Commit graph

632 commits

Author SHA1 Message Date
a86609ca90
feat(web03): Prepare the migration by setting up the sympa credentials 2025-02-19 10:32:05 +01:00
34f1a36b5e
feat(web01/wordpress): Deploy npr.wp.dgnum.eu 2025-02-16 00:35:24 +01:00
8d2be99daf
feat(compute01/kanidm): Generate the VLAN groups 2025-02-11 15:07:13 +01:00
0235b77777
fix(compute01/extranix): Make it build 2025-02-09 23:05:39 +01:00
3dd314e78c
feat(compute01/grafana): Add victoria* data sources 2025-02-09 22:58:41 +01:00
3678c24ed4
feat(modules/dgn-monitoring): Replace dgn-node-monitoring 2025-02-09 00:30:46 +01:00
358b5a6497
feat(storage01): Deploy VictoriaMetrics and VictoriaLogs on the VPN 2025-02-09 00:30:46 +01:00
7eef4e2661
feat(meta): Use the module system to directly create the admin list from the groups 2025-02-06 13:41:03 +01:00
sinavir
e0759140cc
chore: Refactor meta to a module architecture
Get rid of the weird half nix half module stuff.
2025-02-06 13:08:04 +01:00
b5fe7bd71f feat(machines/nixos/build01/nix-builder): add builder-specific keys via dgn-keys
Reuses the commit on builder-specific keys.

Signed-off-by: Ryan Lahfa <ryan@dgnum.eu>
2025-02-06 01:30:45 +01:00
551c75ac47 feat(machines/nixos/build01/nix-builder): enable trusted remote building
This enables any nix-builder to be able to remote build with the trusted
bit in Nix.

This effectively gives root to all these people, I don't think it's a
big deal.

Signed-off-by: Ryan Lahfa <ryan@dgnum.eu>
2025-02-06 01:30:45 +01:00
c5623896f3 feat(isp/legal): scripts to reply to legal request 2025-02-05 17:05:01 +01:00
a305a69aad
fix(bridge01/network): hack! resolve arp of the router 2025-02-05 16:20:33 +01:00
b3eb86c0a1
feat(ISP/firewall): forward filtering
removes the snat filtering of preliminar tests
2025-02-05 15:52:06 +01:00
69849b3d08
feat(isp): connecting all APs 2025-02-05 14:20:00 +01:00
76239af209
refactor(netconf): use dgn-isp for switches 2025-02-05 14:20:00 +01:00
sinavir
902cce4edb
fix(bridge01): Make it finally work 2025-02-05 12:32:58 +01:00
sinavir
2f2cee559e
feat(sso/groups): Add grp_cri_nps 2025-02-05 10:56:37 +01:00
sinavir
bbdc5ef6da
fix(web03/ernestophone): Missing secrets 2025-02-04 14:06:46 +01:00
304103af3a feat(netconf/netcore01): init 2025-02-03 15:08:36 +01:00
d2603b38d8 feat(netconf/netaccess01): init 2025-02-03 15:08:36 +01:00
222dbd724c feat(netcore02): allow hypervisor vlan in potos 2025-02-03 15:08:36 +01:00
fabfc982f2
feat(compute01/dgsi): Update 2025-02-02 11:12:04 +01:00
sinavir
9e0e7d01ec
feat(garage/actes-administratifs): Init bucket 2025-02-02 11:09:27 +01:00
2c59fd4e81
feat(dgsi): Update staff group 2025-01-30 17:34:04 +01:00
905b252ac6
fix(vault01/snat): we lost an ip for the oob 2025-01-28 12:17:19 +01:00
7d0f447036
fix(vault01/iprules): allow packets to return to orig saddr 2025-01-28 12:16:42 +01:00
567b153c31 feat(kanidm): Add groups for service admins 2025-01-28 08:31:45 +01:00
93a26c26f9
feat(vault01/radius): declare user vlans 2025-01-27 20:35:35 +01:00
c97db7609d
feat(vault01): global options for vlans decl 2025-01-27 20:29:15 +01:00
7dab4ef1cb
feat(isp/vault01): (temp) ipv4 for production APs 2025-01-27 10:27:29 +01:00
2277fdb32d feat(isp/vault01): IPv6 send RA for APs 2025-01-27 10:00:02 +01:00
d0b4f2a921
fix(pretalx): Disable test failing in CI 2025-01-26 00:14:09 +01:00
fe8330ed84 feat(rescue01): Deploy a netbird relay 2025-01-25 22:07:42 +01:00
137b629a0f
feat(dgsi): Update 2025-01-25 19:54:35 +01:00
11c7892f54 fix(vault01/networking): mtu 2025-01-25 19:30:43 +01:00
sinavir
ac3cd0a505
fix(cache): Use right nix option for client cache settings 2025-01-22 12:41:47 +01:00
sinavir
a03fe42131
fix(outline): Proxy websockets 2025-01-21 16:26:19 +01:00
820088c78e
fix(ds-fr): User correct patch 2025-01-20 01:09:35 +01:00
8ba6cedc1b
feat(compute01): Deploy pretalx 2025-01-20 01:09:35 +01:00
05591252a7
chore(pretix): Sort attributes 2025-01-20 00:55:55 +01:00
eea36da34b
feat(compute01): Deploy pretix 2025-01-19 23:37:08 +01:00
02084b130f
feat(web03/gestiocof): Add passthrough for some clubs 2025-01-17 09:18:56 +01:00
af7f161e24
feat(web03/gestiocof): Make the configuration suitable for a production setup 2025-01-16 18:49:02 +01:00
776f5f5426
feat(web03/bocal): Make the redirections work correctly 2025-01-16 16:56:39 +01:00
93f51cf972
feat(web03/bocal): Add preparation.pdf 2025-01-16 16:56:39 +01:00
79cb15120d
feat(web03): Add guests directory ass sshfs 2025-01-16 16:56:39 +01:00
ec564b46f4
feat(django-apps): Factorize overlays 2025-01-16 16:56:39 +01:00
05935d95c5
feat(web03/django-apps): Deploy gestiocof 2025-01-16 16:56:39 +01:00
c65c2036e0
feat(web03/django-apps): Deploy gestiobds 2025-01-16 16:56:39 +01:00