cst1/infrastructure
1
0
Fork 0
forked from DGNum/infrastructure
Code Pull requests Activity
918 commits 16 branches 0 tags 1.9 MiB
Commit graph

918 commits

This branch
This branch
All branches
Author SHA1 Message Date
Ryan Lahfa
e89ed2d0e7
feat(hive): ensure purity of cache-node.sh 
Signed-off-by: Ryan Lahfa <ryan@dgnum.eu>
 2024-12-08 15:24:40 +01:00
Ryan Lahfa
e94d6fd16e
fix(hive): ensure we are in hermetic evaluation 
We don't want any <nixpkgs> to appear out of nowhere.

Signed-off-by: Ryan Lahfa <ryan@dgnum.eu>
 2024-12-08 15:24:40 +01:00
Ryan Lahfa
6ca347ee51
Revert "chore(HACK): open a tmate session in the CI" 
This reverts commit 5907ba80e1a608e1c2674e94bb4e5c98ac9dfc55.
 2024-12-08 15:24:40 +01:00
Ryan Lahfa
4158d85efb
fix(npins): update liminix to fix graphviz incident 
Signed-off-by: Ryan Lahfa <ryan@dgnum.eu>
 2024-12-08 15:24:40 +01:00
Ryan Lahfa
a12b180592
chore(HACK): open a tmate session in the CI 
Signed-off-by: Ryan Lahfa <ryan@dgnum.eu>
 2024-12-08 15:24:40 +01:00
Ryan Lahfa
104d64f23f
feat(scripts/cache-node): support non-NixOS systems 
Signed-off-by: Ryan Lahfa <ryan@dgnum.eu>
 2024-12-08 15:24:40 +01:00
Ryan Lahfa
cdd8b9cc12
feat(machines): add ap01 initial configuration 
Signed-off-by: Ryan Lahfa <ryan@dgnum.eu>
 2024-12-08 15:24:40 +01:00
Ryan Lahfa
df6b48e2f3
feat(hive/registry): add Zyxel NWA50AX in the registry 
Signed-off-by: Ryan Lahfa <ryan@dgnum.eu>
 2024-12-08 15:24:40 +01:00
Ryan Lahfa
d9a6d38d5e
feat(modules/dgn-access-control): support Liminix systems 
Liminix are not totally aligned with their implementation of users.

Signed-off-by: Ryan Lahfa <ryan@dgnum.eu>
 2024-12-08 15:23:28 +01:00
Ryan Lahfa
a2a6bf8d1c
feat(npins/sources): switch to DGNum fork of Liminix 
Signed-off-by: Ryan Lahfa <ryan@dgnum.eu>
 2024-12-08 15:23:28 +01:00
Ryan Lahfa
ec98e60c3d
feat(devshell): add SSO and serial access tools 
Signed-off-by: Ryan Lahfa <ryan@dgnum.eu>
 2024-12-08 15:23:28 +01:00
Tom Hubrecht
750a2f90eb
feat(crabfit): Remove overzealous padding 2024-12-08 15:11:16 +01:00
Tom Hubrecht
0b27fef19f
fix(bridge01): Use correct node name 2024-12-08 13:46:29 +01:00
Tom Hubrecht
ecbad0a638
chore: Abstract machines and modules 
This adds subdirectories for the different types of systems, for the
modules and the machines
 2024-12-08 13:39:10 +01:00
Tom Hubrecht
c3f4e7ade6
fix(meta): Only define targetHost when the network config is defined 2024-12-08 12:49:46 +01:00
Tom Hubrecht
e1586b4873
fix(dns): Only generate infra records for nixos machines 2024-12-08 12:19:31 +01:00
Tom Hubrecht
4fa4d0bc21
feat(hive.nix): Refactor mkNixpkgsConfig 2024-12-08 12:10:50 +01:00
Tom Hubrecht
3a325437b8
chore(hive.nix): Simplify system management 2024-12-08 12:04:54 +01:00
Tom Hubrecht
3a58ac3fdc
fix(hive.nix): Remove inifinite recursion 2024-12-08 11:59:39 +01:00
Tom Hubrecht
eb5b8740a8
feat(meta): Remove default values for nixpkgs version 
They are considered harmful, and it simplifies the code.
 2024-12-08 11:52:26 +01:00
Tom Hubrecht
1821104e8e
feat(meta): Add system to the nodes meta 2024-12-08 11:40:01 +01:00
Tom Hubrecht
12c8870f6d
chore(meta): Sort nodes 2024-12-08 11:02:04 +01:00
Ryan Lahfa
4fabadccb4 feat(scripts/): use our own colmena 
In the future, we should not have to do this.

Signed-off-by: Ryan Lahfa <ryan@dgnum.eu>
 2024-12-07 15:30:42 +01:00
Ryan Lahfa
344cc26d8e feat(meta/*): support generalized deployments 
Our colmena knows how to deal with families of system types, e.g. NixOS
systems or Liminix-based systems.

This is a step 1 towards supporting our APs in our infrastructure.

Signed-off-by: Ryan Lahfa <ryan@dgnum.eu>
 2024-12-07 15:26:13 +01:00
Tom Hubrecht
ae057f480f
feat(lib): Add warn 2024-12-07 13:12:20 +01:00
Tom Hubrecht
f909853119
feat(dns): Add autoritative DNS for lab subdomain 2024-12-07 11:05:45 +01:00
catvayor
a60b546277
feat(vault01/gretap): gretap for hackaton 2024-12-07 10:52:37 +01:00
sinavir
09b5963449
fix(ds-fr): Lock patch with hash 2024-12-06 10:58:57 +01:00
sinavir
d4dab1e7ae
fix(ds-fr): Update dgn patch 2024-12-06 10:31:29 +01:00
sinavir
41caf293b0
chore(ds-fr): Remove unused files 2024-12-06 09:50:23 +01:00
Tom Hubrecht
2a7a3aba83
fix(npins): Update hash 2024-12-02 17:25:41 +01:00
Tom Hubrecht
96e8bfff5b
feat(django-apps): Internalize 2024-11-25 23:29:39 +01:00
sinavir
aa154d1b1b
fix(web03/dj-apps): Use secret tokens 2024-11-25 16:06:08 +01:00
sinavir
f37a7449cb
fix(netbox-agent): Disable as it is broken 2024-11-25 15:18:28 +01:00
Tom Hubrecht
030803ba29
chore(patches): Reorganize 2024-11-25 11:15:20 +01:00
Tom Hubrecht
13abd5400b
fix(web03/dj-wikiens): Update dependencies 2024-11-23 11:33:56 +01:00
Tom Hubrecht
f6c933f374
fix(kanidm): Use last usable version: 1.3.3 2024-11-22 23:12:18 +01:00
DGNum Chores
c9839d4be6 chore(npins): Update 2024-11-22 15:27:34 +00:00
Tom Hubrecht
fe52f0ebe2
feat(forgejo-runners): Use /data/slow/nix and not /data/slow/nix/nix 
The upstream module should be updated to reflect that, use rootPath
instead of storePath
 2024-11-22 14:04:35 +01:00
Tom Hubrecht
1f9f56ac91
chore(lix): Use the global patch infrastructure for lix 2024-11-22 12:56:39 +01:00
Tom Hubrecht
75b621e298
fix(ds-fr): Switch to nix-pkgs 2024-11-21 15:13:25 +01:00
sinavir
32f68a54a9
chore(workflows): regenerate 2024-11-19 00:53:33 +01:00
sinavir
b00e47ec85
chore(netbox): Upgrade 2024-11-19 00:40:15 +01:00
Tom Hubrecht
a50637d55e
chore(stirling-pdf): New version 2024-11-19 00:13:49 +01:00
Tom Hubrecht
aa4f972085
fix(forgejo-runners): Let the shell handle colmena 2024-11-19 00:01:06 +01:00
DGNum Chores
8a5de73b47 chore(npins): Update 2024-11-18 15:29:55 +00:00
Tom Hubrecht
3fecacb482
chore(npins): Update nix-modules 2024-11-18 13:03:13 +01:00
Tom Hubrecht
ded867d274
feat(dj-interludes): Add a real secret 2024-11-18 13:02:54 +01:00
Tom Hubrecht
f61bd85d63
chore(forgejo): Disallow more domains 2024-11-17 19:01:26 +01:00
Tom Hubrecht
bf06d2573b
feat(nix): Use passthru for shells and return to importing the scripts 2024-11-14 22:18:40 +01:00