Commit graph

184 commits

Author SHA1 Message Date
Raito Bezarius e827b28967 feat: deploy garage on public-cof 2022-10-27 22:31:47 +02:00
Raito Bezarius 570071bb71 feat: bump to 1.19.2 and add clem197 to allow-list 2022-10-13 21:52:40 +02:00
Raito Bezarius 6b02a84975 core01: initialize tunnels setup 2022-10-12 01:29:08 +02:00
Raito Bezarius 964912c3d4 core01: try latest nightly for netdata and disable cloud 2022-10-09 14:43:29 +02:00
Raito Bezarius 4bc4550540 Revert "feat: remove netdata package pin"
This reverts commit 179a628a4d.
2022-10-02 00:21:16 +02:00
Raito Bezarius 179a628a4d feat: remove netdata package pin 2022-10-01 23:04:19 +02:00
Raito Bezarius 124ec3ab73 feat: bridge #dgnum over Merle 2022-10-01 22:49:56 +02:00
Raito Bezarius 893339ba0b feat: fully functional kanboard 2022-09-18 18:40:55 +02:00
Raito Bezarius 5a796ef74f Revert "Networkd ipv6"
This reverts commit 6e94647d8e.
2022-09-17 21:26:56 +02:00
Raito Bezarius 001c9b0136 all: bump to latest nixos-unstable 2022-09-17 21:26:46 +02:00
Raito Bezarius d2467fe0bd public-cof: add kanboard 2022-09-17 21:26:46 +02:00
Raito Bezarius a373803629 patch(keycloak): remove crc patch 2022-09-17 21:26:46 +02:00
gabriel-doriath-dohler 6e94647d8e Networkd ipv6 2022-09-13 23:59:59 +00:00
Raito Bezarius 9c006a3519 public-cof: fix docs.beta.rz.ens.wtf 2022-09-13 18:49:49 +02:00
Raito Bezarius 9a24316300 core01: add todo.beta.rz.ens.wtf DNS 2022-09-13 18:49:38 +02:00
Raito Bezarius badae72a29 feat(public-cof): prevent nginx to bind on all IPv4 2022-09-10 16:20:47 +02:00
Raito Bezarius c25b0f0eee feat(public-cof): ensure that hedgedocs bind on local ipv6 2022-09-10 16:20:47 +02:00
Raito Bezarius 71e5dcc437 feat(public-cof): disable rstudio server 2022-09-10 16:20:47 +02:00
Raito Bezarius 54163ed857 feat(public-cof): add IPv4 → IPv6 proxy 2022-09-10 16:20:47 +02:00
Raito Bezarius c90e89bc7a feat: add traque.beta.rz.ens.wtf 2022-09-10 15:30:03 +02:00
Raito Bezarius 7284a9a2d6 meta: use root@core01.rz.ens.wtf rather than internal IP 2022-09-06 01:33:26 +02:00
Raito Bezarius 726bc5af0e feat(core01): enable TLS on inventory.rz.ens.wtf and fix secrets perms 2022-09-06 01:33:17 +02:00
Raito Bezarius dc971eff71 feat(core01): add inventory.rz.ens.wtf → snipe-it instance 2022-09-06 01:06:39 +02:00
Raito Bezarius 86de42442d feat: add rstudio.beta.rz.ens.wtf basic features 2022-08-17 18:06:26 +02:00
Raito Bezarius 7f5f3213ac hotfix: disable student calendar 2022-08-15 13:31:27 +02:00
gabriel-doriath-dohler c5aa20dffa Move pubkeys in ./machines
This is required by the current krops setup.
2022-08-15 23:59:59 +00:00
gabriel-doriath-dohler ba5086a237 Centralize pubkeys 2022-08-15 03:28:40 +02:00
gabriel-doriath-dohler 16f4ad94b1 Add public-cof to README.md 2022-08-15 03:19:33 +02:00
gabriel-doriath-dohler 85ab8d8071 Install git
Needed for deployments with krops.
2022-08-15 23:59:59 +00:00
gabriel-doriath-dohler 4375b29d50 Aarch64 emulation 2022-08-15 03:00:30 +02:00
gabriel-doriath-dohler bb668034b1 Cleanups 2022-08-15 02:59:45 +02:00
gabriel-doriath-dohler 122c0deeac DHCP on ens19 and ens18 + set ip on ens18 2022-08-15 23:59:59 +00:00
gabriel-doriath-dohler 816e084deb Change rpool layout and disk id 2022-08-15 01:20:35 +02:00
gabriel-doriath-dohler 3f10516b6f Add kitty terminfo 2022-08-15 00:20:07 +02:00
gabriel-doriath-dohler f7b6fdf07a Fix remote builder ip address 2022-08-15 00:00:55 +02:00
gabriel-doriath-dohler a5f3e05889 Formatting 2022-08-14 22:27:28 +02:00
gabriel-doriath-dohler 5170bdff65 Cleanups 2022-08-14 22:27:15 +02:00
gabriel-doriath-dohler ac0b6ef15b Update networking interface 2022-08-14 22:25:34 +02:00
Raito Bezarius 506e099945 monitoring: move to tiered dbengine with netdata nightly 2022-08-05 18:52:06 +02:00
Raito Bezarius 6b994c8591 gitea: log only from WARN and up 2022-08-05 17:52:28 +02:00
Raito Bezarius be6e81ad46 monitoring: fix authentication via oauth2_proxy by moving to Keycloak-OIDC + many proxy buffer hacks 2022-08-05 17:52:21 +02:00
Raito Bezarius 9d3381cafb oauth2_proxy: add a cookie specific to *.rz.ens.wtf 2022-08-05 16:34:22 +02:00
Ryan Lahfa 6f5fdb0317 Headscale support (upgrade to latest nixpkgs) (#9)
This adds Headscale support.

It provides also an upgrade to Keycloak 18.0.0 (Quarkus distribution).
It upgrades NextCloud from 22 to 23.

Reviewed-on: https://git.rz.ens.wtf/Klub-RZ/infrastructure/pulls/9
Co-authored-by: Ryan Lahfa <raito@noreply.git.rz.ens.wtf>
Co-committed-by: Ryan Lahfa <raito@noreply.git.rz.ens.wtf>
2022-06-26 23:48:43 +02:00
gabriel-doriath-dohler 57b5c931d1 Add CiterinRemy to MC whitelist 2022-05-21 23:59:59 +00:00
Raito Bezarius f842b30e05 core01: allow *, unfirewall wgmon 2022-05-15 00:08:46 +02:00
Raito Bezarius 5f2a5ff782 core01: generalize monitoring, open up a wgmon for external nodes 2022-05-14 20:21:18 +02:00
gabriel-doriath-dohler 544df15eb1 Enable command blocks in the minecraft server 2022-05-11 23:59:59 +00:00
Raito Bezarius df2b7e819d public-cof: upgrade nextcloud (21 → 22) 2022-04-17 01:34:44 +02:00
gabriel-doriath-dohler 6a3af7d165 Add Pollux to MC whitelist 2022-04-13 23:59:59 +00:00
gabriel-doriath-dohler ab9d022b33 Add Cst1 to MC whitelist 2022-04-07 23:59:59 +00:00