435 commits

Author	SHA1	Message	Date
Alex Auvolat	27242fbf70	staging: cluster upgrades	2024-01-22 17:15:29 +01:00
Alex Auvolat	6db49e0059	staging: remove nix mutual cache	2024-01-18 00:05:40 +01:00
Alex Auvolat	3ff35c5527	staging: new hostnames in known_hosts	2024-01-17 20:44:23 +01:00
Alex Auvolat	ab481c5e70	staging: use dynamic dns names to connect to nodes for deployment	2024-01-17 20:30:00 +01:00
Alex Auvolat	88f8f9fd1e	staging: add automatic dns names for staging machines	2024-01-17 20:25:35 +01:00
ADRN	be0cbea19b	ajout clé ssh boris, aeddis et vincent	2024-01-17 20:07:48 +01:00
Alex Auvolat	a21493745d	prod: update diplonat and make garage restart on template changes again ... Diplonat update prevents unnecessary flapping of autodiscovered ip addresses, which was the cause of useless restarts of the garage daemon. But in principle we want Garage to be restarted if the ipv6 address changes as it indicates changes in the network.	2024-01-17 12:38:53 +01:00
Alex Auvolat	56e4dd954f	staging: add ram for im replicate-db	2024-01-16 16:30:33 +01:00
Alex Auvolat	102152a14e	staging: garage v0.9.1-pre (not yet released nor tagged), diplonat with STUN flapping fix	2024-01-16 16:10:29 +01:00
Quentin Dufour	3b34e3c2f5	upgraded postfix to fix smtp smuggling cve ... https://security-tracker.debian.org/tracker/source-package/postfix https://www.postfix.org/smtp-smuggling.html	2023-12-25 14:09:57 +01:00
Quentin Dufour	ac42e95f1a	update smtp server security conf	2023-12-25 14:00:36 +01:00
Baptiste Jonglez	55c9b89cb2	Revert "Revert "garage prod: use dynamically determined ipv6 addresses"" ... Quentin's fix seems to work fine. This reverts commit e5f3b6ef0a.	2023-12-19 09:27:40 +01:00
Baptiste Jonglez	e5f3b6ef0a	Revert "garage prod: use dynamically determined ipv6 addresses" ... This partially reverts commit 47e982b29d. This leads to invalid config: Dec 19 08:23:09 courgette 25f10ae4271c[781]: 2023-12-19T07:23:09.087813Z INFO garage::server: Loading configuration... Dec 19 08:23:09 courgette 25f10ae4271c[781]: Error: TOML decode error: TOML parse error at line 16, column 17 Dec 19 08:23:09 courgette 25f10ae4271c[781]: | Dec 19 08:23:09 courgette 25f10ae4271c[781]: 16 | rpc_bind_addr = "[<no value>]:3901" Dec 19 08:23:09 courgette 25f10ae4271c[781]: | ^^^^^^^^^^^^^^^^^^^ Dec 19 08:23:09 courgette 25f10ae4271c[781]: invalid socket address syntax Dec 19 08:23:09 courgette 25f10ae4271c[781]:	2023-12-19 08:38:12 +01:00
Quentin Dufour	516ab9ad91	stop reloading config file	2023-12-19 08:36:26 +01:00
Quentin Dufour	16168b916e	tricot upgrade	2023-12-14 10:59:40 +01:00
Alex Auvolat	47e982b29d	garage prod: use dynamically determined ipv6 addresses	2023-12-13 17:33:56 +01:00
Quentin Dufour	d694ddbe2c	Move garage's redirections to a dedicated service ... Reason: - do not slow down the garage web endpoint - required now that we map domain name to a garage bucket	2023-12-04 12:32:46 +01:00
Quentin Dufour	0c3db22de6	fix bagage	2023-12-04 12:19:00 +01:00
Quentin Dufour	af242486a3	add degrowth	2023-12-04 12:16:41 +01:00
Quentin Dufour	23690238c9	add a sftp domain name	2023-12-02 11:52:35 +01:00
Quentin Dufour	7da4510ee8	tricot update	2023-12-01 16:02:09 +01:00
Quentin Dufour	52044402ac	add some redirections	2023-11-29 17:08:13 +01:00
Quentin Dufour	d14fc2516c	Upgrade tricot	2023-11-29 16:58:37 +01:00
Alex Auvolat	c1d307d7a9	matrix: add memory to async media upload after oom crash	2023-11-27 13:56:47 +01:00
Alex Auvolat	9c6f98f4b8	fix cryptpad backup	2023-11-27 13:43:42 +01:00
Alex Auvolat	a2654529c7	prod: update synapse and element	2023-11-15 16:39:11 +01:00
Alex Auvolat	b1e0397265	revert prometheus scraping on openwrt	2023-11-08 16:21:20 +01:00
Alex Auvolat	a46aa03fe2	prod: add monitoring of openwrt router	2023-11-08 16:14:33 +01:00
Quentin Dufour	a6b84527b0	fix typo	2023-10-30 12:15:30 +01:00
Quentin Dufour	3c22659d90	ajout de domaines d'Esther	2023-10-30 12:00:21 +01:00
Quentin Dufour	79f380c72d	directory	2023-10-30 11:55:25 +01:00
Baptiste Jonglez	a214496d8c	[staging] Update known_hosts	2023-10-22 21:28:10 +02:00
Baptiste Jonglez	b1630cfa8e	[staging] Update garage to v0.9.0	2023-10-22 21:27:55 +02:00
Baptiste Jonglez	d396f35235	Update IP for piranha.corrin	2023-10-22 20:17:33 +02:00
Alex Auvolat	78ed3864d7	update bagage version with cors allow all	2023-10-16 16:16:18 +02:00
Alex Auvolat	ea8b2e8c82	màj garage prod	2023-10-16 14:54:16 +02:00
Alex Auvolat	fbffe1f0dc	staging: update guichet with website management	2023-10-05 18:51:13 +02:00
Alex Auvolat	c790f6f3e1	staging: reaffect raft leaders	2023-10-05 13:48:29 +02:00
Alex Auvolat	e94cb54661	prod: add matrix syncv3 daemon	2023-10-04 11:51:04 +02:00
Alex Auvolat	525f04515e	staging: deploy garage v0.9.0-rc1	2023-10-04 10:44:17 +02:00
Alex Auvolat	2e3725e8a2	staging: disable jaeger; update diplonat	2023-10-03 22:56:41 +02:00
Quentin Dufour	56e19ff2e5	remove default HTTP CSP, put your CSP in your HTML	2023-10-03 16:00:11 +02:00
Quentin Dufour	9e113416ac	fix update guichet	2023-10-03 15:58:20 +02:00
Quentin Dufour	7c7adc76b4	Set sogo as debug	2023-10-03 08:33:29 +02:00
Alex Auvolat	c4f3dece14	update tricot	2023-10-02 16:59:01 +02:00
Alex Auvolat	4e20eb43b3	cryptpad: ajout alex admin	2023-09-22 15:42:02 +02:00
Alex Auvolat	f139238c17	staging: update garage to 0.8.4	2023-09-11 23:28:29 +02:00
ADRN	ba3e24c41e	added Adrien in admins for CryptPad	2023-09-08 11:31:49 +02:00
Alex Auvolat	9b8882c250	add missing d53 tags for sogo and alps	2023-09-04 19:15:09 +02:00
Alex Auvolat	a490f082bc	prod: remove all apps from orion, add some missing in scorpio	2023-09-04 19:05:18 +02:00
Quentin Dufour	e42ed08788	fix Jitsi public IPv4 config	2023-08-31 18:08:46 +02:00
Quentin Dufour	1340fb6962	upgraded backups	2023-08-29 11:51:18 +02:00
Quentin Dufour	3d925a4505	move emails to lille	2023-08-29 11:43:45 +02:00
Quentin Dufour	b688a1bbb9	increase sogo RAM	2023-08-28 09:50:46 +02:00
Alex Auvolat	7dd8153653	màj tricot	2023-08-27 18:07:30 +02:00
Alex Auvolat	ecb4cabcf0	prod garage: add health check using admin api's '/health'	2023-08-27 13:56:51 +02:00
Alex Auvolat	8e304e8f5f	staging im-nix: add sqlite	2023-08-27 13:36:36 +02:00
Quentin Dufour	be8484b494	[tricot] warmup memory store on boot	2023-08-09 10:40:08 +02:00
Quentin Dufour	ca3283d6a7	upgrade matrix	2023-08-07 12:13:56 +02:00
Quentin Dufour	0c9ea6bc56	disable network fingerprinting in nomad	2023-08-07 11:17:40 +02:00
Maximilien Richer	e7a3582c4e	Update telemetry stack to grafana 10.0.3 & co	2023-08-06 13:45:46 +02:00
Quentin Dufour	aaa80ae678	final csp	2023-07-23 14:36:04 +02:00
Quentin Dufour	233556e9ef	Simpler IPv6 config for Garage	2023-07-23 14:06:36 +02:00
Quentin Dufour	132ad670a1	lines	2023-07-23 13:59:35 +02:00
Quentin Dufour	1048456fbf	switch postfix to ipv4 as we have no reverse dns on ipv6	2023-07-08 14:48:34 +02:00
Quentin Dufour	919004ae79	albatros 0.9-rc3	2023-07-08 14:38:00 +02:00
Quentin Dufour	03658e8f7b	ajout pointecouteau	2023-06-28 15:35:37 +02:00
ADRN	8ebd35730c	added estherbouquet.com to DKIM signing table	2023-06-24 18:02:29 +02:00
Alex Auvolat	effe155248	Add armael to staging and ssh key for max	2023-06-24 17:14:34 +02:00
Alex Auvolat	6c12a71ecb	Deploy nixos 23.05 on staging and other staging fixes	2023-06-13 11:56:10 +02:00
Alex Auvolat	1d19bae7a1	remove postgres replica on concombre	2023-06-12 19:58:03 +02:00
Alex Auvolat	3fcda94aa0	undo remove postgres from diplotaxis	2023-06-12 16:19:57 +02:00
Alex Auvolat	3e40bfcca9	add stolon replica on abricot instead of diplotaxis	2023-06-12 13:41:42 +02:00
Alex Auvolat	e06d6b14a3	add ananas, set it raft server instead of dahlia	2023-06-12 13:41:34 +02:00
Alex Auvolat	1a11ff4202	staging: updated garage with new consul registration	2023-06-02 16:37:13 +02:00
Alex Auvolat	14b59ba4b0	màj config gitea	2023-06-02 15:40:43 +02:00
Alex Auvolat	c31de0e94f	tricot passthrough of external services at neptune	2023-05-24 10:18:02 +02:00
Alex Auvolat	ff13616887	staging: dev garage with fixed k2v double-urlencoding	2023-05-19 12:53:10 +02:00
Alex Auvolat	efd5ec3323	Remove plume backup job (not usefull anymore)	2023-05-16 15:39:36 +02:00
Alex	8a75be4d43	Merge pull request 'prod: Plume with S3 storage backend' (#13) from plume-s3 into main ... Reviewed-on: Deuxfleurs/nixcfg#13	2023-05-16 13:38:07 +00:00
Alex Auvolat	4ca45cf1d4	updated d53 on prod	2023-05-16 15:35:06 +02:00
Alex	aee3a09471	Merge pull request 'Simplify network configuration' (#11) from simplify-network-config into main ... Reviewed-on: Deuxfleurs/nixcfg#11	2023-05-16 13:19:33 +00:00
Alex Auvolat	76b7f86d22	use RA on orion as well	2023-05-16 14:14:27 +02:00
Alex Auvolat	560486bc50	prod plume with s3 backend	2023-05-15 17:30:41 +02:00
Alex Auvolat	2488ad0ac2	staging plume: cleanup and update	2023-05-15 13:36:38 +02:00
Alex Auvolat	9cef48a6c2	Merge branch 'main' into simplify-network-config	2023-05-12 18:45:58 +02:00
Alex Auvolat	5c7a8c72d8	first plume on staging with S3 backend	2023-05-12 18:45:20 +02:00
Alex Auvolat	258d27c566	deploy tricot at bespin, register gitea (not accessed yet)	2023-05-09 15:12:03 +02:00
Alex Auvolat	04464f632f	Export all Grafana dashboards	2023-05-09 12:29:37 +02:00
Alex Auvolat	24cf7ddd91	Merge branch 'main' into simplify-network-config	2023-05-09 12:20:35 +02:00
Maximilien Richer	24192cc61a	Update telemetry stack apps	2023-05-07 23:46:48 +02:00
Alex Auvolat	b73c39c7c1	multi-zone matrix	2023-05-04 17:00:31 +02:00
Alex Auvolat	e375304c38	orient SoGo and Synapse to closest psql-proxy; psql backup anywhere	2023-05-04 16:48:22 +02:00
Alex Auvolat	f3cd2e98b4	multisite postgres, orient plume to correct db	2023-05-04 16:39:25 +02:00
Alex Auvolat	6c07a42978	different wgautomesh gossip ports for prod and staging	2023-05-04 13:39:33 +02:00
Baptiste Jonglez	e23b523467	Add infinite restart policy for postgresql	2023-05-03 08:53:59 +02:00
Alex Auvolat	607add3161	make specifying an ipv6 fully optionnal	2023-04-21 14:36:10 +02:00
Alex Auvolat	c4598bd84f	Diplonat on bespin, ipv6-only	2023-04-21 12:03:35 +02:00
Alex Auvolat	0b3332fd32	break out core services into separate files	2023-04-21 11:55:24 +02:00
Alex Auvolat	a9e9149739	Fix unbound; remove Nixos firewall (use only diplonat)	2023-04-21 11:29:15 +02:00
Alex Auvolat	529480b133	Merge branch 'main' into simplify-network-config	2023-04-21 10:31:05 +02:00
Alex Auvolat	b4e82e37e4	diplonat with fixed iptables thing	2023-04-20 15:13:13 +02:00
Alex Auvolat	af82308e84	Garage backup to SFTP target hosted by Max	2023-04-20 12:10:07 +02:00
Alex Auvolat	e5f9f3c849	increase diplonat ram	2023-04-19 21:05:47 +02:00
Alex Auvolat	0372df95b5	staging: fix consul server addresses	2023-04-19 20:36:24 +02:00
Alex Auvolat	9737c661a4	Merge branch 'main' into simplify-network-config	2023-04-19 20:15:03 +02:00
Quentin Dufour	57aa2ce1d2	interface gestion site web guichet	2023-04-19 15:20:49 +02:00
Quentin Dufour	a614f495ad	allow memory overprovisionning	2023-04-08 10:43:42 +02:00
Alex Auvolat	07f50f297a	D53 with addresses from DiploNAT autodiscovery; diplonat fw opening for tricot	2023-04-05 16:30:28 +02:00
Quentin Dufour	0e4c641db7	redeploy bagage	2023-04-05 15:50:53 +02:00
Alex Auvolat	c08bc17cc0	Adapt prod config to new parameters	2023-04-05 14:09:04 +02:00
Alex Auvolat	16422d2809	introduce back static ipv4 prefix lenght but with default value	2023-04-05 14:04:11 +02:00
Alex Auvolat	dec4ea479d	Allow for IPv6 with RA disabled by manually providing gateway	2023-04-05 13:27:18 +02:00
Alex Auvolat	cb8d7e92d2	staging: ipv6-only diplonat for automatic address discovery	2023-04-05 10:25:22 +02:00
Alex Auvolat	c9f122bcd3	diplonat with ipv6 firewall support; email ipv6 addresses in dns	2023-04-04 14:13:57 +02:00
Adrien	d83d230aee	added luxeylab to dkim signingtable	2023-03-30 18:09:12 +02:00
Quentin Dufour	2de291e9b7	upgrade bottin + remove bespin	2023-03-26 10:14:04 +02:00
Alex Auvolat	ecfab3c628	Merge branch 'main' into simplify-network-config	2023-03-24 15:35:27 +01:00
Alex Auvolat	96566ae523	refactor configuration syntax	2023-03-24 15:26:39 +01:00
Alex Auvolat	e2aea648cf	greatly simplify ipv4 and ipv6 configuration	2023-03-24 14:42:36 +01:00
Baptiste Jonglez	8ae9ec6514	Update piranha IP again	2023-03-24 13:01:24 +01:00
Alex Auvolat	a0db30ca26	Sanitize DNS configuration ... - get rid of outside nameserver, unbound does the recursive resolving itself (and it checks DNSSEC) - remove CAP_NET_BIND_SERVICE for Consul as it is no longer binding on port 53 (was already obsolete) - make unbound config independant of LAN IPv4 address	2023-03-24 12:58:44 +01:00
Alex Auvolat	53b9cfd838	wgautomesh actually on prod	2023-03-24 12:01:38 +01:00
Alex Auvolat	5cd69a9ba1	Merge branch 'main' into wgautomesh	2023-03-24 11:29:14 +01:00
Alex Auvolat	8e29ee3b0b	backup memory	2023-03-24 11:29:07 +01:00
Quentin Dufour	4a56b3360f	upgrade matrix	2023-03-22 22:23:37 +01:00
Alex Auvolat	b7c4f94ebd	Add Garage backup script running on Abricot	2023-03-20 16:47:22 +01:00
Quentin Dufour	eec09724fe	socat proxy	2023-03-20 10:45:40 +01:00
Quentin Dufour	bebbf5bd8b	wip rsa-ecc proxy	2023-03-20 09:45:05 +01:00
Alex Auvolat	90efd9155b	wgautomesh variable log level (debug for staging)	2023-03-17 18:21:50 +01:00
Alex Auvolat	6664affaa0	wgautomesh gossip secret file	2023-03-17 17:17:56 +01:00
Alex Auvolat	baae97b192	sample deployment of wgautomesh on staging (dont deploy prod with this commit)	2023-03-17 17:17:56 +01:00
Alex Auvolat	870511931a	abricot fixed ipv6	2023-03-17 16:22:24 +01:00
Alex Auvolat	a6c791d342	remove email-in	2023-03-17 13:44:48 +01:00
Adrien	28e7503b27	virguuuule	2023-03-17 10:04:21 +01:00
adrien	fd4f601ee0	Merge pull request 'configuration for imap.deuxfleurs.fr & smtp.deuxfleurs.fr as part of email service for d53 + convert tabs into spaces (couldn't help myself)' (#8) from feat/d53-email into main ... Reviewed-on: Deuxfleurs/nixcfg#8	2023-03-17 08:53:27 +00:00
Quentin Dufour	551988c808	do not allow stale information reading	2023-03-16 17:01:17 +01:00
Quentin Dufour	6fe8ef6eed	update albatros	2023-03-16 16:53:16 +01:00
Quentin Dufour	8b67c48c52	Fix consul port	2023-03-16 16:19:35 +01:00
Quentin Dufour	7bf1467cb1	add albatros	2023-03-16 15:52:13 +01:00
Adrien	fe2eda1702	configuration for imap.deuxfleurs.fr & smtp.deuxfleurs.fr as part of email service for d53 + convert tabs into spaces (couldn't help myself)	2023-03-16 15:48:52 +01:00
Alex Auvolat	81d3c0e03a	d53 for email-in.deuxfleurs.fr (A only, AAAA missing firewall)	2023-03-16 14:42:47 +01:00
Alex Auvolat	1c623c796a	update garage and let it use more ram	2023-03-16 14:18:59 +01:00
Adrien	e4065dade8	added Consul Registration of personal services (for Adrien's personal stuff)	2023-03-15 18:55:09 +01:00
Adrien	f7be968531	TODOs in deuxfleurs.nix because the old world is maybe mixing with the new	2023-03-15 18:19:01 +01:00
Alex Auvolat	2a0eff07c0	fix cleanup of deploypass	2023-03-15 17:49:31 +01:00
Adrien	f6c4576b6c	added forgotten new files for scorpio/abricot	2023-03-15 17:30:35 +01:00
Adrien	031d029e10	added scorpio site and abricot node	2023-03-15 17:10:38 +01:00
Quentin Dufour	c681f63222	alloc more mem	2023-03-14 18:37:28 +01:00
Quentin Dufour	d2b8b0c517	wip homemade ci?	2023-03-14 17:32:49 +01:00