c5d03b795e
ops/nixos: give everything a consistent mercurial
2020-05-09 18:15:12 +01:00
0c461e9422
common: add my hgrc so I can have evolve everywhere
2020-05-09 14:42:19 +01:00
0236b2450b
porcorosso: start using manifest variable
2020-05-09 14:27:10 +01:00
a9cb53fa16
secretsync: add concept of manifest variable
...
This is a file-type variable which contains the original mapping of
VARIABLE_NAME to VARIABLE_DATA.
This can be used to automatically repopulate a repository with
secrets that were originally taken from it and transmitted via
GitLab variables (i.e. out-of-band).
2020-05-09 14:26:54 +01:00
0949accaea
gitlab-ci: drop cache directive entirely
2020-05-09 13:54:15 +01:00
b9e5dac14c
gitlab-ci: tweak caching strategy
...
/nix/store is now just a Docker volume on the host running the build,
so the store should just implicitly get shared.
2020-05-09 13:48:37 +01:00
ed8c77a9c6
heptapod-runner: make sure our wrapped Mercurial is on the PATH
2020-05-09 13:22:49 +01:00
e613112eda
ci-root: add ciPackages to the root derivation as well
2020-05-09 13:09:29 +01:00
c110580d82
porcorosso: swap path to a string.
...
Can't use a path here since this doesn't exist on CI.
2020-05-09 12:59:51 +01:00
0474fea9f7
clouvider-fra01: set deluge.authFile
2020-05-09 12:56:56 +01:00
11f8b7f5aa
gitlab-ci: use different caching strategy
2020-05-09 12:52:31 +01:00
a708872dec
porcorosso: add a configured secretsync
2020-05-09 12:45:31 +01:00
6266b42b66
secretsync: add
...
This is a helper utility for syncing filesystem files into GitLab variables, for
deploy-time secrets.
2020-05-09 12:45:13 +01:00
02112f071c
clouvider-fra01: deluge
2020-05-09 11:14:37 +01:00
606151ddb4
ops/nixos: move rebuilder derivation into its own file.
2020-05-09 11:14:25 +01:00
fc8e2e7419
ci-root: rework to using linkFarm derivation
2020-05-09 11:14:07 +01:00
5b96c181b2
heptapod-runner: add derivation
2020-05-09 01:10:49 +01:00
f34991e545
nixos/lib/common: oops, meant "cache", not hydra
2020-05-09 01:10:37 +01:00
2508b6ed9a
ops/nixos: add deployer user
2020-05-09 01:10:20 +01:00
bc50bdb7d2
ops/nixos: add GCP binary cache
2020-05-09 00:03:21 +01:00
19c29c56ff
ops/nixos: fix things
2020-05-08 23:34:17 +01:00
06910a0445
ixvm-fra01: remove bird.nix
2020-05-08 23:29:30 +01:00
c4a6c2592f
ixvm-fra01: merge useless changes
2020-05-08 23:29:10 +01:00
83cfa93b11
merge in local changes from marukuru
2020-05-08 23:28:42 +01:00
1e7fcadc97
ops/nixos: rework everything to factor common things out
2020-05-08 23:26:21 +01:00
24fe8291c2
marukuru: switch to heptapod
2020-05-08 22:24:50 +00:00
bcaf738b8f
ixvm-fra01: add export_community
2020-05-08 21:48:44 +00:00
f99775ddf2
hgignore: ignore more result symlinks
2020-05-08 21:39:18 +01:00
ee5d39b153
gitlab-ci: reorder substituters
2020-05-08 19:12:02 +01:00
0158906a49
gitlab-ci: actually set cache path
...
Oops.
2020-05-08 18:53:41 +01:00
e0160d133f
gitlab-ci: mark both extra substituters as trusted
2020-05-08 18:40:47 +01:00
6b717e04ec
gitlab-ci: import some sekrits
2020-05-08 18:02:42 +01:00
23bb45a60a
Backed out changeset 1b4ecdc5b78d
2020-05-08 16:55:57 +00:00
9c45d867e2
Merge ixvm-fra01 changes
2020-05-08 17:52:55 +01:00
c6d883af9a
ixvm-fra01: fix up bird config
2020-05-08 16:52:04 +00:00
244f7d11d8
gitlab-ci: nix-build doesn't take -f
2020-05-08 17:51:22 +01:00
333ad15d07
gitlab-ci: try to set up
2020-05-08 17:48:34 +01:00
a68ea0ce27
marukuru: add builder1 user
2020-05-07 00:52:42 +01:00
cc168a96d9
ixvm-fra01: add listen bgp dual
2020-05-06 23:44:16 +01:00
326f7259b7
ixvm-fra01: allow disabling peering
2020-05-06 23:37:31 +01:00
f27ec35837
ixvm-fra01: add lukegb to bird2 group
2020-05-06 23:29:57 +01:00
cf4109aaf9
ixvm-fra01: add bird config
2020-05-06 23:27:14 +01:00
bf1ce6309e
meta: add result symlink to .hgignore
2020-05-06 20:57:05 +00:00
c66b8e4a00
third_party/nixpkgs: manually pull in PHP fix
...
https://github.com/NixOS/nixpkgs/pull/87138
2020-05-06 20:56:47 +00:00
5dbc575e95
clouvider-fra01: add content user/group.
2020-05-06 10:14:04 +01:00
25956f7607
clouvider-fra01: add Plex Pass media server.
2020-05-06 10:02:00 +01:00
79c7b70a96
porcorosso: add javaws bin that drops into a FHS env.
...
This allows me to use Supermicro's BMC, which appears to drop a
stunnel binary into /tmp and then execute it, which doesn't work
properly in Nix because nothing is where it is expected to be.
2020-05-06 10:01:46 +01:00
07829d4e34
clouvider-fra01: no need for /etc/nixos symlink
2020-05-06 00:35:00 +01:00
d8276603fa
Add first-pass for clouvider-fra01.
2020-05-06 00:28:23 +01:00
10ea6c910e
marukuru: readd pygments and phabricator group
2020-05-03 19:18:12 +01:00
