cst1/infrastructure
1
0
Fork 0
forked from DGNum/infrastructure
Code Pull requests Activity
979 commits 16 branches 0 tags 1.9 MiB
Commit graph

979 commits

This branch
This branch
All branches
Author SHA1 Message Date
Tom Hubrecht
b23312dcaa feat(dgn-web): Add yearly logrotate for nginx 2024-12-11 14:40:29 +01:00
Ryan Lahfa
e0cf11276d feat(monitoring): support cgroup exporting of metrics 
This needs an update in our node_exporter dashboard but nothing too
hard.

Signed-off-by: Ryan Lahfa <ryan@dgnum.eu>
 2024-12-11 11:08:07 +01:00
Tom Hubrecht
026acdecb7
fix(tvix-cache): Import an existing file 2024-12-10 11:14:10 +01:00
Tom Hubrecht
6d03c084a0
feat(hive): Add serverNodes to the arguments 2024-12-08 22:31:14 +01:00
Ryan Lahfa
25eee32a22 feat(scripts): introduce manual push script 
This way, we can send some closures if some of our members build them on
more powerful machines.

Signed-off-by: Ryan Lahfa <ryan@dgnum.eu>
 2024-12-08 21:14:28 +01:00
Ryan Lahfa
f16d8ce68f fix(ap01): switch Liminix nodes to 24.05 
There's a bug in 24.11 regarding GCC bootstrap for mipsel which makes it
impossible to use that NixOS version.

We will need to pin 24.05 and bisect until we find the root cause…

Signed-off-by: Ryan Lahfa <ryan@dgnum.eu>
 2024-12-08 21:14:28 +01:00
Tom Hubrecht
ba62dcd6a6
fix(storage01): Make prometheus work again 
By only looking at nixos nodes
 2024-12-08 17:15:45 +01:00
Tom Hubrecht
65b188a7cd
fix(meta): Use correct optional 2024-12-08 17:15:45 +01:00
Tom Hubrecht
715201abc2
fix(rescue01): Filter nodes to only include real servers 2024-12-08 17:15:45 +01:00
Tom Hubrecht
a2295953da
fix(meta): Add required stuff for ap01 2024-12-08 17:15:45 +01:00
Tom Hubrecht
303f53af0f
chore: Apply the abstraction to ap01 2024-12-08 17:15:45 +01:00
Ryan Lahfa
e89ed2d0e7
feat(hive): ensure purity of cache-node.sh 
Signed-off-by: Ryan Lahfa <ryan@dgnum.eu>
 2024-12-08 15:24:40 +01:00
Ryan Lahfa
e94d6fd16e
fix(hive): ensure we are in hermetic evaluation 
We don't want any <nixpkgs> to appear out of nowhere.

Signed-off-by: Ryan Lahfa <ryan@dgnum.eu>
 2024-12-08 15:24:40 +01:00
Ryan Lahfa
6ca347ee51
Revert "chore(HACK): open a tmate session in the CI" 
This reverts commit 5907ba80e1a608e1c2674e94bb4e5c98ac9dfc55.
 2024-12-08 15:24:40 +01:00
Ryan Lahfa
4158d85efb
fix(npins): update liminix to fix graphviz incident 
Signed-off-by: Ryan Lahfa <ryan@dgnum.eu>
 2024-12-08 15:24:40 +01:00
Ryan Lahfa
a12b180592
chore(HACK): open a tmate session in the CI 
Signed-off-by: Ryan Lahfa <ryan@dgnum.eu>
 2024-12-08 15:24:40 +01:00
Ryan Lahfa
104d64f23f
feat(scripts/cache-node): support non-NixOS systems 
Signed-off-by: Ryan Lahfa <ryan@dgnum.eu>
 2024-12-08 15:24:40 +01:00
Ryan Lahfa
cdd8b9cc12
feat(machines): add ap01 initial configuration 
Signed-off-by: Ryan Lahfa <ryan@dgnum.eu>
 2024-12-08 15:24:40 +01:00
Ryan Lahfa
df6b48e2f3
feat(hive/registry): add Zyxel NWA50AX in the registry 
Signed-off-by: Ryan Lahfa <ryan@dgnum.eu>
 2024-12-08 15:24:40 +01:00
Ryan Lahfa
d9a6d38d5e
feat(modules/dgn-access-control): support Liminix systems 
Liminix are not totally aligned with their implementation of users.

Signed-off-by: Ryan Lahfa <ryan@dgnum.eu>
 2024-12-08 15:23:28 +01:00
Ryan Lahfa
a2a6bf8d1c
feat(npins/sources): switch to DGNum fork of Liminix 
Signed-off-by: Ryan Lahfa <ryan@dgnum.eu>
 2024-12-08 15:23:28 +01:00
Ryan Lahfa
ec98e60c3d
feat(devshell): add SSO and serial access tools 
Signed-off-by: Ryan Lahfa <ryan@dgnum.eu>
 2024-12-08 15:23:28 +01:00
Tom Hubrecht
750a2f90eb
feat(crabfit): Remove overzealous padding 2024-12-08 15:11:16 +01:00
Tom Hubrecht
0b27fef19f
fix(bridge01): Use correct node name 2024-12-08 13:46:29 +01:00
Tom Hubrecht
ecbad0a638
chore: Abstract machines and modules 
This adds subdirectories for the different types of systems, for the
modules and the machines
 2024-12-08 13:39:10 +01:00
Tom Hubrecht
c3f4e7ade6
fix(meta): Only define targetHost when the network config is defined 2024-12-08 12:49:46 +01:00
Tom Hubrecht
e1586b4873
fix(dns): Only generate infra records for nixos machines 2024-12-08 12:19:31 +01:00
Tom Hubrecht
4fa4d0bc21
feat(hive.nix): Refactor mkNixpkgsConfig 2024-12-08 12:10:50 +01:00
Tom Hubrecht
3a325437b8
chore(hive.nix): Simplify system management 2024-12-08 12:04:54 +01:00
Tom Hubrecht
3a58ac3fdc
fix(hive.nix): Remove inifinite recursion 2024-12-08 11:59:39 +01:00
Tom Hubrecht
eb5b8740a8
feat(meta): Remove default values for nixpkgs version 
They are considered harmful, and it simplifies the code.
 2024-12-08 11:52:26 +01:00
Tom Hubrecht
1821104e8e
feat(meta): Add system to the nodes meta 2024-12-08 11:40:01 +01:00
Tom Hubrecht
12c8870f6d
chore(meta): Sort nodes 2024-12-08 11:02:04 +01:00
Ryan Lahfa
4fabadccb4 feat(scripts/): use our own colmena 
In the future, we should not have to do this.

Signed-off-by: Ryan Lahfa <ryan@dgnum.eu>
 2024-12-07 15:30:42 +01:00
Ryan Lahfa
344cc26d8e feat(meta/*): support generalized deployments 
Our colmena knows how to deal with families of system types, e.g. NixOS
systems or Liminix-based systems.

This is a step 1 towards supporting our APs in our infrastructure.

Signed-off-by: Ryan Lahfa <ryan@dgnum.eu>
 2024-12-07 15:26:13 +01:00
Tom Hubrecht
ae057f480f
feat(lib): Add warn 2024-12-07 13:12:20 +01:00
Tom Hubrecht
f909853119
feat(dns): Add autoritative DNS for lab subdomain 2024-12-07 11:05:45 +01:00
catvayor
a60b546277
feat(vault01/gretap): gretap for hackaton 2024-12-07 10:52:37 +01:00
sinavir
09b5963449
fix(ds-fr): Lock patch with hash 2024-12-06 10:58:57 +01:00
sinavir
d4dab1e7ae
fix(ds-fr): Update dgn patch 2024-12-06 10:31:29 +01:00
sinavir
41caf293b0
chore(ds-fr): Remove unused files 2024-12-06 09:50:23 +01:00
Tom Hubrecht
2a7a3aba83
fix(npins): Update hash 2024-12-02 17:25:41 +01:00
Tom Hubrecht
96e8bfff5b
feat(django-apps): Internalize 2024-11-25 23:29:39 +01:00
sinavir
aa154d1b1b
fix(web03/dj-apps): Use secret tokens 2024-11-25 16:06:08 +01:00
sinavir
f37a7449cb
fix(netbox-agent): Disable as it is broken 2024-11-25 15:18:28 +01:00
Tom Hubrecht
030803ba29
chore(patches): Reorganize 2024-11-25 11:15:20 +01:00
Tom Hubrecht
13abd5400b
fix(web03/dj-wikiens): Update dependencies 2024-11-23 11:33:56 +01:00
Tom Hubrecht
f6c933f374
fix(kanidm): Use last usable version: 1.3.3 2024-11-22 23:12:18 +01:00
DGNum Chores
c9839d4be6 chore(npins): Update 2024-11-22 15:27:34 +00:00
Tom Hubrecht
fe52f0ebe2
feat(forgejo-runners): Use /data/slow/nix and not /data/slow/nix/nix 
The upstream module should be updated to reflect that, use rootPath
instead of storePath
 2024-11-22 14:04:35 +01:00