45:21 +00:00
37be1e38f8 ops/nixos: switch blades to static IPs 2021-02-08 20:45:15 +00:00
f55f861e17 ops/nixos: split most of blade-janeway into lib/blade.nix 2021-02-07 21:23:23 +00:00
b0e58ab198 ops/nixos: rename blade-leader to blade-janeway 2021-02-07 20:21:32 +00:00
e6f4d37982 ops/nixos: add fwupd to common 2021-01-30 18:47:12 +00:00
78040f6c94 nix/pkgs: init hp-rom; add to netboot 2021-01-30 18:47:01 +00:00
5d1284a26c netboot: add mprime 2021-01-30 17:56:46 +00:00
8c4c8b3ccc ops/nixos: add netboot for netbooting a basic system with my defaults 2021-01-30 15:40:33 +00:00
ba65db5865 ops/nixos: init blade-leader 2021-01-30 04:30:05 +00:00
c7df81d6a1 clouvider-fra01: add ts3spotifybot 2021-01-27 18:39:58 +00:00
413c38e348 kusakabe: rsyncd 2021-01-27 13:48:29 +00:00
25774139d1 ops/nixos: enable IPFS filestore on all nodes 2021-01-26 11:40:36 +00:00
7ec8e08ff0 totoro: add quotesdb for dev purposes 2021-01-20 17:55:31 +00:00
1fe4e04464 ops/nixos: add dev-quotes.bfob.gg to server aliases 2021-01-20 00:22:54 +00:00
5ee6a1c3b7 ops/nixos/quotes.bfob.gg: add my.quotesdb.listen option 2021-01-20 00:21:21 +00:00
b7574660de web/quotes: prodify 2021-01-19 23:43:43 +00:00
ef81a0c080 quotes.bfob.gg: add to clouvider-lon01 2021-01-19 23:41:47 +00:00
d12fb60c20 kusakabe: open ipfs ports properly 2021-01-15 03:58:41 +00:00
6d3a3de05e totoro: fix 2021-01-15 03:42:38 +00:00
b7bd209b5e swann: forward IPFS ports to totoro 2021-01-15 03:41:24 +00:00
e4902496a7 totoro: add ipfs ports to firewall 2021-01-15 03:39:36 +00:00
2a7b7517a8 totoro: enable ipfs 2021-01-15 03:38:43 +00:00
a549f5bec3 clouvider-fra01: add ipfs UDP ports to firewall 2021-01-15 03:36:41 +00:00
67d2db0e7a kusakabe: add ipfs 2021-01-15 03:36:34 +00:00
44f4e9a023 clouvider-fra01: add ipfs 2021-01-15 00:58:36 +00:00
d20dd06aaf clouvider-lon01: disable SSH open-to-all 2021-01-12 00:00:34 +00:00
ad516941e8 clouvider-lon01: SSH firewalling changes 2021-01-11 23:45:06 +00:00
9dd18e2cdc ops/nixos/lib/common: add nixos_running_system/nixos_booted_system node metrics 2021-01-11 17:44:23 +00:00
6b95f54ca7 ops/nixos/lib/common: add systemd collector to all systems 2021-01-07 10:01:36 +00:00
aba7285824 totoro: add twitternuke timer 2021-01-06 21:29:33 +00:00
d38601fabe etheroute-lon01: allow unifi websockets 2021-01-04 21:15:43 +00:00
c92fe8b139 swann: switch to unifiHacked 2021-01-04 20:52:13 +00:00
f91109cb50 nixos/lightspeed: init lightspeed-ingest and lightspeed-webrtc NixOS modules 2021-01-04 15:50:42 +00:00
045f9f5b22 etheroute-lon01: unifi needs tls_skip_verify 2021-01-03 15:32:00 +00:00
596752caa0 etheroute-lon01: add unifi.int 2021-01-03 03:35:24 +00:00
6fec69886a clouvider-fra01: add lukegb to deluge group too 2021-01-02 16:18:56 +00:00
b2d8acd4b9 swann: swap unifiPackage to pkgs.unifi
unifiBeta is no more: https://github.com/NixOS/nixpkgs/pull/107797
2020-12-31 01:31:01 +00:00
eb9d9f54a5 nix/pkgs/grafana-plugins: rework a bit 2020-12-30 03:30:24 +00:00
405997d312 totoro: teach how to install grafana plugins from nix 2020-12-30 02:56:31 +00:00
26e379dfb7 depot-wide: create logged-out.int.lukegb.com 2020-12-30 00:57:53 +00:00
33117f2b45 totoro: don't prepend GF_ to grafana extraConfig 2020-12-29 21:23:20 +00:00
be3ce89fb4 etheroute-lon01: unset allowed_domains 2020-12-29 20:55:01 +00:00
7573280e5b etheroute-lon01: de-redundantify int.lukegb.com cert 2020-12-29 20:37:33 +00:00
1c550cf508 etheroute-lon01: rejiggle pomerium policy 2020-12-29 20:11:41 +00:00
4e20db9fcc totoro: install grafana 2020-12-29 20:08:55 +00:00
11c4b77eab etheroute-lon01: send more identity headers 2020-12-29 20:00:52 +00:00
6317f7ffba swann: enable Prometheus smokeping_prober 2020-12-29 18:57:18 +00:00
8773350ba6 etheroute-lon01: add prometheus and alertmanager 2020-12-29 16:57:26 +00:00
7d0493cacd deluge: patch deluge-web to try logging in with a fixed password first 2020-12-28 20:04:27 +00:00
aa9c1eb17e etheroute-lon01: hint that it's-a-me, lukegb 2020-12-28 19:26:39 +00:00
6f65c77ad3 etheroute-lon01: fix databroker connection string 2020-12-28 19:11:25 +00:00
2c0de76c8b etheroute-lon01: use redis for pomerium databroker storage 2020-12-28 19:09:55 +00:00
784138746f pomerium: document all known pomerium options as nixos module options 2020-12-28 18:54:00 +00:00
d3f6442301 etheroute-lon01: add things on clouvider-fra01 2020-12-28 15:56:54 +00:00
3a112b8218 clouvider-fra01: simplify 2020-12-28 15:54:43 +00:00
721018520b etheroute-lon01/pomerium: enable http redirect server 2020-12-28 15:40:13 +00:00
41bdeda58a pomerium: various fixups to make this work 2020-12-28 15:27:18 +00:00
10c6ddc4c9 etheroute-lon01: install pomerium 2020-12-28 14:08:24 +00:00
3ee1906b97 ops/nixos: init etheroute-lon01 2020-12-26 23:36:34 +00:00
161ed2af50 porcorosso: add lukegb to lxd group 2020-12-26 15:41:02 +00:00
8e2670548d porcorosso: enable lxd 2020-12-26 15:39:41 +00:00
ee5a7dc6ec porcorosso: intel 2020-12-23 23:35:16 +00:00
34d9b4eda5 hm/graphical-client: pull in nm-applet only for i3 2020-12-19 19:39:13 +00:00
9a14eadbb6 porcorosso: move intel selection to a nixos specialisation 2020-12-19 19:38:57 +00:00
cb4ba45b1b hm/graphical-client: enable nm-applet
I'm assuming (probably wrongly) that anything using my graphical-client preset
is _also_ using NetworkManager, which is probably true for real client machines
but may not be true on terminal services machines which also end up with this
preset.

Whatever, I'll work it out later.
2020-12-19 19:25:15 +00:00
d13dca3f02 porcorosso: switch to intel again 2020-12-19 19:23:02 +00:00
c59b3843c7 porcorosso: enable fwupd 2020-12-19 19:26:36 +00:00
2e50ce0489 porcorosso: enable the intermec-cups-driver 2020-12-19 19:26:25 +00:00
808b506123 ops/nixos/lib/low-space: fix 2020-12-06 15:22:40 +00:00
26de73b0fb marukuru: set journald SystemMaxUse to cap log size 2020-12-06 15:18:14 +00:00
9244e44518 ops/nixos/lib/common: add lukegb to 'audio' group 2020-12-03 03:00:40 +00:00
7b9191f261 clouvider-lon01: factorio: open firewall 2020-11-30 19:53:57 +00:00
23e97ff266 ops/nixos: add whitby-distributed to clouvider-lon01 2020-11-30 23:21:56 +00:00
52fc2c36dc clouvider-fra01: bump stateVersion, yolo
This will cause Deluge to update to Deluge2.
2020-11-29 02:31:29 +00:00
a589ca3e1f ops/nixos: remove propagatedBuildInputs from mercurial override 2020-11-25 13:12:36 +00:00
b82fbfb9f8 porcorosso: add obs-studio 2020-11-25 02:13:14 +00:00
8c36ae940b clouvider-lon01: add factorio server 2020-11-24 04:50:31 +00:00
311fc015f4 porcorosso: install Factorio 2020-11-24 02:56:18 +00:00
094f2334f8 ops/nixos/lib/home-manager: swap isDarwin for 'is external' check 2020-11-23 16:47:17 +00:00
80e85feede home-manager-ext: init
To allow using my home-manager config on Darwin (and other non-NixOS
machines), I introduce the concept of home-manager-ext, which gives
me a much easier hook to import my config elsewhere.
2020-11-23 07:22:00 -08:00
0f86867d05 porcorosso: swap /root for a bindmount instead 2020-11-23 15:19:23 +00:00
2043572a2b porcorosso: make /root a /persist/root symlink 2020-11-22 14:44:49 +00:00
5de4937d6d Add a GITHUB_TOKEN to my environment everywhere. 2020-11-21 00:51:24 +00:00
26352c7065 ops/nixos: add ability to define additional things to be scraped, use this for coredns 2020-11-18 02:02:23 +00:00
588a47e97f swann: set swann as DNS server for DHCP 2020-11-18 01:50:16 +00:00
68deb62b38 swann: enable coredns and use google public DNS over TLS 2020-11-18 01:49:44 +00:00
c0a6e48970 ops/nixos: add dnsutils to common for dig 2020-11-18 01:27:50 +00:00
087d774b56 swann: forward port 80 and 443 to totoro 2020-11-18 01:31:57 +00:00
2df9344303 totoro: set up pancake 2020-11-17 03:14:04 +00:00
4cb36fffbb totoro: add /srv and /srv/pancake 2020-11-17 02:39:01 +00:00
a31599ad1b ops/nixos: add restic everywhere 2020-11-17 02:21:46 +00:00
4a0897b0cb ops/nixos: add new packages, move other packages around 2020-11-17 02:10:23 +00:00
492d57ef29 hm/graphical-client: enable vaapi on chromium 2020-11-15 21:29:15 +00:00
8a9c00c7f0 porcorosso: add some vdpau/vaapi packages 2020-11-15 21:23:47 +00:00
6c91bbe714 hm: set up ssh 2020-11-09 00:21:32 +00:00
f2c8e2d3bf hm/graphical-client: set up session vars 2020-11-08 15:49:12 +00:00
07b76f5cf9 clouvider-lon01: only listen on specified IPs 2020-11-07 14:20:46 +00:00
b2384d844d clouvider-lon01: disable automatic nix-gc
It's used as a Nix build cache machine - since we don't have gcroot
generation, it's better to just not collect garbage for the moment.
2020-11-06 05:21:37 +00:00
65c2fce8a7 swann: add unifi-poller 2020-11-06 05:02:05 +00:00
17ac1212dd ops/nixos: add totoro as prometheus box; enable node-exporter everywhere 2020-11-06 04:52:54 +00:00
eba4f33a63 totoro: remove openshift cruft 2020-11-06 04:11:16 +00:00
b58f13a145 ops/nixos: globally enable zramSwap 2020-11-05 02:03:20 +00:00
57d4f7f05e nixos/home-manager: do ssh-add when making a login shell 2020-11-05 01:57:55 +00:00
bad3be7574 ops: tweak SSH auth; add red solo SK-resident key 2020-11-05 01:50:16 +00:00
2c0b4e3bb6 porcorosso: add libvirtd 2020-11-03 16:03:22 +00:00
cc5152300c marukuru/deployer: expose tailscale IPs 2020-11-04 21:58:49 +00:00
82c751a6e4 swann: install Unifi controller 2020-11-04 21:53:14 +00:00
a507a5380d ops/nixos: allow all traffic in on tailscale0 2020-11-04 21:53:02 +00:00
8d4b7f8c47 bgp: add default to satisfy ixvm-fra01 2020-11-04 17:41:28 +00:00
855feececa clouvider-lon01: set up as cache builder 2020-11-04 17:30:28 +00:00
252ad42fb2 clouvider-lon01: add minotarproxy 2020-11-04 17:23:52 +00:00
db911ee156 porcorosso: add libvirt persistance 2020-11-04 17:09:53 +00:00
86a09dab73 clouvider-lon01: add minotarproxy IPs 2020-11-04 16:41:15 +00:00
4da102053c clouvider-lon01: add ZNC 2020-11-04 16:27:46 +00:00
129bdd0e69 clouvider-lon01: update tailscale IP 2020-11-04 15:53:18 +00:00
7795bd1d0f clouvider-lon01: init 2020-11-04 15:51:55 +00:00
1233ac2d14 swann: tweak firewall params 2020-11-04 14:27:19 +00:00
d78f055270 ops: add lukegb_porcorosso_linux key 2020-11-03 15:25:03 +00:00
847e827d0a depot: fix up things 2020-11-01 21:39:25 +00:00
7a19e14649 ops/nixos: define a new my.ip.tailscale option which gets put into /etc/hosts everywhere 2020-11-01 18:25:01 +00:00
9499761e7f home-manager: set EDITOR and VISUAL to vim 2020-11-01 18:11:48 +00:00
658c98934b nixos/lib/common: update SSH authorized_keys 2020-11-01 14:42:52 +00:00
72ae247e4a swann: tune cake parameters 2020-11-01 14:33:18 +00:00
3acb27f020 swann: init 2020-11-01 14:25:17 +00:00
74371dbe8a totoro: add br-int interface 2020-10-31 17:04:30 +00:00
d3bee9d2de ops/nixos: import home-manager into lib/common 2020-10-31 11:44:52 +00:00
4ea585daa2 ixvm-fra01: update to new ASN 2020-10-28 14:41:42 +00:00
f5c80fe35d ops/nixos: further tweaks 2020-10-25 12:00:15 +00:00
29fa1e35fd nixos: start using home-manager 2020-10-25 11:36:16 +00:00
4e14ee8111 ops/nixos: mark nix.gc.automatic as default 2020-10-18 12:59:33 +00:00
e3f83ad608 ops/nixos: run nix-collect-garbage daily, except on clients 2020-10-18 01:17:35 +00:00
1aa2236f64 graphical-client: add dino 2020-10-17 12:17:47 +01:00
89d3afd8f0 ops/nixos: move some things into a graphical-clients module 2020-10-17 12:17:18 +01:00
6edb818126 ixvm-fra01: add kernel modules for VirtIO disk 2020-10-15 13:50:52 +00:00
3bab7ede2d totoro: add secretsync 2020-10-15 13:22:18 +00:00
d5d4d6eb33 kusakabe: updates for XMPP 2020-10-15 13:24:37 +00:00
e0969055f6 ops/nixos: make references to nixpkgs modules use relative paths 2020-10-10 19:39:26 +00:00
11a7fefe1c totoro: add openshift dependencies, tailscale expose 192.168.1.0/24 2020-09-13 15:16:03 +00:00
949c86e816 kusakabe: enable send-proxy-v2 for requests to OKD haproxy 2020-10-06 00:29:37 +00:00
382dad7c6d marukuru: add nix config to deployer container 2020-10-04 03:00:03 +01:00
190606746c ops/nixos/lib/common: add the binary cache credentials to nix.envVars 2020-10-04 02:56:34 +01:00
ee7ad0adfd kusakabe: also expose k8s apiserver 2020-10-04 01:15:58 +01:00
27f446fa8e porcorosso: enable podman 2020-10-04 01:03:28 +01:00
2c613bf2f1 porcorosso: switch back to nvidia 2020-10-04 00:11:45 +01:00
4b878360f5 kusakabe: add postgresql for twitterchiver 2020-10-03 23:13:20 +00:00
2b4f4d6b16 kusakabe: revamp config as VM host 2020-10-02 14:21:49 +00:00
7b53535355 misc: fix up after nixpkgs update 2020-09-30 17:39:34 +00:00
ae0eda1ba8 marukuru: disable gitlab's built-in prometheus instance 2020-09-30 16:09:41 +00:00
0a3a2043b1 porcorosso: switch to intel for X11; I'm on the move 2020-08-22 17:07:43 +01:00
ea8020262c ops/nixos/lib/common: add rsync 2020-09-07 10:59:47 +00:00
96f736ab7e marukuru/deployer: add rsync 2020-09-07 11:05:24 +00:00
03e5dbd72e kusakabe: enable libvirtd 2020-09-07 10:47:43 +00:00
054c4ee1dd porcorosso: remove obsolete fonts.fontconfig.penultimate option 2020-09-06 17:02:27 +00:00
ab0f4b5863 ops/nixos/lib/common: replace deployer password with ! 2020-09-06 16:45:56 +00:00
7b61a7e558 marukuru: migrate to virtualisation.oci-containers 2020-09-06 16:38:54 +00:00
863c7028f0 ops/nixos: add tailscale to common 2020-09-06 16:26:48 +00:00
36cca90e55 ops/nixos: add kusakabe 2020-09-05 18:37:06 +00:00
a71cb99af8 nixos/porcorosso: add totoro as a builder 2020-07-19 18:47:40 +01:00
24ba5c1c36 nixos: abstract out distributed builds 2020-07-19 18:20:21 +01:00
d629c95212 ops/nixos/totoro: add oven-media-engine 2020-07-19 17:59:20 +01:00
2088559ef5 porcorosso: add totoro mount 2020-07-19 17:49:56 +01:00
5efba00e97 ops/nixos/lib/common: add tmux 2020-07-08 18:36:21 +00:00
a74909c070 totoro: add irssi 2020-07-08 18:35:48 +00:00
a1115de05f totoro: use whitby as a build machine 2020-07-08 18:34:33 +00:00
88fbb167c9 totoro: add NFS 2020-07-04 19:36:38 +00:00
279be2c2c3 porcorosso: install virtmanager{,-qt} 2020-06-28 23:24:53 +01:00
a62a67ffd2 totoro: add lukegb to libvirtd group 2020-06-28 22:23:43 +00:00
78fee25f20 totoro: set up libvirt 2020-06-28 22:22:43 +00:00
e1c3016e0e totoro: add client 2020-06-28 18:38:49 +00:00
00e2f9e1d3 ops/nixos: factor things useful on general 'workstation' machines out 2020-06-28 19:38:20 +01:00
21fa99f68e porcorosso: add ripgrep 2020-06-28 19:33:06 +01:00
002c0cafc7 totoro: init 2020-06-28 18:32:52 +00:00
39cf295d69 porcorosso: remove hardware.u2f 2020-06-20 23:13:51 +01:00
d32ee29a2d porcorosso: postgresql/redis 2020-06-20 23:11:24 +01:00
1506327979 hgrc: fix smartlogstart 2020-06-18 00:20:00 +01:00
f3d1fee59d nix/pkgs: add bazel-run userenv 2020-06-16 09:39:54 +01:00
a7945b45f9 porcorosso: add go 2020-06-13 18:31:37 +01:00
6b09925449 porcorosso: tweak NTFS mount settings 2020-06-13 18:29:10 +01:00
48011ebba9 licensing: Apache-2.0, make almost reuse-lint clean 2020-06-07 15:03:12 +01:00
15c82b0498 local repo fixups after bump of nixpkgs 2020-06-06 13:12:39 +01:00
2d8e414bc0 ops/nixos/clouvider-fra01: enable Label plugin in Deluge 2020-06-06 00:46:24 +00:00
6f62ebd120 clouvider-fra01: apply oauth2 to int.lukegb.com as well 2020-06-01 00:10:48 +01:00
17f7cda651 clouvider-fra01: refactor HTTP config a bit 2020-05-31 23:53:39 +01:00
e656191b7b clouvider-fra01: add int.lukegb.com which points at oauth2proxy 2020-05-31 22:28:01 +00:00
299893c475 clouvider-fra01: sonarr/radarr 2020-05-31 21:27:23 +01:00
dd59e9afed clouvider-fra01: remove old mercurial package 2020-05-31 21:23:47 +01:00
1e3821be14 clouvider-fra01: add sonarr/radarr users to content group 2020-05-31 21:20:02 +01:00
0ce1f45b41 clouvider-fra01: add sonarr/radarr 2020-05-31 21:01:56 +01:00
3c28fa6878 marukuru: update heptapod to 0.13.0-py3 2020-05-31 19:51:20 +01:00
643cb31750 porcorosso: try installing lutris 2020-05-31 18:58:29 +01:00
82ed70f0c9 ops/nixos/lib/hgrc: add purge extension 2020-05-22 13:09:36 +01:00
7473787ecb porcorosso: add direnv and lorri 2020-05-22 13:04:47 +01:00
d9cc0c9de1 ops/nixos/lib: don't use the s3 binary cache except when rebuilder-ing. 2020-05-22 13:04:17 +01:00
abbbc2c216 hg-git: add 0.9.0a1 for py3, and use that 2020-05-17 03:23:54 +01:00
2712655c50 ops/nixos/lib/hgrc: colourise rev ID based on phase 2020-05-16 14:08:27 +01:00
9824a286f8 ops/nixos/porcorosso: add copybara 2020-05-16 16:44:29 +01:00
9567a9803b ops/nixos/porcorosso: add NTFS drive 2020-05-11 21:15:49 +01:00
d7897ddbe5 ops/nixos/lib: add hgrc in a more sensible way 2020-05-11 17:30:13 +01:00
a58ee896ff ops/nixos/porcorosso: add whois 2020-05-11 16:45:02 +01:00
ee46deed22 ops/nixos/porcorosso: enable fontconfig-penultimate 2020-05-11 16:39:57 +01:00
3af02e4d98 ops/nixos/porcorosso: oh, I'm supposed to use fonts.fonts 2020-05-11 16:38:09 +01:00
e3b0cbce16 ops/nixos/porcorosso: import more packages 2020-05-11 16:31:17 +01:00
3d8a588f3a ops/nixos/porcorosso: move some packages into user packages 2020-05-11 16:21:48 +01:00
75791a83a7 ops/nixos/porcorosso: install teamspeak_client globally 2020-05-11 16:18:17 +01:00
6daf53d556 ops/nixos/lib/hgrc: add topics extension 2020-05-11 16:18:03 +01:00
84b964fffd porcorosso: add 'windows' script for rebooting to windows 2020-05-10 15:25:37 +01:00
e715c20f64 porcorosso: add deluge 2020-05-10 02:12:29 +01:00
91d742c1cd gitlab-ci: try and get deploys works 2020-05-09 23:49:32 +01:00
84f607d7cf *: try setting up automated deploys
This won't work yet, since the deployer user isn't correctly configured,
but this should at least trigger the right sets of things to happen.
2020-05-09 18:53:17 +01:00
c5d03b795e ops/nixos: give everything a consistent mercurial 2020-05-09 18:15:12 +01:00
0c461e9422 common: add my hgrc so I can have evolve everywhere 2020-05-09 14:42:19 +01:00
0236b2450b porcorosso: start using manifest variable 2020-05-09 14:27:10 +01:00
c110580d82 porcorosso: swap path to a string.
Can't use a path here since this doesn't exist on CI.
2020-05-09 12:59:51 +01:00
0474fea9f7 clouvider-fra01: set deluge.authFile 2020-05-09 12:56:56 +01:00
a708872dec porcorosso: add a configured secretsync 2020-05-09 12:45:31 +01:00
02112f071c clouvider-fra01: deluge 2020-05-09 11:14:37 +01:00
606151ddb4 ops/nixos: move rebuilder derivation into its own file. 2020-05-09 11:14:25 +01:00
f34991e545 nixos/lib/common: oops, meant "cache", not hydra 2020-05-09 01:10:37 +01:00
2508b6ed9a ops/nixos: add deployer user 2020-05-09 01:10:20 +01:00
bc50bdb7d2 ops/nixos: add GCP binary cache 2020-05-09 00:03:21 +01:00
19c29c56ff ops/nixos: fix things 2020-05-08 23:34:17 +01:00
06910a0445 ixvm-fra01: remove bird.nix 2020-05-08 23:29:30 +01:00
c4a6c2592f ixvm-fra01: merge useless changes 2020-05-08 23:29:10 +01:00
83cfa93b11 merge in local changes from marukuru 2020-05-08 23:28:42 +01:00
1e7fcadc97 ops/nixos: rework everything to factor common things out 2020-05-08 23:26:21 +01:00
24fe8291c2 marukuru: switch to heptapod 2020-05-08 22:24:50 +00:00
bcaf738b8f ixvm-fra01: add export_community 2020-05-08 21:48:44 +00:00
23bb45a60a Backed out changeset 1b4ecdc5b78d 2020-05-08 16:55:57 +00:00
9c45d867e2 Merge ixvm-fra01 changes 2020-05-08 17:52:55 +01:00
c6d883af9a ixvm-fra01: fix up bird config 2020-05-08 16:52:04 +00:00
a68ea0ce27 marukuru: add builder1 user 2020-05-07 00:52:42 +01:00
cc168a96d9 ixvm-fra01: add listen bgp dual 2020-05-06 23:44:16 +01:00
326f7259b7 ixvm-fra01: allow disabling peering 2020-05-06 23:37:31 +01:00
f27ec35837 ixvm-fra01: add lukegb to bird2 group 2020-05-06 23:29:57 +01:00
cf4109aaf9 ixvm-fra01: add bird config 2020-05-06 23:27:14 +01:00
5dbc575e95 clouvider-fra01: add content user/group. 2020-05-06 10:14:04 +01:00
25956f7607 clouvider-fra01: add Plex Pass media server. 2020-05-06 10:02:00 +01:00
79c7b70a96 porcorosso: add javaws bin that drops into a FHS env.
This allows me to use Supermicro's BMC, which appears to drop a
stunnel binary into /tmp and then execute it, which doesn't work
properly in Nix because nothing is where it is expected to be.
2020-05-06 10:01:46 +01:00
07829d4e34 clouvider-fra01: no need for /etc/nixos symlink 2020-05-06 00:35:00 +01:00
d8276603fa Add first-pass for clouvider-fra01. 2020-05-06 00:28:23 +01:00
10ea6c910e marukuru: readd pygments and phabricator group 2020-05-03 19:18:12 +01:00
dfbcb353af marukuru: GRUB should be on vda
sda doesn't exist.
2020-05-03 19:01:37 +01:00
f9b63a858f ops/nixos: switch to more standard NixOS module system
Sorry tazjin.
2020-05-03 18:44:11 +01:00
27f2c9edb7 marukuru: set ACME email 2020-05-03 17:58:56 +01:00
2f35c4835b marukuru: add 2020-05-03 17:56:16 +01:00
28e47f9384 ops/nixos: add assimilate.sh script 2020-05-03 17:42:00 +01:00
306add0be2 ixvm-fra01: add rebuilder
Everything should have this, I should make this just applied in default.nix...
2020-05-03 17:03:03 +01:00
b1e61c5fc0 ixvm-fra01: learn to spell fileSystems 2020-05-03 16:55:53 +01:00
ae625bc10e ixvm-fra01: add to ops/nixos as well... 2020-05-03 15:48:07 +01:00
506f161147 ixvm-fra01: add 2020-05-03 15:42:03 +01:00
45d3894011 porcorosso: add nixpkgs to NIX_PATH, add hg-evolve.
Reviewers: lukegb

Reviewed By: lukegb

Differential Revision: https://phab.lukegb.com/D9
2020-04-30 09:50:52 +01:00
1006e41bfb ops/nixos/porcorosso: create
Summary:
Adds porcorosso to the depot, and also adds the supporting Nix architecture required to make this work.

This also tests that encryption is working correctly.

Reviewers: tazjin

Reviewed By: tazjin

Subscribers: tazjin

Differential Revision: https://phab.lukegb.com/D8
2020-04-30 05:49:19 +01:00