ecoppens/infrastructure
1
0
Fork 0
forked from DGNum/infrastructure
Code Pull requests Activity
816 commits 1 branch 0 tags 1.6 MiB
Commit graph

816 commits

This branch
This branch
All branches
Author SHA1 Message Date
Tom Hubrecht
db5859e472
feat(web03): Initial deployment of django-apps 2024-10-17 15:11:43 +02:00
Tom Hubrecht
fd6b9678ef
chore(netbox-agent): Rekey 2024-10-17 15:06:26 +02:00
Tom Hubrecht
f771ec72c8
fix(secrets): Rekey Arkheon and email secrets 2024-10-16 11:45:50 +02:00
Tom Hubrecht
9931c622b6
feat(workflows/eval): Add web03 to the list 2024-10-16 11:28:30 +02:00
Tom Hubrecht
ad8ddb1f4d
feat(dns): Redirect webapps subdomain to web03 2024-10-16 11:24:10 +02:00
Tom Hubrecht
14866df004
fix(dgn-web): Set a default for simpleProxies 2024-10-16 11:08:24 +02:00
Tom Hubrecht
b6cbf6e918
feat(infra): Deploy web03 2024-10-16 11:08:24 +02:00
Tom Hubrecht
4b2d1cde5b
chore(dgsi): Update 2024-10-12 22:25:53 +02:00
Tom Hubrecht
06653220bb
fix(kanidm): Revert switch to simpleProxies 
As we proxy to an https endpoint, this was not supported
 2024-10-12 22:11:34 +02:00
Tom Hubrecht
9ea51137fc
chore(dgsi): Update 2024-10-12 22:06:26 +02:00
Tom Hubrecht
2f06f22ac7 feat(nginx): Switch to simpleProxies for the majority of configs 2024-10-12 20:00:54 +02:00
Tom Hubrecht
af61ae6e61 feat(dgn-web): Add simpleProxies 
This proxies the required host to localhost:$port and enables SSL
 2024-10-12 20:00:54 +02:00
Tom Hubrecht
9ea6bada0a feat(dgn-web): Add a way to detect internal port clashes 2024-10-12 20:00:54 +02:00
Julien Malka
f819acf9bc
feat(forgejo): 7 days sessions 2024-10-12 19:52:21 +02:00
Tom Hubrecht
8043f8d4ab
chore(metis): Update 2024-10-12 17:29:51 +02:00
Constantin Gierczak--Galle
bb4a24f9e9 feat: add cst1's member info 2024-10-11 14:53:13 +02:00
Constantin Gierczak--Galle
cafaa15ef3 fix(rights): add cst1 to lab adminGroup 2024-10-11 14:53:13 +02:00
Constantin Gierczak--Galle
54e2eeb6f3 feat(ssh): Add cst1's SSH key 2024-10-11 14:53:13 +02:00
Tom Hubrecht
aa3d83ca06
fix(scripts): Don't try to upload to the cache if no password is present 2024-10-11 14:53:00 +02:00
Tom Hubrecht
e37f56f85b
fix(dns): cachix.dgnum.eu is no longer in service 2024-10-11 01:45:41 +02:00
Ryan Lahfa
f20353b727 fix(storage01): pass through the admin API of Garage 
not the web API!

Signed-off-by: Ryan Lahfa <ryan@dgnum.eu>
 2024-10-10 17:52:22 +02:00
Ryan Lahfa
a4de5f4d31 feat(krz01): move ollama to compute01 via a reverse proxy 
krz01 has no public web IP.

Signed-off-by: Ryan Lahfa <ryan@dgnum.eu>
 2024-10-10 17:40:56 +02:00
Ryan Lahfa
363f8d3c67 fix(krz01): open 80/443 for ACME 
Oopsie!

Signed-off-by: Ryan Lahfa <ryan@dgnum.eu>
 2024-10-10 17:20:28 +02:00
Ryan Lahfa
12b20e6acf feat(storage01): add monorepo-terraform-state.s3.dgnum.eu 
This is required to bootstrap the Terranix setup.

Signed-off-by: Ryan Lahfa <ryan@dgnum.eu>
 2024-10-10 17:13:11 +02:00
Ryan Lahfa
de6742aa0d feat(storage01): add s3-admin.dgnum.eu 
This is the administration endpoint of the S3, you can create new
buckets and more, from there.

Signed-off-by: Ryan Lahfa <ryan@dgnum.eu>
 2024-10-10 17:13:11 +02:00
Ryan Lahfa
d76e655174 feat(krz01): add a NGINX in front of ollama protected by password 
This way, you can do direct requests to ollama from other places.

Signed-off-by: Ryan Lahfa <ryan@dgnum.eu>
 2024-10-10 16:43:33 +02:00
sinavir
7d70beb1f0 feat(krz01): create and add the lab admin group to krz01 2024-10-10 13:35:34 +02:00
Tom Hubrecht
dae3b7c7f6
fix(web02): Remove test user 2024-10-10 09:41:58 +02:00
Tom Hubrecht
1e71ef3636
feat(users): Add root passwords and deactivate mutableUsers 2024-10-10 09:23:19 +02:00
Tom Hubrecht
7bdc70632c
chore(scripts): Cleanup of old caching script 2024-10-10 01:04:16 +02:00
Tom Hubrecht
d05c003fd6
feat(workflows/eval): Generalize the new script to all nodes 2024-10-10 00:58:41 +02:00
catvayor
5b271b7b4a
feat(nat): enabling for dgnum members for tests 2024-10-10 00:00:56 +02:00
soyouzpanda
93c47f47be
fix: laptop change 2024-10-09 23:47:29 +02:00
Tom Hubrecht
47ad002f12
feat(workflows/eval): Try to build and upload in one fell swoop 2024-10-09 21:34:22 +02:00
Tom Hubrecht
6b23df6b54
feat(workflows/eval): Try to build and upload in one fell swoop 2024-10-09 21:32:38 +02:00
Tom Hubrecht
6c4099d369 feat(infra): Internalize nix-lib, and make keys management simpler 2024-10-09 18:58:46 +02:00
Tom Hubrecht
53c865a335
fix(dgsi): Set to an existing version 2024-10-09 18:57:06 +02:00
Ryan Lahfa
34640d467b feat(krz01): finish ollama integration and whisper.cpp 
My sanity was used in the process.

Signed-off-by: Ryan Lahfa <ryan@dgnum.eu>
 2024-10-09 13:59:05 +02:00
Ryan Lahfa
8441992408 feat(krz01): move to unstable 
Signed-off-by: Ryan Lahfa <ryan@dgnum.eu>
 2024-10-09 12:51:14 +02:00
Ryan Lahfa
4bedb3f497 feat(krz01): move the GPU stuff to the host for now 
We also add a K80 specific patch for ollama.

Signed-off-by: Ryan Lahfa <ryan@dgnum.eu>
 2024-10-09 09:33:57 +02:00
Ryan Lahfa
8160b2762f feat(krz01): passthrough the nVidia Tesla K80 in ml01 
This way, no need for reboot.

Signed-off-by: Ryan Lahfa <ryan@dgnum.eu>
 2024-10-09 09:33:57 +02:00
Ryan Lahfa
ebed6462f6 feat(krz01): introduce ML01 -- a machine learning VM 
I will add ollama on it later on and passthrough the GPU in there.

Signed-off-by: Ryan Lahfa <ryan@dgnum.eu>
 2024-10-09 09:33:57 +02:00
Tom Hubrecht
e200ae53a4
feat(proxmox): Revert the disabling 2024-10-08 20:59:34 +02:00
Ryan Lahfa
62b36ed124 fix(krz01): apply a correctness patch on proxmox-nixos 
To make CI happy.

Signed-off-by: Ryan Lahfa <ryan@dgnum.eu>
 2024-10-08 20:49:41 +02:00
Tom Hubrecht
9bc651db42
chore(nix-patches): Add helper function 2024-10-08 20:49:26 +02:00
Tom Hubrecht
bfe4957926
feat(patches): Generalize 2024-10-08 18:37:17 +02:00
Ryan Lahfa
3aeae4e33f feat(krz01): add basic microvm exprs 
For a router01.

Signed-off-by: Ryan Lahfa <ryan@dgnum.eu>
 2024-10-08 17:14:23 +02:00
Ryan Lahfa
4d689fee33 feat(krz01): enable proprietary drivers for nVidia 
For the Tesla K80.

Signed-off-by: Ryan Lahfa <ryan@dgnum.eu>
 2024-10-08 16:58:47 +02:00
Ryan Lahfa
862f004e3c fix(krz01): disable proxmox for now 
Until #139 is merged.

Signed-off-by: Ryan Lahfa <ryan@dgnum.eu>
 2024-10-08 16:40:18 +02:00
sinavir
da40fa9b3d fix(krz01): Fix root password hash 2024-10-08 16:05:19 +02:00