Deuxfleurs/nixcfg
18
6
Fork 2
Code Issues 10 Pull requests 2 Projects Releases Wiki Activity
220 commits 11 branches 0 tags 1.9 MiB
Commit graph

220 commits

This branch
This branch
All branches
Author SHA1 Message Date
Alex Auvolat
f4689d25de
Change email address for let's encrypt expiry notifications 2022-10-09 22:57:55 +02:00
Alex Auvolat
b4e737afdf
Rotate ssh key 2022-10-09 17:46:59 +02:00
Alex Auvolat
c239e34a25
IPv6 prefix at Neptune changed again 2022-10-09 17:07:47 +02:00
Quentin Dufour
e8cdd6864a
Split garage deployments in 2 categories 
- The ones that will receive some traffic from tricot
 - The ones "only for storage" that will not receive traffic from tricot
 2022-10-08 22:23:19 +02:00
Alex Auvolat
32658ff4d3
Add jaeger service to staging to view Garage traces 2022-09-26 15:53:32 +02:00
Alex Auvolat
711b788eb4
Fix restic forget commands 2022-09-26 13:05:53 +02:00
Alex Auvolat
5b88919746
Move cryptpad backup job to backup-daily.hcl 2022-09-26 13:02:38 +02:00
Alex Auvolat
535c90b38e
Replace Adrien's SSH key 2022-09-26 11:37:48 +02:00
Alex Auvolat
f22e242700
SSB experiment 2022-09-21 19:29:08 +02:00
Alex Auvolat
4e939f55fc
Update garage staging 2022-09-21 19:28:54 +02:00
Alex Auvolat
56ff4c5cfd
Prod-like telemetry into staging 2022-09-20 17:13:46 +02:00
Alex Auvolat
9b6bdc7092
Update to garage config 2022-09-20 17:13:36 +02:00
Alex Auvolat
72606368bf
Force Garage to use ipv6 connectivity 2022-09-15 11:57:24 +02:00
Alex Auvolat
2dad5700d3
garage v0.8.0-beta1 on staging 2022-09-13 23:32:12 +02:00
Alex Auvolat
39fbbbe863
Change ipv6 tunnel server 2022-09-09 17:23:23 +02:00
Alex Auvolat
a90de2cfb9
Update garage staging 2022-09-09 12:24:29 +02:00
Alex Auvolat
be0d7a7ccc
Drone integration files for new version (Nix runners) 2022-09-09 12:24:11 +02:00
Alex Auvolat
b23218a7f6
systemd timesyncd 2022-09-08 10:35:14 +02:00
Quentin Dufour
2695fe4ae8
Force IPv4 when sending to gmail 
Because Free does not provide rDNS on IPv6
so GMail complains that it does not find a PTR record
for our IPv6 address
 2022-09-07 08:13:15 +02:00
Quentin Dufour
02c65de5fe
Restart backups 2022-09-01 18:05:50 +02:00
Quentin Dufour
1749a98e86
Update LDAP configuration 2022-08-31 10:25:58 +02:00
Alex Auvolat
6ec9aad801
Improve DNS configuration 
Add Unbound server that separates queries between those going to Consul
and those going elsewhere.  This allows us to have DNS working even if
Consul fails for some reason. This way we can also remove the secondary
`nameserver` entry in /etc/resolv.conf, thus fixing a bug where certain
containers (Alpine-based images?) were using the secondary resolver some
of the time, making them unable to access .consul hosts.
 2022-08-30 15:52:42 +02:00
Alex Auvolat
e81716e41e
Update drone config and add drone monitoring to prometheus 2022-08-30 15:48:32 +02:00
Quentin Dufour
b5328c3341
Activate memory oversubscription+use it for Plume 2022-08-26 13:04:42 +02:00
Alex Auvolat
72d033dcd4
Remove garage files at bad location, add basic telemetry 2022-08-25 13:59:40 +02:00
Alex Auvolat
fd3ed44dad
Disable netdata on prod (useless) 2022-08-25 12:34:02 +02:00
Quentin Dufour
3f9ad5edc3
Configure the final URL for Guichet 2022-08-25 04:46:42 +02:00
Quentin Dufour
ec0e483d99
Add email support 2022-08-25 04:39:44 +02:00
Quentin Dufour
ea1b0e9d19
Add a docker-compose for Jitsi 2022-08-25 01:06:06 +02:00
Quentin Dufour
e37c1f9057
Deploy Matrix 2022-08-25 01:02:16 +02:00
Quentin Dufour
3be2659aa1
Make service addressable by zones 2022-08-24 21:06:48 +02:00
Quentin Dufour
243eee4322
Ask consul to use advertised address and not bind one 2022-08-24 20:03:31 +02:00
Quentin Dufour
00b754727d
Add postgres + WIP plume + fix diplonat 2022-08-24 19:54:15 +02:00
Alex Auvolat
1172e8e511
Fix nomad talking to consul 2022-08-24 18:51:55 +02:00
Alex Auvolat
0d2d46f437
skip consul tls verify for diplonat and tricot (should be reverted?) 2022-08-24 18:19:04 +02:00
Alex Auvolat
cfb1d623d9
Reconfigure services to use correct tricot url, TLS fails 2022-08-24 17:31:08 +02:00
Alex Auvolat
a0c8280c02
Fix access to consul for non-server nodes 2022-08-24 16:58:50 +02:00
Quentin Dufour
fe1f261738
Add another DNS to the pki 2022-08-24 16:53:02 +02:00
Alex Auvolat
6ea18bf8ae
Add directory config for prod 2022-08-24 16:03:52 +02:00
Alex Auvolat
41128f4c36
Clone core module in staging and prod, move bad stuff to experimental 2022-08-24 15:48:18 +02:00
Alex Auvolat
981294e3d7
Move dummy nginx to cluster/staging 2022-08-24 15:44:40 +02:00
Alex Auvolat
2e8923b383
Move app files into cluster subdirectories; add prod garage 2022-08-24 15:42:47 +02:00
Alex Auvolat
9848f3090f
Remove courgette from raft 2022-08-24 15:25:28 +02:00
Alex Auvolat
6c51a6e484
Don't make diplotaxis and doradille raft servers, fix sshtool 2022-08-24 14:29:56 +02:00
Alex Auvolat
ec2020b71b
Disable bootstrap_expect unless specific deuxfleurs.bootstrap is set 2022-08-24 14:23:17 +02:00
Alex Auvolat
468c6b702b
Add ipv6 gateway at neptune 2022-08-24 12:31:55 +02:00
Quentin Dufour
4253fd84a5
Wireguard configuration of Orion 2022-08-24 12:06:01 +02:00
Quentin Dufour
9e39677e1d
Fix IPv6 2022-08-24 11:06:55 +02:00
Alex Auvolat
e50e1c407d
Move prod to wireguard and not wesher, and reaffect IPs 2022-08-24 00:31:07 +02:00
Alex Auvolat
2a1459d887
Reaffect wireguard IPs in staging cluster 2022-08-24 00:07:08 +02:00