Commit graph

249 commits

Author SHA1 Message Date
294e7731d6 lightspeed-ingest: init 2021-01-04 15:05:32 +00:00
eb9d9f54a5 nix/pkgs/grafana-plugins: rework a bit 2020-12-30 03:30:24 +00:00
ca4f3c0013 nix/pkgs/grafana-plugins: init 2020-12-30 02:43:10 +00:00
26e379dfb7 depot-wide: create logged-out.int.lukegb.com 2020-12-30 00:57:53 +00:00
7d0493cacd deluge: patch deluge-web to try logging in with a fixed password first 2020-12-28 20:04:27 +00:00
9fc4be6a9c nix/pkgs/plex-pass: update to 1.21.1.3830 2020-12-28 19:45:14 +00:00
784138746f pomerium: document all known pomerium options as nixos module options 2020-12-28 18:54:00 +00:00
8956bc3207 pomerium: use /var/lib/pomerium for autocert state 2020-12-28 17:12:06 +00:00
8ed1d0665e pomerium: unbreak LuaJIT 2020-12-28 17:04:31 +00:00
41bdeda58a pomerium: various fixups to make this work 2020-12-28 15:27:18 +00:00
10c6ddc4c9 etheroute-lon01: install pomerium 2020-12-28 14:08:24 +00:00
f8031ab38c nix/pkgs/pomerium: move to separate folder 2020-12-28 12:20:51 +00:00
d4b439c523 nix/pkgs/pomerium: move envoy zip appending to postFixup phase
This ensures that we don't immediately remove it (because strip will otherwise
just strip it because it's trailing content).
2020-12-27 19:49:02 +00:00
a991f3dca9 nix/pkgs: init pomerium 2020-12-27 19:24:22 +00:00
483786f792 nix/pkgs: init envoy 2020-12-27 18:58:58 +00:00
f6428191cf nix/pkgs/javaws-env: patch JRE to enable RC4/SSLv3 2020-12-26 23:36:15 +00:00
dd27953d33 nix/pkgs: add intermec-cups-driver 2020-12-19 19:25:42 +00:00
8db16c9c60 erbium: fix derivation 2020-11-30 23:39:21 +00:00
8ff8546339 erbium: switch to using crate2nix from upstream 2020-11-30 19:41:39 +00:00
185ef2a819 plex-pass: update to debian, 1.21.0.3616 2020-11-30 19:34:08 +00:00
6d10a1cb0c nix/pkgs: init sheepshaver 2020-11-15 21:23:53 +00:00
d6f36cf247 nix/pkgs/erbium: sigh 2020-11-06 05:08:47 +00:00
fb6544f158 nix/pkgs: init python-emv at 1.0.9 2020-11-05 00:44:17 +00:00
46896bc2ed nix/pkgs/erbium: update deps hash 2020-11-04 18:59:36 +00:00
1c1152c874 erbium: update depsHash 2020-11-01 21:45:24 +00:00
75aef1e3ca nix/pkgs: add erbium 2020-11-01 21:22:52 +00:00
7b80b817dd copybara: depend on jdk14_headless instead of 'headful' jre 2020-10-18 13:26:29 +00:00
d0e40e4a6b nix/pkgs: add crane 2020-10-04 02:33:44 +01:00
225dfdc114 misc: fix up reuse lint 2020-10-04 01:08:07 +01:00
7b53535355 misc: fix up after nixpkgs update 2020-09-30 17:39:34 +00:00
9f90e567f2 nix/pkgs: update plex-pass 2020-09-04 16:54:53 +00:00
6b2df5840e nix/pkgs/copybara: update for new nixpkgs 2020-07-19 18:11:09 +01:00
218815e877 nix/pkgs: remove oven-media-engine
It's upstream now.
2020-07-19 17:57:33 +01:00
60f322d4a6 oven-media-engine: init at 0.10.4 2020-07-12 10:51:57 +00:00
f3d1fee59d nix/pkgs: add bazel-run userenv 2020-06-16 09:39:54 +01:00
48011ebba9 licensing: Apache-2.0, make almost reuse-lint clean 2020-06-07 15:03:12 +01:00
15c82b0498 local repo fixups after bump of nixpkgs 2020-06-06 13:12:39 +01:00
7100a39ee3 nix/pkgs/plexpass: update to 1.19.4.2902 2020-06-06 00:37:51 +00:00
abbbc2c216 hg-git: add 0.9.0a1 for py3, and use that 2020-05-17 03:23:54 +01:00
d796fe1dfd nix/pkgs: fix up copybara/secretsync for new nixpkgs 2020-05-16 19:20:59 +01:00
9b64e2c361 nix/pkgs/copybara: create 2020-05-16 16:37:45 +01:00
823eab4775 secretsync: escape $ in variable content
GitLab doesn't treat $ as literals in file content, which means that it
tries to do variable interpolation.

This is bad and annoying, because e.g. password hashes tend to contain $,
so they get variable-interpolated and thus corrupted.

Fix this by escaping $ on input to GitLab.
2020-05-10 12:11:26 +01:00
91d742c1cd gitlab-ci: try and get deploys works 2020-05-09 23:49:32 +01:00
a9cb53fa16 secretsync: add concept of manifest variable
This is a file-type variable which contains the original mapping of
VARIABLE_NAME to VARIABLE_DATA.

This can be used to automatically repopulate a repository with
secrets that were originally taken from it and transmitted via
GitLab variables (i.e. out-of-band).
2020-05-09 14:26:54 +01:00
ed8c77a9c6 heptapod-runner: make sure our wrapped Mercurial is on the PATH 2020-05-09 13:22:49 +01:00
6266b42b66 secretsync: add
This is a helper utility for syncing filesystem files into GitLab variables, for
deploy-time secrets.
2020-05-09 12:45:13 +01:00
5b96c181b2 heptapod-runner: add derivation 2020-05-09 01:10:49 +01:00
25956f7607 clouvider-fra01: add Plex Pass media server. 2020-05-06 10:02:00 +01:00
79c7b70a96 porcorosso: add javaws bin that drops into a FHS env.
This allows me to use Supermicro's BMC, which appears to drop a
stunnel binary into /tmp and then execute it, which doesn't work
properly in Nix because nothing is where it is expected to be.
2020-05-06 10:01:46 +01:00