cst1/infrastructure
1
0
Fork 0
forked from DGNum/infrastructure
Code Pull requests Activity
1144 commits 16 branches 0 tags 2.2 MiB
Commit graph

1144 commits

This branch
This branch
All branches
Author SHA1 Message Date
Tom Hubrecht
e0a0bc8c5f feat(meta/organization): Split the file 2025-02-19 19:33:45 +01:00
HT Chores
6cc74e8d2a chore(npins): Update kat-pkgs 2025-02-19 14:00:24 +01:00
Tom Hubrecht
a604232fa8
chore(npins): Update dgsi 2025-02-19 12:01:15 +01:00
Tom Hubrecht
a86609ca90
feat(web03): Prepare the migration by setting up the sympa credentials 2025-02-19 10:32:05 +01:00
Tom Hubrecht
34f1a36b5e
feat(web01/wordpress): Deploy npr.wp.dgnum.eu 2025-02-16 00:35:24 +01:00
Tom Hubrecht
83aa42ac79
fix(keys): Make it so agenix works again 2025-02-13 17:38:12 +01:00
catvayor
909bb55764
chore(keys/catvayor): finish ssh key rotation 2025-02-13 12:36:26 +01:00
Tom Hubrecht
e61031d93b
chore(npins): Update dgsi 2025-02-11 17:04:21 +01:00
Tom Hubrecht
8d2be99daf
feat(compute01/kanidm): Generate the VLAN groups 2025-02-11 15:07:13 +01:00
Tom Hubrecht
7f7e245123
chore(meta): Use mkImports for the module list 2025-02-11 10:31:37 +01:00
Tom Hubrecht
299c8c8108
chore(nix-lib): Remove nixpkgs.nix 
It is no longer used
 2025-02-11 10:31:37 +01:00
Tom Hubrecht
14ef9d88f3
chore(meta/options): Add comments 2025-02-11 10:31:37 +01:00
catvayor
ecb6b54b9e
feat(lib): init genFuse 2025-02-10 16:52:50 +01:00
Tom Hubrecht
85374e9d6c
chore(npins): Revert failed update 
This reverts commit e1c6b1b749.
 2025-02-10 16:52:12 +01:00
HT Chores
e1c6b1b749 chore(npins): Update nixos-24.11 2025-02-10 12:16:28 +00:00
Tom Hubrecht
0243b21cce fix(patches): Remove changes included upstream 2025-02-10 12:16:03 +00:00
Tom Hubrecht
69d79a7049
fix(nixos-unstable): Revert netbox-qr update as it is incompatible with netbox 2025-02-10 00:10:27 +01:00
Tom Hubrecht
0235b77777
fix(compute01/extranix): Make it build 2025-02-09 23:05:39 +01:00
Tom Hubrecht
3dd314e78c
feat(compute01/grafana): Add victoria* data sources 2025-02-09 22:58:41 +01:00
Tom Hubrecht
3678c24ed4
feat(modules/dgn-monitoring): Replace dgn-node-monitoring 2025-02-09 00:30:46 +01:00
Tom Hubrecht
95df4a5ed6
feat(modules/dgn-monitoring): Setup VictoriaMetrics and VictoriaLogs 2025-02-09 00:30:46 +01:00
Tom Hubrecht
358b5a6497
feat(storage01): Deploy VictoriaMetrics and VictoriaLogs on the VPN 2025-02-09 00:30:46 +01:00
HT Chores
50a97b42ec chore(npins): Update nixos-unstable 2025-02-08 12:17:26 +00:00
Tom Hubrecht
0597476550 chore(npins): Update dgsi 2025-02-06 14:01:36 +01:00
Tom Hubrecht
7eef4e2661
feat(meta): Use the module system to directly create the admin list from the groups 2025-02-06 13:41:03 +01:00
Tom Hubrecht
0433a00636
chore(bootstrap): Rename file 2025-02-06 13:08:04 +01:00
Tom Hubrecht
9fe392d4ea
chore(meta): Format 2025-02-06 13:08:04 +01:00
sinavir
00c70ce869
chore(lib): Clean instanciation 2025-02-06 13:08:04 +01:00
sinavir
e0759140cc
chore: Refactor meta to a module architecture 
Get rid of the weird half nix half module stuff.
 2025-02-06 13:08:04 +01:00
sinavir
9d24c766f3
feat(keys): Move keys to meta 
chore: revert meta stuff
 2025-02-06 13:08:04 +01:00
Tom Hubrecht
f55107301a
chore(npins): Update dgsi 2025-02-06 11:24:34 +01:00
Ryan Lahfa
b5fe7bd71f feat(machines/nixos/build01/nix-builder): add builder-specific keys via dgn-keys 
Reuses the commit on builder-specific keys.

Signed-off-by: Ryan Lahfa <ryan@dgnum.eu>
 2025-02-06 01:30:45 +01:00
Ryan Lahfa
551c75ac47 feat(machines/nixos/build01/nix-builder): enable trusted remote building 
This enables any nix-builder to be able to remote build with the trusted
bit in Nix.

This effectively gives root to all these people, I don't think it's a
big deal.

Signed-off-by: Ryan Lahfa <ryan@dgnum.eu>
 2025-02-06 01:30:45 +01:00
Ryan Lahfa
5ca85e3430 feat(keys): add builder-specific keys 
For remote building, keys are usually isolated from the main keys.

This enables another list of keys to add.

Signed-off-by: Ryan Lahfa <ryan@dgnum.eu>
 2025-02-06 01:28:11 +01:00
catvayor
c5623896f3 feat(isp/legal): scripts to reply to legal request 2025-02-05 17:05:01 +01:00
HT Chores
bdd1c14a46 chore(npins): Update kat-pkgs 2025-02-05 16:56:55 +01:00
HT Chores
8864aefa38 chore(npins): Update dgsi 2025-02-05 16:30:36 +01:00
catvayor
a305a69aad
fix(bridge01/network): hack! resolve arp of the router 2025-02-05 16:20:33 +01:00
catvayor
ce66001883 fix(update): adapted patch to unstable update 2025-02-05 16:08:06 +01:00
HT Chores
c27f63b2e2 chore(npins): Update nixos-unstable 2025-02-05 16:08:06 +01:00
catvayor
b3eb86c0a1
feat(ISP/firewall): forward filtering 
removes the snat filtering of preliminar tests
 2025-02-05 15:52:06 +01:00
HT Chores
5f5fae103f chore(npins): Update lix-module 2025-02-05 15:44:07 +01:00
HT Chores
69e85ad6da chore(npins): Update lix 2025-02-05 15:30:26 +01:00
catvayor
69849b3d08
feat(isp): connecting all APs 2025-02-05 14:20:00 +01:00
catvayor
76239af209
refactor(netconf): use dgn-isp for switches 2025-02-05 14:20:00 +01:00
catvayor
1ed3749c33
feat(netconf/dgn-isp): init 
module to make isp switches description easier
 2025-02-05 14:20:00 +01:00
catvayor
15cec17611
feat(netconf/dgn-profiles): init 
Module to factorise port configuration
 2025-02-05 14:20:00 +01:00
sinavir
902cce4edb
fix(bridge01): Make it finally work 2025-02-05 12:32:58 +01:00
sinavir
2f2cee559e
feat(sso/groups): Add grp_cri_nps 2025-02-05 10:56:37 +01:00
sinavir
bf324738b1
feat(sources/nixpkgs): Add kanidm memberless patch 2025-02-04 15:27:05 +01:00