feat(monitoring): Add adminGroup emails

machines/compute01/_configuration.nix

@@ -11,6 +11,7 @@ lib.extra.mkConfig {
   enabledServices = [
     # List of services to enable
     "arkheon"
+    "signal-irc-bridge"
     "ds-fr"
     "grafana"
     "hedgedoc"

machines/compute01/secrets/secrets.nix

@@ -23,6 +23,7 @@ lib.setDefault { inherit publicKeys; } [
   "plausible-secret_key_base_file"
   "plausible-smtp_password_file"
   "satosa-env_file"
+  "signal-irc-bridge-config"
   "telegraf-environment_file"
   "vaultwarden-environment_file"
   "zammad-secret_key_base_file"

machines/compute01/secrets/signal-irc-bridge-config

@@ -0,0 +1,29 @@
+age-encryption.org/v1
+-> ssh-ed25519 jIXfPA amum6RbXOklYVgw9LbePC/FlJPJHLRT1peBvcD7+3xE
+xB0z2R0gERJNMQnuuWlMZBvwBLD/0Cb70rFrnYg7Xm0
+-> ssh-ed25519 QlRB9Q 3+JuXBQQWcQbC2HsfO5FY+MQrSIpXJ1DBOpp9vHH7GY
+7IcedTCLy1clAfhlhfkkMcLLq1FNM1kugRgdnAkXeCY
+-> ssh-ed25519 r+nK/Q fS289K4zpwTlcXaI1TrfmUTdatunytf3I/Yjh33PHQQ
+4n05isyZbYWQyyASL3FRiaL4IrliW+l5uxorfKgs1Es
+-> ssh-rsa krWCLQ
+dk+PWx2abIh09/6BNshqi6X7P4uqdlO8ofsBebYlQW8j7hwFTJ89ivERMq35h/6A
+6JT8R2QRpqT8HLYK21Wi3kDaiHF0H7KhHdXotTqCi4zFAqUFRKHs96dZsSgOePoL
+iJA7a/YHofpgjzZmNvc1ewLdmDD6+SnHXIzHfdHrFINUu2iRVDPwlyidOvRzJuGu
+OJv+KChAZ0l2RhQCH+dw5uzJZP6WKfoNhsupTtxLRlfb/gEWSUfahA85rWc5JvT4
+udw/oW3C7/hjiwKa8sd5XmxWz8BYut7OwTAFEXZCDSVuABjfUOKCF9IduTO3C8hP
+9fxCaztbhnCicDbTseP3rQ
+-> ssh-ed25519 /vwQcQ 3NrE1YovFZCAdBv2jjGLkj07Auqyt1gBxP5zn0vXNkc
+hYIWVsJNiKIbMl7zg7Qlf/HqwZ49eQsFs/3pFH809K8
+-> ssh-ed25519 0R97PA aw0rnvI6F3l/XA9SmK6I/mxDuVU7SD3jVcliix4u91Y
+TR+cZbyrengvbKF2jjhF42N+Iq7F3PMO71tc8e/Dy6s
+-> ssh-ed25519 JGx7Ng k+FsCk0FCgwsIOICmyOwJhrbTgleVoiqopv4cY5fmHQ
+ZNCkfdStH2LqTiDTZ4VZIomsPw+S8PeSZpz/r088iAM
+-> ssh-ed25519 5SY7Kg bN3Yr4E+74hi46Zn6eLknIxbhW7E+XGPGuF1I07h7EU
+UgX/w4B5iyJKXPcG4DCcM+vsZS/iGM8NFRS3F5qbif8
+-> ssh-ed25519 p/Mg4Q U1UZZaCOZ/gpLC0wc+ltv6Gx0GsYucydBmlHwnZT00k
+Dod7IsbtLnX89ekJGoRevH5OLd/ztLD4bsz3mUiuoHU
+-> ssh-ed25519 tDqJRg ydfBlrMl0PiStKGgxM48S2SFOQ+TdCU7WVkKoEne6W0
+WNRZAx3aKOq+/Cz7TGI6Eu1QN+hqZlPuscGBNkOJBhg
+--- E6Fp2JAT9jd8jYWOtMWkH0BNqrafOxBzyRLdK5H1/CI
+,Ò|®<Û([Û‡ÐUå¥-ÙŽ‘`
/ú:z
 õÀ§aØ2çu<C3A7>d"òB íÀ•°<E280A2>	Gž»ŒžJÈô$ë¼=ÿ£Eé&Î4tè<74>€¶§<C2B6>â¶÷v?g-º¦0!PCé¹S¹ból½nWf‹|:›ørm^麕:¹ÎÊ\nOƒEc<45>Zé?‹°
4ŒÎ+W©X;
û=
7j6!Å@«Ãœ)oœ­¸Ì<C2B8>4Ø+ÞÑ÷/¯3òʤ-…;$aeµ‘Ûˆ¶jß¹²:=åféت§ÀcŽJnžèÁû4Eø/_¬L€9³`Úò<C39A>Æðä³Ë:^:O<>ìp
H(Ð÷ <20>Ä邃àÄ ¢~ÔÛû×,iùºÎk~&çùpм0ìÜçÖèòG¢­e`Å<>Ï•Õq"šè!™r‹<72>Ͳs 
+þô*«­ý‘Ö®þ5
‰P¿ºB¥.Ï\{wW<_E•)Rh

machines/compute01/signal-irc-bridge.nix

@@ -0,0 +1,18 @@
+{
+  config,
+  sources,
+  nixpkgs,
+  ...
+}:
+{
+  imports = [ (import (sources.signal-irc-bridge.outPath + "/module.nix")) ];
+
+  systemd.services.signal-irc-bridge.serviceConfig = {
+    Group = "nginx";
+  };
+  services.signal-irc-bridge = {
+    enable = true;
+    package = nixpkgs.unstable.callPackage (sources.signal-irc-bridge.outPath + "/package.nix") { };
+    configFile = config.age.secrets."signal-irc-bridge-config".path;
+  };
+}

modules/dgn-notify/default.nix

@@ -16,7 +16,11 @@ let
     ;
 
   emails = concatStringsSep ", " (
-    builtins.map (name: meta.organization.members.${name}.email) nodeMeta.admins
+    builtins.map (name: meta.organization.members.${name}.email) (
+      builtins.foldl' (
+        admins: group: admins ++ meta.organization.groups.${group}
+      ) nodeMeta.admins nodeMeta.adminGroups
+    )
   );
 
   cfg = config.dgn-notify;

npins/sources.json

@@ -167,6 +167,17 @@
       "url": "https://github.com/cachix/pre-commit-hooks.nix/archive/2849da033884f54822af194400f8dff435ada242.tar.gz",
       "hash": "0ag90l0hrkhm02mkmm8yf3fnjjawv99czc7bp0szzgknps0xrzxb"
     },
+    "signal-irc-bridge": {
+      "type": "Git",
+      "repository": {
+        "type": "Git",
+        "url": "https://git.dgnum.eu/mdebray/signal-irc-bridge"
+      },
+      "branch": "master",
+      "revision": "675453d43a1f1994fc536a5f2210d82b92b9d7c2",
+      "url": null,
+      "hash": "139xy539vcxmv92p7vxykyns35m783v4nywfjb55532cn3h0czv5"
+    },
     "stateless-uptime-kuma": {
       "type": "Git",
       "repository": {