cst1/infrastructure
1
0
Fork 0
forked from DGNum/infrastructure
Code Pull requests Activity
1017 commits 16 branches 0 tags 2.2 MiB
Commit graph

134 commits

Author SHA1 Message Date
sinavir
5b02658e08
fix(garage): Switch to dangerous mode 2025-01-14 16:51:27 +01:00
sinavir
e6906a0aa3
feat(garage): Use a module and replicate on tower01 2025-01-14 09:52:42 +01:00
sinavir
07d226a06e
fix(build01/nix-builder): Use dgn-access-control 2025-01-10 19:26:24 +01:00
soyouzpanda
8cfc0001b9
feat(build01): Init 2025-01-09 23:08:08 +01:00
Tom Hubrecht
3c9c38fb03
chore(modules/firewall): Rewrite to simplify 
Also disable the ai filter for nodes that don't have nginx enabled
 2025-01-06 00:32:05 +01:00
Tom Hubrecht
e0cfd1ceb0
feat(firewall): Ban AI crawlers 2025-01-06 00:11:58 +01:00
catvayor
2551da6388
fix(extranix): ensure default entry exists and escape html 2025-01-04 13:23:12 +01:00
sinavir
194c09b291 fix(keys): Add nixosMachineKeys and rekey 
This is needed for secret encryption since netconf and liminix machines
don't have an ssh key for now.
 2024-12-28 23:01:19 +01:00
catvayor
7ac02ac5af feat(compute01/search): init search.infra and modules/nixos/extranix 2024-12-28 22:25:26 +01:00
catvayor
7c691ea920 fix(doc): missing description and lib.mdDoc 2024-12-28 22:25:26 +01:00
Tom Hubrecht
5fa7ccb8e7
fix(django-apps): Disable statedir backup until it is fixed 2024-12-21 17:18:32 +01:00
Tom Hubrecht
e19100f856
feat(django-apps): Add automatic backup 2024-12-21 08:24:11 +01:00
sinavir
7c6c753c67
feat(django-apps): Init ernestophone website 2024-12-20 04:21:06 +01:00
Tom Hubrecht
09e55d4a80
chore(reuse): Add copyright and license information 2024-12-16 09:34:15 +01:00
catvayor
3c9bf80f24
feat(netconf): use meta for access control 2024-12-16 09:26:52 +01:00
catvayor
9601caba4f
fix(netconf/dgn-hardware): missing parenthesis 2024-12-16 09:26:52 +01:00
Tom Hubrecht
1980d3c34e
feat(modules/netconf): Add lbailly's dgn-interfaces module 2024-12-16 09:26:52 +01:00
Tom Hubrecht
9024590a34
fix(netconf/dgn-hardware): Some models are extension cards 2024-12-16 09:26:52 +01:00
Tom Hubrecht
fbfb22d777
feat(modules/netconf): Add hardware module 2024-12-16 09:26:52 +01:00
Tom Hubrecht
08d7dc46b3
fix(modules/dgn-network): Make it work on web02 
This is the only node still on 24.05 as the cas server is f*cked
 2024-12-15 23:33:14 +01:00
Tom Hubrecht
046ed0c005
chore(networking): Attributes have to me moved up 2024-12-15 23:08:42 +01:00
Ryan Lahfa
bb7f538110 fix(modules/nixos/dgn-node-monitoring): listen and fix the cgroup port 
Otherwise, we cannot scrape that specific port.

Signed-off-by: Ryan Lahfa <ryan@dgnum.eu>
 2024-12-15 20:47:04 +01:00
Tom Hubrecht
76419de740
fix(modules/django-apps): Add descriptions where missing 2024-12-13 16:38:36 +01:00
Tom Hubrecht
3872b17ff6
fix(modules/dgn-console): Udate description of psql options 2024-12-13 15:48:04 +01:00
Tom Hubrecht
88d9b8c3e3
chore: Add license and copyright information 
Signed-off-by: Tom Hubrecht <tom.hubrecht@dgnum.eu>
Acked-by: Ryan Lahfa <ryan.lahfa@dgnum.eu>
Acked-by: Maurice Debray <maurice.debray@dgnum.eu>
Acked-by: Lubin Bailly <lubin.bailly@dgnum.eu>
Acked-by: Jean-Marc Gailis <jean-marc.gailis@dgnum.eu> as the legal authority, at the time of writing, in DGNum.
Acked-by: Elias Coppens <elias.coppens@dgnum.eu> as a member, at the time of writing, of the DGNum executive counsel.
 2024-12-13 12:41:38 +01:00
catvayor
a2ca441284
fix: remove lib.mdDoc references 2024-12-11 23:07:14 +01:00
Tom Hubrecht
b23312dcaa feat(dgn-web): Add yearly logrotate for nginx 2024-12-11 14:40:29 +01:00
Ryan Lahfa
e0cf11276d feat(monitoring): support cgroup exporting of metrics 
This needs an update in our node_exporter dashboard but nothing too
hard.

Signed-off-by: Ryan Lahfa <ryan@dgnum.eu>
 2024-12-11 11:08:07 +01:00
Tom Hubrecht
303f53af0f
chore: Apply the abstraction to ap01 2024-12-08 17:15:45 +01:00
Ryan Lahfa
d9a6d38d5e
feat(modules/dgn-access-control): support Liminix systems 
Liminix are not totally aligned with their implementation of users.

Signed-off-by: Ryan Lahfa <ryan@dgnum.eu>
 2024-12-08 15:23:28 +01:00
Tom Hubrecht
ecbad0a638
chore: Abstract machines and modules 
This adds subdirectories for the different types of systems, for the
modules and the machines
 2024-12-08 13:39:10 +01:00
Tom Hubrecht
96e8bfff5b
feat(django-apps): Internalize 2024-11-25 23:29:39 +01:00
sinavir
f37a7449cb
fix(netbox-agent): Disable as it is broken 2024-11-25 15:18:28 +01:00
Tom Hubrecht
7ab63fb4a5
fix(netbox-agent): Use the latest version, which returns the correct value to the shell 2024-10-23 10:05:25 +02:00
Tom Hubrecht
972b9554b7 feat(netbox-agent): Internalize 2024-10-21 19:38:11 +02:00
sinavir
c0435e694d fix(modules/dgn-records): Add enable option 2024-10-18 11:53:32 +02:00
Tom Hubrecht
fd6b9678ef
chore(netbox-agent): Rekey 2024-10-17 15:06:26 +02:00
Tom Hubrecht
f771ec72c8
fix(secrets): Rekey Arkheon and email secrets 2024-10-16 11:45:50 +02:00
Tom Hubrecht
14866df004
fix(dgn-web): Set a default for simpleProxies 2024-10-16 11:08:24 +02:00
Tom Hubrecht
af61ae6e61 feat(dgn-web): Add simpleProxies 
This proxies the required host to localhost:$port and enables SSL
 2024-10-12 20:00:54 +02:00
Tom Hubrecht
9ea6bada0a feat(dgn-web): Add a way to detect internal port clashes 2024-10-12 20:00:54 +02:00
Tom Hubrecht
1e71ef3636
feat(users): Add root passwords and deactivate mutableUsers 2024-10-10 09:23:19 +02:00
Tom Hubrecht
6c4099d369 feat(infra): Internalize nix-lib, and make keys management simpler 2024-10-09 18:58:46 +02:00
Ryan Lahfa
3aeae4e33f feat(krz01): add basic microvm exprs 
For a router01.

Signed-off-by: Ryan Lahfa <ryan@dgnum.eu>
 2024-10-08 17:14:23 +02:00
sinavir
70c69346fb feat(krz01): init 2024-10-08 12:35:59 +02:00
sinavir
38231eb6e0 feat(attic): Bye bye attic 2024-10-06 18:33:04 +02:00
sinavir
626577e2bc feat(redirections): Make it more flexible to allow temporary redirects 2024-09-30 20:17:20 +02:00
Ryan Lahfa
6b30a95fbb feat(dgn-chatops): !pm shorthand for !probe_meet 
Bumped minor version of Takumi for non-breaking changes.

Signed-off-by: Ryan Lahfa <ryan@dgnum.eu>
 2024-09-21 00:52:13 +02:00
Ryan Lahfa
1c6124f376 feat(dgn-chatops): Takumi v1.0.0 
Can schedule meet.dgnum.eu in the chat upon demand.

Signed-off-by: Ryan Lahfa <ryan@dgnum.eu>
 2024-09-21 00:24:38 +02:00
Ryan Lahfa
859418b377 feat(chatops): init takumi 
Takumi means "artisan" (in the sense of "master") in Japanese. It's an
accurate and efficient ChatOps for day-to-day operations of DGNum.

Signed-off-by: Ryan Lahfa <ryan@dgnum.eu>
 2024-09-20 21:50:15 +02:00