felixalb/pvv-nixos-config
1
0
Fork 0
mirror of https://git.pvv.ntnu.no/Drift/pvv-nixos-config.git synced 2026-08-11 05:42:33 +02:00
Code Issues Projects Releases Wiki Activity
202 Commits 43 Branches 0 Tags
437219bb68955d09ce09700280d56be091512271
Commit Graph
100 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Daniel Olsen 437219bb68 bicep/postgres: Enable unix socket auth 2023-09-13 00:52:27 +02:00
Daniel Olsen b5075f48c6 bicep/matrix/synapse: switch database connection to socket 2023-09-13 00:17:10 +02:00
danio cfcd230678 Merge pull request 'Fix gitea on bekkalokk' (#7) from configure-gitea into main 
Reviewed-on: https://git.pvv.ntnu.no/Drift/pvv-nixos-config/pulls/7
 2023-09-07 18:54:24 +02:00
Daniel Olsen bfe94003c4 bicep/matrix/discord: enable legacy authorization because old mx-puppet-discord 😭 2023-08-18 00:54:06 +02:00
Daniel Olsen fa67504275 Update flake inputs 
Mainly to update the matrix module
 2023-07-13 04:36:43 +02:00
Daniel Olsen 699569249a ildkule: adjust matrix version annotations for nixos matrix module 2023-06-20 14:01:44 +02:00
Daniel Olsen e73b7d2cd1 ildule: fix upstream dashboard variables 2023-06-20 13:46:00 +02:00
Daniel Olsen ff30477e86 ildule: Update matrix dashboard from upstream 2023-06-20 13:20:42 +02:00
Daniel Olsen d694724f5c bicep/synapse: Set event cache to 20K 
This is double the cache from default
changed because we're seeing periodic cpu spikes
with this cache beeing the main one missing
 2023-05-26 02:22:18 +02:00
Daniel Olsen 68ce7acebb Revert "bicep: Emergency fix for matrix postgres auth" 
This reverts commit fdbcd8c884.

This was not it
 2023-05-23 05:12:46 +02:00
Daniel Olsen fdbcd8c884 bicep: Emergency fix for matrix postgres auth 
I think
 2023-05-23 04:59:34 +02:00
Daniel Olsen 815063744b bicep/postgres: Remove jit setting 
The nixos build of postgres doesn't support it anyways
 2023-05-23 04:57:18 +02:00
Daniel Olsen ede76faa79 Document nix flake check 2023-05-23 04:55:14 +02:00
Daniel Olsen 2752c26675 fix nixosConfig override 2023-05-23 04:43:39 +02:00
Daniel Olsen dfd827ee74 Clean up jokum removal 2023-05-23 04:29:45 +02:00
Daniel Olsen 4ff5da28c4 bicep: nginx listen on bicep ip 2023-05-08 03:38:59 +02:00
Daniel Olsen ee73a964be move matrix to bicep 2023-05-08 03:38:59 +02:00
Daniel Olsen f77a5e946f bicep: mount /data 2023-04-08 05:23:01 +02:00
Daniel Olsen bac67ee123 bicep: don't wait for all interfaces and especially not jokums 2023-04-07 04:53:36 +02:00
Daniel Olsen 9f6020b5e7 update flake 2023-04-07 04:12:46 +02:00
Daniel OlsenandRoot Bicep 38e3202c9e Move more of jokum 
slightly less stupid this time
 2023-03-26 14:44:58 +02:00
Daniel Olsen bddd7e438d update jokum sops secrets 2023-03-26 13:14:55 +02:00
Daniel Olsen 7620fb3dee move jokum to nixos bicep 2023-03-26 06:36:04 +02:00
Daniel Olsen d9c19385fa synapse: cache more event_auth 2023-03-08 03:18:57 +01:00
Daniel Olsen 28dad93826 open the nixos firewall for node-exporter 2023-03-04 22:47:11 +01:00
Daniel Olsen 70f4777696 fix synapse dashboard 2023-03-04 05:11:40 +01:00
Daniel Olsen a9d04ed286 Let nodes access their own prometheus metrics 2023-03-04 04:08:46 +01:00
Daniel Olsen db69d28b42 Revert "metrics: Fix Synapse dashboard" 
This reverts commit beb8df8fc7.
 2023-03-04 03:14:54 +01:00
Daniel Olsen 8f23d7ba06 jokum: don't use host resolv.conf 2023-03-04 03:04:32 +01:00
Daniel Olsen e61977e497 Disable dhcp and set domain again 2023-03-04 02:13:00 +01:00
Daniel Olsen 3252a3b5d1 turn on jokum 2023-03-04 02:03:37 +01:00
Daniel Olsen 8e819b5546 fix ip for bekkalokk 2023-03-04 00:57:28 +01:00
Daniel Olsen 6cf831a347 switch to networkd 2023-03-04 00:44:30 +01:00
Daniel Olsen af955c88f8 jokum: move to systemd-nspawn container on bicep 2023-02-26 19:23:00 +01:00
Daniel Olsen e293d64e66 flake update 2023-02-13 04:01:09 +01:00
Daniel Olsen eed3c9b05f matrix: Point mjolnir directly at synapse so it can use the admin api 2023-02-13 03:42:52 +01:00
Daniel Olsen 7a9759ef71 matrix: Add mjolnir as a moderation bot 2023-02-13 02:34:11 +01:00
Daniel Olsen 4684cd239a matrix: enable shared secret registration 2023-02-13 00:58:15 +01:00
Daniel Olsen c0c0dea069 tune worker distribution post fosdem and turning off prescence 2023-02-06 02:11:07 +01:00
Daniel Olsen 9c18a87866 element: disable presence if disabled in synapse 2023-02-02 18:51:47 +01:00
Daniel Olsen 73aa42a5f5 synapse: Disable presence 
For now at least until we move to a stronger
machine.

Most large servers don't have this enabled.
 2023-02-02 18:39:08 +01:00
Daniel Olsen eade192132 synapse: bump federation receiver count to 3 2023-02-02 00:35:26 +01:00
Daniel Olsen beb8df8fc7 metrics: Fix Synapse dashboard 
Some of the panels were set to the wrong
datasource

Additionally since we don't do MAU limits,
I moved the relevant MAU panel to Overview
 2023-02-01 22:54:54 +01:00
Daniel Olsen 1a424c79fe synapse: track monthly active users 2023-02-01 19:42:49 +01:00
Daniel Olsen ad7961a67b flake update 2023-02-01 19:35:33 +01:00
Daniel Olsenandh7x4 e7786fee0c add felix to jokum secrets 2023-01-22 00:47:23 +01:00
Daniel Olsen 94fc936251 ildkule: use ip addressess from values.nix 2023-01-21 11:45:05 +01:00
Daniel Olsen 1a0880086a metrics: use matrix-lib to simplify generation of prometheus scrape config 2023-01-20 08:24:02 +01:00
Daniel Olsen efed13c810 Revert "metrics: stop parsing prometheus labels from url" 
This reverts commit 1524b6b10c.

Prometheus doesn't allow scraping from uris only socketAddresses
The relabeling is to change the internal labels to trick it to read
from a url
 2023-01-20 05:04:16 +01:00
Daniel Olsen 90e924c083 synapse: also generate metric config for the master node 2023-01-18 04:04:42 +01:00
Daniel Olsen e590e54862 metrics-exporters: Include loglevel as label 2023-01-17 19:25:41 +01:00
Daniel Olsen 1330c9575f metrics/dashboards/synapse: update default timeframe 2023-01-17 18:57:32 +01:00
danioandGogs 4a82d22a56 Merge branch 'jokum_logs' of Drift/pvv-nixos-config into main 2023-01-17 18:50:41 +01:00
Daniel Olsen 64d0253aa0 I dont think the nginx config verifier has caught a single configuration error ever 2023-01-17 18:47:08 +01:00
Daniel Olsen a5bbd65757 disable ipv6 privacyExtension by default 2023-01-17 18:24:58 +01:00
Daniel Olsen 1ea40456a5 add ipv6 to allowed ip addresses for metrics exporters 2023-01-17 18:23:42 +01:00
Daniel Olsen 524bbdb78b ildkule/dashboard/synapse: Make zooming out on the cpu graph aggregate max cpu instead of avg 2023-01-17 17:37:44 +01:00
Daniel Olsen 473170cc41 update deployment command to invalidate cache 
I had fixed the issue but since it was resuing the broken commit it didnt actually get deployed
 2023-01-17 17:28:50 +01:00
Daniel Olsen 99fed59f1a update flake and point to right matrix-synapse-next branch 2023-01-17 17:28:50 +01:00
Daniel Olsen 5b798b2f1d jokum: enable metric exporters 2023-01-17 17:28:47 +01:00
Daniel Olsen 96b6dee404 Add firewalling to metric exporters 2023-01-17 17:28:11 +01:00
Daniel Olsen e4cb215d39 Simplify networking configs 
Introduces values.nix, a place to store information relevant across systems
 2023-01-17 17:28:11 +01:00
Daniel Olsen d52a7295b5 sops: shamir secret setting does nothing 2022-12-18 10:58:00 +01:00
Daniel Olsen 57ff1fa17a Add oysteikt to secrets 2022-12-18 00:05:26 +01:00
danioandGogs 4de4f9b8f6 Merge branch 'add-ildkule' of Drift/pvv-nixos-config into main 
looks good
 2022-12-17 22:01:05 +01:00
Daniel Olsen 44f2b6d8d8 fed-sender2 metrics 2022-12-14 10:26:28 +01:00
Daniel Olsen 154e12e609 add another federation sender as one is being maxed out 2022-12-14 10:25:29 +01:00
Daniel Olsen 8a3219e8d1 user directory worker 2022-12-14 10:15:37 +01:00
Daniel Olsen 911ce4057a event-persist metrics 2022-12-14 09:19:13 +01:00
Daniel Olsen 72eab1d2aa add an event persister worker 2022-12-14 09:16:43 +01:00
Daniel Olsen 0de6885a8b update flakes 2022-12-14 08:57:59 +01:00
Daniel Olsen bf899f52ce update flakes 2022-12-14 08:45:19 +01:00
Daniel Olsen 553e0dded2 update flakes 2022-12-14 08:34:42 +01:00
Daniel Olsen a3d4fa9cca update flakes 2022-12-14 07:46:58 +01:00
Daniel Olsen a6b4606e21 update flakes 2022-12-13 07:37:24 +01:00
Daniel Olsen ea4fe98055 point discord bridge at the public url again 
It was fetching avatars from 127.0.0.1
 2022-12-12 16:05:50 +01:00
Daniel Olsen 8c6b73129b move services to be host specific 2022-12-12 15:54:47 +01:00
Daniel Olsen c5dd4a9fde make nginx listen on 127.0.0.2 and loopback ipv6 as well 2022-12-12 15:39:02 +01:00
Daniel Olsen c0a2ee7ab0 point discord bridge at the main synapse listener 2022-12-12 14:26:08 +01:00
Daniel Olsen 423b0fb29b switch to systemd-resolved and add domains to search for fqdns from hostnames 2022-12-10 10:17:27 +01:00
Daniel Olsen 71be92b790 inital sync metrics 2022-12-10 08:51:36 +01:00
Daniel Olsen ac1ab8138e update flakes 2022-12-10 08:31:00 +01:00
Daniel Olsen 26d77aed81 update flakes 2022-12-10 06:38:31 +01:00
Daniel Olsen d3da8933bb services/synapse: expose room directory over federation 2022-12-09 15:58:40 +01:00
Daniel Olsen 5528a253b4 services/element: make room directory dropdown actually contain the right servers 2022-12-09 13:34:54 +01:00
Daniel Olsen 940c42559d services/element: Add omegavs matrix server to the room exploration dropdown menu 2022-12-09 13:25:01 +01:00
Daniel Olsen 0d48059bb9 fix and implement sync workers 2022-12-09 10:53:49 +01:00
Daniel Olsen 24e0f3ae32 update flakes (sync workers!!) 2022-12-09 10:11:13 +01:00
Daniel Olsen 46587be3be base: nix-gc delete generations older than 2d 2022-12-09 06:38:15 +01:00
Daniel Olsen 8b73e54beb Add signing key to secrets 
Less state to manage is always good
 2022-12-09 06:24:28 +01:00
Daniel Olsen 6fad2c7854 lock nix-path and local flake registry to sytem nixpkgs 2022-12-09 05:25:07 +01:00
Daniel Olsen 3720b9d20d update flake.lock 2022-12-09 04:52:44 +01:00
Daniel Olsen 2326b75e6e initial readme 2022-12-09 04:14:21 +01:00
Daniel Olsen 9cede1ede2 Add devShell including sops 2022-12-09 03:43:14 +01:00
Daniel Olsen dad210a122 base: autoUpgrade - simplify flake url, add unstable to upgraded inputs 2022-12-09 03:21:18 +01:00
Daniel Løvbrøtte OlsenandSystem administrator 57d526f0b2 base: fix autoUpgrade 
autoupgrade now pulls from the remote git repo
but overrides the nixpkgs input with a newer version
 2022-12-09 02:55:18 +01:00
Daniel Løvbrøtte OlsenandSystem administrator 121dcd8ab2 Initialize flake 2022-12-07 22:13:28 +01:00
Daniel OlsenandSystem administrator 4a9efb0d5c Finally comitting matrix-configuration now that we have secret-management 2022-12-07 10:16:15 +01:00
Daniel OlsenandSystem administrator 3ed65c6cfa Add sops for secret management 2022-12-07 10:16:07 +01:00
Daniel OlsenandSystem administrator e6878aa716 Remove neovim from system packages 2022-12-07 10:06:12 +01:00