Commit Graph

178 Commits

Author SHA1 Message Date
8f55ef3193 Bekkalokk: Configure Gitea, clean web services
Update bekkalokk secrets format

Update gitea keys and firewall rules

Create gitea-user-import script

Fix SSH host key verification

Gitea-import-users bug squashification

Fix Gitea-import SSH problems
2023-06-05 19:41:25 +02:00
h7x4
db44bcf4bc
Upgrade to nixpkgs 23.05 2023-05-31 11:04:38 +02:00
Daniel Olsen
d694724f5c bicep/synapse: Set event cache to 20K
This is double the cache from default
changed because we're seeing periodic cpu spikes
with this cache beeing the main one missing
2023-05-26 02:22:18 +02:00
Daniel Olsen
68ce7acebb Revert "bicep: Emergency fix for matrix postgres auth"
This reverts commit fdbcd8c884.

This was not it
2023-05-23 05:12:46 +02:00
Daniel Olsen
fdbcd8c884 bicep: Emergency fix for matrix postgres auth
I think
2023-05-23 04:59:34 +02:00
Daniel Olsen
815063744b bicep/postgres: Remove jit setting
The nixos build of postgres doesn't support it anyways
2023-05-23 04:57:18 +02:00
Daniel Olsen
ede76faa79 Document nix flake check 2023-05-23 04:55:14 +02:00
Daniel Olsen
2752c26675 fix nixosConfig override 2023-05-23 04:43:39 +02:00
Daniel Olsen
dfd827ee74 Clean up jokum removal 2023-05-23 04:29:45 +02:00
Felix Albrigtsen
9ccfb6cbed Merge branch 'bekkalokk-metrics' 2023-05-21 04:04:29 +02:00
Felix Albrigtsen
1335ab1d4b Add metrics exporters to bekkalokk 2023-05-21 04:03:14 +02:00
felixalb
69be23712f Merge branch 'bicep-metrics' of Drift/pvv-nixos-config into main 2023-05-21 03:47:53 +02:00
Felix Albrigtsen
ce58f91e16 Add metrics exporters to bicep 2023-05-21 03:47:02 +02:00
felixalb
360f873c31 Merge branch 'bekkalokk-baremetal' of Drift/pvv-nixos-config into main 2023-05-21 02:31:39 +02:00
Felix Albrigtsen
8ccf9e9298 Update keys and re-enable web services 2023-05-21 02:29:14 +02:00
8b70d84f41 bekkalokk: hardware-config for baremetal 2023-05-21 00:06:25 +02:00
h7x4
cd0c8c8198
bekkalokk: continue work on mediawiki service 2023-05-19 03:03:47 +02:00
h7x4
c11a804097
bicep: set up mysql/mariadb 2023-05-18 15:40:13 +02:00
h7x4
45ada78304
oysteikt: edit user settings 2023-05-17 15:38:42 +02:00
Daniel Olsen
4ff5da28c4 bicep: nginx listen on bicep ip 2023-05-08 03:38:59 +02:00
Daniel Olsen
ee73a964be move matrix to bicep 2023-05-08 03:38:59 +02:00
h7x4
dcbe6871da
bekkalokk: setup keycloak 2023-05-07 00:34:42 +02:00
h7x4
0e75e0a5b9
bicep: add backup service 2023-05-06 19:07:10 +02:00
Daniel Olsen
f77a5e946f bicep: mount /data 2023-04-08 05:23:01 +02:00
Daniel Olsen
bac67ee123 bicep: don't wait for all interfaces and especially not jokums 2023-04-07 04:53:36 +02:00
Daniel Olsen
9f6020b5e7 update flake 2023-04-07 04:12:46 +02:00
Daniel Olsen
38e3202c9e Move more of jokum
slightly less stupid this time
2023-03-26 14:44:58 +02:00
Daniel Olsen
bddd7e438d update jokum sops secrets 2023-03-26 13:14:55 +02:00
Daniel Olsen
7620fb3dee move jokum to nixos bicep 2023-03-26 06:36:04 +02:00
h7x4
dfe8b8b44c
bicep: added postgres settings 2023-03-26 01:50:00 +01:00
h7x4
169f774e81
bicep dead, but maybe soon bicep alive 2023-03-26 01:09:44 +01:00
Felix Albrigtsen
2568800794 Add andresbu to node-exporter targets 2023-03-12 00:41:36 +01:00
Daniel Olsen
d9c19385fa synapse: cache more event_auth 2023-03-08 03:18:57 +01:00
Daniel Olsen
28dad93826 open the nixos firewall for node-exporter 2023-03-04 22:47:11 +01:00
Daniel Olsen
70f4777696 fix synapse dashboard 2023-03-04 05:11:40 +01:00
Daniel Olsen
a9d04ed286 Let nodes access their own prometheus metrics 2023-03-04 04:08:46 +01:00
Daniel Olsen
db69d28b42 Revert "metrics: Fix Synapse dashboard"
This reverts commit beb8df8fc7.
2023-03-04 03:14:54 +01:00
Daniel Olsen
8f23d7ba06 jokum: don't use host resolv.conf 2023-03-04 03:04:32 +01:00
Daniel Olsen
e61977e497 Disable dhcp and set domain again 2023-03-04 02:13:00 +01:00
Daniel Olsen
3252a3b5d1 turn on jokum 2023-03-04 02:03:37 +01:00
Daniel Olsen
8e819b5546 fix ip for bekkalokk 2023-03-04 00:57:28 +01:00
Daniel Olsen
6cf831a347 switch to networkd 2023-03-04 00:44:30 +01:00
Daniel Olsen
af955c88f8 jokum: move to systemd-nspawn container on bicep 2023-02-26 19:23:00 +01:00
Daniel Olsen
e293d64e66 flake update 2023-02-13 04:01:09 +01:00
Daniel Olsen
eed3c9b05f matrix: Point mjolnir directly at synapse so it can use the admin api 2023-02-13 03:42:52 +01:00
Daniel Olsen
7a9759ef71 matrix: Add mjolnir as a moderation bot 2023-02-13 02:34:11 +01:00
Daniel Olsen
4684cd239a matrix: enable shared secret registration 2023-02-13 00:58:15 +01:00
Daniel Olsen
c0c0dea069 tune worker distribution post fosdem and turning off prescence 2023-02-06 02:11:07 +01:00
Daniel Olsen
9c18a87866 element: disable presence if disabled in synapse 2023-02-02 18:51:47 +01:00
Daniel Olsen
73aa42a5f5 synapse: Disable presence
For now at least until we move to a stronger
machine.

Most large servers don't have this enabled.
2023-02-02 18:39:08 +01:00