Commit graph

55 commits

Author SHA1 Message Date
Raito Bezarius
dc971eff71 feat(core01): add inventory.rz.ens.wtf → snipe-it instance 2022-09-06 01:06:39 +02:00
Raito Bezarius
86de42442d feat: add rstudio.beta.rz.ens.wtf basic features 2022-08-17 18:06:26 +02:00
c5aa20dffa Move pubkeys in ./machines
This is required by the current krops setup.
2022-08-15 23:59:59 +00:00
ba5086a237 Centralize pubkeys 2022-08-15 03:28:40 +02:00
f7b6fdf07a Fix remote builder ip address 2022-08-15 00:00:55 +02:00
Raito Bezarius
506e099945 monitoring: move to tiered dbengine with netdata nightly 2022-08-05 18:52:06 +02:00
Raito Bezarius
6b994c8591 gitea: log only from WARN and up 2022-08-05 17:52:28 +02:00
Raito Bezarius
be6e81ad46 monitoring: fix authentication via oauth2_proxy by moving to Keycloak-OIDC + many proxy buffer hacks 2022-08-05 17:52:21 +02:00
Raito Bezarius
9d3381cafb oauth2_proxy: add a cookie specific to *.rz.ens.wtf 2022-08-05 16:34:22 +02:00
Ryan Lahfa
6f5fdb0317 Headscale support (upgrade to latest nixpkgs) (#9)
This adds Headscale support.

It provides also an upgrade to Keycloak 18.0.0 (Quarkus distribution).
It upgrades NextCloud from 22 to 23.

Reviewed-on: https://git.rz.ens.wtf/Klub-RZ/infrastructure/pulls/9
Co-authored-by: Ryan Lahfa <raito@noreply.git.rz.ens.wtf>
Co-committed-by: Ryan Lahfa <raito@noreply.git.rz.ens.wtf>
2022-06-26 23:48:43 +02:00
Raito Bezarius
f842b30e05 core01: allow *, unfirewall wgmon 2022-05-15 00:08:46 +02:00
Raito Bezarius
5f2a5ff782 core01: generalize monitoring, open up a wgmon for external nodes 2022-05-14 20:21:18 +02:00
Raito Bezarius
bfdfa5a206 core01: rotate drone key, update swap uuid, bump netdata multihost disk space for 30d of metrics 2022-03-06 20:21:37 +01:00
Raito Bezarius
e0167f27d3 core01: open up Gitea registration and whitelist @ens.fr emails 2022-03-05 23:17:06 +01:00
Raito Bezarius
b581fbcfc5 core01: fix #6, remove Dex 2022-03-05 23:17:06 +01:00
Julien Marquet
09ad6670ed feat: Matterbridge
je suis fatigué
2022-02-23 01:42:26 +01:00
Raito Bezarius
075cd90fb7 core01: rekey with MrF, add pve01 hypervisor monitoring 2022-02-22 23:25:46 +01:00
e290a918a0 progress on dex... 2022-01-25 23:59:59 +00:00
52d0f1433a Ryan tu me doit 10k 2022-01-25 23:59:59 +00:00
7193ee270a add dex to confifiguration.nix 2022-01-25 23:59:59 +00:00
6535ca50af add dex 2022-01-25 23:59:59 +00:00
Julien Marquet
3670aab583 ipv4 for public-cof 2022-01-25 18:12:54 +01:00
Raito Bezarius
7e11763d74 core01: Add MrF keys for real 2022-01-25 17:52:56 +01:00
Raito Bezarius
cb92be5d72 core01: add MrF key, default gateway, A for acme 2022-01-25 00:37:12 +01:00
Raito Bezarius
067ab1d7cc core01/public-cof: flush changes, router02 → router01 2022-01-24 22:04:43 +01:00
Raito Bezarius
2c321dd0aa core-services: bump dbengine disk size to 4GiB 2021-12-29 17:33:28 +01:00
Raito Bezarius
8ac5d2e4ab core-services: adjust to our changes in IPv4 network for MWAN/local net 2021-12-19 14:51:12 +01:00
Raito Bezarius
916b06ad1f dns: jurisprudens.beta.rz.ens.wtf → public COF with v4 upstream proxy 2021-11-21 11:53:50 +01:00
Raito Bezarius
f3f4431f2c core-services: use jre8 for keycloak, fixes LDAP federation 2021-11-21 11:53:30 +01:00
71797ad07e start a cryptpad module 2021-11-15 00:09:44 +01:00
0dc5bd6aad add {pads,docs}.beta.rz.ens.wtf to the DNS server 2021-11-13 23:48:21 +01:00
Raito Bezarius
dd57d05591 dns: add upstream v4 proxy for {home,nuage,}.beta.rz.ens.wtf to kurisu.dual.lahfa.xyz 2021-11-13 23:35:16 +01:00
0dfcfe243e create nginx virtual host for home.beta.rz.ens.wtf 2021-11-13 02:51:54 +01:00
9b6c56baad add DNS records for public-cof's future services 2021-11-12 23:59:59 +00:00
20147f145b add AAAA for gdd.rz.ens.wtf 2021-11-12 23:59:59 +00:00
bc935ad037 update dns serial 2021-11-11 23:59:59 +00:00
95225c5055 delegate the gdd subzone 2021-11-11 23:59:59 +00:00
218419732a remove incorrect ip adresses for the gdd subdomain 2021-11-11 23:59:59 +00:00
6adb20c64f remove hackens keys from netboot server 2021-11-05 23:59:59 +00:00
82ccb56fe5 remove hackens keys from core-services and remote-builder 2021-11-05 23:59:59 +00:00
Raito Bezarius
eaa209eb7b core-services(dns): append 2001:470:1f13:187:350a:214a:639c:b97b backup.gdd.rz.ens.wtf AAAA 2021-10-20 23:52:58 +02:00
Raito Bezarius
aab45dbc6d dns: add backup.gdd.rz.ens.wtf 2021-08-04 15:59:21 +02:00
Raito Bezarius
3fc1c9da86 core-services-01: add backup repository for VyOS 2021-08-04 15:59:02 +02:00
Raito Bezarius
821b1cdc31 dns: add nix01.builders.rz.ens.wtf 2021-07-28 23:55:23 +02:00
Raito Bezarius
6b7f3d32ff netdata: monitor pve01, alert #réseau over IRC, store more metrics (~2GiB) 2021-07-28 23:10:45 +02:00
Raito Bezarius
6509fe0f36 core-services-01(autodeploy): disable autoUpgrade 2021-07-27 14:37:31 +02:00
Raito Bezarius
b75aa4ac5c core-services-01(autodeploy): enable default /var/src usage through systemd tmp filesystem and force creation of sentinel file 2021-07-26 03:55:56 +02:00
Raito Bezarius
6642638d2a core-services-01(autodeploy): enforce nix label, update drone runner module 2021-07-26 03:34:45 +02:00
Raito Bezarius
57172ba54c core-services-01(drone-runners): prevent them to kill an auto-deployment 2021-07-26 03:14:10 +02:00
Raito Bezarius
fb43cc15e1 core-services-01(drone-runners): initialize nix01 2021-07-26 02:55:35 +02:00