simono41/chaos-jetzt-nixfiles
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity
48 commits 1 branch 0 tags 184 KiB
Commit graph

48 commits

This branch
This branch
All branches
Author SHA1 Message Date
Moritz
2f3a707216
Merge pull request #20 from chaos-jetzt/momme-gpg 
Add gpg key for momme
 2023-07-25 20:02:36 +02:00
Moritz 'e1mo' Fromm
d8d2997bb3
Use full key fingerprint for e1mo in sops 2023-07-23 16:02:25 +02:00
Moritz 'e1mo' Fromm
b5ca65d9a0
Add mommes GPG key to sops 2023-07-23 16:01:04 +02:00
Moritz
6af66d37b0
Merge pull request #18 from chaos-jetzt/flake-update 
flake & dokuwiki plugin updates
 2023-07-22 22:30:37 +02:00
Moritz 'e1mo' Fromm
c1eebe17dc website: Clear old generations on dev 
With https://github.com/chaos-jetzt/website_pelican/pull/33, a lot of
orphans are to be expected which will take up space on our servers. This
introduces a timer which runs once a week and will delete any
website generations older than 28 days.
 2023-07-22 21:18:55 +02:00
Moritz 'e1mo' Fromm
cb56ab1f45
Update dokuwiki plugins 2023-07-22 17:47:42 +02:00
Moritz 'e1mo' Fromm
d9c1adde3e
Nix flake update 2023-07-22 17:47:34 +02:00
Moritz 'e1mo' Fromm
5442317071
Remove n0emis from sops 
Follow up to cd026b118c
 2023-07-17 12:20:02 +02:00
Moritz 'e1mo' Fromm
cd026b118c
Remove n0emis due to them leaving the admin team 2023-07-17 11:54:39 +02:00
Moritz 'e1mo' Fromm
17ed07993d
Colmena: Add deployment tags and block deploy all 2023-05-20 00:48:06 +02:00
Moritz 'e1mo' Fromm
6210804f59
Flake update 2023-05-20 00:43:55 +02:00
Moritz 'e1mo' Fromm
f2ebb3fe5c Set longer cache duration for fonts 
Since they are versioned, we can be a bit more liberal with the stated
cache duration.
 2023-04-25 14:39:37 +02:00
Moritz 'e1mo' Fromm
681da3fd18 Support custom 404 page 
The actual 404 will be generated from pelican. log_not_found was set for
privacy reasons (since we don't have a favicon, every request still gets
logged with it's full IP due to the 404)
 2023-04-25 14:39:37 +02:00
Moritz 'e1mo' Fromm
cb4c29f1d7 Deliver images in alternative formats 
If the browser supports webp/avif images, nginx checks if any file with
the same name but the other formats extension is available.
 2023-04-25 14:39:37 +02:00
Moritz 'e1mo' Fromm
bf891ae2d9 Update freescout flake for php8.2 compatibility 2023-04-13 18:38:10 +02:00
Moritz 'e1mo' Fromm
3d2493f3a0 freescout: 1.8.48 -> 1.8.71 2023-04-13 18:38:10 +02:00
Moritz 'e1mo' Fromm
37a3ca4a70 services/freescout: Initial setup 2023-04-13 18:38:10 +02:00
Moritz 'e1mo' Fromm
07779e14b3
Disable cachix (for now) 2023-04-12 14:18:19 +02:00
Moritz 'e1mo' Fromm
ab4baf558d
update nix-install-action 
Fixes incompatibilities with newer nix versions:
https://github.com/cachix/install-nix-action/releases/tag/v20
 2023-04-12 14:11:56 +02:00
Moritz 'e1mo' Fromm
37b0ccabf0
flake update 2023-04-12 12:22:52 +02:00
Moritz 'e1mo' Fromm
b8f08de175 services/dokuwiki: Add missing timezone option 2023-02-20 17:21:20 +01:00
Moritz
948664e5dc
Merge pull request #13 from chaos-jetzt/gh-actions-quality-of-life 
CODEOWNERS and GitHub actions
 2023-02-20 17:15:27 +01:00
Moritz 'e1mo' Fromm
460c8f13b6
Add initial nix building github actions 
To reduce the amount of redudand rebuilds cachix is used to store
outputs. The cachix cache should be accessible in the cachix UI to
everyone in the @chaos-jetzt/infra team
 2023-02-15 15:20:27 +01:00
Moritz 'e1mo' Fromm
2fdda18666
Add CODEOWNERS 
Very simply file, with this file we don't need to manually request
reviews since this will be done automatically.
 2023-02-15 12:55:50 +01:00
Moritz Kempe
1ec7fb3994 fixed incorrect spelling in deployment command 
When building with the old version, no build target exists for the specified command.
 2023-02-15 12:20:38 +01:00
Moritz 'e1mo' Fromm
f337dd087b
Add mome as admin 
As decided/approved in our plenum today
 2023-02-12 19:04:00 +01:00
adb-sh
6c1e6d5811 Update email and ssh key from adb 2023-02-11 22:10:44 +01:00
Moritz 'e1mo' Fromm
dd3325ab95
Remove redundand dokuwii override+openssh settings 2023-02-10 15:30:09 +01:00
Moritz 'e1mo' Fromm
840eff4f97
flake update 2023-02-10 15:28:34 +01:00
Moritz 'e1mo' Fromm
b7c8b28cf9
Update dokuwiki service config 2023-01-10 10:57:34 +01:00
Moritz 'e1mo' Fromm
76424262ec
Remove pretix from TODO 
Using CTFL Pretix for now
 2023-01-10 09:59:56 +01:00
Moritz 'e1mo' Fromm
8bc71b28bb
Nix flake update 2023-01-10 09:59:50 +01:00
Moritz 'e1mo' Fromm
81d3231d5c
services/website: Allow rsync upload of website 2023-01-08 16:12:15 +01:00
Moritz 'e1mo' Fromm
935f51e7d9
services/monitoring: Fix missing firewall rule 
I didn't notice this was missing in #5 until after deploying it. Since
the ports on the monitoring-network-interface (ens10) were not open,
scraping would fail and thus generate alerts.
 2023-01-06 16:07:46 +01:00
Moritz 'e1mo' Fromm
d199834a61
Add adb and admin htpasswd user 
Also updated instructions for editing the .htpasswd
 2023-01-06 15:51:22 +01:00
Moritz 'e1mo' Fromm
3acc1865c0
services/monitoring: Setup 
The goal is to create a monitoring setup where each server monitors
itself when it comes failing systemd services, disk or RAM filling up,
…. In addition each prometheus will monitor remote prometheus and
alertmanager instances for signs of failure (e.g. being unreachable,
errors in notification delivery, dropping alerts).

A lot of metrics (especially histograms from prometheus or alertmanager)
are being dropped before ingestion to disk save on space and memory.

Depending on how many servers we may or may not have in the future this
could probably use some kind of overhaul since we rightnow have n^2
monitoring peer relationships (not even speaking of possible duplicated
alerts).
 2023-01-06 15:51:22 +01:00
Moritz 'e1mo' Fromm
6e9c9a26cd
Pass flake inputs and outputs in more generic way 2023-01-06 15:51:20 +01:00
Moritz 'e1mo' Fromm
eef22f51c7
Update website-pelican to current version 2023-01-05 20:17:55 +01:00
Moritz 'e1mo' Fromm
e5d5e33cb3
Fix missing keycloak_key on shirley 2022-12-30 22:27:41 +01:00
Moritz 'e1mo' Fromm
383ecccbcc
dokuwiki: Fix acronym + remove TODO from README 
Co-Authored-By: adb-sh <git@adb.sh>
 2022-12-30 16:18:29 +01:00
Moritz 'e1mo' Fromm
451930531e
dokuwiki: Initial service setup 2022-12-30 14:57:33 +01:00
Moritz 'e1mo' Fromm
f49ae3721d Vaultwarden setup 
I decoded on the somewhat unordered looking isDev thing in order to
clearly indicate the seperation between the dev and production setup in
E-Mails for security reasons.
 2022-12-24 17:44:21 +01:00
Moritz 'e1mo' Fromm
3f8cc1e2a9
Add adb as admin as per Plenumsbeschluss (23.12.) 2022-12-23 20:19:02 +01:00
Moritz 'e1mo' Fromm
57f77543b4
Initial goldberg (dev server) version 2022-12-11 16:53:35 +01:00
Moritz 'e1mo' Fromm
690ea06e1c
Deploy to production + matrix well-known 2022-12-11 13:31:38 +01:00
Moritz 'e1mo' Fromm
d782f28bec
Extract extract services to services directory 
That way we can deploy them both on dev and prod hosts and just need to
change the `baseDomain` to differentiate.
 2022-12-11 12:29:02 +01:00
Moritz 'e1mo' Fromm
5d8cf1b67c
Remove leonas access as requested 2022-12-11 11:48:50 +01:00
Moritz 'e1mo' Fromm
fe542b2208
Initial commit 2022-11-27 23:11:34 +01:00