cst1/infrastructure
1
0
Fork 0
forked from DGNum/infrastructure
Code Pull requests Activity
958 commits 16 branches 0 tags 1.9 MiB
Commit graph

542 commits

Author SHA1 Message Date
Tom Hubrecht
176cff5e6d
feat(dgsi): Update source and settings 2024-09-26 15:23:43 +02:00
Tom Hubrecht
681155318b
fix(nextcloud): Don't use fast_shutdown 2024-09-26 14:05:40 +02:00
sinavir
5c8db3544c chore(ci): Make the CI happy 2024-09-26 13:45:06 +02:00
Tom Hubrecht
bdeb55f9ec
feat(dgsi): Make it work 2024-09-25 13:57:55 +02:00
Tom Hubrecht
2b75890752
feat(compute01): Deploy dgsi 2024-09-24 20:54:51 +02:00
sinavir
05f7be1983 fix(tvix-cache): Update the cache to a working version 2024-09-23 00:40:06 +02:00
sinavir
89d219fe8a feat(garage): Add hackens website 2024-09-22 00:52:04 +02:00
sinavir
9e7215b5b8 feat(hermes): Bridge more channels 2024-09-22 00:51:36 +02:00
Ryan Lahfa
859418b377 feat(chatops): init takumi 
Takumi means "artisan" (in the sense of "master") in Japanese. It's an
accurate and efficient ChatOps for day-to-day operations of DGNum.

Signed-off-by: Ryan Lahfa <ryan@dgnum.eu>
 2024-09-20 21:50:15 +02:00
sinavir
f6253021d7 feat(nuit website): migrate to s3 2024-09-18 14:21:13 +02:00
Tom Hubrecht
99825b89ca
fix(stirling-pdf): Make it build again 2024-09-10 22:41:25 +02:00
Ryan Lahfa
595407c13b feat(ISP): enable SNAT on 5C:64:8E:F4:09:06 
For testing purposes.

Signed-off-by: Ryan Lahfa <ryan@dgnum.eu>
 2024-09-08 12:32:56 +02:00
catvayor
3b766e6a2b feat(ulogd): enabling ulogd 2024-09-08 12:21:08 +02:00
catvayor
b8601b0782 feat(nat): desactivating on vlan-apro 2024-09-07 16:09:01 +02:00
Tom Hubrecht
605f7beda2
fix(uptime-kuma): Don't try to get the radius endpoint 2024-09-01 23:34:07 +02:00
Tom Hubrecht
fd0aeacff4
feat(firewall): Sunset fail2ban and switch to reaction 2024-09-01 22:51:56 +02:00
Tom Hubrecht
86c1018dc8
fix(web01): Add a redirection from bds.ens.fr/gestion2 to its new location 2024-09-01 15:48:35 +02:00
Tom Hubrecht
8a42e18d98
feat(k-radius): Use LE certificates instead of self-signed ones 2024-09-01 15:40:59 +02:00
Ryan Lahfa
3ca3ff8939 feat(radius): add AP secret for RADIUS auth requests 
Signed-off-by: Ryan Lahfa <ryan@dgnum.eu>
 2024-08-31 22:38:35 +02:00
Tom Hubrecht
16f47ce227
feat(wordpress): Finish the migration of the BDS website 2024-08-31 00:36:19 +02:00
Tom Hubrecht
f5cc186ea1
feat(web01): Decomissionate kahulm 2024-08-30 18:44:58 +02:00
Tom Hubrecht
ccaa999adc
feat(wordpress): Prepare the migration 2024-08-30 10:08:12 +02:00
soyouzpanda
0d7b4efbd3 feat(kahulm): Added kahulm to web01 2024-08-17 18:00:30 +02:00
Tom Hubrecht
b3b21d1f96
feat(forgejo-runners): Switch to patched version of colmena 
This allows to evaluate bridge01 in the CI
 2024-08-14 18:56:11 +02:00
sinavir
c14e263b98 feat(tvix-store): Init 2024-07-29 14:31:42 +02:00
Tom Hubrecht
be128f6c3a
feat(kadenios): Fix build of static files and restore cas.eleves.ens.fr for authens 2024-07-28 14:30:03 +02:00
Tom Hubrecht
1216a0a780
feat(cas-eleves): Redirect from cas-eleves.dgnum.eu to cas.eleves 2024-07-28 14:10:42 +02:00
sinavir
f6c9137850 fix(signal-irc-bridge): make it work 2024-07-20 00:45:17 +02:00
Tom Hubrecht
23b2a19494
feat(kadenios): Don't include dev dependencies in the environment 2024-07-19 11:24:21 +02:00
Tom Hubrecht
ce64be6e79
Revert "fix(web02): Don't be too fast" 
This reverts commit a6c3b42ad9.
 2024-07-12 19:13:04 +02:00
Tom Hubrecht
a6c3b42ad9
fix(web02): Don't be too fast 2024-07-12 11:02:04 +02:00
Tom Hubrecht
680682f520
feat(bridge02): Initialize and add instructions to the README 2024-07-10 17:31:04 +02:00
Tom Hubrecht
4bc2ebf429 feat(web02): Switch to cas.eleves.ens.fr for the cas server 2024-07-10 14:15:24 +02:00
Tom Hubrecht
1bf5ad93a2 feat(kadenios): Add management script 2024-07-09 14:52:01 +02:00
Tom Hubrecht
954ba45281 feat(web02): Deploy kadenios on vote.dgnum.eu 2024-07-09 10:47:30 +02:00
Tom Hubrecht
59aaf015dd chore(cas-eleves): There is no real build phase 2024-07-09 10:46:58 +02:00
catvayor
411795c664
fix(routing): clean icmp storm 2024-07-08 20:38:01 +02:00
catvayor
dce439fcca
fix(shitty-oob): Drop user vlans when no-uplink 2024-07-08 20:38:00 +02:00
catvayor
37a18c0347
feat(nat): Enable nat (with ip_forward) 2024-07-08 20:38:00 +02:00
Tom Hubrecht
a00833c682 fix(cas-eleves): Fix the build of django-cas-server 2024-07-08 16:23:12 +02:00
Tom Hubrecht
adf62b0534 feat(web02): Switch to nix-pkgs for python modules 2024-07-07 13:56:10 +02:00
Tom Hubrecht
7092c4e9c3 fix(attic): Don't use the same port as prometheus 2024-07-06 11:59:58 +02:00
Tom Hubrecht
d553d6efe7 fix(stirling-pdf): Vendor patches and update version 2024-07-06 11:36:54 +02:00
Tom Hubrecht
9f7ddf2adf feat(nextcloud): Update collabora and settings 2024-07-05 18:44:49 +02:00
Tom Hubrecht
5279356835 feat(nextcloud): Upgrade to 29 2024-07-05 16:15:27 +02:00
Tom Hubrecht
8b3747fd22 fix(web02): Once more 2024-07-05 16:09:04 +02:00
Tom Hubrecht
38f6151fbb fix(web02): Don't let the CI choke 2024-07-05 15:31:57 +02:00
sinavir
f637ae9ea8 fixup! feat: Upgrade machines to nixos-24.05 2024-07-05 10:54:33 +02:00
Tom Hubrecht
ac09d221ad feat: Upgrade machines to nixos-24.05 2024-07-05 10:54:33 +02:00
Tom Hubrecht
7c5ed7b65a feat(cas-eleves): Update and load fixture 2024-07-04 21:29:22 +02:00
Tom Hubrecht
325e24f5f6 feat(cas-eleves): Update to latest version 2024-07-03 14:56:46 +02:00
Tom Hubrecht
5668b6bbfd feat(web02): Deploy a CAS server on cas-eleves.dgnum.eu 2024-07-02 20:54:45 +02:00
Tom Hubrecht
0be91e4803 fix(web02): Use the correct fs configuration 2024-06-26 22:25:40 +02:00
Tom Hubrecht
1ac7ca0d99 fix(forgejo): Re-enable gravatars 2024-06-06 11:24:13 +02:00
Tom Hubrecht
076e6a499a feat(forgejo): Enable cron actions 2024-06-06 11:21:42 +02:00
sinavir
45b776b94e feat(banda): Add domain name 2024-06-05 11:43:23 +02:00
catvayor
bc5ee80d69 style: requested changes 2024-05-26 20:50:33 +02:00
catvayor
9f256186e0 feat(dhcp): drop freeRadius to use networkd 2024-05-23 14:58:37 +02:00
catvayor
e9c5489bc2 feat(dhcp): dhcp configuration 
limit to 300 vlans because of freeRadius limitation
 2024-05-23 10:39:24 +02:00
catvayor
f9250e8886 feat(k-radius): Allow to enable extra mods and sites 2024-05-23 10:39:24 +02:00
catvayor
8c14c5d2c6 refactor(vlans): list vlans and their parameters in a separate file 2024-05-23 10:39:24 +02:00
catvayor
f22580dd26 fix(vlans): activate things to bypass vlan limit 2024-05-23 10:39:24 +02:00
catvayor
35ab7bfee3 feat(dhcp): Add DHCP on vlans 
Uses networkd, maybe it's better to do it with radius, but it's simpler
 2024-05-23 10:39:24 +02:00
catvayor
150e741263 feat(routing): Chaque vlan a une IP différente et policyrules 2024-05-23 10:39:24 +02:00
catvayor
93bf6f8baa feat: refactor du plan IP 2024-05-23 10:39:24 +02:00
sinavir
bfeaa18530 feat(signal-irc-bridge): init 2024-05-22 18:26:06 +02:00
Tom Hubrecht
d3b7481188 fix(atticd): Don't chunk NARs as garage does it automatically 2024-05-21 09:24:01 +02:00
Tom Hubrecht
e2de21ed18 feat(cineclub): Add redirections 2024-05-18 19:14:24 +02:00
Tom Hubrecht
9a8c182a95 feat(wp): Update cineclub address 2024-05-18 16:47:54 +02:00
Tom Hubrecht
2c88c2bad7 fix(netbox-agent): batch requests filtering on interfaces 
Re-enable the service on vault01 now that it works
 2024-05-07 13:29:43 +02:00
sinavir
3494f609bb fix(netbox-agent): really disable on vault01 2024-05-07 09:07:22 +02:00
sinavir
bf4bdf70df fix(netbox-agent): disable on vault01 2024-05-07 08:45:19 +02:00
Tom Hubrecht
0eb813c8bf feat(compute01): Upgrade postgres to 16.2 2024-05-01 16:01:44 +02:00
Tom Hubrecht
4e7b3154da feat(compute01): Add postgres config 2024-04-28 19:14:52 +02:00
Tom Hubrecht
ed567cf432 chore(ds-fr): Update 2024-04-24 18:53:48 +02:00
Tom Hubrecht
6c843bb00f fix(garage): Restore logLevel and increase TimeoutSec 2024-04-24 10:05:33 +02:00
Tom Hubrecht
e86edb074b fix(garage): Make the logs readable 2024-04-24 09:42:06 +02:00
sinavir
d26370514a feat(garage): add banda's website 2024-04-23 23:28:09 +02:00
sinavir
9b6536f529 feat(prometheus): monitor garage 2024-04-23 23:26:03 +02:00
Tom Hubrecht
3f928ce90b feat(modules): Generalize redirections 2024-04-23 22:02:04 +02:00
Tom Hubrecht
dd10a8e2fe feat(ups): Use netbirdIp as given in the metadata 2024-04-23 13:47:21 +02:00
sinavir
d5d21ec204 fix(prometheus-nut-exporter): make it work 2024-04-22 08:28:40 +02:00
catvayor
1eea46b59f style: requested change 2024-04-21 23:14:53 +02:00
catvayor
4d16839a10 feat(upsmon): Send mails to isp team 2024-04-21 23:14:53 +02:00
catvayor
ee81052766 fix(ups): Password is a secret 2024-04-21 23:14:53 +02:00
catvayor
b8d3b34122 feat(upsmon): Auto-shutdown when on batterie for too long 2024-04-21 23:14:53 +02:00
catvayor
9ec9821556 feat(ups): nut_exporter and scraping 2024-04-21 23:14:53 +02:00
catvayor
f9de205aad feat(upsd): Enabling upsd 2024-04-21 23:14:53 +02:00
sinavir
20d3354a4d feat: declarative probes for uptime-kuma 2024-04-21 22:45:52 +02:00
Tom Hubrecht
c4154e0a35 fix(plausible): Make the migration effective 2024-04-21 22:42:51 +02:00
Tom Hubrecht
f065db687a feat(plausible): Transfer from web01 to compute01 2024-04-21 21:50:01 +02:00
sinavir
dc341cf611 fix: attic s3 parameters bis 
Set AWS_REGION. Hope this will work
 2024-04-20 20:39:48 +02:00
sinavir
12bf83f68e fix: attic s3 parameters 2024-04-20 17:47:40 +02:00
sinavir
1b29118b98 fix: mastodon smtp setup bis 2024-04-20 17:47:02 +02:00
sinavir
b26d9f752e fix: mastodon smtp setup 2024-04-20 15:40:10 +02:00
Tom Hubrecht
f2e4e8aa5b chore(ds-fr): Update 2024-04-20 11:04:04 +02:00
Tom Hubrecht
ad7ce0be7e feat(stirling-pdf): Add DGNum custom patch 2024-04-19 16:13:01 +02:00
Tom Hubrecht
323caed4ed feat(static): Update eleves.dgnum.eu 2024-04-19 15:36:30 +02:00
Tom Hubrecht
496c1ff33f feat(stirling-pdf): Default to french locale 2024-04-19 14:58:13 +02:00
Tom Hubrecht
dba0c88f70 feat(compute01): Deploy stirling-pdf on pdf.dgnum.eu 2024-04-19 14:40:09 +02:00
Tom Hubrecht
f63c95e4d9 fix(ds-fr): Test3 2024-04-17 17:27:25 +02:00
Tom Hubrecht
e51a7b4a81 fix(ds-fr): Test2 2024-04-17 17:10:28 +02:00
Tom Hubrecht
ace6f1d931 fix(ds-fr): Remove cache 2024-04-17 17:06:28 +02:00
Tom Hubrecht
63d7d7d658 fix(ds-fr): Test 2024-04-17 16:34:30 +02:00
Tom Hubrecht
22ef2cf79d feat(ds-fr): Update version and workflow 2024-04-17 15:14:34 +02:00
Tom Hubrecht
c6691cf9f1 feat(ds-fr): Switch to new upstream packaging..... 2024-04-17 14:47:55 +02:00
sinavir
0c45a88561 fix: change prometheus retention time 2024-04-16 18:57:18 +02:00
catvayor
01c2505491 feat(vault01): Add user vlans 
Only the first 300 vlans are activated, 850 make it crash
 2024-04-16 09:40:47 +02:00
Tom Hubrecht
9e75839ada feat(forgejo): Update config, and enable mail notifications 2024-04-16 09:32:32 +02:00
Tom Hubrecht
ee4c0ca4d6 fix(atticd): Run with less logs 2024-04-15 16:21:15 +02:00
Tom Hubrecht
93b7a242ab feat(vault01/networking): Simplify the configuration 2024-04-14 14:49:22 +02:00
sinavir
60ee43b577 feat(monitoring): Add uptime-kuma to prometheus targets 2024-04-14 01:10:10 +02:00
sinavir
c6fe6b5891 feat(monitoring): Enable node exporter on almost all nodes 2024-04-14 01:10:10 +02:00
sinavir
8e79b19101 fix(prometheus): Provide retention and scraping policy 2024-04-14 01:10:10 +02:00
Tom Hubrecht
75409ed0df feat(forgejo): Use package from nixos-unstable 2024-04-13 13:44:23 +02:00
Tom Hubrecht
199ccd4034 feat(kanidm): Update allowed domains for the CORS 2024-04-13 13:44:23 +02:00
sinavir
9f2165abc8 feat(ci): Cache CI results 2024-04-12 22:14:20 +02:00
sinavir
7645b6fd71 fix(attic): Change client_max_body_size 2024-04-12 19:49:27 +02:00
sinavir
d0684ead8a fix(attic): Use package from nixpkgs 2024-04-12 19:36:44 +02:00
Tom Hubrecht
e961fb1473 feat(static): Update interq.ens.fr 2024-04-12 11:44:49 +02:00
Tom Hubrecht
06ac087ab6 feat(static): Update interq.ens.fr 2024-04-11 21:50:25 +02:00
Tom Hubrecht
fe0b181fd9 feat(static): Update interq.ens.fr 2024-04-10 09:54:58 +02:00
Tom Hubrecht
84e5f4a33a fix(satosa): Use GH source 2024-04-08 23:23:25 +02:00
Tom Hubrecht
9eb89a03ab fix(radius): Don't lose our shit when copying files 2024-04-08 23:10:59 +02:00
Tom Hubrecht
e2cb4a7dca feat(k-radius): Update packages 2024-04-08 22:42:59 +02:00
Tom Hubrecht
ccfbc4be42 feat(radius): Move configuration from compute01 to vaul01 2024-04-08 22:21:17 +02:00
catvayor
e8fde45fbf feat(apro): Add vlan apro for AP flashing 2024-04-08 16:01:29 +02:00
Tom Hubrecht
999817ce8b feat(ds-fr): Update dependencies 2024-04-07 21:47:22 +02:00
Tom Hubrecht
3573613033 feat(web02): Don't specify a kernel version 2024-04-07 21:31:48 +02:00
Tom Hubrecht
d23d53d5fc feat(vault01): Disable bcachefs 2024-04-07 21:29:18 +02:00
catvayor
beba4fb0f6 feat(mgmt): Add APs vlan access 2024-04-07 20:20:04 +02:00
catvayor
026653218f feat(mgmt): Use IPv6 instead of IPv4 2024-04-07 20:20:04 +02:00
Tom Hubrecht
158e9647bd feat(netbox): Update QR-Code config 2024-04-06 00:48:34 +02:00
catvayor
2e3bb99b84 feat(vault01): Add admin vlan 2024-04-06 00:02:47 +02:00
Tom Hubrecht
a64f5dac9e feat(static): Update interq.ens.fr 2024-04-06 00:02:09 +02:00
Tom Hubrecht
b36b0d7d67 feat(infra): Rework nixpkgs version management 2024-04-03 22:05:37 +02:00
sinavir
22fb460650 feat(netbox): Add qr-codes 2024-04-03 19:31:46 +02:00
Tom Hubrecht
c2bafcbc65 feat(static): Update interq.ens.fr 2024-04-03 16:04:37 +02:00
Tom Hubrecht
317cdf4abd feat(web01): Add redirections 2024-04-02 20:57:13 +02:00
Tom Hubrecht
3bede07e53 fix(web01): Use a version with a correct structure 2024-04-02 20:48:53 +02:00
DGNum Chores
14bb3aed8a chore(ds-fr): Update 2024-04-02 20:11:53 +02:00
Tom Hubrecht
42c1d3280f feat(web01): Deploy tuteurs.ens.fr on our infra 2024-04-02 14:32:35 +02:00
sinavir
fdd4f4b443 feat(rescue01): deploy uptime-kuma 2024-03-28 16:25:29 +01:00
DGNum Chores
733c9c74a7 chore(ds-fr): Update 2024-03-27 16:29:42 +01:00
sinavir
ce05bee635 feat(vault01): CRI uplink is now connected to internet 2024-03-27 15:38:46 +01:00
Tom Hubrecht
5b0562d59e feat(static): Update interq.ens.fr 2024-03-27 14:36:34 +01:00
sinavir
3cce216ada feat(vault01): Add CRI link 2024-03-27 10:26:31 +01:00
Tom Hubrecht
7c977fc3d9 feat(ds-fr): Update 2024-03-25 12:50:22 +01:00
Tom Hubrecht
16ae324b62 feat(web01): Disable dolibarr 2024-03-24 18:41:22 +01:00
Tom Hubrecht
3b9b2d4796 chore(static): Update 2024-03-16 17:57:30 +01:00