59789595d1
monitoring: cleanup rules + NodeLastBorgmaticTooOld
2025-04-07 20:29:09 +02:00
c7b9a8d839
fix(infra): typo enabled → enable
2025-04-07 20:29:09 +02:00
8129b26c4c
add backups + fix appservice-irc media proxy
2025-04-07 20:29:05 +02:00
d672a1d1ee
gitlab: store secrets in age
...
Signed-off-by: Jeltz <jeltz@federez.net>
2025-04-05 21:27:02 +02:00
a64b34810d
wip: nixpkgs versions + infra network + monitoring
...
Signed-off-by: Jeltz <jeltz@federez.net>
2025-04-05 21:26:29 +02:00
01b5a0fe25
Bump version + minor cleanups
...
Signed-off-by: jeltz@federez.net
2025-04-05 21:25:28 +02:00
09d82c6b88
wip: add vogon + many other things
...
Added lots of things done in a hurry following the dodecagon failure.
Signed-off-by: Jeltz <jeltz@federez.net>
2025-04-05 21:22:50 +02:00
a184d18f4b
WIP: add grafana & victoriametrics
2025-04-05 21:19:37 +02:00
a8e3c97ef4
Add host 'martagon'
...
Signed-off-by: Jeltz <jeltz@federez.net>
2025-04-05 21:19:36 +02:00
dfc05aad4a
indico: use upstream qTip2
...
See https://github.com/indico/qTip2/pull/1
Signed-off-by: Jeltz <jeltz@federez.net>
2025-04-05 21:19:36 +02:00
5d32735063
indico: use systemd-creds
...
Signed-off-by: Jeltz <jeltz@federez.net>
2025-04-05 21:19:36 +02:00
6c627daa51
secrets: remove \n at the end of indico password files
...
Signed-off-by: Jeltz <jeltz@federez.net>
2025-04-05 21:19:36 +02:00
6b529aeb16
indico: I'm dumb
...
Signed-off-by: Jeltz <jeltz@federez.net>
2025-04-05 21:19:35 +02:00
b1039a6859
indico: slightly better socket/unit config
...
Signed-off-by: Jeltz <jeltz@federez.net>
2025-04-05 21:19:35 +02:00
e47358876e
indico: update profile with age passwords
...
Signed-off-by: Jeltz <jeltz@federez.net>
2025-04-05 21:19:35 +02:00
cfc5775ba5
secrets: add indico passwords
...
Signed-off-by: Jeltz <jeltz@federez.net>
2025-04-05 21:19:35 +02:00
2f93570ac4
indico: use files for passwords
...
Signed-off-by: Jeltz <jeltz@federez.net>
2025-04-05 21:19:34 +02:00
dd2afc2cfb
indico: wip: add LDAP support
...
Signed-off-by: Jeltz <jeltz@federez.net>
2025-04-05 21:19:34 +02:00
0a8ae58334
indico: wip: main pkg is almost working
...
Signed-off-by: Jeltz <jeltz@federez.net>
2025-04-05 21:19:34 +02:00
abbafb082d
indico: wip: create module
...
Signed-off-by: Jeltz <jeltz@federez.net>
2025-04-05 21:19:34 +02:00
d75eba0b8e
indico: add package react-jsx-i18n
...
Signed-off-by: Jeltz <jeltz@federez.net>
2025-04-05 21:19:33 +02:00
5dbe2bd6d1
indico: add package flask-url-map-serializer
...
Signed-off-by: Jeltz <jeltz@federez.net>
2025-04-05 21:19:33 +02:00
a0fe0fdd34
Relax hatch version requirement in flask-multipass
...
Signed-off-by: Jeltz <jeltz@federez.net>
2025-04-05 21:19:33 +02:00
43f5d686cc
Update npins
...
The update is necessary in particular because npmConfigHook now supports git+https:// URLs, which was not the case with the version in the old nixpkgs.
Signed-off-by: Jeltz <jeltz@federez.net>
2025-04-05 21:19:33 +02:00
d12f9d91d1
WIP: Add indico profile + required packages
...
Signed-off-by: Jeltz <jeltz@federez.net>
2025-04-05 21:19:32 +02:00
bb03bd9054
Add host 'perdrigon'
...
Signed-off-by: Jeltz <jeltz@federez.net>
2025-04-05 21:19:32 +02:00
817aab82b6
discourse: add mail config and somme plugins
...
Signed-off-by: Jeltz <jeltz@federez.net>
2025-04-05 21:19:32 +02:00
7c46eed7ed
secrets: rekey for pendragon
...
Signed-off-by: Jeltz <jeltz@federez.net>
2025-04-05 21:19:32 +02:00
Ryan Lahfa
0d411f83c6
secrets: rekey for jeltz
...
Signed-off-by: Ryan Lahfa <federez-infra@lahfa.xyz>
2025-04-05 21:19:31 +02:00
7491e221d3
discourse: init (wip)
...
Incomplete installation of Discourse on pendragon.
Missing in particular are emails (both outgoing and incoming).
Signed-off-by: Jeltz <jeltz@federez.net>
2025-04-05 21:19:31 +02:00
Ryan Lahfa
61ed6e9571
profiles/sysadmin: move to Lix, purge journald to 512M, add GC/NGINX/net optimizations
...
This should reduce some churn.
Signed-off-by: Ryan Lahfa <federez-infra@lahfa.xyz>
2025-04-05 21:19:31 +02:00
Ryan Lahfa
918610b56e
sources: bump & address deprecations
...
Signed-off-by: Ryan Lahfa <federez-infra@lahfa.xyz>
2025-04-05 21:19:30 +02:00
Ryan Lahfa
c3844094b2
profiles/wayf: further wip work
...
Signed-off-by: Ryan Lahfa <federez-infra@lahfa.xyz>
2025-04-05 21:19:30 +02:00
Ryan Lahfa
3b6c3f6d70
profiles/gitlab: init
...
Signed-off-by: Ryan Lahfa <federez-infra@lahfa.xyz>
2025-04-05 21:19:25 +02:00
raito
0b55fc629f
Merge branch 'enroll_jeltz' into 'master'
...
admins: enroll Jeltz
See merge request federez/nix!1
2024-08-08 14:31:56 +00:00
d595fc2c1f
admins: enroll Jeltz
...
Jeltz est membre d'Aurore et du bureau de FedeRez.
Signed-off-by: Jeltz <jeltz@federez.net>
2024-08-08 16:17:19 +02:00
69130134cd
irc-bot: reduce reply threshold
2024-02-15 16:43:43 +00:00
Ryan Lahfa
0355dd4b80
admins: enroll Tom Hubrecht
...
Tom Hubrecht est un sysadmin / membre d'honneur de la DGNum, membre du CA d'AliENS.
Signed-off-by: Ryan Lahfa <federez-infra@lahfa.xyz>
2024-02-14 21:10:57 +01:00
Ryan Lahfa
a4ab0fce56
profiles/auditd: enable on all systems
...
Signed-off-by: Ryan Lahfa <federez-infra@lahfa.xyz>
2024-02-14 20:40:47 +01:00
Ryan Lahfa
4fbfa50b10
profiles/sysadmin: do not log refused connections
...
Signed-off-by: Ryan Lahfa <federez-infra@lahfa.xyz>
2024-02-14 20:40:38 +01:00
Ryan Lahfa
cb13a67c63
profiles/federez: add Federez MOTD for NixOS systems
...
Signed-off-by: Ryan Lahfa <federez-infra@lahfa.xyz>
2024-02-14 20:40:31 +01:00
Ryan Lahfa
0a637e5079
profiles/ldap: init
...
Phew, this is working?
Signed-off-by: Ryan Lahfa <federez-infra@lahfa.xyz>
2024-02-14 20:40:20 +01:00
Ryan Lahfa
4a043d6fb5
profiles/wayf: init work (wip)
...
This is a very early version of the deployment, it doesn't work due to… PHP versions issues?
Signed-off-by: Ryan Lahfa <federez-infra@lahfa.xyz>
2024-02-14 04:17:49 +01:00
Ryan Lahfa
c9fe2f098b
profiles/telegram: show notices from @klingon:federez.net
...
The bot send updates about the monitoring.
Signed-off-by: Ryan Lahfa <federez-infra@lahfa.xyz>
2024-02-14 04:17:21 +01:00
Ryan Lahfa
600db7dd56
monitoring: stream children to klingon
...
automagically.
more security will be nice for IP allowlists using their exact IPv4 in the future.
Signed-off-by: Ryan Lahfa <federez-infra@lahfa.xyz>
2024-02-14 04:09:52 +01:00
Ryan Lahfa
1cd73831d4
profiles/matrix: add sqlite to explore databases
...
god…
Signed-off-by: Ryan Lahfa <federez-infra@lahfa.xyz>
2024-02-14 04:09:09 +01:00
Ryan Lahfa
e938475a17
profiles/netdata: open 19999
...
Signed-off-by: Ryan Lahfa <federez-infra@lahfa.xyz>
2024-02-14 01:13:10 +01:00
Ryan Lahfa
b47ddc76b0
pkgs: init switchwayf
...
Signed-off-by: Ryan Lahfa <federez-infra@lahfa.xyz>
2024-02-14 01:13:10 +01:00
9a9460c8f1
irc-bot: me re-read code
2024-02-13 18:29:20 +00:00
Ryan Lahfa
832d5d5ace
sources: bump nixpkgs
...
Signed-off-by: Ryan Lahfa <federez-infra@lahfa.xyz>
2024-02-13 18:43:53 +01:00
