a2d397de70
feat(nodes): Update to nixos 24.11
2024-12-15 23:08:42 +01:00
a65e348f0e
feat(hive): Add tvix-store as a substituter
2024-12-15 22:15:56 +01:00
ecf5fefbaa
fix(machines/storage01): scrape all exporter ports
...
There may be more than one port for a given node.
Signed-off-by: Ryan Lahfa <ryan@dgnum.eu>
2024-12-15 20:47:04 +01:00
bb7f538110
fix(modules/nixos/dgn-node-monitoring): listen and fix the cgroup port
...
Otherwise, we cannot scrape that specific port.
Signed-off-by: Ryan Lahfa <ryan@dgnum.eu>
2024-12-15 20:47:04 +01:00
a1f17d1850
feat(meta/options): Add the system type to the default tags
2024-12-15 12:49:13 +01:00
76419de740
fix(modules/django-apps): Add descriptions where missing
2024-12-13 16:38:36 +01:00
3872b17ff6
fix(modules/dgn-console): Udate description of psql options
2024-12-13 15:48:04 +01:00
f5147dec8d
feat(workflows/pre-commit): Check multiple stages
2024-12-13 12:50:25 +01:00
88d9b8c3e3
chore: Add license and copyright information
...
Signed-off-by: Tom Hubrecht <tom.hubrecht@dgnum.eu>
Acked-by: Ryan Lahfa <ryan.lahfa@dgnum.eu>
Acked-by: Maurice Debray <maurice.debray@dgnum.eu>
Acked-by: Lubin Bailly <lubin.bailly@dgnum.eu>
Acked-by: Jean-Marc Gailis <jean-marc.gailis@dgnum.eu> as the legal authority, at the time of writing, in DGNum.
Acked-by: Elias Coppens <elias.coppens@dgnum.eu> as a member, at the time of writing, of the DGNum executive counsel.
2024-12-13 12:41:38 +01:00
630b7c0ffc
chore(web01): Remove kahulm.nix
2024-12-12 14:03:32 +01:00
b2bebdc20d
chore(web01): Remove dolibarr.nix
2024-12-12 14:00:14 +01:00
a2ca441284
fix: remove lib.mdDoc references
2024-12-11 23:07:14 +01:00
fe19171d85
feat(nextcloud): Deploy collabora without docker
2024-12-11 14:46:32 +01:00
b23312dcaa
feat(dgn-web): Add yearly logrotate for nginx
2024-12-11 14:40:29 +01:00
e0cf11276d
feat(monitoring): support cgroup exporting of metrics
...
This needs an update in our node_exporter dashboard but nothing too
hard.
Signed-off-by: Ryan Lahfa <ryan@dgnum.eu>
2024-12-11 11:08:07 +01:00
026acdecb7
fix(tvix-cache): Import an existing file
2024-12-10 11:14:10 +01:00
6d03c084a0
feat(hive): Add serverNodes to the arguments
2024-12-08 22:31:14 +01:00
25eee32a22
feat(scripts): introduce manual push script
...
This way, we can send some closures if some of our members build them on
more powerful machines.
Signed-off-by: Ryan Lahfa <ryan@dgnum.eu>
2024-12-08 21:14:28 +01:00
f16d8ce68f
fix(ap01): switch Liminix nodes to 24.05
...
There's a bug in 24.11 regarding GCC bootstrap for mipsel which makes it
impossible to use that NixOS version.
We will need to pin 24.05 and bisect until we find the root cause…
Signed-off-by: Ryan Lahfa <ryan@dgnum.eu>
2024-12-08 21:14:28 +01:00
ba62dcd6a6
fix(storage01): Make prometheus work again
...
By only looking at nixos nodes
2024-12-08 17:15:45 +01:00
65b188a7cd
fix(meta): Use correct optional
2024-12-08 17:15:45 +01:00
715201abc2
fix(rescue01): Filter nodes to only include real servers
2024-12-08 17:15:45 +01:00
a2295953da
fix(meta): Add required stuff for ap01
2024-12-08 17:15:45 +01:00
303f53af0f
chore: Apply the abstraction to ap01
2024-12-08 17:15:45 +01:00
e89ed2d0e7
feat(hive): ensure purity of cache-node.sh
...
Signed-off-by: Ryan Lahfa <ryan@dgnum.eu>
2024-12-08 15:24:40 +01:00
e94d6fd16e
fix(hive): ensure we are in hermetic evaluation
...
We don't want any <nixpkgs> to appear out of nowhere.
Signed-off-by: Ryan Lahfa <ryan@dgnum.eu>
2024-12-08 15:24:40 +01:00
6ca347ee51
Revert "chore(HACK): open a tmate session in the CI"
...
This reverts commit 5907ba80e1a608e1c2674e94bb4e5c98ac9dfc55.
2024-12-08 15:24:40 +01:00
4158d85efb
fix(npins): update liminix to fix graphviz incident
...
Signed-off-by: Ryan Lahfa <ryan@dgnum.eu>
2024-12-08 15:24:40 +01:00
a12b180592
chore(HACK): open a tmate session in the CI
...
Signed-off-by: Ryan Lahfa <ryan@dgnum.eu>
2024-12-08 15:24:40 +01:00
104d64f23f
feat(scripts/cache-node): support non-NixOS systems
...
Signed-off-by: Ryan Lahfa <ryan@dgnum.eu>
2024-12-08 15:24:40 +01:00
cdd8b9cc12
feat(machines): add ap01 initial configuration
...
Signed-off-by: Ryan Lahfa <ryan@dgnum.eu>
2024-12-08 15:24:40 +01:00
df6b48e2f3
feat(hive/registry): add Zyxel NWA50AX in the registry
...
Signed-off-by: Ryan Lahfa <ryan@dgnum.eu>
2024-12-08 15:24:40 +01:00
d9a6d38d5e
feat(modules/dgn-access-control): support Liminix systems
...
Liminix are not totally aligned with their implementation of users.
Signed-off-by: Ryan Lahfa <ryan@dgnum.eu>
2024-12-08 15:23:28 +01:00
a2a6bf8d1c
feat(npins/sources): switch to DGNum fork of Liminix
...
Signed-off-by: Ryan Lahfa <ryan@dgnum.eu>
2024-12-08 15:23:28 +01:00
ec98e60c3d
feat(devshell): add SSO and serial access tools
...
Signed-off-by: Ryan Lahfa <ryan@dgnum.eu>
2024-12-08 15:23:28 +01:00
750a2f90eb
feat(crabfit): Remove overzealous padding
2024-12-08 15:11:16 +01:00
0b27fef19f
fix(bridge01): Use correct node name
2024-12-08 13:46:29 +01:00
ecbad0a638
chore: Abstract machines and modules
...
This adds subdirectories for the different types of systems, for the
modules and the machines
2024-12-08 13:39:10 +01:00
c3f4e7ade6
fix(meta): Only define targetHost when the network config is defined
2024-12-08 12:49:46 +01:00
e1586b4873
fix(dns): Only generate infra records for nixos machines
2024-12-08 12:19:31 +01:00
4fa4d0bc21
feat(hive.nix): Refactor mkNixpkgsConfig
2024-12-08 12:10:50 +01:00
3a325437b8
chore(hive.nix): Simplify system management
2024-12-08 12:04:54 +01:00
3a58ac3fdc
fix(hive.nix): Remove inifinite recursion
2024-12-08 11:59:39 +01:00
eb5b8740a8
feat(meta): Remove default values for nixpkgs version
...
They are considered harmful, and it simplifies the code.
2024-12-08 11:52:26 +01:00
1821104e8e
feat(meta): Add system to the nodes meta
2024-12-08 11:40:01 +01:00
12c8870f6d
chore(meta): Sort nodes
2024-12-08 11:02:04 +01:00
4fabadccb4
feat(scripts/): use our own colmena
...
In the future, we should not have to do this.
Signed-off-by: Ryan Lahfa <ryan@dgnum.eu>
2024-12-07 15:30:42 +01:00
344cc26d8e
feat(meta/*): support generalized deployments
...
Our colmena knows how to deal with families of system types, e.g. NixOS
systems or Liminix-based systems.
This is a step 1 towards supporting our APs in our infrastructure.
Signed-off-by: Ryan Lahfa <ryan@dgnum.eu>
2024-12-07 15:26:13 +01:00
ae057f480f
feat(lib): Add warn
2024-12-07 13:12:20 +01:00
f909853119
feat(dns): Add autoritative DNS for lab subdomain
2024-12-07 11:05:45 +01:00