Commit graph

290 commits

Author SHA1 Message Date
deployer@bvm-nixosmgmt.blade.as205479.net
902daf7845 nix/pkgs/plex-pass: update version to 1.26.2.5797-5bd057d2b 2022-05-25 02:11:35 +00:00
ac06d71d66 nix/pkgs/authentik: bump to 2022.5.2 2022-05-21 17:16:29 +01:00
4522f79791 authentik: bump to 2022.5.1 2022-05-20 22:59:00 +01:00
deployer@bvm-nixosmgmt.blade.as205479.net
28ac784503 nix/pkgs/plex-pass: update version to 1.26.1.5798-99a4a6ac9 2022-05-17 02:12:24 +00:00
1f5c62ea94 authentik: copy the "authentik" directory over for source icons 2022-05-17 02:57:26 +01:00
dccfd3a2de nix/gitlab-ci: split deploy into deploy-{mach,other} 2022-05-17 01:38:27 +01:00
059476d789 nix/pkgs/authentik: switch to my fork 2022-05-14 21:38:54 +00:00
5402286846 nix/pkgs/authentik: oops, remove reference to nix store path 2022-05-13 22:31:19 +00:00
bf601faa89 nix/pkgs/authentik: init 2022-05-12 22:55:10 +00:00
a95b91798d nix/pkgs/baserow: update to NodeJS 16.x (latest LTS) 2022-05-07 15:23:04 +00:00
deployer@bvm-nixosmgmt.blade.as205479.net
35514a5f07 nix/pkgs/plex-pass: update version to 1.26.0.5715-8cf78dab3 2022-04-22 02:11:06 +00:00
b5214dc003 vault-acme: bump to new version, which includes dropping the cert revocation 2022-04-21 01:49:46 +01:00
b5fbf1f472 oracle-lon01: add my first aarch64-linux boxen 2022-04-13 12:03:56 +00:00
675b65b5da nix/docker/heptapod: add update script for image 2022-04-09 20:17:32 +01:00
55b6bd2a19 ops/nixos: add nixos-size to measure total closure pinned by booted-system/current-system mismatch 2022-04-07 03:42:17 +00:00
deployer@bvm-nixosmgmt.blade.as205479.net
bd4e52105d nix/pkgs/plex-pass: update version to 1.25.9.5721-965587f64 2022-04-07 02:12:24 +00:00
a0802e697f gitlab-ci: restore machine deploys 2022-04-05 22:13:21 +01:00
98cd1c7427 gitlab-ci: try setting NIX_PATH explicitly 2022-04-05 22:09:21 +01:00
97a2e46eeb lukegbcom: autodeploy using Vault 2022-04-05 22:04:32 +01:00
67252bab10 lightspeed: delete 2022-04-05 02:41:16 +00:00
9f9991c895 heptapod: 0.30.0 -> 0.30.1 2022-04-04 14:53:06 +01:00
deployer@bvm-nixosmgmt.blade.as205479.net
d2aaa28aa5 nix/pkgs/plex-pass: update version to 1.25.8.5663-e071c3d62 2022-03-25 02:11:03 +00:00
4d00448f55 heptapod: 0.29.1 -> 0.30.0 2022-03-24 22:20:56 +00:00
c60a68a354 nix/gitlab-ci: try to restrict deploy steps to only default 2022-03-20 10:26:56 +00:00
deployer@bvm-nixosmgmt.blade.as205479.net
b4b3484e6c nix/pkgs/plex-pass: update version to 1.25.7.5604-980a13e02 2022-03-17 02:10:56 +00:00
d2481b1461 vault-acme: sleep in lieu of waiting "properly" for DNS propagation
Once we've seen the TXT record on any nameserver, assume that it'll reach the
rest of them within 60 seconds.

This is an awful hack because some peculiarities of my setup don't work
properly with the upstream lego code.
2022-03-17 01:03:41 +00:00
b29a330382 ubi_reader: init 2022-03-13 17:32:59 +00:00
c9bd0696ed heptapod: enable SSH CA 2022-03-13 00:24:57 +00:00
72a647b80f baserow: disable moto tests which are broken for some reason 2022-03-11 15:53:04 +00:00
e8b2667c01 heptapod-runner: make a separate drv and stop maintaining it as a patchset on top of gitlab-runner 2022-03-11 15:15:30 +00:00
34fa21a171 treewide: fix eval fallout from nixpkgs bump 2022-03-11 14:56:55 +00:00
0c7f785107 vault-agent-acme: tidy up 2022-03-06 23:01:51 +00:00
332d1ca100 nix/docker/vault: update Vault's plugin registry as part of upload
It's possible (and likely) that when we update the Vault image that the SHA256
of the plugin will also change.

Automatically update that as the last step of the deploy.
2022-03-06 17:10:58 +00:00
932b47e9e9 vault-acme: init
This is a Vault secrets plugin for provisioning SSL certificates using ACME.
2022-03-06 16:52:47 +00:00
6c3ecb4d0b nix/docker/vault: init
This is the Docker image I use for deploying Vault.
2022-03-06 16:51:34 +00:00
75ce92b967 heptapod: update to 0.29.1 2022-03-01 00:00:23 +00:00
deployer@bvm-nixosmgmt.blade.as205479.net
4cef54442e nix/pkgs/plex-pass: update version to 1.25.6.5577-c8bd13540 2022-02-23 02:10:56 +00:00
deployer@bvm-nixosmgmt.blade.as205479.net
e14cfe989c nix/pkgs/plex-pass: update version to 1.25.5.5492-12f6b8c83 2022-02-09 02:10:53 +00:00
cc6fd576e7 nix/docker/heptapod: 0.28.1 -> 0.28.2 2022-02-05 03:24:04 +00:00
40a3588e99 nix/docker/heptapod: 0.27.3 -> 0.28.1 2022-02-04 19:21:08 +00:00
deployer@bvm-nixosmgmt.blade.as205479.net
29c0608903 nix/pkgs/plex-pass: update version to 1.25.4.5487-648a8f9f9 2022-02-02 02:11:03 +00:00
deployer@bvm-nixosmgmt.blade.as205479.net
79e5483322 nix/pkgs/plex-pass: update version to 1.25.4.5468-989df2310 2022-02-01 02:11:06 +00:00
3ad4c2399a nix/pkgs/lutris: add more deps 2022-01-23 23:37:19 +00:00
c10d4efd5e nix/pkgs/deluge: update path for trying empty login first 2022-01-16 15:26:38 +00:00
deployer@bvm-nixosmgmt.blade.as205479.net
af848af78c nix/pkgs/plex-pass: update version to 1.25.3.5409-f11334058 2022-01-14 02:10:48 +00:00
deployer@bvm-nixosmgmt.blade.as205479.net
0917f5eb3e nix/pkgs/plex-pass: update version to 1.25.3.5385-f05b712b6 2022-01-12 02:10:47 +00:00
47d3c07b8f nix/pkgs/heptapod-runner: fix 2021-12-25 20:31:34 +00:00
0b8049e5d4 nix/docker/heptapod: 0.27.0 -> 0.27.3 2021-12-22 00:41:19 +00:00
a72cc6dd19 nix/pkgs/baserow: add public key to baserow_premium 2021-12-21 22:12:33 +00:00
92a744ec1f nix/pkgs: add baserow vs baserow-oss to nix/pkgs 2021-12-21 21:52:16 +00:00
32672f96f6 nix/pkgs/rundeck-bin: 3.4.1-20210715 -> 3.4.9-20211221 2021-12-21 20:00:22 +00:00
68e623d2eb nix/pkgs/baserow: make it configurably OSS-only 2021-12-21 19:39:11 +00:00
9d983e7831 nix/pkgs/baserow: tie to tag for 1.7.1 2021-12-21 19:23:53 +00:00
93a070870a nix/pkgs/baserow: hooray, it works 2021-12-21 05:48:40 +00:00
d806f8da1c baserow: copy missing non-Python directories into sitePackages anyway 2021-12-20 18:08:39 -08:00
c2ca979558 nix/pkgs/baserow: init 2021-12-20 16:18:16 -08:00
2fb7595507 nix/pkgs/baserow: init web-frontend 2021-12-20 13:05:51 -08:00
9f7a675b09 nix/pkgs/heptapod-runner: fix more 2021-12-20 05:56:24 +00:00
7c0d51e9db nix/pkgs/heptapod-runner: update to 0.4.0, fix patch 2021-12-20 02:47:45 +00:00
deployer@localhost
18ac4b13fd nix/pkgs/plex-pass: update version to 1.25.2.5319-c43dc0277 2021-12-14 02:15:15 +00:00
deployer@localhost
279a5233f9 nix/pkgs/plex-pass: update version to 1.25.1.5286-34f965be8 2021-12-08 02:11:08 +00:00
deployer@localhost
ec5af85046 nix/pkgs/plex-pass: update version to 1.25.0.5282-2edd3c44d 2021-12-02 02:10:48 +00:00
a1ee1e396c ops/nixos: alacritty -> kitty 2021-11-28 12:51:40 +00:00
172f12b04d nix/docker/heptapod: 0.26.0 -> 0.27.0 2021-11-25 18:29:40 +00:00
9cb68e94d3 nix/docker/heptapod: update to 0.26.0 2021-11-25 17:27:52 +00:00
47702fd028 nix/pkgs: init gimp-plugin-vtf 2021-11-25 17:13:33 +00:00
bde764c537 nix/pkgs: pin nightly rust
oops.
2021-11-23 12:31:34 +00:00
86e0ce9af9 nix/pkgs/datez: init 2021-11-18 21:33:40 +00:00
5f85aba4b1 nix/docker/heptapod: bump to 0.25.2 2021-11-05 01:30:02 +00:00
deployer@localhost
bdb17c63e3 nix/pkgs/plex-pass: update version to 1.24.5.5173-8dcc73a59 2021-10-28 02:11:00 +00:00
deployer@localhost
2c9f1bfefe nix/pkgs/plex-pass: update version to 1.24.4.5081-e362dc1ee 2021-10-13 02:10:52 +00:00
6e4d2ed6b0 heptapod: 0.25.0 -> 0.25.1 2021-10-09 01:16:36 +00:00
55c0ceeafe nix/docker/heptapod: 0.24.0 -> 0.25.0 2021-09-26 21:56:00 +01:00
7800222723 nix/pkgs/mercurial: switch to mercurialFull instead 2021-09-26 21:16:05 +01:00
5d2cc39419 nix/pkgs: add eapol-test 2021-09-25 12:55:06 +00:00
deployer@localhost
8ea060fa0c nix/pkgs/plex-pass: update version to 1.24.3.5033-757abe6b4 2021-09-21 02:10:56 +00:00
deployer@localhost
1a75721707 nix/pkgs/plex-pass: update version to 1.24.2.4973-2b1b51db9 2021-09-09 02:10:54 +00:00
3f184e6323 nix/gitlab-ci: add separate pipeline steps for Intel/ARM macOS 2021-09-05 09:24:03 +00:00
f7fbfa5436 nix/pkgs: init prometheus-bird-exporter-lfty 2021-08-31 02:01:38 +00:00
31e254192f heptapod: 0.23.2 -> 0.24.0 2021-08-30 20:52:41 +01:00
deployer@localhost
c440846823 nix/pkgs/plex-pass: update version to 1.24.1.4931-1a38e63c6 2021-08-24 02:10:55 +00:00
05ddad31ad bvm-netbox: complete setup 2021-08-16 02:09:47 +00:00
bf274bbc00 nix/docker/heptapod: update 2021-08-14 21:54:09 +00:00
deployer@localhost
4c8abb0a9a nix/pkgs/plex-pass: update version to 1.24.0.4930-ab6e1a058 2021-08-13 02:10:53 +00:00
deployer@localhost
1238334f21 nix/pkgs/plex-pass: update version to 1.23.6.4881-e2e58f321 2021-08-06 02:10:32 +00:00
deployer@localhost
25372154af nix/pkgs/plex-pass: update version to 1.23.5.4862-0f739d462 2021-07-27 02:10:57 +00:00
a911a1f1be rundeck-bin: update to 3.4.1 2021-07-24 21:58:12 +01:00
ca2230756b nix/docker/heptapod: update to 0.22.3 2021-07-16 00:34:55 +00:00
2b9e07816b nix/pkgs/mercurial: drop pygit2, add hg-git 2021-07-03 10:28:34 +00:00
890ffcd477 heptapod: update to 0.22.1 2021-07-03 01:49:24 +00:00
4ef3d2a8e6 lightspeed-react: fix for new nixpkgs 2021-06-29 23:07:32 +00:00
3e7f505653 heptapod: bump to 0.22.0 2021-06-06 17:48:59 +00:00
21d082543a heptapod: bump to 0.21.3 2021-05-30 16:27:55 +00:00
fc0468c20f heptapod: bump to 0.20.7 2021-05-30 14:31:58 +00:00
d874257a28 nix/gitlab-ci: use when: manual and allow_failure: true 2021-05-22 22:58:25 +00:00
bd8cb149bc nix/pkgs/prometheus-snmp-config: fix hash 2021-05-22 00:51:55 +00:00
bdc009d86b nix/pkgs/prometheus-snmp-config: update hash 2021-05-22 00:46:14 +00:00
7b38430804 nix/pkgs/crane: update hash??? 2021-05-22 00:40:18 +00:00
47542c16e3 django-tailwind: 1.1.0 -> 2.0.1 2021-04-29 12:08:13 +00:00
fd2b47acf9 copybara: pin to jdk11 2021-04-18 13:54:14 +00:00
bc41ac0d88 nix/pkgs/plex-pass: update to 1.22.2.4282-a97b03fad 2021-04-11 03:23:55 +00:00
a2f95ffba2 nix/pkgs/plex-pass: convert to SRI for nix-update 2021-04-11 02:16:12 +00:00
db82683461 nix/pkgs/plex-pass: reorganise to make more nix-update friendly 2021-04-11 02:13:51 +00:00
e088dac620 nix/pkgs/rundeck-bin: fix 2021-04-10 22:25:28 +00:00
e0241545d2 add mercurial to rundeck path 2021-04-10 22:17:28 +00:00
15ed0197e3 rundeck: run as deployer 2021-04-10 21:59:29 +00:00
88e7bd85ed nix/pkgs/rundeck-bin: change wrapper to name 'rundeckd' 2021-04-10 17:26:42 +00:00
00cb06aff2 bvm-nixosmgmt: add rundeck 2021-04-10 17:20:35 +00:00
9c1c7ec985 nix/pkgs/rundeck-bin: init 2021-04-10 17:05:21 +00:00
a291107f62 nix/gitlab-ci: attempt to do things on Mac Mini 2021-04-09 20:03:51 +00:00
0943931a6a nix/pkgs: remove pomerium, it's upstream now 2021-04-07 00:41:20 +00:00
13f2f79e6d graphical-client: add wallpapers
If I find more I like, I'll add them here, I guess. For the moment, there's
just the one.
2021-04-06 09:53:56 +01:00
f5622acaf7 nix/pkgs/flameshot: bump to my patched version 2021-04-05 14:57:59 +01:00
e11229d070 nix/pkgs: init my flameshot fork 2021-04-05 12:40:55 +01:00
a598fd0e53 nix/docker/heptapod: can't do that like that :( 2021-04-02 02:08:40 +00:00
09a6c8cafe marukuru: switch heptapod image to being built with dockerTools
Fixes #1
2021-04-02 01:39:01 +00:00
e3b60baa72 Remove Docker push.
As part of #4, I'm removing all of the OpenShift-ness. While I do that, let's keep Twitterchiver as is.
2021-03-30 21:28:43 +01:00
2b8dce0920 depot-wide: overhaul GitLab CI configuration
We now use a stub configuration to kick off the pipeline, which is dynamically
generated using Nix config.
2021-03-28 15:27:46 +00:00
017458ae2e bazel-run: back to Java 11, which is AdoptOpenJDK LTS 2021-03-26 03:52:35 +00:00
7273c31af5 nix/pkgs/pomerium: allow unitless 0 2021-03-14 14:40:54 +00:00
36577c5bba nix/pkgs/pomerium: add timeouts to policy 2021-03-14 14:38:56 +00:00
a71f4a47f9 nix/pkgs: add prometheus-snmp-config 2021-03-14 00:51:11 +00:00
4649556303 alertmanager-discord: init 2021-02-23 00:16:49 +00:00
0a38f01047 nix/pkgs/plex-pass: update to 1.21.4.4054 2021-02-21 03:18:53 +00:00
d8c29b0113 nix/pkgs: remove stdenv.lib from non-generated code 2021-02-13 13:56:02 +00:00
7558697bba nix/pkgs/unifi-hack: update 2021-02-07 23:39:46 +00:00
89e37ba633 nix/pkgs: enigma: init 2021-02-07 23:17:51 +00:00
efdf61b4e6 3p/nixpkgs: fix buildBazelPackage 2021-02-07 22:51:09 +00:00
78040f6c94 nix/pkgs: init hp-rom; add to netboot 2021-01-30 18:47:01 +00:00
b6a1403c04 nix/pkgs: add windows ISOs in prep for doing stuff with them for iPXE 2021-01-30 17:15:16 +00:00
ca27848285 web/quotes: add tailwind 2021-01-20 02:04:30 +00:00
c62b596078 nix/pkgs: remove envoy 2021-01-19 03:56:14 +00:00
1d41593ae2 nix/pkgs: add newer version of django-allauth 2021-01-19 03:51:07 +00:00
47c6327b4d nix/pkgs/copybara: switch to JDK15 after nixpkgs update 2021-01-11 17:44:05 +00:00
1e8eec28b1 nix/pkgs/sheepshaver: ensure STDC_HEADERS is set 2021-01-07 11:48:18 +00:00
0c713bbf64 nix/pkgs/envoy: fix under new nixpkgs 2021-01-07 11:28:45 +00:00
85c2c4d507 unifiHack: init
This package takes the upstream Unifi package, and then applies a AspectJ
aspect which replaces the auth logic with stuff which checks whether there's a
Pomerium header.
2021-01-04 20:49:04 +00:00
2d52be000f tiny-remapper: init 2021-01-04 20:48:20 +00:00
87e7dae108 nix/pkgs/lightspeed-react: add websocketURL parameter 2021-01-04 15:51:00 +00:00
c0245a68ca lightspeed-react: init 2021-01-04 15:05:55 +00:00
d629a3561c lightspeed-webrtc: init 2021-01-04 15:05:46 +00:00
294e7731d6 lightspeed-ingest: init 2021-01-04 15:05:32 +00:00
eb9d9f54a5 nix/pkgs/grafana-plugins: rework a bit 2020-12-30 03:30:24 +00:00
ca4f3c0013 nix/pkgs/grafana-plugins: init 2020-12-30 02:43:10 +00:00
26e379dfb7 depot-wide: create logged-out.int.lukegb.com 2020-12-30 00:57:53 +00:00
7d0493cacd deluge: patch deluge-web to try logging in with a fixed password first 2020-12-28 20:04:27 +00:00
9fc4be6a9c nix/pkgs/plex-pass: update to 1.21.1.3830 2020-12-28 19:45:14 +00:00
784138746f pomerium: document all known pomerium options as nixos module options 2020-12-28 18:54:00 +00:00
8956bc3207 pomerium: use /var/lib/pomerium for autocert state 2020-12-28 17:12:06 +00:00
8ed1d0665e pomerium: unbreak LuaJIT 2020-12-28 17:04:31 +00:00