Commit graph

240 commits

Author SHA1 Message Date
Alex ff7462b2c7 prod: update nomad to 1.6 2024-04-20 12:29:26 +02:00
Alex 972fc4ea7c prod: nixos 23.11 and nomad 1.5 2024-04-20 10:58:36 +02:00
Alex 444306aa54 prod: allow woodpecker on neptune now with good ipv6 2024-04-20 10:20:04 +02:00
Alex c6a1bb341f prod: update nixos to 23.05 2024-04-20 10:09:55 +02:00
Alex eddc95c5df prod: update ip config for Free ISP at Neptune 2024-04-20 09:37:24 +02:00
Alex 27df86a7e5 fix pad when not in neptune, and allow android7 email to move to bespin 2024-04-19 08:53:48 +02:00
ADRN d817ad7b15 Merge branch 'poil' 2024-04-18 19:36:32 +02:00
ADRN 1871f7bbff ajout de Jill & Trinity en admins de CryptPad 2024-04-18 19:36:07 +02:00
adrien 18e73b18f3 Merge pull request 'cluster/prod(app): Upgrade CryptPad to 2024.3.0' (#23) from KokaKiwi/nixcfg:crytptpad-upgrade-1 into main
Reviewed-on: #23
2024-04-18 17:35:36 +00:00
ADRN a817d764d3 déplacement du service cryptpad concombre -> abricot 2024-04-18 19:07:08 +02:00
Jill 9111997f84
cluster/prod(app): Add new CryptPad build files 2024-04-18 18:56:19 +02:00
Jill d41e10bd25
cluster/prod(app): Upgrade CryptPad to 2024.3.0 2024-04-18 18:45:07 +02:00
Jill 718a23b74b
cluster/prod: Add kokakiwi to adminAccounts 2024-04-18 17:57:24 +02:00
Alex 96ead9a597 prod: garage v1.0.0-rc1 2024-04-01 20:11:24 +02:00
Lauric Desauw 6152dc18d6 remove notice message for moderation 2024-03-29 15:48:21 +01:00
trinity-1686a e4708a325d add trinity.fr.eu.org to DKIM 2024-03-24 13:42:47 +00:00
Vincent 05dcd1c6a6 Courderec.re domain in the DKIM table 2024-03-24 14:23:47 +01:00
Alex 8fdffdf12f prod: remove drone-ci 2024-03-17 11:35:07 +01:00
Alex d55c9610a9 ajout de marion et darkgallium 2024-03-16 18:53:18 +01:00
Quentin f228592473
Ajout de la regex dans le query parameter du http-bind aussi 2024-03-11 08:37:40 +01:00
ADRN 263dad0243 ajout redirection nginx des salons Jitsi suspects 2024-03-10 21:05:43 +01:00
ADRN aaf95aa110 added notice message on Jitsi about our monitoring 2024-03-10 20:39:41 +01:00
ADRN 6544cd3e14 increased Jitsi logs a bit 2024-03-09 12:56:34 +01:00
Maximilien Richer 54f7cb670d
Update lightstream and grafana 2024-03-09 11:41:46 +01:00
ADRN 3ca0203753 store real IP from Jitsi 2024-03-08 21:25:43 +01:00
Alex dde6ece4db prod: give more memory to promehteus 2024-03-08 12:03:48 +01:00
Alex 3d75b5a0bd remove orsay extra service 2024-03-06 15:15:21 +01:00
Alex eb40718bee force woodpecker on scorpio 2024-03-04 15:38:21 +01:00
Alex 62bd80a346 garage: update to v0.9.2 final 2024-03-01 18:11:36 +01:00
Alex 71e959ee79 prod: update to garage 0.9.2-rc1 2024-02-29 16:19:21 +01:00
Alex 5f0cec7d3e woodpecker-ci: higher affinity to scorpio 2024-02-28 11:42:39 +01:00
Alex f724e81239 add automatic subdomains for v4 and v6 per site for dashboard 2024-02-14 09:28:31 +01:00
Alex 82500758f6 prod: unpin woodpecker 2024-02-13 17:32:01 +01:00
Alex c2e0e12dc8 add woodpecker agent instructions 2024-02-09 11:29:03 +01:00
Alex 52cfe54129 prod: install woodpecker-ci 2024-02-08 16:10:39 +01:00
ADRN 9d77b5863a added URL to redirect 2024-02-05 00:43:14 +01:00
Alex 4cddb15fa4 prod: updat external services 2024-01-31 19:04:02 +01:00
ADRN be0cbea19b ajout clé ssh boris, aeddis et vincent 2024-01-17 20:07:48 +01:00
Alex a21493745d prod: update diplonat and make garage restart on template changes again
Diplonat update prevents unnecessary flapping of autodiscovered ip
addresses, which was the cause of useless restarts of the garage daemon.
But in principle we want Garage to be restarted if the ipv6 address
changes as it indicates changes in the network.
2024-01-17 12:38:53 +01:00
Quentin 3b34e3c2f5
upgraded postfix to fix smtp smuggling cve
https://security-tracker.debian.org/tracker/source-package/postfix
https://www.postfix.org/smtp-smuggling.html
2023-12-25 14:09:57 +01:00
Quentin ac42e95f1a
update smtp server security conf 2023-12-25 14:00:36 +01:00
Baptiste Jonglez 55c9b89cb2 Revert "Revert "garage prod: use dynamically determined ipv6 addresses""
Quentin's fix seems to work fine.

This reverts commit e5f3b6ef0a.
2023-12-19 09:27:40 +01:00
Baptiste Jonglez e5f3b6ef0a Revert "garage prod: use dynamically determined ipv6 addresses"
This partially reverts commit 47e982b29d.

This leads to invalid config:

    Dec 19 08:23:09 courgette 25f10ae4271c[781]: 2023-12-19T07:23:09.087813Z  INFO garage::server: Loading configuration...
    Dec 19 08:23:09 courgette 25f10ae4271c[781]: Error: TOML decode error: TOML parse error at line 16, column 17
    Dec 19 08:23:09 courgette 25f10ae4271c[781]:    |
    Dec 19 08:23:09 courgette 25f10ae4271c[781]: 16 | rpc_bind_addr = "[<no value>]:3901"
    Dec 19 08:23:09 courgette 25f10ae4271c[781]:    |                 ^^^^^^^^^^^^^^^^^^^
    Dec 19 08:23:09 courgette 25f10ae4271c[781]: invalid socket address syntax
    Dec 19 08:23:09 courgette 25f10ae4271c[781]:
2023-12-19 08:38:12 +01:00
Quentin 516ab9ad91
stop reloading config file 2023-12-19 08:36:26 +01:00
Quentin 16168b916e
tricot upgrade 2023-12-14 10:59:40 +01:00
Alex 47e982b29d garage prod: use dynamically determined ipv6 addresses 2023-12-13 17:33:56 +01:00
Quentin d694ddbe2c
Move garage's redirections to a dedicated service
Reason:
 - do not slow down the garage web endpoint
 - required now that we map domain name to a garage bucket
2023-12-04 12:32:46 +01:00
Quentin 0c3db22de6
fix bagage 2023-12-04 12:19:00 +01:00
Quentin af242486a3
add degrowth 2023-12-04 12:16:41 +01:00
Quentin 23690238c9
add a sftp domain name 2023-12-02 11:52:35 +01:00