Commit graph

1223 commits

Author SHA1 Message Date
bd3c7c090e totoro: add HA config 2022-01-17 04:04:07 +00:00
6276e4b620 ops/nixos: add common-updater-scripts to hm/client 2022-01-16 18:04:24 +00:00
d8186b8f14 ops/nixos/graphical-client: enable gnome-keyring 2022-01-16 18:04:14 +00:00
afae9bec9a totoro: add some home-assistant gubbins 2022-01-17 02:38:33 +00:00
c10d4efd5e nix/pkgs/deluge: update path for trying empty login first 2022-01-16 15:26:38 +00:00
a99b7d46a1 3p/nixpkgs: add patch so mongodb can continue to build 2022-01-16 03:16:52 +00:00
Default email
14910f5943 Project import generated by Copybara.
GitOrigin-RevId: 5aaed40d22f0d9376330b6fa413223435ad6fee5
2022-01-13 15:06:32 -05:00
f3d86dbf9e 3p/nixpkgs: clean up patches 2022-01-16 02:16:02 +00:00
eb3b306439 Backed out changeset 073cf55ed346
Mischief managed
2022-01-15 13:32:47 +00:00
687d72cfdc ops/nixos: experiment with ECMP 2022-01-15 13:32:41 +00:00
9be6bcaf2d ops/nixos: set up gnetwork link 2022-01-14 19:42:06 +00:00
deployer@bvm-nixosmgmt.blade.as205479.net
af848af78c nix/pkgs/plex-pass: update version to 1.25.3.5409-f11334058 2022-01-14 02:10:48 +00:00
deployer@bvm-nixosmgmt.blade.as205479.net
0917f5eb3e nix/pkgs/plex-pass: update version to 1.25.3.5385-f05b712b6 2022-01-12 02:10:47 +00:00
7cfef2cd98 coredns/zones: add lukegb01.ring.nlnog.net 2022-01-10 23:35:54 +00:00
9ccf3b333d blade-tuvok: provide a proper path to the sysctl utility 2022-01-10 22:40:57 +00:00
4f0a7b60bc ops/nixos: use higher-priority 'mkDefault' 2022-01-09 21:38:17 +00:00
ea10f06a4c ops/nixos: more cleanups 2022-01-09 00:22:52 +00:00
2770e7c086 porcorosso: tweak setup-display so that it overrides panning 2022-01-08 22:17:13 +00:00
9472db4577 ops/nixos: consolidate Frantech VM configs into lib/frantech.nix 2022-01-08 21:49:09 +00:00
ad95bffd3d ops/nixos: tidy up networking.useDHCP 2022-01-08 21:45:18 +00:00
f463055acf ops/nixos: pipewire for everyone 2022-01-08 21:41:30 +00:00
4b2c0f7fa8 porcorosso: set up PRIME so we can draw to my laptop's internal display! 2022-01-08 21:28:03 +00:00
1348172aba porcorosso: remove unused hyperv config 2022-01-08 19:54:03 +00:00
1b4b7f0a80 porcorosso: remove default.pa 2022-01-08 19:45:55 +00:00
2ddd50aef4 etheroute-lon01: disable TLS verification for totoro
For some reason this is failing with a TLS alert that the certificate
is expired???
2022-01-07 15:23:43 +00:00
fe09e44c5c porcorosso: block i2c-nvidia-gpu, causes X11 to fail to init 2022-01-07 12:51:18 +00:00
bac7e1fb69 porcorosso: remove blast config 2022-01-07 12:42:55 +00:00
5b7f6eb880 3p/nixpkgs: add patches to mercurial package 2022-01-08 17:05:28 +00:00
Default email
3a47dd4636 Project import generated by Copybara.
GitOrigin-RevId: ff377a78794d412a35245e05428c8f95fef3951f
2022-01-07 12:07:37 +08:00
Default email
391e4a2fe6 Project import generated by Copybara.
GitOrigin-RevId: ff377a78794d412a35245e05428c8f95fef3951f
2022-01-07 12:07:37 +08:00
05be94e4d7 ops/nixos/common: disable DNSSEC in systemd-resolved
It's super broken.

At the moment, resolving foss.heptapod.net breaks, because clever-cloud.com has
DNSKEY records but there's no matching DS record at .com for it.

There are also other reports: https://github.com/systemd/systemd/issues/12388

tl;dr: it just doesn't work, let's not use that.
2022-01-08 12:09:26 +00:00
506a584dea totoro: set up podman socket support 2022-01-08 12:08:04 +00:00
Default email
3e7541c14f Project import generated by Copybara.
GitOrigin-RevId: ff377a78794d412a35245e05428c8f95fef3951f
2022-01-07 12:07:37 +08:00
9e79ad0cfa bvm-radius: add new roaming2.ja.net IPs 2022-01-07 11:49:24 +00:00
5001971b87 totoro: add bvm-.* alerts 2022-01-06 17:51:39 +00:00
6ab12dcad5 ops/nixos: rm marukuru 2022-01-06 15:55:21 +00:00
Default email
2495e3f88b Project import generated by Copybara.
GitOrigin-RevId: 78cd22c1b8604de423546cd49bfe264b786eca13
2022-01-03 17:56:52 +01:00
d79265ddad ops/nixos: tidy up security.acme 2022-01-04 14:00:45 +00:00
de71fd5c9a ops/nixos/lib/common: add global DNS servers 2022-01-04 13:32:56 +00:00
8cc6e2001a ops/nixos: create permanent quotesdb user
Stop relying on DynamicUser because it messes a bit with postgres' auth.
2022-01-01 21:49:23 +00:00
3318874168 marukuru: remove heptapod{,-runner} 2022-01-01 21:31:01 +00:00
67b038c2bc ops/nixos/common: turn off logRefusedConnections - it's super noisy 2022-01-01 20:56:41 +00:00
37e36418a1 bvm-logger: add custom clickhouse config
Just make it less spammy into the journal, sheesh.
2022-01-01 16:31:05 +00:00
086f5fe597 journal2clickhouse: coerce things that look like strings back to strings
There's binary data sometimes, but on the whole I don't care about preserving
it properly (sorry), so let's just coerce it to a string if it is supposed to
go into a "proper" field.
2022-01-01 16:30:38 +00:00
7e848a2622 go/journal2clickhouse: fix the Classic Bug 2022-01-01 15:31:47 +00:00
730d057e18 bvm-logger: enable journal2clickhouse for real 2022-01-01 15:24:32 +00:00
7b4e6c0e1b ops/nixos: oops, try to fix my.scrapeJournal.addr 2022-01-01 15:14:02 +00:00
c91a42948d journal2clickhouse: init 2022-01-01 15:08:52 +00:00
c5119b4882 ops/nixos: enable HTTP gateway if Tailscale is configured 2022-01-01 12:40:13 +00:00
1f13fd811d coredns: bind to specific interfaces/IPs 2022-01-01 09:03:25 +00:00