KokaKiwi/nixcfg
1
0
Fork 0
forked from Deuxfleurs/nixcfg
Code Pull requests Activity
668 commits 17 branches 0 tags 1.8 MiB
Commit graph

441 commits

Author SHA1 Message Date
Armaël Guéneau
3b777ddeb6 Move emails from ananas (in scorpio) to celeri (in neptune) 2024-05-12 17:09:05 +02:00
Armaël Guéneau
ca59237057 staging: disable allocation of grafana on piranha 
piranha does not seem to be available from the outside world currently
 2024-05-01 00:44:09 +02:00
ADRN
28b58b3776 ajout max et vincent en admin cryptpad 2024-04-30 10:10:40 +02:00
Baptiste Jonglez
7db40a8dcf Fix coturn that was failing with newer Nomad/Docker 
Coturn was failing to start with the following error:

failed to create task for container: failed to create shim task: OCI
runtime create failed: runc create failed: unable to start container
process: exec: "/usr/local/bin/docker-entrypoint.sh": permission denied:
unknown

It seems to be caused by the recent NixOS update.

Either because Docker/runc is now more strict when checking if the
entrypoint is executable [1]

And/or because Nomad may mount the secrets directory with "noexec" [2].

In any case, the "local" directory [2] looks more appropriate, because
it's shared with the task while not being accessible to other tasks.

[1] https://github.com/opencontainers/runc/issues/3715
[2] https://developer.hashicorp.com/nomad/docs/concepts/filesystem
 2024-04-28 18:01:52 +02:00
Baptiste Jonglez
c56ce9134c Update woodpecker to latest 2.4.1 2024-04-28 13:31:15 +02:00
baptiste
1d40a3c7c0 Merge pull request 'Update Woodpecker to v2.4.0' (#24) from tixie/nixcfg:update-woodpecker-2.4.0 into main 
Reviewed-on: Deuxfleurs/nixcfg#24
 2024-04-28 11:25:06 +00:00
Baptiste Jonglez
5dc7c3132b Fix link in CI setup doc 2024-04-28 13:23:54 +02:00
Armaël Guéneau
6307f7e62f caribou: update ipv6 address after ISP change 2024-04-26 18:00:56 +02:00
Quentin Dufour
e6bac83e02
Tricot ulimit 2024-04-25 09:13:06 +02:00
Tixie
22fbadef2e
update woodpecker-agent to 2.4.0 2024-04-24 22:20:20 +02:00
Tixie
43189a5fc2
update woodpecker-server to 2.4.0 2024-04-24 22:20:06 +02:00
Alex Auvolat
ff7462b2c7 prod: update nomad to 1.6 2024-04-20 12:29:26 +02:00
Alex Auvolat
972fc4ea7c prod: nixos 23.11 and nomad 1.5 2024-04-20 10:58:36 +02:00
Alex Auvolat
444306aa54 prod: allow woodpecker on neptune now with good ipv6 2024-04-20 10:20:04 +02:00
Alex Auvolat
c6a1bb341f prod: update nixos to 23.05 2024-04-20 10:09:55 +02:00
Alex Auvolat
eddc95c5df prod: update ip config for Free ISP at Neptune 2024-04-20 09:37:24 +02:00
Alex Auvolat
fb871fd350 staging: accept nomad bsl license 2024-04-19 08:54:11 +02:00
Alex Auvolat
27df86a7e5 fix pad when not in neptune, and allow android7 email to move to bespin 2024-04-19 08:53:48 +02:00
ADRN
d817ad7b15 Merge branch 'poil' 2024-04-18 19:36:32 +02:00
ADRN
1871f7bbff ajout de Jill & Trinity en admins de CryptPad 2024-04-18 19:36:07 +02:00
adrien
18e73b18f3 Merge pull request 'cluster/prod(app): Upgrade CryptPad to 2024.3.0' (#23) from KokaKiwi/nixcfg:crytptpad-upgrade-1 into main 
Reviewed-on: Deuxfleurs/nixcfg#23
 2024-04-18 17:35:36 +00:00
ADRN
a817d764d3 déplacement du service cryptpad concombre -> abricot 2024-04-18 19:07:08 +02:00
KokaKiwi
9111997f84
cluster/prod(app): Add new CryptPad build files 2024-04-18 18:56:19 +02:00
KokaKiwi
d41e10bd25
cluster/prod(app): Upgrade CryptPad to 2024.3.0 2024-04-18 18:45:07 +02:00
KokaKiwi
718a23b74b
cluster/prod: Add kokakiwi to adminAccounts 2024-04-18 17:57:24 +02:00
Alex Auvolat
96ead9a597 prod: garage v1.0.0-rc1 2024-04-01 20:11:24 +02:00
Lauric Desauw
6152dc18d6 remove notice message for moderation 2024-03-29 15:48:21 +01:00
Alex Auvolat
1a1ad0a8ad staging: garage v1.0 rc1 2024-03-28 17:17:21 +01:00
Alex Auvolat
5b89004c0f staging: deploy garage 0.10 beta + fix monitoring 2024-03-28 11:56:51 +01:00
trinity-1686a
e4708a325d add trinity.fr.eu.org to DKIM 2024-03-24 13:42:47 +00:00
Vincent
05dcd1c6a6 Courderec.re domain in the DKIM table 2024-03-24 14:23:47 +01:00
Alex Auvolat
8fdffdf12f prod: remove drone-ci 2024-03-17 11:35:07 +01:00
Alex Auvolat
d55c9610a9 ajout de marion et darkgallium 2024-03-16 18:53:18 +01:00
Vincent
18af714330 Fusion conflict 2024-03-16 18:53:11 +01:00
Quentin Dufour
f228592473
Ajout de la regex dans le query parameter du http-bind aussi 2024-03-11 08:37:40 +01:00
ADRN
263dad0243 ajout redirection nginx des salons Jitsi suspects 2024-03-10 21:05:43 +01:00
ADRN
aaf95aa110 added notice message on Jitsi about our monitoring 2024-03-10 20:39:41 +01:00
ADRN
6544cd3e14 increased Jitsi logs a bit 2024-03-09 12:56:34 +01:00
Maximilien Richer
54f7cb670d
Update lightstream and grafana 2024-03-09 11:41:46 +01:00
ADRN
3ca0203753 store real IP from Jitsi 2024-03-08 21:25:43 +01:00
Alex Auvolat
dde6ece4db prod: give more memory to promehteus 2024-03-08 12:03:48 +01:00
Alex Auvolat
3d75b5a0bd remove orsay extra service 2024-03-06 15:15:21 +01:00
Alex Auvolat
eb40718bee force woodpecker on scorpio 2024-03-04 15:38:21 +01:00
Alex Auvolat
62bd80a346 garage: update to v0.9.2 final 2024-03-01 18:11:36 +01:00
Alex Auvolat
71e959ee79 prod: update to garage 0.9.2-rc1 2024-02-29 16:19:21 +01:00
Alex Auvolat
ae632bfecf staging: deploy garage v0.9.2-rc1 2024-02-29 15:32:16 +01:00
Alex Auvolat
5f0cec7d3e woodpecker-ci: higher affinity to scorpio 2024-02-28 11:42:39 +01:00
Alex Auvolat
74668a31b2 staging: update garage to test release 2024-02-19 12:46:22 +01:00
Alex Auvolat
f724e81239 add automatic subdomains for v4 and v6 per site for dashboard 2024-02-14 09:28:31 +01:00
Alex Auvolat
82500758f6 prod: unpin woodpecker 2024-02-13 17:32:01 +01:00
Alex Auvolat
c2e0e12dc8 add woodpecker agent instructions 2024-02-09 11:29:03 +01:00
Alex Auvolat
52cfe54129 prod: install woodpecker-ci 2024-02-08 16:10:39 +01:00
ADRN
9d77b5863a added URL to redirect 2024-02-05 00:43:14 +01:00
Alex Auvolat
4cddb15fa4 prod: updat external services 2024-01-31 19:04:02 +01:00
Alex Auvolat
1bf356e49d staging: remove node carcajou 2024-01-31 09:33:12 +01:00
Alex Auvolat
e98ec690b9 staging: updates 2024-01-22 23:21:26 +01:00
Alex Auvolat
27242fbf70 staging: cluster upgrades 2024-01-22 17:15:29 +01:00
Alex Auvolat
6db49e0059 staging: remove nix mutual cache 2024-01-18 00:05:40 +01:00
Alex Auvolat
3ff35c5527 staging: new hostnames in known_hosts 2024-01-17 20:44:23 +01:00
Alex Auvolat
ab481c5e70 staging: use dynamic dns names to connect to nodes for deployment 2024-01-17 20:30:00 +01:00
Alex Auvolat
88f8f9fd1e staging: add automatic dns names for staging machines 2024-01-17 20:25:35 +01:00
ADRN
be0cbea19b ajout clé ssh boris, aeddis et vincent 2024-01-17 20:07:48 +01:00
Alex Auvolat
a21493745d prod: update diplonat and make garage restart on template changes again 
Diplonat update prevents unnecessary flapping of autodiscovered ip
addresses, which was the cause of useless restarts of the garage daemon.
But in principle we want Garage to be restarted if the ipv6 address
changes as it indicates changes in the network.
 2024-01-17 12:38:53 +01:00
Alex Auvolat
56e4dd954f staging: add ram for im replicate-db 2024-01-16 16:30:33 +01:00
Alex Auvolat
102152a14e staging: garage v0.9.1-pre (not yet released nor tagged), diplonat with STUN flapping fix 2024-01-16 16:10:29 +01:00
Quentin Dufour
3b34e3c2f5
upgraded postfix to fix smtp smuggling cve 
https://security-tracker.debian.org/tracker/source-package/postfix
https://www.postfix.org/smtp-smuggling.html
 2023-12-25 14:09:57 +01:00
Quentin Dufour
ac42e95f1a
update smtp server security conf 2023-12-25 14:00:36 +01:00
Baptiste Jonglez
55c9b89cb2 Revert "Revert "garage prod: use dynamically determined ipv6 addresses"" 
Quentin's fix seems to work fine.

This reverts commit e5f3b6ef0a.
 2023-12-19 09:27:40 +01:00
Baptiste Jonglez
e5f3b6ef0a Revert "garage prod: use dynamically determined ipv6 addresses" 
This partially reverts commit 47e982b29d.

This leads to invalid config:

    Dec 19 08:23:09 courgette 25f10ae4271c[781]: 2023-12-19T07:23:09.087813Z  INFO garage::server: Loading configuration...
    Dec 19 08:23:09 courgette 25f10ae4271c[781]: Error: TOML decode error: TOML parse error at line 16, column 17
    Dec 19 08:23:09 courgette 25f10ae4271c[781]:    |
    Dec 19 08:23:09 courgette 25f10ae4271c[781]: 16 | rpc_bind_addr = "[<no value>]:3901"
    Dec 19 08:23:09 courgette 25f10ae4271c[781]:    |                 ^^^^^^^^^^^^^^^^^^^
    Dec 19 08:23:09 courgette 25f10ae4271c[781]: invalid socket address syntax
    Dec 19 08:23:09 courgette 25f10ae4271c[781]:
 2023-12-19 08:38:12 +01:00
Quentin Dufour
516ab9ad91
stop reloading config file 2023-12-19 08:36:26 +01:00
Quentin Dufour
16168b916e
tricot upgrade 2023-12-14 10:59:40 +01:00
Alex Auvolat
47e982b29d garage prod: use dynamically determined ipv6 addresses 2023-12-13 17:33:56 +01:00
Quentin Dufour
d694ddbe2c
Move garage's redirections to a dedicated service 
Reason:
 - do not slow down the garage web endpoint
 - required now that we map domain name to a garage bucket
 2023-12-04 12:32:46 +01:00
Quentin Dufour
0c3db22de6
fix bagage 2023-12-04 12:19:00 +01:00
Quentin Dufour
af242486a3
add degrowth 2023-12-04 12:16:41 +01:00
Quentin Dufour
23690238c9
add a sftp domain name 2023-12-02 11:52:35 +01:00
Quentin Dufour
7da4510ee8
tricot update 2023-12-01 16:02:09 +01:00
Quentin Dufour
52044402ac
add some redirections 2023-11-29 17:08:13 +01:00
Quentin Dufour
d14fc2516c
Upgrade tricot 2023-11-29 16:58:37 +01:00
Alex Auvolat
c1d307d7a9 matrix: add memory to async media upload after oom crash 2023-11-27 13:56:47 +01:00
Alex Auvolat
9c6f98f4b8 fix cryptpad backup 2023-11-27 13:43:42 +01:00
Alex Auvolat
a2654529c7 prod: update synapse and element 2023-11-15 16:39:11 +01:00
Alex Auvolat
b1e0397265 revert prometheus scraping on openwrt 2023-11-08 16:21:20 +01:00
Alex Auvolat
a46aa03fe2 prod: add monitoring of openwrt router 2023-11-08 16:14:33 +01:00
Quentin Dufour
a6b84527b0
fix typo 2023-10-30 12:15:30 +01:00
Quentin Dufour
3c22659d90
ajout de domaines d'Esther 2023-10-30 12:00:21 +01:00
Quentin Dufour
79f380c72d
directory 2023-10-30 11:55:25 +01:00
Baptiste Jonglez
a214496d8c [staging] Update known_hosts 2023-10-22 21:28:10 +02:00
Baptiste Jonglez
b1630cfa8e [staging] Update garage to v0.9.0 2023-10-22 21:27:55 +02:00
Baptiste Jonglez
d396f35235 Update IP for piranha.corrin 2023-10-22 20:17:33 +02:00
Alex Auvolat
78ed3864d7 update bagage version with cors allow all 2023-10-16 16:16:18 +02:00
Alex Auvolat
ea8b2e8c82 màj garage prod 2023-10-16 14:54:16 +02:00
Alex Auvolat
fbffe1f0dc staging: update guichet with website management 2023-10-05 18:51:13 +02:00
Alex Auvolat
c790f6f3e1 staging: reaffect raft leaders 2023-10-05 13:48:29 +02:00
Alex Auvolat
e94cb54661 prod: add matrix syncv3 daemon 2023-10-04 11:51:04 +02:00
Alex Auvolat
525f04515e staging: deploy garage v0.9.0-rc1 2023-10-04 10:44:17 +02:00
Alex Auvolat
2e3725e8a2 staging: disable jaeger; update diplonat 2023-10-03 22:56:41 +02:00
Quentin Dufour
56e19ff2e5
remove default HTTP CSP, put your CSP in your HTML 2023-10-03 16:00:11 +02:00
Quentin Dufour
9e113416ac
fix update guichet 2023-10-03 15:58:20 +02:00
Quentin Dufour
7c7adc76b4
Set sogo as debug 2023-10-03 08:33:29 +02:00