felixalb/pvv-nixos-config
1
0
Fork 0
mirror of https://git.pvv.ntnu.no/Drift/pvv-nixos-config.git synced 2026-08-08 12:29:51 +02:00
Code Issues Projects Releases Wiki Activity
867 Commits 43 Branches 0 Tags
8a84069dcf6da1aa0a7bf8c7e6218a759d6c85e0
Commit Graph
95 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
felixalb 19059b742e users/felixalb: update SSH keys 2026-01-25 13:17:39 +01:00
Felix Albrigtsen 6b5c12a4b8 Merge pull request 'Fix the heccin quotes - mikrobel 2026' (!120) from fix-quotes into main 
Reviewed-on: https://git.pvv.ntnu.no/Drift/pvv-nixos-config/pulls/120
Reviewed-by: Oystein Kristoffer Tveit <oysteikt@pvv.ntnu.no>
 2026-01-20 09:43:33 +01:00
felixalb 14e2ed7e32 Fix the heccin quotes 2026-01-19 21:09:41 +01:00
felixalbandoysteikt 0491df32f7 Init bakke (!87) 
New backup server just dropped!
This server is awfully slow, and the mdraid setup is awfully slow, and I doubt that this will be a good experience, but we now have a backup server again?

- Tried Disko and nixos-anywhere
- Tried using mdraid
- Found that md is ancient and bad
- Found that disko is 100% extra steps, and a lot more complicated and noisy than just formatting your disks yourself
- Found that systemd-boot doesn't support mdraid
- Found that we probably don't need to mirror the boot partition :)
- Found that old hardware is slow
- Found that old hardware can have poor support for iPXE with UEFI, and might do weird BIOS stuff on you when you least expect it
- Reaffirmed that zfs is love

Current disk layout:
- mdraid for boot/root disk
    - 4TB WD Red with 500MiB ESP with systemd-boot, Remaining mdraid - Old?
    - 4TB WD Red with 500MiB Unused partition, Remaining mdraid - Old?
- zfs pool "tank" for the actual backup data
    - 8TB Toshiba MG08 - New
    - 8TB Exos 7E10 - New

TODO:

- Document the death of Toriel on the wiki
- Document Bakke on the wiki
  - ... describing the poco loco disk layout
- Start backing stuff up
  - Restic? Borg? Rsync?
  - Make backup retention policy and zfs snapshot system
  - Document backup procedures

Reviewed-on: https://git.pvv.ntnu.no/Drift/pvv-nixos-config/pulls/87
Co-authored-by: Felix Albrigtsen <felix@albrigtsen.it>
Co-committed-by: Felix Albrigtsen <felix@albrigtsen.it>
 2025-12-22 04:08:30 +01:00
felixalb 736dc44008 flake: update input pvv-nettsiden (fadderuke -> normal events) 2025-09-01 20:16:50 +02:00
felixalb febc0940f8 flake: update pvv-nettsiden 2025-07-18 21:06:17 +02:00
Felix Albrigtsen f1f4da9ff6 Merge pull request 'Init wenche' (!94) from init-wenche into main 
Reviewed-on: https://git.pvv.ntnu.no/Drift/pvv-nixos-config/pulls/94
Reviewed-by: Oystein Kristoffer Tveit <oysteikt@pvv.ntnu.no>
 2025-03-29 22:15:02 +01:00
Felix Albrigtsen cd40bd6178 Wenche: add swapfile 2025-03-29 22:08:44 +01:00
felixalb c83005983e shells/cuda: Reformat, replace shellhook with env attr 2025-03-15 23:37:53 +01:00
Felix Albrigtsen 4f28815018 wenche: Fix nvidia driver. flake: add shells/cuda. 2025-02-22 19:45:26 +01:00
Felix Albrigtsen bdaa765dbb wenche: start adding NVIDIA support 2025-02-19 23:28:42 +01:00
felixalb c0e551eb8b wenche: init new host 2025-02-19 22:48:28 +01:00
felixalb 13c921c47b bekkalokk: Update nettsiden (re-enable events) 2025-01-17 23:11:19 +01:00
felixalb 882a8f2e88 bekkalokk: Update nettsiden 2024-12-21 23:50:53 +01:00
Felix Albrigtsen 8285d91401 Merge pull request 'Ildkule: Move monitoring state directories to data volume' (!88) from ildkule-data-volume into main 
Reviewed-on: https://git.pvv.ntnu.no/Drift/pvv-nixos-config/pulls/88
Reviewed-by: Daniel Lovbrotte Olsen <danio@pvv.ntnu.no>
 2024-11-10 02:30:11 +01:00
felixalb 2d52ebce52 Ildkule: hardware-config: use UUIDs 2024-11-09 21:42:44 +01:00
felixalb 11f6ef0572 Ildkule: Move monitoring state directories to data volume 2024-11-09 15:21:12 +01:00
Felix Albrigtsen aa884353c7 Merge pull request 'Add ipv6 gateway' (!82) from ipv6-fix into main 
Reviewed-on: https://git.pvv.ntnu.no/Drift/pvv-nixos-config/pulls/82
Reviewed-by: Daniel Lovbrotte Olsen <danio@pvv.ntnu.no>
 2024-09-28 21:44:55 +02:00
felixalb 2147b56864 Add ipv6 gateway 2024-09-28 21:35:57 +02:00
Felix Albrigtsen 5a76b62700 Merge pull request 'add gitea metrics' (!78) from gitea-metric into main 
Reviewed-on: https://git.pvv.ntnu.no/Drift/pvv-nixos-config/pulls/78
Reviewed-by: Oystein Kristoffer Tveit <oysteikt@pvv.ntnu.no>
 2024-09-14 20:33:28 +02:00
Felix Albrigtsen 0f77a42e34 Grafana: Add Gitea Dashbaord [sic] 2024-09-14 20:28:35 +02:00
Felix Albrigtsen c64d28fc26 Prometheus: Monitor gitea metrics 2024-09-14 20:21:12 +02:00
felixalbandFelix Albrigtsen ca287b95c9 Ildkule/openstack: fix networking 
Removes systemd-networkd, and configures proper ipv4 and ipv6 in
openstack.
 2024-09-05 00:24:22 +02:00
felixalb 161265d346 Bekkalokk/Nettsiden: deploy #78 2024-09-01 20:13:56 +02:00
Felix Albrigtsen 2030d4de39 fix-openstack-networking (!47) 
Fix networking in Openstack.

This rewrites the systemd-networkd config, fixing both dhcp and manual address/route configurations.
Now, everything should behave predictably, routing NTNU-internal and NTNU-global addresses separately and properly across both ipv4 and ipv6.

Reviewed-on: https://git.pvv.ntnu.no/Drift/pvv-nixos-config/pulls/47
 2024-07-31 11:23:00 +02:00
Felix Albrigtsen c7797bdd04 Merge pull request 'SimpleSAMLPHP/MediaWiki: Update deprecated --replace' (!48) from fix-replace-warn into main 
Reviewed-on: https://git.pvv.ntnu.no/Drift/pvv-nixos-config/pulls/48
Reviewed-by: Oystein Kristoffer Tveit <oysteikt@pvv.ntnu.no>
 2024-07-28 23:30:44 +02:00
felixalb 615b5fc1f1 SimpleSAMLPHP/MediaWiki: Update deprecated --replace 2024-07-28 23:28:33 +02:00
Felix Albrigtsen 106081c967 Merge pull request 'all: Update to nixos-24.05' (!43) from 24.05-for-real into main 
Reviewed-on: https://git.pvv.ntnu.no/Drift/pvv-nixos-config/pulls/43
 2024-06-30 01:55:41 +02:00
Felix Albrigtsen ca2deed668 WIP: all: Update to nixos-24.05 2024-06-30 01:55:25 +02:00
Felix Albrigtsen c88c3f87e0 buskerud: add libvirtd 2024-06-22 17:36:30 +02:00
felixalb c5bad75edc bekkalokk/nettsiden: Update nettsiden to disable recurring events 2024-06-19 22:15:36 +02:00
felixalb 71479d5ca0 quickfix: bekkalokk/mediawiki: remove DeleteBatch 2024-05-27 11:02:35 +02:00
felixalb cf01792269 bekkalokk/vaultarden: Add kTLS 2024-05-26 10:50:29 +02:00
Felix Albrigtsen afae0da0b6 Merge pull request 'bekkalokk: add vaultwarden' (!40) from bekkalokk-vaultwarden into main 
Reviewed-on: https://git.pvv.ntnu.no/Drift/pvv-nixos-config/pulls/40
 2024-05-26 04:21:28 +02:00
felixalb 35d745b156 bekkalokk: add vaultwarden 2024-05-26 04:19:17 +02:00
Felix Albrigtsen 1c35da0295 Merge pull request 'bekkalokk: add snappymail' (!39) from bekkalokk-snappymail into main 
Reviewed-on: https://git.pvv.ntnu.no/Drift/pvv-nixos-config/pulls/39
 2024-05-26 01:52:17 +02:00
felixalb 5fb1b805a8 bekkalokk: add snappymail 2024-05-26 01:07:27 +02:00
felixalbandFelix Albrigtsen 55e8f01d1d Upgrade ildkule (!36) 
This PR is made while moving Ildkule from PVE on joshua, to Openstack on stack.it.ntnu.no.

- The main monitoring dashboard is moved from https://ildkule.pvv.ntnu.no to https://grafana.pvv.ntnu.no.
- A new service is added: uptime-kuma on https://uptime.pvv.ntnu.no.
- The (hardware) configuration for ildkule is updated to fit the new virtualization environment, boot loader, network interfaces, etc.
- Metrics exporters on other hosts should be updated to allow connections from the new host

As this is the first proper server running on openstack, and therefore outside our main IP range, we might discover challenges in our network structure. For example, the database servers usually only allow connections from this range, so Ildkule can no longer access it. This should be explored, documented and/or fixed as we move more services.

Reviewed-on: https://git.pvv.ntnu.no/Drift/pvv-nixos-config/pulls/36
Co-authored-by: Felix Albrigtsen <felix@albrigtsen.it>
Co-committed-by: Felix Albrigtsen <felix@albrigtsen.it>
 2024-04-21 23:36:25 +02:00
felixalb 1e4195ea9d bekkalokk: pvv-nettsiden-gallery: Improve thumbnail generation 2024-04-14 02:04:45 +02:00
Felix Albrigtsen 4f322ec0b1 Merge pull request 'finalize-www-migration' (!31) from finalize-www-migration into main 
Reviewed-on: https://git.pvv.ntnu.no/Drift/pvv-nixos-config/pulls/31
 2024-04-11 00:57:20 +02:00
felixalb 79bf307ef2 bekkalokk: Reconfigure www ingress 2024-04-11 00:48:07 +02:00
felixalb 4d50efc6db Finalize www/idp/webmail migration from spikkjeposche to bekkalokk 2024-04-10 23:31:04 +02:00
Felix Albrigtsen 145a840a2c Merge pull request 'Setup pvv-nettsiden on www2.pvv.ntnu.no' (!27) from www2 into main 
Reviewed-on: https://git.pvv.ntnu.no/Drift/pvv-nixos-config/pulls/27
 2024-04-10 23:05:37 +02:00
felixalb 2bbc851e0e Point inputs/nettsiden to master after https://git.pvv.ntnu.no/Projects/nettsiden/pulls/53 2024-04-10 23:04:20 +02:00
felixalb fc19a8f1e1 bekkalokk: Automatically unpack pvv-nettsiden/gallery and generate thumbnails 2024-04-10 23:04:20 +02:00
Felix Albrigtsenandh7x4 03c9638098 Merge pull request 'treewide: nginx optimizations' (!29) from treewide-nginx-optimizations into main 
Reviewed-on: https://git.pvv.ntnu.no/Drift/pvv-nixos-config/pulls/29
 2024-04-10 22:54:39 +02:00
Felix Albrigtsenandh7x4 2cb7e06369 bekkalokk/mediawiki: fix path, upgrade security 2024-04-03 08:29:19 +02:00
felixalb 07c480d004 base: add ripgrep 2024-03-30 21:07:00 +01:00
felixalb 62b269637a bekkalokk/gitea: unset visibility when updating users 2024-02-12 11:24:14 +01:00
Felix Albrigtsen 1ab1b3a84e Merge pull request 'Buskerud: Comment out openvpn-client' (#23) from buskerud-no-vpn into main 
Reviewed-on: https://git.pvv.ntnu.no/Drift/pvv-nixos-config/pulls/23
 2023-12-12 18:09:31 +01:00
felixalb 80ef1ce4fa Buskerud: Remove OV-link, general cleanup 2023-12-12 15:27:20 +01:00
felixalb 2b834eee14 Buskerud: Comment out openvpn-client 2023-12-12 11:39:33 +01:00
felixalbandh7x4 d900dc1b1b Redirect subpages like ./well-known, add @-domains 2023-11-28 10:24:18 +01:00
felixalb d96c30bbd5 Fix calendar-bot timer 2023-09-12 18:23:20 +02:00
felixalb 36b768b3b2 ( ͡° ͜ʖ ͡°) 2023-09-08 02:33:22 +02:00
felixalb 9f36bd86a8 Update calendar bot details 2023-09-08 02:25:23 +02:00
felixalb 1370ccddf8 Initialize host: shark 2023-09-08 02:11:02 +02:00
felixalb 3beb76e411 Add pvv-calendar-bot to bicep 2023-08-27 02:36:01 +02:00
felixalb 6d6987c87a felixalb: Add SSH key 2023-08-17 22:07:00 +02:00
felixalb a230914ebd Add aarch64-darwin to devShell 2023-08-17 22:05:28 +02:00
felixalbandFelix Albrigtsen 8f55ef3193 Bekkalokk: Configure Gitea, clean web services 
Update bekkalokk secrets format

Update gitea keys and firewall rules

Create gitea-user-import script

Fix SSH host key verification

Gitea-import-users bug squashification

Fix Gitea-import SSH problems
 2023-06-05 19:41:25 +02:00
Felix Albrigtsen 9ccfb6cbed Merge branch 'bekkalokk-metrics' 2023-05-21 04:04:29 +02:00
Felix Albrigtsen 1335ab1d4b Add metrics exporters to bekkalokk 2023-05-21 04:03:14 +02:00
felixalbandGogs 69be23712f Merge branch 'bicep-metrics' of Drift/pvv-nixos-config into main 2023-05-21 03:47:53 +02:00
Felix Albrigtsen ce58f91e16 Add metrics exporters to bicep 2023-05-21 03:47:02 +02:00
felixalbandGogs 360f873c31 Merge branch 'bekkalokk-baremetal' of Drift/pvv-nixos-config into main 2023-05-21 02:31:39 +02:00
Felix Albrigtsen 8ccf9e9298 Update keys and re-enable web services 2023-05-21 02:29:14 +02:00
felixalb 8b70d84f41 bekkalokk: hardware-config for baremetal 2023-05-21 00:06:25 +02:00
Felix Albrigtsen 2568800794 Add andresbu to node-exporter targets 2023-03-12 00:41:36 +01:00
felixalbandGogs f3d143cfb9 Merge branch 'essendrop-metrics' of Drift/pvv-nixos-config into main 2023-01-23 14:48:29 +01:00
Felix Albrigtsen 84b57bb4db Provision go dashboard for gogs 2023-01-23 14:48:26 +01:00
felixalbandGogs bef9bddca3 Merge branch 'essendrop-metrics' of Drift/pvv-nixos-config into main 2023-01-23 14:16:46 +01:00
Felix Albrigtsen b4e74a3959 Add node and gogs metrics collection to prometheus 2023-01-23 13:12:46 +01:00
Felix Albrigtsen ecfde9f56a Update ildkule IPv6-address 2023-01-20 11:40:42 +01:00
felixalbandGogs 4e93962f1c Merge branch 'prometheustargets' of Drift/pvv-nixos-config into main 2023-01-17 13:47:51 +01:00
Felix Albrigtsen e679c7d27a Add bicep and hildring to monitoring 2023-01-17 13:47:48 +01:00
Felix Albrigtsen e9cd0ff4f6 Update README with lockfile-fix 2023-01-14 23:03:56 +01:00
felixalbandGogs 43c76502a7 Merge branch 'prometheus-stack' of Drift/pvv-nixos-config into main 2023-01-14 22:49:09 +01:00
Felix Albrigtsen 92280cd3d3 Merge remote-tracking branch 'origin/main' into prometheus-stack 2023-01-14 22:49:21 +01:00
Felix Albrigtsen 084313e01d Add ildkule to prometheus targets 2023-01-14 22:45:01 +01:00
Felix Albrigtsen 40c67c6153 Removed motd extras 2022-12-20 23:15:52 +01:00
Felix Albrigtsen f6cc25cdaf Add synapse monitoring with prometheus 2022-12-20 23:11:46 +01:00
Felix Albrigtsen a45a08db57 Cleanup ildkule configs 2022-12-20 23:11:46 +01:00
Felix Albrigtsen fcdce57a3d SSL and loki network config 2022-12-20 18:11:32 +01:00
Felix Albrigtsen c0b5932432 Improve grafana config, enable boltdb-shipper 2022-12-20 18:11:32 +01:00
Felix Albrigtsen ed46e9af61 Add a default dashboard 2022-12-20 18:11:32 +01:00
Felix Albrigtsen a2f71ba120 ildkule-grafana upgrades 2022-12-20 18:11:32 +01:00
Felix Albrigtsen 2236863f09 Add a new metrics stack 2022-12-20 18:11:32 +01:00
Felix Albrigtsen 50133047e6 Add felixalb user keys 2022-12-20 18:11:32 +01:00
Felix Albrigtsen c84af91c2c Add ildkule host keys 2022-12-20 18:11:32 +01:00
Felix Albrigtsen 1de68ee0e2 ildkule: hardware-configuration.nix 2022-12-20 18:11:28 +01:00
Felix Albrigtsen 1429a1b51b Simplify nginx on ildkule 2022-12-20 18:06:49 +01:00
felixalb 4207a3666c Simplify nginx on ildkule 2022-12-17 22:00:57 +01:00
felixalb 6b1f0eb090 Add host ildkule 2022-12-17 21:51:43 +01:00
Felix AlbrigtsenandSystem administrator f418516013 Enable rsa-ssh and root login over ssh for backup 2022-12-07 10:07:32 +01:00