Commit graph

83 commits

Author SHA1 Message Date
fd0aeacff4
feat(firewall): Sunset fail2ban and switch to reaction
All checks were successful
build configuration / build_storage01 (push) Successful in 1m49s
build configuration / build_compute01 (push) Successful in 1m52s
build configuration / build_web02 (push) Successful in 2m0s
build configuration / build_vault01 (push) Successful in 2m12s
build configuration / build_web01 (push) Successful in 2m27s
lint / check (push) Successful in 29s
build configuration / build_geo02 (push) Successful in 1m28s
build configuration / build_rescue01 (push) Successful in 1m33s
build configuration / build_bridge01 (push) Successful in 1m22s
build configuration / build_geo01 (push) Successful in 1m35s
build configuration / push_to_cache_storage01 (push) Successful in 1m49s
build configuration / push_to_cache_compute01 (push) Successful in 1m52s
build configuration / push_to_cache_geo02 (push) Successful in 1m39s
build configuration / push_to_cache_web02 (push) Successful in 1m47s
build configuration / push_to_cache_rescue01 (push) Successful in 1m47s
build configuration / push_to_cache_bridge01 (push) Successful in 1m29s
build configuration / push_to_cache_web01 (push) Successful in 2m27s
build configuration / push_to_cache_geo01 (push) Successful in 1m22s
2024-09-01 22:51:56 +02:00
e0cec882d8
feat(console): Add motd with system info 2024-07-30 10:39:10 +02:00
680682f520
feat(bridge02): Initialize and add instructions to the README
Some checks failed
Check meta / check_meta (push) Failing after 25s
Check meta / check_dns (push) Successful in 45s
build configuration / build_vault01 (push) Successful in 3m33s
build configuration / build_storage01 (push) Successful in 3m36s
build configuration / build_compute01 (push) Successful in 3m37s
build configuration / build_web02 (push) Successful in 2m56s
lint / check (push) Successful in 24s
build configuration / build_web01 (push) Successful in 3m45s
build configuration / build_rescue01 (push) Successful in 1m29s
build configuration / push_to_cache (push) Successful in 3m24s
2024-07-10 17:31:04 +02:00
83d8ff264d feat(web02): Reimage the node 2024-06-17 17:06:37 +02:00
2329799c87 feat(monitoring): Add adminGroup emails
Some checks failed
Check meta / check_meta (pull_request) Successful in 25s
Check meta / check_dns (pull_request) Successful in 44s
build configuration / build_storage01 (pull_request) Successful in 1m10s
build configuration / build_compute01 (pull_request) Successful in 1m13s
build configuration / build_vault01 (pull_request) Successful in 1m1s
build configuration / build_web02 (pull_request) Successful in 58s
build configuration / build_web01 (pull_request) Successful in 1m31s
build configuration / build_rescue01 (pull_request) Successful in 55s
build configuration / push_to_cache (pull_request) Failing after 2m15s
build configuration / build_vault01 (push) Successful in 1m11s
build configuration / build_rescue01 (push) Successful in 1m12s
build configuration / build_storage01 (push) Successful in 1m14s
build configuration / build_compute01 (push) Successful in 1m17s
build configuration / build_web02 (push) Successful in 1m22s
lint / check (push) Successful in 24s
build configuration / build_web01 (push) Successful in 1m36s
build configuration / push_to_cache (push) Successful in 2m16s
2024-05-22 19:05:03 +02:00
a63f682aeb feat(monitoring): Add admin emails
All checks were successful
build configuration / build_web02 (push) Successful in 1m16s
build configuration / build_rescue01 (push) Successful in 1m21s
build configuration / build_vault01 (push) Successful in 1m21s
build configuration / build_storage01 (push) Successful in 1m22s
build configuration / build_compute01 (push) Successful in 1m28s
lint / check (push) Successful in 23s
build configuration / build_web01 (push) Successful in 1m45s
build configuration / push_to_cache (push) Successful in 2m13s
2024-05-13 23:33:36 +02:00
2c88c2bad7 fix(netbox-agent): batch requests filtering on interfaces
All checks were successful
build configuration / build_web02 (push) Successful in 1m16s
build configuration / build_storage01 (push) Successful in 1m18s
build configuration / build_compute01 (push) Successful in 1m21s
build configuration / build_vault01 (push) Successful in 1m22s
build configuration / build_web01 (push) Successful in 1m38s
lint / check (push) Successful in 25s
build configuration / build_rescue01 (push) Successful in 56s
build configuration / push_to_cache (push) Successful in 2m13s
Re-enable the service on vault01 now that it works
2024-05-07 13:29:43 +02:00
0eb813c8bf feat(compute01): Upgrade postgres to 16.2
All checks were successful
build configuration / build_vault01 (push) Successful in 1m15s
build configuration / build_rescue01 (push) Successful in 1m15s
build configuration / build_storage01 (push) Successful in 1m18s
build configuration / build_web02 (push) Successful in 1m24s
lint / check (push) Successful in 25s
build configuration / build_web01 (push) Successful in 1m51s
build configuration / build_compute01 (push) Successful in 1m58s
build configuration / push_to_cache (push) Successful in 2m14s
2024-05-01 16:01:44 +02:00
17a6e085b5 feat(dgn-console): Add perf
All checks were successful
build configuration / build_vault01 (push) Successful in 1m8s
build configuration / build_storage01 (push) Successful in 1m9s
build configuration / build_compute01 (push) Successful in 1m15s
lint / check (push) Successful in 26s
build configuration / build_web01 (push) Successful in 1m30s
build configuration / build_web02 (push) Successful in 57s
build configuration / build_rescue01 (push) Successful in 1m13s
build configuration / push_to_cache (push) Successful in 2m16s
2024-04-28 19:16:56 +02:00
3f928ce90b feat(modules): Generalize redirections
All checks were successful
build configuration / build_web02 (push) Successful in 1m2s
build configuration / build_vault01 (push) Successful in 1m6s
build configuration / build_storage01 (push) Successful in 1m6s
build configuration / build_compute01 (push) Successful in 1m11s
lint / check (push) Successful in 24s
build configuration / build_web01 (push) Successful in 1m30s
build configuration / build_rescue01 (push) Successful in 56s
build configuration / push_to_cache (push) Successful in 2m13s
2024-04-23 22:02:04 +02:00
sinavir
fd6674fd5d feat: Enable sendmail setuid wrapper
All checks were successful
build configuration / build_web02 (push) Successful in 1m17s
build configuration / build_rescue01 (push) Successful in 1m17s
build configuration / build_storage01 (push) Successful in 1m23s
build configuration / build_vault01 (push) Successful in 1m23s
build configuration / build_compute01 (push) Successful in 1m25s
lint / check (push) Successful in 23s
build configuration / build_web01 (push) Successful in 1m42s
build configuration / push_to_cache (push) Successful in 2m15s
2024-04-20 20:40:26 +02:00
c47437116b feat(modules): Introduce per node module import from meta
All checks were successful
Check meta / check_meta (push) Successful in 25s
Check meta / check_dns (push) Successful in 46s
build configuration / build_vault01 (push) Successful in 1m6s
build configuration / build_storage01 (push) Successful in 1m10s
build configuration / build_compute01 (push) Successful in 1m15s
build configuration / build_web02 (push) Successful in 53s
lint / check (push) Successful in 26s
build configuration / build_rescue01 (push) Successful in 49s
build configuration / build_web01 (push) Successful in 1m34s
build configuration / push_to_cache (push) Successful in 2m22s
2024-04-18 16:23:25 +02:00
cbdbed1099 feat(infra): Add nodeMeta argument 2024-04-18 15:53:20 +02:00
10a925021f feat(console): Upstream nsncd a les features dont on a besoin
All checks were successful
build configuration / build_vault01 (push) Successful in 1m6s
build configuration / build_web02 (push) Successful in 1m11s
build configuration / build_storage01 (push) Successful in 1m14s
build configuration / build_compute01 (push) Successful in 1m17s
build configuration / build_rescue01 (push) Successful in 1m18s
lint / check (push) Successful in 24s
build configuration / build_web01 (push) Successful in 1m33s
build configuration / push_to_cache (push) Successful in 2m10s
2024-04-15 09:32:36 +02:00
sinavir
c6fe6b5891 feat(monitoring): Enable node exporter on almost all nodes 2024-04-14 01:10:10 +02:00
sinavir
ba2284cc68 fix(netbox-agent): Increase randomized delay
All checks were successful
build configuration / build_vault01 (push) Successful in 1m5s
build configuration / build_web02 (push) Successful in 1m4s
build configuration / build_storage01 (push) Successful in 1m8s
build configuration / build_compute01 (push) Successful in 1m13s
lint / check (push) Successful in 24s
build configuration / build_web01 (push) Successful in 1m32s
build configuration / build_rescue01 (push) Successful in 50s
build configuration / push_to_cache (push) Successful in 2m8s
2024-04-13 15:11:27 +02:00
5919b75851 feat(dgn-record): Use latest arkheon
All checks were successful
build configuration / build_rescue01 (push) Successful in 1m10s
build configuration / build_storage01 (push) Successful in 1m15s
build configuration / build_vault01 (push) Successful in 1m16s
build configuration / build_web02 (push) Successful in 1m16s
build configuration / build_compute01 (push) Successful in 1m22s
lint / check (push) Successful in 22s
build configuration / build_web01 (push) Successful in 1m39s
2024-04-06 16:21:21 +02:00
b36b0d7d67 feat(infra): Rework nixpkgs version management
All checks were successful
Check meta / check_meta (push) Successful in 20s
Check meta / check_dns (push) Successful in 43s
build configuration / build_storage01 (push) Successful in 58s
build configuration / build_compute01 (push) Successful in 1m4s
build configuration / build_vault01 (push) Successful in 52s
build configuration / build_web02 (push) Successful in 51s
lint / check (push) Successful in 24s
build configuration / build_rescue01 (push) Successful in 47s
build configuration / build_web01 (push) Successful in 1m21s
2024-04-03 22:05:37 +02:00
sinavir
732ed7081d feat(monitoring): Add simple systemd monitoring
Some checks are pending
Check meta / check_meta (push) Successful in 22s
Check meta / check_dns (push) Successful in 42s
build configuration / build_vault01 (pull_request) Successful in 1m7s
build configuration / build_compute01 (push) Waiting to run
build configuration / build_storage01 (push) Waiting to run
build configuration / build_vault01 (push) Waiting to run
build configuration / build_web01 (push) Waiting to run
build configuration / build_web02 (push) Waiting to run
build configuration / build_rescue01 (push) Waiting to run
lint / check (push) Waiting to run
build configuration / build_storage01 (pull_request) Successful in 1m20s
build configuration / build_web02 (pull_request) Successful in 55s
build configuration / build_compute01 (pull_request) Successful in 1m28s
build configuration / build_rescue01 (pull_request) Successful in 1m3s
build configuration / build_web01 (pull_request) Successful in 2m15s
2024-04-03 21:19:28 +02:00
sinavir
747d8c08cb feat(netbox-agent): init
All checks were successful
build configuration / build_vault01 (pull_request) Successful in 1m55s
build configuration / build_web02 (pull_request) Successful in 1m38s
build configuration / build_compute01 (pull_request) Successful in 2m7s
build configuration / build_web01 (pull_request) Successful in 1m59s
build configuration / build_storage01 (pull_request) Successful in 2m12s
build configuration / build_rescue01 (pull_request) Successful in 1m2s
build configuration / build_compute01 (push) Successful in 1m5s
build configuration / build_storage01 (push) Successful in 1m8s
build configuration / build_vault01 (push) Successful in 1m6s
lint / check (push) Successful in 22s
build configuration / build_web01 (push) Successful in 1m27s
build configuration / build_web02 (push) Successful in 53s
build configuration / build_rescue01 (push) Successful in 51s
2024-03-28 13:26:19 +01:00
9cbe1b828f feat(dgn-console): Add more utilities
All checks were successful
build configuration / build_rescue01 (push) Successful in 1m11s
build configuration / build_vault01 (push) Successful in 1m13s
build configuration / build_web02 (push) Successful in 1m14s
build configuration / build_storage01 (push) Successful in 1m16s
build configuration / build_compute01 (push) Successful in 1m23s
lint / check (push) Successful in 22s
build configuration / build_web01 (push) Successful in 1m38s
2024-03-27 15:15:44 +01:00
2a02fd6ef5 feat(dgn-console): Add more tools
All checks were successful
build configuration / build_compute01 (push) Successful in 1m12s
build configuration / build_storage01 (push) Successful in 57s
build configuration / build_vault01 (push) Successful in 1m9s
build configuration / build_web02 (push) Successful in 56s
build configuration / build_web01 (push) Successful in 1m24s
lint / check (push) Successful in 28s
build configuration / build_rescue01 (push) Successful in 1m3s
2024-03-24 18:11:26 +01:00
sinavir
581fa6b560 chore: pre-commit hooks are supposed to be run....
All checks were successful
build configuration / build_vault01 (push) Successful in 1m5s
build configuration / build_web02 (push) Successful in 1m6s
build configuration / build_compute01 (push) Successful in 1m11s
build configuration / build_storage01 (push) Successful in 1m10s
lint / check (push) Successful in 24s
build configuration / build_web01 (push) Successful in 1m33s
build configuration / build_rescue01 (push) Successful in 49s
2024-03-10 01:03:30 +01:00
3bccda09db feat(infra): Enable recording of deployments
All checks were successful
build configuration / build_vault01 (push) Successful in 1m5s
build configuration / build_rescue01 (push) Successful in 1m6s
build configuration / build_web02 (push) Successful in 1m7s
build configuration / build_storage01 (push) Successful in 1m11s
lint / check (push) Successful in 23s
build configuration / build_web01 (push) Successful in 1m32s
build configuration / build_compute01 (push) Successful in 1m59s
2024-03-08 23:11:31 +01:00
2ade516d48 feat(compute01): Deploy arkheon
All checks were successful
build configuration / build_web02 (push) Successful in 1m6s
build configuration / build_vault01 (push) Successful in 1m7s
build configuration / build_rescue01 (push) Successful in 1m8s
build configuration / build_storage01 (push) Successful in 1m13s
build configuration / build_compute01 (push) Successful in 1m18s
lint / check (push) Successful in 22s
build configuration / build_web01 (push) Successful in 1m33s
2024-03-08 11:55:02 +01:00
6a25f88ee8 feat(dgn-ssh): Increase allowed connexions
All checks were successful
build configuration / build_storage01 (push) Successful in 59s
build configuration / build_compute01 (push) Successful in 1m6s
build configuration / build_vault01 (push) Successful in 52s
build configuration / build_web01 (push) Successful in 1m18s
build configuration / build_web02 (push) Successful in 49s
lint / check (push) Successful in 21s
build configuration / build_rescue01 (push) Successful in 49s
2024-02-26 14:33:39 +01:00
82cafb5fd7 feat(meta): Rework and use a module 2024-02-23 11:13:21 +01:00
ba30b3034b feat(dgn-backups): Add encrypted master keys
All checks were successful
build configuration / build_vault01 (push) Successful in 55s
build configuration / build_storage01 (push) Successful in 58s
build configuration / build_compute01 (push) Successful in 1m2s
build configuration / build_web02 (push) Successful in 50s
build configuration / build_rescue01 (push) Successful in 49s
build configuration / build_web01 (push) Successful in 1m12s
lint / check (push) Successful in 20s
2024-02-22 09:57:19 +01:00
a14e853738 feat(dgn-backups): Alter start times 2024-02-21 22:42:41 +01:00
6161592f5a feat(dgn-backups): Setup postgres databases backups
All checks were successful
build configuration / build_vault01 (push) Successful in 1m0s
build configuration / build_web02 (push) Successful in 1m0s
build configuration / build_storage01 (push) Successful in 1m4s
build configuration / build_compute01 (push) Successful in 1m15s
lint / check (push) Successful in 21s
build configuration / build_web01 (push) Successful in 1m24s
build configuration / build_rescue01 (push) Successful in 48s
2024-02-21 22:01:32 +01:00
6b827e56b1 feat(infra): Init backups
All checks were successful
lint / check (push) Successful in 25s
build configuration / build_web02 (push) Successful in 1m4s
build configuration / build_vault01 (push) Successful in 1m6s
build configuration / build_storage01 (push) Successful in 1m13s
build configuration / build_compute01 (push) Successful in 1m25s
build configuration / build_web01 (push) Successful in 1m27s
2024-02-21 17:18:14 +01:00
13b7b2fab4 feat(dgn-hardware): Update ZFS settings 2024-02-21 17:17:40 +01:00
54ec4a6b18 feat(dgn-hardware): Factorize bcachefs setup
All checks were successful
lint / check (push) Successful in 32s
build configuration / build_vault01 (push) Successful in 1m2s
build configuration / build_web02 (push) Successful in 1m2s
build configuration / build_storage01 (push) Successful in 1m6s
build configuration / build_compute01 (push) Successful in 1m9s
build configuration / build_web01 (push) Successful in 1m25s
2024-02-20 21:25:04 +01:00
5832da0941 feat(dgn-network): Use only the specified DNS 2024-02-20 17:57:24 +01:00
e7f4d76dc1 fix(dgn-network): Clarify variables and add dns settings from metadata 2024-02-20 17:47:34 +01:00
5e3819c9b2 feat(shell): Add pre-commit hooks and reformat the repo 2024-02-02 10:51:31 +01:00
ce0dfe5431 chore(infra): Remove remnants of dgn-dns 2024-02-01 13:35:30 +01:00
31e2387a25 feat(dgn-dns): Remove module as the DNS will be hosted externally
Some checks failed
build configuration / build_compute01 (push) Failing after 41s
build configuration / build_storage01 (push) Failing after 42s
build configuration / build_web02 (push) Failing after 43s
build configuration / build_web01 (push) Failing after 44s
build configuration / build_vault01 (push) Failing after 47s
ds-fr update / npins_update (push) Successful in 2m1s
2024-01-31 16:52:00 +01:00
ef460753a8 feat(modules/dgn-ssh): Disable kbdinteractiveauthentication
Some checks are pending
build configuration / build_web02 (push) Successful in 57s
build configuration / build_storage01 (push) Successful in 1m0s
build configuration / build_vault01 (push) Successful in 1m2s
build configuration / build_web01 (push) Successful in 1m19s
build configuration / build_compute01 (push) Successful in 1m21s
ds-fr update / npins_update (push) Successful in 1m50s
npins update / npins_update (push) Has started running
2024-01-30 10:22:27 +01:00
6bdbccf9b2 feat(web01): Deploy Crab Fit on meet.dgnum.eu
Some checks failed
build configuration / build_storage01 (push) Successful in 47s
build configuration / build_compute01 (push) Successful in 1m11s
build configuration / build_vault01 (push) Successful in 42s
build configuration / build_web02 (push) Successful in 41s
build configuration / build_web01 (push) Has been cancelled
2024-01-23 01:06:10 +01:00
Raito Bezarius
1f67e3c310 feat(dns): erp.dgnum.eu → web01
We prepare a Dolibarr deployment.
2024-01-21 21:05:46 +01:00
e34d5d003f feat(dgn-hardware): Move specific configurations back to the servers
All checks were successful
build configuration / build_storage01 (push) Successful in 52s
build configuration / build_vault01 (push) Successful in 1m2s
build configuration / build_web01 (push) Successful in 1m8s
build configuration / build_compute01 (push) Successful in 1m14s
build configuration / build_web02 (push) Successful in 42s
2024-01-11 12:58:58 +01:00
345bdd4d44 feat(dgn-hardware): Allow bcachefs configuration 2024-01-11 12:58:27 +01:00
50368c56dd fix(modules/dgn-console): Only try to create the psql migrate script if postgres is enabled 2024-01-10 14:59:39 +01:00
df8831301f feat(storage01): Switch to nix-modules for forgejo nix runners
All checks were successful
build configuration / build_compute01 (push) Successful in 1m46s
build configuration / build_storage01 (push) Successful in 55s
build configuration / build_web01 (push) Successful in 1m3s
2024-01-10 13:59:11 +01:00
4716f8a398 feat(modules): Replace dgn-secrets by age-secrets
All checks were successful
build configuration / build_compute01 (push) Successful in 1m6s
build configuration / build_storage01 (push) Successful in 44s
build configuration / build_web01 (push) Successful in 57s
npins update / npins_update (push) Successful in 46s
2024-01-09 14:48:33 +01:00
7249301a33 fix(network): Use correct ipv6 addresses 2024-01-08 17:18:55 +01:00
c5e15987ed feat(modules/dgn-console): Add an activation script showing system diffs
All checks were successful
build configuration / build_storage01 (push) Successful in 49s
build configuration / build_compute01 (push) Successful in 1m11s
build configuration / build_web01 (push) Successful in 1m31s
ds-fr update / npins_update (push) Successful in 2m21s
2024-01-07 18:17:14 +01:00
03d4fd3982 feat(fail2ban): Add preauth jail and enable on storage01
All checks were successful
build configuration / build_web01 (push) Successful in 45s
build configuration / build_storage01 (push) Successful in 56s
build configuration / build_compute01 (push) Successful in 1m13s
2024-01-05 16:10:06 +01:00
Tom Hubrecht
9b49bd2721 feat(dgn-runners): Add curl and link usr/bin/env to bin/env for compatibility with nixos 2023-12-22 18:23:48 +01:00