12f19506fc
feat(compute01): Update nixos, but keep kanidm_1_3
2024-12-15 23:08:42 +01:00
a2d397de70
feat(nodes): Update to nixos 24.11
2024-12-15 23:08:42 +01:00
88d9b8c3e3
chore: Add license and copyright information
...
Check meta / check_dns (pull_request) Successful in 19s
Check meta / check_meta (pull_request) Successful in 20s
Check workflows / check_workflows (pull_request) Successful in 24s
Build all the nodes / ap01 (pull_request) Successful in 1m15s
Build all the nodes / bridge01 (pull_request) Successful in 1m53s
Build all the nodes / geo01 (pull_request) Successful in 1m55s
Build all the nodes / geo02 (pull_request) Successful in 1m53s
Build all the nodes / compute01 (pull_request) Successful in 2m33s
Build all the nodes / rescue01 (pull_request) Successful in 2m13s
Build all the nodes / storage01 (pull_request) Successful in 1m57s
Run pre-commit on all files / check (pull_request) Successful in 30s
Build all the nodes / web02 (pull_request) Successful in 1m47s
Build all the nodes / vault01 (pull_request) Successful in 2m21s
Build all the nodes / web03 (pull_request) Successful in 1m40s
Build all the nodes / web01 (pull_request) Successful in 2m54s
Check meta / check_dns (push) Successful in 20s
Check meta / check_meta (push) Successful in 19s
Check workflows / check_workflows (push) Successful in 25s
Build all the nodes / ap01 (push) Successful in 1m16s
Build all the nodes / bridge01 (push) Successful in 1m41s
Build all the nodes / geo02 (push) Successful in 1m44s
Build all the nodes / geo01 (push) Successful in 1m53s
Build all the nodes / compute01 (push) Successful in 2m20s
Build all the nodes / rescue01 (push) Successful in 1m49s
Build all the nodes / storage01 (push) Successful in 1m46s
Build all the nodes / vault01 (push) Successful in 1m45s
Run pre-commit on all files / check (push) Successful in 30s
Build all the nodes / web02 (push) Has been cancelled
Build all the nodes / web01 (push) Has been cancelled
Build all the nodes / web03 (push) Has been cancelled
Signed-off-by: Tom Hubrecht <tom.hubrecht@dgnum.eu>
Acked-by: Ryan Lahfa <ryan.lahfa@dgnum.eu>
Acked-by: Maurice Debray <maurice.debray@dgnum.eu>
Acked-by: Lubin Bailly <lubin.bailly@dgnum.eu>
Acked-by: Jean-Marc Gailis <jean-marc.gailis@dgnum.eu> as the legal authority, at the time of writing, in DGNum.
Acked-by: Elias Coppens <elias.coppens@dgnum.eu> as a member, at the time of writing, of the DGNum executive counsel.
2024-12-13 12:41:38 +01:00
f16d8ce68f
fix(ap01): switch Liminix nodes to 24.05
...
There's a bug in 24.11 regarding GCC bootstrap for mipsel which makes it
impossible to use that NixOS version.
We will need to pin 24.05 and bisect until we find the root cause…
Signed-off-by: Ryan Lahfa <ryan@dgnum.eu>
2024-12-08 21:14:28 +01:00
a2295953da
fix(meta): Add required stuff for ap01
2024-12-08 17:15:45 +01:00
cdd8b9cc12
feat(machines): add ap01 initial configuration
...
Signed-off-by: Ryan Lahfa <ryan@dgnum.eu>
2024-12-08 15:24:40 +01:00
1821104e8e
feat(meta): Add system to the nodes meta
2024-12-08 11:40:01 +01:00
344cc26d8e
feat(meta/*): support generalized deployments
...
Check meta / check_dns (pull_request) Successful in 18s
Run pre-commit on all files / check (push) Successful in 25s
Check meta / check_meta (pull_request) Successful in 18s
Check workflows / check_workflows (pull_request) Successful in 24s
Build all the nodes / bridge01 (pull_request) Failing after 28s
Build all the nodes / geo01 (pull_request) Failing after 25s
Build all the nodes / compute01 (pull_request) Failing after 31s
Build all the nodes / geo02 (pull_request) Failing after 25s
Build all the nodes / rescue01 (pull_request) Failing after 26s
Build all the nodes / storage01 (pull_request) Failing after 25s
Build all the nodes / vault01 (pull_request) Failing after 26s
Build all the nodes / web02 (pull_request) Failing after 26s
Build all the nodes / web01 (pull_request) Failing after 26s
Build all the nodes / web03 (pull_request) Failing after 28s
Run pre-commit on all files / check (pull_request) Successful in 24s
Our colmena knows how to deal with families of system types, e.g. NixOS
systems or Liminix-based systems.
This is a step 1 towards supporting our APs in our infrastructure.
Signed-off-by: Ryan Lahfa <ryan@dgnum.eu>
2024-12-07 15:26:13 +01:00
96e8bfff5b
feat(django-apps): Internalize
Check meta / check_dns (push) Successful in 20s
Check meta / check_meta (push) Successful in 20s
Build all the nodes / bridge01 (push) Successful in 57s
Build all the nodes / geo01 (push) Successful in 58s
Build all the nodes / geo02 (push) Successful in 50s
Build all the nodes / rescue01 (push) Successful in 1m1s
Build all the nodes / compute01 (push) Successful in 1m30s
Build all the nodes / storage01 (push) Successful in 1m0s
Build all the nodes / vault01 (push) Successful in 1m7s
Build all the nodes / web02 (push) Successful in 59s
Run pre-commit on all files / check (push) Successful in 22s
Build all the nodes / web01 (push) Successful in 1m33s
Build all the nodes / web03 (push) Successful in 1m24s
2024-11-25 23:29:39 +01:00
2b858bbae4
feat(web03): Switch to nixos-unstable
2024-10-22 14:09:54 +02:00
51133e6e5f
feat(netbird): Update
Check meta / check_meta (push) Successful in 16s
Check meta / check_dns (push) Successful in 16s
build configuration / build_and_cache_compute01 (push) Successful in 2m54s
build configuration / build_and_cache_storage01 (push) Successful in 4m19s
build configuration / build_and_cache_rescue01 (push) Successful in 1m10s
build configuration / build_and_cache_geo01 (push) Successful in 1m3s
build configuration / build_and_cache_geo02 (push) Successful in 1m1s
build configuration / build_and_cache_vault01 (push) Successful in 1m16s
build configuration / build_and_cache_web01 (push) Successful in 1m42s
build configuration / build_and_cache_web02 (push) Successful in 1m7s
build configuration / build_and_cache_web03 (push) Successful in 1m12s
build configuration / build_and_cache_bridge01 (push) Successful in 1m3s
lint / check (push) Successful in 23s
2024-10-20 23:01:14 +02:00
5f0c7d4e22
feat(meta/nodes): Sort nodes
2024-10-20 22:35:35 +02:00
sinavir
1a05ea3a9a
feat(krz01): Move to lab-infra repo
2024-10-18 11:53:32 +02:00
db5859e472
feat(web03): Initial deployment of django-apps
2024-10-17 15:11:43 +02:00
b6cbf6e918
feat(infra): Deploy web03
2024-10-16 11:08:24 +02:00
sinavir
7d70beb1f0
feat(krz01): create and add the lab admin group to krz01
Check meta / check_dns (push) Successful in 17s
Check meta / check_meta (push) Successful in 19s
build configuration / build_and_cache_storage01 (push) Successful in 1m19s
build configuration / build_and_cache_geo01 (push) Successful in 1m6s
build configuration / build_and_cache_geo02 (push) Successful in 1m6s
build configuration / build_and_cache_rescue01 (push) Successful in 1m39s
build configuration / build_and_cache_compute01 (push) Successful in 1m41s
lint / check (push) Successful in 24s
build configuration / build_and_cache_krz01 (push) Successful in 2m18s
build configuration / build_and_cache_web02 (push) Successful in 1m16s
build configuration / build_and_cache_bridge01 (push) Successful in 1m4s
build configuration / build_and_cache_vault01 (push) Successful in 1m27s
build configuration / build_and_cache_web01 (push) Successful in 1m58s
2024-10-10 13:35:34 +02:00
1e71ef3636
feat(users): Add root passwords and deactivate mutableUsers
Check meta / check_dns (push) Successful in 17s
Check meta / check_meta (push) Successful in 18s
build configuration / build_and_cache_storage01 (push) Successful in 1m32s
build configuration / build_and_cache_geo01 (push) Successful in 1m16s
build configuration / build_and_cache_rescue01 (push) Successful in 1m22s
build configuration / build_and_cache_compute01 (push) Successful in 1m44s
build configuration / build_and_cache_krz01 (push) Successful in 2m11s
build configuration / build_and_cache_geo02 (push) Successful in 1m6s
build configuration / build_and_cache_web02 (push) Successful in 1m17s
lint / check (push) Successful in 24s
build configuration / build_and_cache_vault01 (push) Successful in 1m35s
build configuration / build_and_cache_bridge01 (push) Successful in 1m10s
build configuration / build_and_cache_web01 (push) Successful in 1m50s
2024-10-10 09:23:19 +02:00
8441992408
feat(krz01): move to unstable
...
Signed-off-by: Ryan Lahfa <ryan@dgnum.eu>
2024-10-09 12:51:14 +02:00
sinavir
c6588da802
fix(krz01): Use default target
build configuration / build_geo01 (push) Waiting to run
build configuration / build_geo02 (push) Waiting to run
build configuration / build_bridge01 (push) Waiting to run
build configuration / push_to_cache_compute01 (push) Blocked by required conditions
build configuration / push_to_cache_storage01 (push) Blocked by required conditions
build configuration / push_to_cache_rescue01 (push) Blocked by required conditions
build configuration / push_to_cache_geo01 (push) Blocked by required conditions
build configuration / push_to_cache_geo02 (push) Blocked by required conditions
build configuration / push_to_cache_vault01 (push) Blocked by required conditions
build configuration / push_to_cache_web01 (push) Blocked by required conditions
build configuration / push_to_cache_web02 (push) Blocked by required conditions
build configuration / push_to_cache_bridge01 (push) Blocked by required conditions
lint / check (push) Waiting to run
Check meta / check_meta (push) Successful in 21s
Check meta / check_dns (push) Successful in 20s
build configuration / build_rescue01 (push) Has been cancelled
build configuration / build_web01 (push) Has been cancelled
build configuration / build_vault01 (push) Has been cancelled
build configuration / build_compute01 (push) Has been cancelled
build configuration / build_storage01 (push) Has been cancelled
build configuration / build_web02 (push) Has been cancelled
2024-10-08 12:57:57 +02:00
sinavir
70c69346fb
feat(krz01): init
Check meta / check_meta (push) Failing after 18s
Check meta / check_dns (push) Successful in 22s
build configuration / build_vault01 (push) Successful in 1m18s
build configuration / build_storage01 (push) Successful in 1m19s
build configuration / build_web02 (push) Successful in 1m4s
build configuration / build_compute01 (push) Successful in 1m28s
build configuration / build_rescue01 (push) Successful in 1m11s
build configuration / build_web01 (push) Successful in 1m44s
lint / check (push) Successful in 25s
build configuration / build_geo01 (push) Successful in 1m1s
build configuration / build_bridge01 (push) Successful in 1m4s
build configuration / build_geo02 (push) Successful in 1m12s
build configuration / push_to_cache_storage01 (push) Successful in 1m23s
build configuration / push_to_cache_web02 (push) Successful in 1m20s
build configuration / push_to_cache_vault01 (push) Successful in 1m31s
build configuration / push_to_cache_rescue01 (push) Successful in 1m34s
build configuration / push_to_cache_geo01 (push) Successful in 1m15s
build configuration / push_to_cache_compute01 (push) Successful in 1m55s
build configuration / push_to_cache_geo02 (push) Successful in 1m12s
build configuration / push_to_cache_bridge01 (push) Successful in 1m22s
build configuration / push_to_cache_web01 (push) Successful in 2m10s
2024-10-08 12:35:59 +02:00
f589be422e
fix(meta): Use root@ for the proxyjump to bridge01
build configuration / push_to_cache_bridge01 (push) Successful in 1m18s
Check meta / check_dns (push) Successful in 20s
Check meta / check_meta (push) Successful in 20s
build configuration / build_vault01 (push) Successful in 1m16s
build configuration / build_compute01 (push) Successful in 1m19s
build configuration / build_storage01 (push) Successful in 1m19s
build configuration / build_web01 (push) Successful in 1m34s
lint / check (push) Successful in 24s
build configuration / build_geo01 (push) Successful in 1m2s
build configuration / build_geo02 (push) Successful in 1m5s
build configuration / build_rescue01 (push) Successful in 1m11s
build configuration / build_web02 (push) Successful in 1m17s
build configuration / build_bridge01 (push) Successful in 1m9s
build configuration / push_to_cache_geo01 (push) Successful in 1m26s
build configuration / push_to_cache_storage01 (push) Successful in 1m41s
build configuration / push_to_cache_vault01 (push) Successful in 1m58s
build configuration / push_to_cache_geo02 (push) Successful in 1m21s
build configuration / push_to_cache_compute01 (push) Successful in 2m14s
build configuration / push_to_cache_web01 (push) Successful in 2m9s
build configuration / push_to_cache_rescue01 (push) Successful in 1m30s
build configuration / push_to_cache_web02 (push) Successful in 1m36s
2024-10-03 12:57:43 +02:00
680682f520
feat(bridge02): Initialize and add instructions to the README
Check meta / check_meta (push) Failing after 25s
Check meta / check_dns (push) Successful in 45s
build configuration / build_vault01 (push) Successful in 3m33s
build configuration / build_storage01 (push) Successful in 3m36s
build configuration / build_compute01 (push) Successful in 3m37s
build configuration / build_web02 (push) Successful in 2m56s
lint / check (push) Successful in 24s
build configuration / build_web01 (push) Successful in 3m45s
build configuration / build_rescue01 (push) Successful in 1m29s
build configuration / push_to_cache (push) Successful in 3m24s
2024-07-10 17:31:04 +02:00
c233a22a1a
feat(web02): Switch to nixos-24.05
Check meta / check_meta (push) Successful in 19s
Check meta / check_dns (push) Successful in 40s
build configuration / build_storage01 (push) Successful in 59s
build configuration / build_compute01 (push) Successful in 1m6s
build configuration / build_vault01 (push) Successful in 57s
build configuration / build_web01 (push) Successful in 1m20s
build configuration / build_web02 (push) Failing after 1m30s
lint / check (push) Successful in 24s
build configuration / build_rescue01 (push) Successful in 1m33s
build configuration / push_to_cache (push) Has been skipped
2024-07-05 14:38:53 +02:00
ac09d221ad
feat: Upgrade machines to nixos-24.05
2024-07-05 10:54:33 +02:00
6a44aa3504
fix(meta/nodes): use the full FQDN for vault01
...
Check meta / check_meta (push) Successful in 30s
Check meta / check_dns (push) Successful in 52s
build configuration / build_storage01 (push) Successful in 1m19s
build configuration / build_vault01 (push) Successful in 1m20s
build configuration / build_web02 (push) Successful in 53s
build configuration / build_compute01 (push) Successful in 1m23s
build configuration / build_web01 (push) Successful in 1m38s
lint / check (push) Successful in 23s
build configuration / build_rescue01 (push) Successful in 54s
build configuration / push_to_cache (push) Successful in 2m10s
Otherwise, I cannot really hit it… :D
Signed-off-by: Ryan Lahfa <ryan@dgnum.eu>
2024-06-14 22:15:46 +02:00
947e29aa57
feat(vault01): Make the fai group admin
2024-05-14 23:48:40 +02:00
dba0c88f70
feat(compute01): Deploy stirling-pdf on pdf.dgnum.eu
Check meta / check_meta (push) Successful in 26s
Check meta / check_dns (push) Successful in 47s
build configuration / build_vault01 (push) Successful in 1m11s
build configuration / build_storage01 (push) Successful in 1m19s
build configuration / build_web02 (push) Successful in 58s
lint / check (push) Successful in 32s
build configuration / build_rescue01 (push) Successful in 55s
build configuration / build_web01 (push) Successful in 1m42s
build configuration / build_compute01 (push) Successful in 2m29s
build configuration / push_to_cache (push) Successful in 2m15s
2024-04-19 14:40:09 +02:00
c47437116b
feat(modules): Introduce per node module import from meta
Check meta / check_meta (push) Successful in 25s
Check meta / check_dns (push) Successful in 46s
build configuration / build_vault01 (push) Successful in 1m6s
build configuration / build_storage01 (push) Successful in 1m10s
build configuration / build_compute01 (push) Successful in 1m15s
build configuration / build_web02 (push) Successful in 53s
lint / check (push) Successful in 26s
build configuration / build_rescue01 (push) Successful in 49s
build configuration / build_web01 (push) Successful in 1m34s
build configuration / push_to_cache (push) Successful in 2m22s
2024-04-18 16:23:25 +02:00
f9a34353a3
Add keys/catvayor.keys ( #83 )
...
Check meta / check_meta (push) Successful in 24s
Check meta / check_dns (push) Successful in 45s
build configuration / build_vault01 (push) Successful in 1m6s
build configuration / build_storage01 (push) Successful in 1m7s
build configuration / build_compute01 (push) Successful in 1m14s
build configuration / build_web02 (push) Successful in 51s
lint / check (push) Successful in 23s
build configuration / build_rescue01 (push) Successful in 47s
build configuration / build_web01 (push) Successful in 1m32s
Reviewed-on: #83
Co-authored-by: katvayor <catvayor@katvayor.net>
Co-committed-by: katvayor <catvayor@katvayor.net>
2024-04-04 12:49:28 +02:00
sinavir
47d09f6ffa
feat(dns): IPv4 for rescue01
Check meta / check_meta (push) Successful in 17s
Check meta / check_dns (push) Successful in 45s
build configuration / build_storage01 (push) Successful in 1m2s
build configuration / build_compute01 (push) Successful in 1m12s
build configuration / build_vault01 (push) Successful in 57s
lint / check (push) Successful in 23s
build configuration / build_web02 (push) Successful in 59s
build configuration / build_rescue01 (push) Successful in 57s
build configuration / build_web01 (push) Successful in 1m30s
2024-04-03 21:20:56 +02:00
sinavir
747d8c08cb
feat(netbox-agent): init
build configuration / build_vault01 (pull_request) Successful in 1m55s
build configuration / build_web02 (pull_request) Successful in 1m38s
build configuration / build_compute01 (pull_request) Successful in 2m7s
build configuration / build_web01 (pull_request) Successful in 1m59s
build configuration / build_storage01 (pull_request) Successful in 2m12s
build configuration / build_rescue01 (pull_request) Successful in 1m2s
build configuration / build_compute01 (push) Successful in 1m5s
build configuration / build_storage01 (push) Successful in 1m8s
build configuration / build_vault01 (push) Successful in 1m6s
lint / check (push) Successful in 22s
build configuration / build_web01 (push) Successful in 1m27s
build configuration / build_web02 (push) Successful in 53s
build configuration / build_rescue01 (push) Successful in 51s
2024-03-28 13:26:19 +01:00
88859390a6
feat(meta): Switch to new naming scheme for sites
build configuration / build_web02 (pull_request) Successful in 1m7s
build configuration / build_vault01 (pull_request) Successful in 1m7s
build configuration / build_storage01 (pull_request) Successful in 1m11s
build configuration / build_compute01 (pull_request) Successful in 1m14s
build configuration / build_rescue01 (pull_request) Successful in 52s
build configuration / build_web01 (pull_request) Successful in 1m32s
build configuration / build_rescue01 (push) Successful in 1m1s
build configuration / build_vault01 (push) Successful in 1m3s
build configuration / build_web02 (push) Successful in 1m4s
build configuration / build_storage01 (push) Successful in 1m7s
build configuration / build_compute01 (push) Successful in 1m12s
lint / check (push) Successful in 20s
build configuration / build_web01 (push) Successful in 1m28s
2024-03-24 10:18:33 +01:00
sinavir
2e93649de3
fix(vault01): Connect to internet and deploy through vpn
build configuration / build_rescue01 (push) Successful in 1m3s
build configuration / build_web02 (push) Successful in 1m5s
build configuration / build_storage01 (push) Successful in 1m9s
build configuration / build_vault01 (push) Successful in 1m9s
build configuration / build_compute01 (push) Successful in 1m15s
lint / check (push) Successful in 22s
build configuration / build_web01 (push) Successful in 1m31s
2024-03-12 12:27:05 +01:00
sinavir
581fa6b560
chore: pre-commit hooks are supposed to be run....
build configuration / build_vault01 (push) Successful in 1m5s
build configuration / build_web02 (push) Successful in 1m6s
build configuration / build_compute01 (push) Successful in 1m11s
build configuration / build_storage01 (push) Successful in 1m10s
lint / check (push) Successful in 24s
build configuration / build_web01 (push) Successful in 1m33s
build configuration / build_rescue01 (push) Successful in 49s
2024-03-10 01:03:30 +01:00
82cafb5fd7
feat(meta): Rework and use a module
2024-02-23 11:13:21 +01:00
bdc5cbc197
feat(infra): init rescue01
2024-02-21 17:20:55 +01:00
ade91c7bfd
feat(infra): Deploy geo02
lint / check (push) Successful in 32s
build configuration / build_vault01 (push) Successful in 1m2s
build configuration / build_web02 (push) Successful in 1m2s
build configuration / build_storage01 (push) Successful in 1m7s
build configuration / build_compute01 (push) Successful in 1m10s
build configuration / build_web01 (push) Successful in 1m26s
ds-fr update / npins_update (push) Successful in 1m56s
2024-02-20 17:57:38 +01:00
c991c47b75
feat(infra): Deploy geo01
2024-02-20 17:47:50 +01:00
5e3819c9b2
feat(shell): Add pre-commit hooks and reformat the repo
2024-02-02 10:51:31 +01:00
ce0dfe5431
chore(infra): Remove remnants of dgn-dns
2024-02-01 13:35:30 +01:00
fc0f4a603a
feat(machines): Init web02
build configuration / build_vault01 (push) Successful in 53s
build configuration / build_storage01 (push) Successful in 56s
build configuration / build_web01 (push) Successful in 1m12s
build configuration / build_compute01 (push) Successful in 1m24s
build configuration / build_web02 (push) Successful in 55s
2024-01-11 12:45:01 +01:00
d194b58813
feat(vault01): Switch to nixos-unstable
build configuration / build_storage01 (push) Successful in 1m48s
build configuration / build_web01 (push) Successful in 1m8s
build configuration / build_vault01 (push) Successful in 4m17s
build configuration / build_compute01 (push) Successful in 7m19s
npins update / npins_update (push) Waiting to run
2024-01-10 15:05:50 +01:00
13524c20f6
feat(machines): Init vault01
build configuration / build_storage01 (push) Successful in 2m35s
build configuration / build_vault01 (push) Successful in 1m19s
build configuration / build_web01 (push) Successful in 1m25s
build configuration / build_compute01 (push) Has been cancelled
2024-01-10 15:00:18 +01:00
sinavir
a81c902d53
feat(web01): Update web01 to 23.11
2023-12-06 16:55:51 +01:00
Tom Hubrecht
b961222d76
feat(storage01): Update stateVersion for newer postgres
2023-11-29 21:04:09 +01:00
Tom Hubrecht
0dc3dfd82d
feat: Update compute01, storage01 to 23.11
2023-11-29 16:12:24 +01:00
Tom Hubrecht
39159d3b22
feat(members): Add @maurice to the root group
2023-10-16 10:19:15 +02:00
Tom Hubrecht
1e3b88d3c2
feat(meta): Remove bureau from root access
2023-09-11 18:59:59 +02:00
Tom Hubrecht
c2616ce4f5
modules/dgn-dns: init
...
Also deploy a DNS server on compute01
2023-07-21 00:37:05 +02:00
Tom Hubrecht
2274668f9b
modules: Setup dgn-network with configuration from metadata
2023-07-20 12:32:31 +02:00