Commit graph

155 commits

Author SHA1 Message Date
Raito Bezarius
c0fe0671a8 core-services-01: update secrets on matterbridge
Signed-off-by: Raito Bezarius <masterancpp@gmail.com>
2024-04-29 14:13:54 +02:00
Raito Bezarius
dfeeb1c4ea router(*): VRRP the admin interface
Now, the Proxmox can be accessed while redeploying one of the router!
2024-01-12 04:36:15 +01:00
Raito Bezarius
bcbfc91a11 router(*): Use unicast rather than multicast
Due to an unfathomable issue where I would need to recompile with full debug keepalived,
keepalived seems to be not seeing the multicast packets on the vrrp-router
and thus we need to fallback to the disgusting unicast solution.

Well, let's move on.
2024-01-12 04:22:34 +01:00
Raito Bezarius
683555e4eb router04: init and add to VRRP group 2024-01-12 04:04:23 +01:00
Raito Bezarius
2555b97680 router03: enable VRRP 2024-01-12 04:04:10 +01:00
Raito Bezarius
1a6f9ffb8f router03: perfect refactor into a proper NixOS module
We will focus on growing it for KlubRZ usecases first and then grow it into a proper
external project called Hypervisor NixOS routers.
2024-01-12 02:22:05 +01:00
Raito Bezarius
a0681ee841 router03: fix leakage of MWAN traffic
When traffic is coming in, i.e. `To = 45.13.104.25/29`, we were immediately redirecting
it to `swp`, i.e. ENS.

By saying that `To` should also consult the MWAN routing table, we are eliminating
the redirection.
2024-01-12 02:02:14 +01:00
Raito Bezarius
94a64b792c router03: init 2024-01-02 00:39:33 +01:00
779f3f3d9e core-services-01: fix cname 2023-12-21 15:12:44 +01:00
9fd583a9cc core-services-01: Disable services 2023-12-21 14:32:12 +01:00
9c32d9b838 core-services-01: Update DNS config 2023-12-21 14:31:50 +01:00
Raito Bezarius
3f20242eab remote-builder-01: decommission 2023-12-21 12:28:49 +01:00
Raito Bezarius
49ed2855a5 core-01: redirect most of our services to web01.dmi01.infra.dgnum.eu 2023-12-21 12:27:55 +01:00
41fc60e1eb core-01: Disable netboot-server 2023-07-23 23:56:33 +02:00
7f88c60cc2 Switch from krops to colmena 2023-07-23 23:36:55 +02:00
sinavir
6fb8528a99 public-cof: upgrade garage 2023-07-23 18:07:40 +02:00
Raito Bezarius
2ab0cc6885 public-cof: NC25 → NC26
Get us rid of RC4 encryption shenigans.
2023-07-23 17:52:45 +02:00
sinavir
55c7194022 core-01: make it work for 23.05 2023-07-23 17:49:32 +02:00
Raito Bezarius
793e4d2aee public-cof: add some tuning for lychee 2023-07-19 00:22:03 +02:00
Raito Bezarius
42cd2d7b79 public-cof: add thubrecht 2023-07-19 00:21:54 +02:00
sinavir
deffb8e1fc core-01: fix ipv4 routing issue 2023-02-24 10:56:54 +01:00
3f2e795b0e chore: Rename module options 2023-02-23 23:59:59 +00:00
66c40b1026 feat: Add sinavir's keys to public-cof and remote-builder-01 2023-02-23 23:59:59 +00:00
244c8027aa feat: Add sinavir's keys for core-services-01 2023-02-23 23:59:59 +00:00
sinavir
455fd180d2 pm=dynamic 2023-01-30 21:21:29 +01:00
bd22c63ec4 public-cof: Switch to systemd-network 2023-01-25 16:55:22 +01:00
f410aa4c75 core-services-01: Switch to systemd-network 2023-01-25 15:35:41 +01:00
Raito Bezarius
5138eb930f core-services-01: add hubrecht 2023-01-24 21:14:04 +01:00
sinavir
9a0c9c615c feat: introduce photos.ens.wtf
Co-authored-by: sinavir <sinavir@sinavir.fr>
Reviewed-on: https://git.rz.ens.wtf/Klub-RZ/infrastructure/pulls/15
Co-authored-by: sinavir <maurice.debray@ens.fr>
Co-committed-by: sinavir <maurice.debray@ens.fr>
2022-12-13 22:23:35 +01:00
Julien Marquet
66ae9b2d04 whitelist thejohncrafter 2022-12-03 21:15:40 +01:00
Raito Bezarius
dbd7594d59 mc: whitelist more players 2022-11-14 23:46:55 +01:00
Raito Bezarius
a2c58e4d87 mc: add Clem's friends to whitelist 2022-11-05 15:48:40 +01:00
Raito Bezarius
d1bc89653c public-cof: fix NC encryption 2022-10-29 17:33:05 +02:00
Raito Bezarius
82cfe98dde core01: fix matterbridge for DGNum 2022-10-29 17:32:39 +02:00
Raito Bezarius
42a569b41d public-cof: deploy completely Outline and Garage 2022-10-29 17:32:10 +02:00
Raito Bezarius
43d3367e9f core01: DNS for Garage & Outline 2022-10-29 17:31:46 +02:00
Raito Bezarius
b40a49feed feat: add notion.rz.ens.wtf → public-cof 2022-10-28 00:36:57 +02:00
Raito Bezarius
7beba08321 public-cof: nextcloud24 -> nextcloud25 2022-10-27 22:40:43 +02:00
Raito Bezarius
ccf00cdc46 public-cof: nextcloud23 -> nextcloud24 2022-10-27 22:31:55 +02:00
Raito Bezarius
e827b28967 feat: deploy garage on public-cof 2022-10-27 22:31:47 +02:00
Raito Bezarius
570071bb71 feat: bump to 1.19.2 and add clem197 to allow-list 2022-10-13 21:52:40 +02:00
Raito Bezarius
6b02a84975 core01: initialize tunnels setup 2022-10-12 01:29:08 +02:00
Raito Bezarius
964912c3d4 core01: try latest nightly for netdata and disable cloud 2022-10-09 14:43:29 +02:00
Raito Bezarius
4bc4550540 Revert "feat: remove netdata package pin"
This reverts commit 179a628a4d.
2022-10-02 00:21:16 +02:00
Raito Bezarius
179a628a4d feat: remove netdata package pin 2022-10-01 23:04:19 +02:00
Raito Bezarius
124ec3ab73 feat: bridge #dgnum over Merle 2022-10-01 22:49:56 +02:00
Raito Bezarius
893339ba0b feat: fully functional kanboard 2022-09-18 18:40:55 +02:00
Raito Bezarius
5a796ef74f Revert "Networkd ipv6"
This reverts commit 6e94647d8e.
2022-09-17 21:26:56 +02:00
Raito Bezarius
d2467fe0bd public-cof: add kanboard 2022-09-17 21:26:46 +02:00
Raito Bezarius
a373803629 patch(keycloak): remove crc patch 2022-09-17 21:26:46 +02:00