Commit graph

48 commits

Author SHA1 Message Date
2f93570ac4
indico: use files for passwords
Signed-off-by: Jeltz <jeltz@federez.net>
2025-04-05 21:19:34 +02:00
dd2afc2cfb
indico: wip: add LDAP support
Signed-off-by: Jeltz <jeltz@federez.net>
2025-04-05 21:19:34 +02:00
0a8ae58334
indico: wip: main pkg is almost working
Signed-off-by: Jeltz <jeltz@federez.net>
2025-04-05 21:19:34 +02:00
abbafb082d
indico: wip: create module
Signed-off-by: Jeltz <jeltz@federez.net>
2025-04-05 21:19:34 +02:00
d75eba0b8e
indico: add package react-jsx-i18n
Signed-off-by: Jeltz <jeltz@federez.net>
2025-04-05 21:19:33 +02:00
5dbe2bd6d1
indico: add package flask-url-map-serializer
Signed-off-by: Jeltz <jeltz@federez.net>
2025-04-05 21:19:33 +02:00
a0fe0fdd34
Relax hatch version requirement in flask-multipass
Signed-off-by: Jeltz <jeltz@federez.net>
2025-04-05 21:19:33 +02:00
43f5d686cc
Update npins
The update is necessary in particular because npmConfigHook now supports git+https:// URLs, which was not the case with the version in the old nixpkgs.

Signed-off-by: Jeltz <jeltz@federez.net>
2025-04-05 21:19:33 +02:00
d12f9d91d1
WIP: Add indico profile + required packages
Signed-off-by: Jeltz <jeltz@federez.net>
2025-04-05 21:19:32 +02:00
bb03bd9054
Add host 'perdrigon'
Signed-off-by: Jeltz <jeltz@federez.net>
2025-04-05 21:19:32 +02:00
817aab82b6
discourse: add mail config and somme plugins
Signed-off-by: Jeltz <jeltz@federez.net>
2025-04-05 21:19:32 +02:00
7c46eed7ed
secrets: rekey for pendragon
Signed-off-by: Jeltz <jeltz@federez.net>
2025-04-05 21:19:32 +02:00
Ryan Lahfa
0d411f83c6
secrets: rekey for jeltz
Signed-off-by: Ryan Lahfa <federez-infra@lahfa.xyz>
2025-04-05 21:19:31 +02:00
7491e221d3
discourse: init (wip)
Incomplete installation of Discourse on pendragon.

Missing in particular are emails (both outgoing and incoming).

Signed-off-by: Jeltz <jeltz@federez.net>
2025-04-05 21:19:31 +02:00
Ryan Lahfa
61ed6e9571
profiles/sysadmin: move to Lix, purge journald to 512M, add GC/NGINX/net optimizations
This should reduce some churn.

Signed-off-by: Ryan Lahfa <federez-infra@lahfa.xyz>
2025-04-05 21:19:31 +02:00
Ryan Lahfa
918610b56e
sources: bump & address deprecations
Signed-off-by: Ryan Lahfa <federez-infra@lahfa.xyz>
2025-04-05 21:19:30 +02:00
Ryan Lahfa
c3844094b2
profiles/wayf: further wip work
Signed-off-by: Ryan Lahfa <federez-infra@lahfa.xyz>
2025-04-05 21:19:30 +02:00
Ryan Lahfa
3b6c3f6d70
profiles/gitlab: init
Signed-off-by: Ryan Lahfa <federez-infra@lahfa.xyz>
2025-04-05 21:19:25 +02:00
raito
0b55fc629f Merge branch 'enroll_jeltz' into 'master'
admins: enroll Jeltz

See merge request federez/nix!1
2024-08-08 14:31:56 +00:00
d595fc2c1f
admins: enroll Jeltz
Jeltz est membre d'Aurore et du bureau de FedeRez.

Signed-off-by: Jeltz <jeltz@federez.net>
2024-08-08 16:17:19 +02:00
69130134cd irc-bot: reduce reply threshold 2024-02-15 16:43:43 +00:00
Ryan Lahfa
0355dd4b80 admins: enroll Tom Hubrecht
Tom Hubrecht est un sysadmin / membre d'honneur de la DGNum, membre du CA d'AliENS.

Signed-off-by: Ryan Lahfa <federez-infra@lahfa.xyz>
2024-02-14 21:10:57 +01:00
Ryan Lahfa
a4ab0fce56 profiles/auditd: enable on all systems
Signed-off-by: Ryan Lahfa <federez-infra@lahfa.xyz>
2024-02-14 20:40:47 +01:00
Ryan Lahfa
4fbfa50b10 profiles/sysadmin: do not log refused connections
Signed-off-by: Ryan Lahfa <federez-infra@lahfa.xyz>
2024-02-14 20:40:38 +01:00
Ryan Lahfa
cb13a67c63 profiles/federez: add Federez MOTD for NixOS systems
Signed-off-by: Ryan Lahfa <federez-infra@lahfa.xyz>
2024-02-14 20:40:31 +01:00
Ryan Lahfa
0a637e5079 profiles/ldap: init
Phew, this is working?

Signed-off-by: Ryan Lahfa <federez-infra@lahfa.xyz>
2024-02-14 20:40:20 +01:00
Ryan Lahfa
4a043d6fb5 profiles/wayf: init work (wip)
This is a very early version of the deployment, it doesn't work due to… PHP versions issues?

Signed-off-by: Ryan Lahfa <federez-infra@lahfa.xyz>
2024-02-14 04:17:49 +01:00
Ryan Lahfa
c9fe2f098b profiles/telegram: show notices from @klingon:federez.net
The bot send updates about the monitoring.

Signed-off-by: Ryan Lahfa <federez-infra@lahfa.xyz>
2024-02-14 04:17:21 +01:00
Ryan Lahfa
600db7dd56 monitoring: stream children to klingon
automagically.

more security will be nice for IP allowlists using their exact IPv4 in the future.

Signed-off-by: Ryan Lahfa <federez-infra@lahfa.xyz>
2024-02-14 04:09:52 +01:00
Ryan Lahfa
1cd73831d4 profiles/matrix: add sqlite to explore databases
god…

Signed-off-by: Ryan Lahfa <federez-infra@lahfa.xyz>
2024-02-14 04:09:09 +01:00
Ryan Lahfa
e938475a17 profiles/netdata: open 19999
Signed-off-by: Ryan Lahfa <federez-infra@lahfa.xyz>
2024-02-14 01:13:10 +01:00
Ryan Lahfa
b47ddc76b0 pkgs: init switchwayf
Signed-off-by: Ryan Lahfa <federez-infra@lahfa.xyz>
2024-02-14 01:13:10 +01:00
9a9460c8f1 irc-bot: me re-read code 2024-02-13 18:29:20 +00:00
Ryan Lahfa
832d5d5ace sources: bump nixpkgs
Signed-off-by: Ryan Lahfa <federez-infra@lahfa.xyz>
2024-02-13 18:43:53 +01:00
Ryan Lahfa
0f43f9976e defaults: enable system deltas
Signed-off-by: Ryan Lahfa <federez-infra@lahfa.xyz>
2024-02-13 18:43:50 +01:00
Ryan Lahfa
5c35057799 admins: enroll bensmrs
Signed-off-by: Ryan Lahfa <federez-infra@lahfa.xyz>
2024-02-13 18:43:39 +01:00
3f7b40afbd irc-bot: me read code 2024-02-13 17:23:04 +00:00
7cdb731d44 typo 2024-02-13 16:45:21 +00:00
d554f4565d Remove event messages 2024-02-13 16:44:45 +00:00
Ryan Lahfa
46fdb0416f README: how to update
Signed-off-by: Ryan Lahfa <federez-infra@lahfa.xyz>
2024-02-13 01:26:11 +01:00
Ryan Lahfa
3faccef81a klingon: init
Monitoring node.

Signed-off-by: Ryan Lahfa <federez-infra@lahfa.xyz>
2024-02-13 01:24:41 +01:00
Ryan Lahfa
76218cc7cb profiles/glucagon: init
Factor out all the networking configuration specific to Glucagon.

Signed-off-by: Ryan Lahfa <federez-infra@lahfa.xyz>
2024-02-13 01:23:13 +01:00
Ryan Lahfa
3ed9d02acb README: init
Signed-off-by: Ryan Lahfa <federez-infra@lahfa.xyz>
2024-02-13 01:20:08 +01:00
Ryan Lahfa
7e4e4efff6 profiles/sysadmin: add htop and kitty.terminfo
Signed-off-by: Ryan Lahfa <federez-infra@lahfa.xyz>
2024-02-12 21:58:40 +01:00
Ryan Lahfa
a7378f0ded telegram: displayname preferences, relay user distinguishers
adapted to sa majesté choices

Signed-off-by: Ryan Lahfa <federez-infra@lahfa.xyz>
2024-02-12 21:58:32 +01:00
Ryan Lahfa
9aa11bfa5b telegram: à sa demande la majesté…
Signed-off-by: Ryan Lahfa <federez-infra@lahfa.xyz>
2024-02-12 15:46:25 +01:00
Ryan Lahfa
5d6bc4eb71 appservice-irc: the gods showed me the truth
Merci à @esum pour l'assistance bien utile.

Signed-off-by: Ryan Lahfa <federez-infra@lahfa.xyz>
2024-02-12 14:15:24 +01:00
Ryan Lahfa
8acdce99df Init infrastructure
Benjamin, I hate you.

Signed-off-by: Ryan Lahfa <federez-infra@lahfa.xyz>
2024-02-12 04:57:07 +01:00