sercanto/infra
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions
1853 commits 1 branch 0 tags 3.4 MiB
Commit graph

1853 commits

Author SHA1 Message Date
zowoq
e18b71ab99 use sotp for TOTP secrets 2023-10-17 01:39:48 +00:00
zowoq
f2ea7aa875 terraform/hydra-projects: keep one evaluation only for emacs_overlay 
755024956d
 2023-10-16 03:22:21 +00:00
zowoq
be9777f41f flake.lock: Update 
Flake lock file updates:

• Updated input 'tf-pkgs':
    'github:NixOS/nixpkgs/5cc930fbdf3e069df2efc5de6dd728a9f13e9ba9' (2023-08-13)
  → 'github:NixOS/nixpkgs/982b24c40e743793c966b47b3bb3699881489ae0' (2023-10-15)

Terraform updates:

terraform: 1.5.5 → 1.6.1
terraform-provider-cloudflare: 4.12.0 → 4.16.0
terraform-provider-gandi: 2.2.3 → 2.2.4
terraform-provider-sops: 0.7.2 → 1.0.0
terraform-provider-tfe: 0.48.0 → 0.49.2
 2023-10-16 03:17:46 +00:00
zowoq
4f2e1de15f terraform/shell: remove meta from terraform 2023-10-16 03:17:46 +00:00
github-actions[bot]
bda64d11e2 flake.lock: Update 
Flake lock file updates:

• Updated input 'disko':
    'github:nix-community/disko/6ad5c9c17cbd5514ce0cc2692dd82dd6d8e5d879' (2023-10-13)
  → 'github:nix-community/disko/325e1f7f2e0eea44c27e5e8a3946c2461ec095f2' (2023-10-16)
• Updated input 'nixpkgs':
    'github:NixOS/nixpkgs/4f2b18d41893ffbf9487a86a874791a681601260' (2023-10-13)
  → 'github:NixOS/nixpkgs/982b24c40e743793c966b47b3bb3699881489ae0' (2023-10-15)
• Updated input 'sops-nix':
    'github:Mic92/sops-nix/f995ea159252a53b25fa99824f2891e3b479d511' (2023-10-11)
  → 'github:Mic92/sops-nix/51186b8012068c417dac7c31fb12861726577898' (2023-10-15)
• Updated input 'srvos':
    'github:numtide/srvos/d2802516f67da12a54faa81d587a2a5bae64eda0' (2023-10-12)
  → 'github:numtide/srvos/13fb9123d8b175579fd660a392740e702a363dfa' (2023-10-16)
• Updated input 'treefmt-nix':
    'github:numtide/treefmt-nix/0b2ffeb3ae1a7449a48a952f3e731cfa41eaf780' (2023-10-11)
  → 'github:numtide/treefmt-nix/aae39f64f5ecbe89792d05eacea5cb241891292a' (2023-10-15)
 2023-10-16 03:04:11 +00:00
Ryan Hendrickson
2c61389d6c build02/nixpkgs-update: make socat more patient 
This may address the intermittent ConnectionResetErrors we're seeing
from the supervisor. By default, socat will terminate its connection to
one side half a second after the other side closes; if the supervisor is
taking more than half a second to respond, this results in dropped jobs.
Bumping this timeout to five seconds should help.
 2023-10-15 06:00:26 +00:00
github-actions[bot]
48471a4582 flake.lock: Update 
Flake lock file updates:

• Updated input 'disko':
    'github:nix-community/disko/32ce057c183506cecb0b84950e4eaf39f37e8c75' (2023-10-09)
  → 'github:nix-community/disko/6ad5c9c17cbd5514ce0cc2692dd82dd6d8e5d879' (2023-10-13)
• Updated input 'nixpkgs':
    'github:NixOS/nixpkgs/0cbdedb436366db9863df099a934306028ed21ca' (2023-10-08)
  → 'github:NixOS/nixpkgs/4f2b18d41893ffbf9487a86a874791a681601260' (2023-10-13)
• Updated input 'nixpkgs-update':
    'github:ryantm/nixpkgs-update/b8a11a7b749903e1d61d4998ccb4ea2c8e1ffd15' (2023-10-08)
  → 'github:ryantm/nixpkgs-update/a3fd7a8a741015be0613c80e95e78a4853569f8e' (2023-10-10)
• Updated input 'sops-nix':
    'github:Mic92/sops-nix/d7380c38d407eaf06d111832f4368ba3486b800e' (2023-10-08)
  → 'github:Mic92/sops-nix/f995ea159252a53b25fa99824f2891e3b479d511' (2023-10-11)
• Updated input 'srvos':
    'github:numtide/srvos/1b1a946a61f9af0b0be8483d5e1bc6706a43ce5d' (2023-10-09)
  → 'github:numtide/srvos/d2802516f67da12a54faa81d587a2a5bae64eda0' (2023-10-12)
• Updated input 'treefmt-nix':
    'github:numtide/treefmt-nix/720bd006d855b08e60664e4683ccddb7a9ff614a' (2023-09-27)
  → 'github:numtide/treefmt-nix/0b2ffeb3ae1a7449a48a952f3e731cfa41eaf780' (2023-10-11)
 2023-10-14 08:57:10 +00:00
Jörg Thalheim
7f7c046317 disable buildbot nixos test for now 
It doesn't evaluate unless --impure is passed.
To reproduce run nix flake show
 2023-10-14 08:52:38 +00:00
github-merge-queue
20edd80bdd devdoc: update repo list 2023-10-13 2023-10-13 03:01:07 +00:00
Ryan Hendrickson
dafde52722 build02/nixpkgs-update: quiet the git command in updatescript fetcher 2023-10-09 11:41:49 +00:00
github-actions[bot]
ec25ea5d9a flake.lock: Update 
Flake lock file updates:

• Updated input 'disko':
    'github:nix-community/disko/19b62324663b6b9859caf7f335d232cf4f1f6a32' (2023-09-28)
  → 'github:nix-community/disko/32ce057c183506cecb0b84950e4eaf39f37e8c75' (2023-10-09)
• Updated input 'flake-parts':
    'github:hercules-ci/flake-parts/7f53fdb7bdc5bb237da7fefef12d099e4fd611ca' (2023-09-01)
  → 'github:hercules-ci/flake-parts/c9afaba3dfa4085dbd2ccb38dfade5141e33d9d4' (2023-10-03)
• Updated input 'nix-darwin':
    'github:LnL7/nix-darwin/792c2e01347cb1b2e7ec84a1ef73453ca86537d8' (2023-09-30)
  → 'github:LnL7/nix-darwin/8b6ea26d5d2e8359d06278364f41fbc4b903b28a' (2023-10-03)
• Updated input 'nixpkgs':
    'github:NixOS/nixpkgs/5d861cc17287f5a23483ead730f82d422cc1a98c' (2023-10-01)
  → 'github:NixOS/nixpkgs/0cbdedb436366db9863df099a934306028ed21ca' (2023-10-08)
• Updated input 'nixpkgs-update':
    'github:ryantm/nixpkgs-update/a3f51a09caab8013d07965470d323648ab62b8bb' (2023-10-08)
  → 'github:ryantm/nixpkgs-update/b8a11a7b749903e1d61d4998ccb4ea2c8e1ffd15' (2023-10-08)
• Updated input 'sops-nix':
    'github:Mic92/sops-nix/2f375ed8702b0d8ee2430885059d5e7975e38f78' (2023-09-21)
  → 'github:Mic92/sops-nix/d7380c38d407eaf06d111832f4368ba3486b800e' (2023-10-08)
• Updated input 'srvos':
    'github:numtide/srvos/25cf328a2d83926dde264b6195d82bc6dcfb4b0c' (2023-09-28)
  → 'github:numtide/srvos/1b1a946a61f9af0b0be8483d5e1bc6706a43ce5d' (2023-10-09)
 2023-10-09 11:41:08 +00:00
Ryan Mulligan
bcc0fe757c ignore direnv globally 
Why
===
* When I entered the directory, a .direnv directory was created and it
was not ignored

What changed
===
* Ignore .direnv globally
* Remove now unneeded terraform directory ignore for direnv
 2023-10-09 11:40:03 +00:00
Ryan Mulligan
0c1c682a19 update nixpkgs-update 2023-10-08 19:32:31 +00:00
Ryan Mulligan
3c49f178df build02: nixpkgs-update: before running the updatescript fetcher, pull latest nixpkgs 
Why
===
* The updatescript was not getting the latest information

What changed
===
* Before finding updatescripts to run, update nixpkgs
 2023-10-08 19:32:31 +00:00
Ryan Hendrickson
20cd2e4226 build02/nixpkgs-update: replace fifo with supervisor service 2023-10-07 17:42:21 +00:00
zowoq
8fd1e0819f modules/darwin/common/upgrade-diff: remove HOME workaround 
ab817e5d0e
 2023-10-01 22:10:58 +00:00
github-actions[bot]
96b4caf86e flake.lock: Update 
Flake lock file updates:

• Updated input 'nix-darwin':
    'github:LnL7/nix-darwin/e236a1e598a9a59265897948ac9874c364b9555f' (2023-09-26)
  → 'github:LnL7/nix-darwin/792c2e01347cb1b2e7ec84a1ef73453ca86537d8' (2023-09-30)
• Updated input 'nixpkgs':
    'github:NixOS/nixpkgs/cdd726e1deb44c031ee8975528d6b283ed8cf021' (2023-09-29)
  → 'github:NixOS/nixpkgs/5d861cc17287f5a23483ead730f82d422cc1a98c' (2023-10-01)
 2023-10-01 22:10:08 +00:00
zowoq
60465ac54c build02/nixpkgs-update: on-abort -> on-failure 
Co-authored-by: Ryan Hendrickson <ryan.hendrickson@alum.mit.edu>
 2023-10-01 21:45:31 +00:00
zowoq
0ecf0f61be .github/workflows/flake-updates.yml: disable automerge 2023-09-29 23:31:07 +00:00
github-actions[bot]
7469c908d5 flake.lock: Update 
Flake lock file updates:

• Updated input 'disko':
    'github:nix-community/disko/021f2a6fbec292d37caaf37517f7d3cd5e584551' (2023-09-25)
  → 'github:nix-community/disko/19b62324663b6b9859caf7f335d232cf4f1f6a32' (2023-09-28)
• Updated input 'nix-darwin':
    'github:LnL7/nix-darwin/c286b23c7fd7f0622bc4af898c91f58b8d304ff1' (2023-09-22)
  → 'github:LnL7/nix-darwin/e236a1e598a9a59265897948ac9874c364b9555f' (2023-09-26)
• Updated input 'nixpkgs':
    'github:NixOS/nixpkgs/397b1733f45dc601e82ab9e13d5d427167fc284e' (2023-09-24)
  → 'github:NixOS/nixpkgs/cdd726e1deb44c031ee8975528d6b283ed8cf021' (2023-09-29)
• Updated input 'srvos':
    'github:numtide/srvos/30eaa9971cd9775d4fe41d1d4f249e5abe8214cb' (2023-09-25)
  → 'github:numtide/srvos/25cf328a2d83926dde264b6195d82bc6dcfb4b0c' (2023-09-28)
• Updated input 'treefmt-nix':
    'github:numtide/treefmt-nix/e951529be2e7c669487de78f5aef8597bbae5fca' (2023-09-21)
  → 'github:numtide/treefmt-nix/720bd006d855b08e60664e4683ccddb7a9ff614a' (2023-09-27)
 2023-09-29 23:21:09 +00:00
zowoq
04b89aba0c modules/darwin/common/telegraf: add internal 2023-09-27 09:12:38 +00:00
zowoq
912a7b27c1 modules/nixos/monitoring: put alertmanager behind basic_auth 2023-09-26 21:38:24 +00:00
zowoq
0b0e0feb1b modules/darwin/common/upgrade-diff: switch to nvd 2023-09-26 21:32:35 +00:00
zowoq
d446870b79 modules/nixos: refactor remote workers 2023-09-26 21:32:17 +00:00
zowoq
4293c51090 modules/nixos/monitoring: add grafana 2023-09-26 21:31:58 +00:00
zowoq
f97526c4ee modules/nixos/monitoring/alert-rules: update filesystem_full rules 2023-09-26 21:19:34 +00:00
github-actions[bot]
d51d748ae8 flake.lock: Update 
Flake lock file updates:

• Updated input 'disko':
    'github:nix-community/disko/f43f106e91fe4f6591cf80cc5c8179e841c6e922' (2023-09-20)
  → 'github:nix-community/disko/021f2a6fbec292d37caaf37517f7d3cd5e584551' (2023-09-25)
• Updated input 'nix-darwin':
    'github:LnL7/nix-darwin/afeddc412b3a3b0e7c9ef7ea5fbdf2186781d102' (2023-09-19)
  → 'github:LnL7/nix-darwin/c286b23c7fd7f0622bc4af898c91f58b8d304ff1' (2023-09-22)
• Updated input 'nixpkgs':
    'github:NixOS/nixpkgs/b1adee2f9396e4101e70fe31d04010d3489d9be5' (2023-09-20)
  → 'github:NixOS/nixpkgs/397b1733f45dc601e82ab9e13d5d427167fc284e' (2023-09-24)
• Updated input 'sops-nix':
    'github:Mic92/sops-nix/4356a5a0c12c9dc1b6bdde0631c7600d9377ed8b' (2023-09-19)
  → 'github:Mic92/sops-nix/2f375ed8702b0d8ee2430885059d5e7975e38f78' (2023-09-21)
• Updated input 'srvos':
    'github:numtide/srvos/72ece75d281bbf9f492caedb2c504593a5a0d3f1' (2023-09-21)
  → 'github:numtide/srvos/30eaa9971cd9775d4fe41d1d4f249e5abe8214cb' (2023-09-25)
• Updated input 'treefmt-nix':
    'github:numtide/treefmt-nix/7a49c388d7a6b63bb551b1ddedfa4efab8f400d8' (2023-09-12)
  → 'github:numtide/treefmt-nix/e951529be2e7c669487de78f5aef8597bbae5fca' (2023-09-21)
 2023-09-25 03:21:00 +00:00
zowoq
87f470d5ea modules/darwin/common: set nix.gc.user 2023-09-25 01:57:15 +00:00
zowoq
2eca43d7cd tasks.py: use nixos-anywhere from nixpkgs 2023-09-25 00:41:12 +00:00
zowoq
17051442e5 secrets.yaml: update infra-bot email 2023-09-25 00:40:42 +00:00
zowoq
5ddef0745c modules/nixos/hercules-ci: re-add empty secrets file 2023-09-21 22:59:14 +00:00
github-actions[bot]
ef14d65673 flake.lock: Update 
Flake lock file updates:

• Updated input 'disko':
    'github:nix-community/disko/7548ad94698adb90ee17ff62581f2b2457faaedd' (2023-09-18)
  → 'github:nix-community/disko/f43f106e91fe4f6591cf80cc5c8179e841c6e922' (2023-09-20)
• Updated input 'nix-darwin':
    'github:LnL7/nix-darwin/80bb201f4925cdda5a7a3c7b1900fb26bb2af2e8' (2023-09-15)
  → 'github:LnL7/nix-darwin/afeddc412b3a3b0e7c9ef7ea5fbdf2186781d102' (2023-09-19)
• Updated input 'nixpkgs':
    'github:NixOS/nixpkgs/948e8754755a9f27587d5bd109af2cfad313add8' (2023-09-17)
  → 'github:NixOS/nixpkgs/b1adee2f9396e4101e70fe31d04010d3489d9be5' (2023-09-20)
• Updated input 'nixpkgs-update':
    'github:ryantm/nixpkgs-update/8fedf8f6f29280578e335bf4483c9f88d4bcdbaa' (2023-09-14)
  → 'github:ryantm/nixpkgs-update/2fda8bcb73776c3e11c0155fa15e138a71e1f189' (2023-09-19)
• Updated input 'sops-nix':
    'github:Mic92/sops-nix/ea208e55f8742fdcc0986b256bdfa8986f5e4415' (2023-09-12)
  → 'github:Mic92/sops-nix/4356a5a0c12c9dc1b6bdde0631c7600d9377ed8b' (2023-09-19)
• Updated input 'srvos':
    'github:numtide/srvos/879201cbec8ea11e6d654b7ec91f35f061d07b47' (2023-09-18)
  → 'github:numtide/srvos/72ece75d281bbf9f492caedb2c504593a5a0d3f1' (2023-09-21)
 2023-09-21 03:22:10 +00:00
github-merge-queue
877ca15bad devdoc: update repo list 2023-09-21 2023-09-21 03:00:17 +00:00
zowoq
6b687aef38 .github/workflows/pages.yml: various 
- this package should always be cached, add max-jobs so job errors if it isn't

- move accept-flake-config to extra_nix_config
 2023-09-20 08:12:14 +00:00
zowoq
542f099114 dev/treefmt: update projectRootFile 2023-09-20 07:44:40 +00:00
github-merge-queue
583e86824a devdoc: update repo list 2023-09-19 2023-09-19 03:02:34 +00:00
github-actions[bot]
2dfb65d68e flake.lock: Update 
Flake lock file updates:

• Updated input 'disko':
    'github:nix-community/disko/0faae8adf6d790df2c3d00437ccad7cd5c531c70' (2023-09-15)
  → 'github:nix-community/disko/7548ad94698adb90ee17ff62581f2b2457faaedd' (2023-09-18)
• Updated input 'nixpkgs':
    'github:NixOS/nixpkgs/3b1f3712a415f6bf8352f3bb457973daa8bce91d' (2023-09-15)
  → 'github:NixOS/nixpkgs/948e8754755a9f27587d5bd109af2cfad313add8' (2023-09-17)
• Updated input 'srvos':
    'github:numtide/srvos/487d72e894b990761024e349b4a71844e71c5c6a' (2023-09-15)
  → 'github:numtide/srvos/879201cbec8ea11e6d654b7ec91f35f061d07b47' (2023-09-18)
 2023-09-18 03:09:02 +00:00
zowoq
9f3c7b7c80 tasks.py: mypy fixes 2023-09-16 23:14:22 +00:00
zowoq
20c2373f80 dev/treefmt: add mypy for tasks.py 2023-09-16 23:14:22 +00:00
zowoq
b74ef1be64 modules/darwin/common: set timeZone 2023-09-16 03:15:03 +00:00
github-actions[bot]
cb3197e1ad flake.lock: Update 
Flake lock file updates:

• Updated input 'disko':
    'github:nix-community/disko/6133a16d685cad59fe6573090c115a03a30fdd31' (2023-09-14)
  → 'github:nix-community/disko/0faae8adf6d790df2c3d00437ccad7cd5c531c70' (2023-09-15)
• Updated input 'nix-darwin':
    'github:LnL7/nix-darwin/4496ab26628c5f43d2a5c577a06683c753e32fe2' (2023-09-12)
  → 'github:LnL7/nix-darwin/80bb201f4925cdda5a7a3c7b1900fb26bb2af2e8' (2023-09-15)
• Updated input 'nixpkgs':
    'github:NixOS/nixpkgs/1697b7d480449b01111e352021f46e5879e47643' (2023-09-13)
  → 'github:NixOS/nixpkgs/3b1f3712a415f6bf8352f3bb457973daa8bce91d' (2023-09-15)
• Updated input 'srvos':
    'github:numtide/srvos/002980949f51b673beb1015f4487d8f2c574b0b0' (2023-09-14)
  → 'github:numtide/srvos/487d72e894b990761024e349b4a71844e71c5c6a' (2023-09-15)
 2023-09-16 03:09:14 +00:00
zowoq
b3a1945c10 flake: remove hercules-ci-effects 
Flake lock file updates:

• Removed input 'hercules-ci-effects'
• Removed input 'hercules-ci-effects/flake-parts'
• Removed input 'hercules-ci-effects/hercules-ci-agent'
• Removed input 'hercules-ci-effects/nixpkgs'
 2023-09-16 03:06:02 +00:00
zowoq
0aadef59e2 flake: add buildbot nixosTest to checks 2023-09-16 03:03:01 +00:00
zowoq
c896c3e3b5 remove terraform effect and hercules secrets 
also move cachix deploy token to repo root secrets
 2023-09-16 03:00:18 +00:00
zowoq
9b325d8c38 dev/treefmt: add actionlint 2023-09-15 12:53:04 +00:00
zowoq
ba6d94bda2 switch back to actions for flake update 2023-09-15 10:18:31 +00:00
zowoq
43e9cabeb9 .github/workflows/pages.yml: add accept-flake-config 2023-09-15 10:14:03 +00:00
zowoq
1eef8cf9b1 docs/sponsors.md: remove break 2023-09-15 09:59:34 +00:00
zowoq
efbd61958c switch to actions for github pages 2023-09-15 09:59:34 +00:00
zowoq
39b6b1956c modules/shared/remote-builder: use restrict for ssh 2023-09-15 06:50:46 +00:00