sercanto/infra
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions
1853 commits 1 branch 0 tags 3.4 MiB
Commit graph

1853 commits

Author SHA1 Message Date
zowoq
41276dcf9f modules/darwin/telegraf: add swap 2023-07-21 23:52:38 +00:00
zowoq
03fd3afdc4 .sops.yaml: update path_regex for modules 2023-07-21 23:52:04 +00:00
zowoq
cc70082be1 flake: cd self instead of cp cleanSource for pages 2023-07-21 08:08:59 +00:00
zowoq
500819862a Revert "flake: pin nixpkgs" 
This reverts commit 87092ada06.
 2023-07-20 11:37:54 +00:00
zowoq
785b65271c disable darwin 2023-07-20 11:37:54 +00:00
Hercules CI Effects
81f3910d85 flake.lock: Update 
Flake lock file updates:

• Updated input 'disko':
    'github:nix-community/disko/7eb09408393faa5b8f3b3524c39cb93d938e8d04' (2023-07-14)
  → 'github:nix-community/disko/774ce7df25538bd73a8d456e0828907fa6b62572' (2023-07-19)
• Updated input 'nix-darwin':
    'github:LnL7/nix-darwin/c806a73609e77f0c446fdad5d3ea6ca3b7ae6e5f' (2023-07-13)
  → 'github:LnL7/nix-darwin/61662a63bfe1726588c1da6b412df86d8ca94d63' (2023-07-16)
• Updated input 'sops-nix':
    'github:Mic92/sops-nix/cfe47aff8660fd760b1db89613a3205c2c4ba7b6' (2023-07-15)
  → 'github:Mic92/sops-nix/bd695cc4d0a5e1bead703cc1bec5fa3094820a81' (2023-07-16)
• Updated input 'srvos':
    'github:numtide/srvos/0fc20928d185a38d0081a2a22278d4e5cd2a2035' (2023-07-17)
  → 'github:numtide/srvos/62c4900d023ac740a7aba6d70b660600c3450490' (2023-07-20)
• Updated input 'treefmt-nix':
    'github:numtide/treefmt-nix/f1dca68b908f3dd656b923b9fb62f7d755133662' (2023-07-13)
  → 'github:numtide/treefmt-nix/719c2977f958c41fa60a928e2fbc50af14844114' (2023-07-17)
 2023-07-20 02:58:21 +00:00
zowoq
92e3a37e12 modules/nixos: separate reboot from auto-upgrade 2023-07-20 00:50:23 +00:00
zowoq
68a4acdadd darwin02: scaleway -> hetzner 2023-07-18 07:09:12 +00:00
Jörg Thalheim
eec4d4b133 flake.lock: Update 
Flake lock file updates:

• Updated input 'srvos':
    'github:numtide/srvos/0b88224a7a55640402c0ba8427d17ce55fd0a421' (2023-07-15)
  → 'github:numtide/srvos/a19373a8eef1151b124a33dfd2c6bc9aa9fd94ac' (2023-07-17)

flake.lock: Update

Flake lock file updates:

• Updated input 'srvos':
    'github:numtide/srvos/deae462e37bf39ef951489eee37aa4377a2adfb3' (2023-07-17)
  → 'github:numtide/srvos/9e128774b18c1a1c189e6d6bf751086b4562d32c' (2023-07-17)

flake.lock: Update

Flake lock file updates:

• Updated input 'srvos':
    'github:numtide/srvos/a19373a8eef1151b124a33dfd2c6bc9aa9fd94ac' (2023-07-17)
  → 'github:numtide/srvos/0fc20928d185a38d0081a2a22278d4e5cd2a2035' (2023-07-17)
 2023-07-17 11:36:31 +00:00
zowoq
73a60cfa1e modules/darwin/common: fix nixPath 2023-07-17 11:36:25 +00:00
zowoq
4e8a299404 darwin03: init 2023-07-17 10:54:55 +00:00
zowoq
2691094597 modules/darwin: refactor 2023-07-17 10:36:51 +00:00
zowoq
1c21ae9ad5 terraform/cloudflare: add darwin03 2023-07-17 06:52:19 +00:00
zowoq
1bbfc154d3 Revert "flake.lock: Update" 
This reverts commit 867f0a8897.
 2023-07-17 06:38:24 +00:00
Hercules CI Effects
867f0a8897 flake.lock: Update 
Flake lock file updates:

• Updated input 'nix-darwin':
    'github:LnL7/nix-darwin/c806a73609e77f0c446fdad5d3ea6ca3b7ae6e5f' (2023-07-13)
  → 'github:LnL7/nix-darwin/61662a63bfe1726588c1da6b412df86d8ca94d63' (2023-07-16)
• Updated input 'sops-nix':
    'github:Mic92/sops-nix/cfe47aff8660fd760b1db89613a3205c2c4ba7b6' (2023-07-15)
  → 'github:Mic92/sops-nix/bd695cc4d0a5e1bead703cc1bec5fa3094820a81' (2023-07-16)
• Updated input 'srvos':
    'github:numtide/srvos/0b88224a7a55640402c0ba8427d17ce55fd0a421' (2023-07-15)
  → 'github:numtide/srvos/a19373a8eef1151b124a33dfd2c6bc9aa9fd94ac' (2023-07-17)
 2023-07-17 03:00:17 +00:00
zowoq
1441015937 modules: refactor common 
move common into directory
 2023-07-16 04:39:14 +00:00
zowoq
f8a2457154 secrets.yaml: refactor 
don't use multiline strings
 2023-07-16 04:37:43 +00:00
zowoq
f9ae953952 secrets.yaml: remove build02-root, build04-root 2023-07-16 04:37:43 +00:00
adisbladis
850821fb2d web01: Use pict-rs 0.4 from nixpkgs 2023-07-16 04:02:18 +00:00
adisbladis
ff8125cf9f web01: Configure pict-rs 2023-07-16 04:02:18 +00:00
adisbladis
17568b28a3 secret.yaml: Add shared lemmy admin account 
This isn't an account to be used by anyone in their day-to-day tasks
but here to ensure that nix-community infra admins have access to
the admin account.
 2023-07-16 04:02:18 +00:00
adisbladis
28e9521199 web01: Use pict-rs 0.4.0 
This allows separation of images & database which is something we
want because we use the Hetzner Storage Box for images but local
disk for the state db.
 2023-07-16 04:02:18 +00:00
adisbladis
3587114d85 web01: Add lemmy 2023-07-16 04:02:18 +00:00
adisbladis
ab3c58d79e web01: Add pgBackrest 
For postgresql backups.
 2023-07-16 04:02:18 +00:00
adisbladis
35298a184a web01: Add postgresql 2023-07-16 04:02:18 +00:00
adisbladis
784d428a0d web01: Add SMB mounts for Hetzner Storage Box 2023-07-16 04:02:18 +00:00
zowoq
ff2460ab99 flake.lock: Update 
Flake lock file updates:

• Updated input 'disko':
    'github:nix-community/disko/aeebdc1156c1ef6cb1e8f75c3f53bc34f33fad6f' (2023-07-13)
  → 'github:nix-community/disko/7eb09408393faa5b8f3b3524c39cb93d938e8d04' (2023-07-14)
• Updated input 'hercules-ci-effects':
    'github:hercules-ci/hercules-ci-effects/c6191e59824febda94b431146bf65628fc534e3b' (2023-07-05)
  → 'github:hercules-ci/hercules-ci-effects/0a63bfa3f00a3775ea3a6722b247880f1ffe91ce' (2023-07-15)
• Updated input 'nixpkgs':
    'github:NixOS/nixpkgs/b14fb1c9c33241598f573638ce23e6e46415306b' (2023-07-12)
  → 'github:NixOS/nixpkgs/c16abd6c722be95d53eef2bdd62cef5ecabd240a' (2023-07-15)
• Updated input 'sops-nix':
    'github:Mic92/sops-nix/88b964df6981e4844c07be8c192aa6bdca768a10' (2023-07-12)
  → 'github:Mic92/sops-nix/cfe47aff8660fd760b1db89613a3205c2c4ba7b6' (2023-07-15)
• Updated input 'srvos':
    'github:numtide/srvos/e8ae8c0ac816b6388199a475bd6188943e47f5b9' (2023-07-13)
  → 'github:numtide/srvos/0b88224a7a55640402c0ba8427d17ce55fd0a421' (2023-07-15)
• Updated input 'treefmt-nix':
    'github:numtide/treefmt-nix/3c54278bf7b8642eba174a22ca02d5552c21dc0b' (2023-07-11)
  → 'github:numtide/treefmt-nix/f1dca68b908f3dd656b923b9fb62f7d755133662' (2023-07-13)
 2023-07-16 01:26:08 +00:00
zowoq
87092ada06 flake: pin nixpkgs 2023-07-16 01:26:08 +00:00
zowoq
0b09bc5bd2 flake: rename darwin input to nix-darwin 
sometimes using anything other than `darwin` for this input could cause problems but this has been fixed upstream
 2023-07-15 23:12:37 +00:00
zowoq
a629209368 flake: add nixosTests to checks 2023-07-15 00:49:46 +00:00
Hercules CI Effects
02bcb639eb flake.lock: Update 
Flake lock file updates:

• Updated input 'darwin':
    'github:LnL7/nix-darwin/66a3047fa88eb6aa5c5a2e675de91f0431fbe561' (2023-07-09)
  → 'github:LnL7/nix-darwin/2ad716c2786dabf8f458ae1e7d343775d3acc65c' (2023-07-12)
• Updated input 'disko':
    'github:nix-community/disko/fc3c3817c9f1fcd405463c6a7f0f98baab97c692' (2023-07-05)
  → 'github:nix-community/disko/aeebdc1156c1ef6cb1e8f75c3f53bc34f33fad6f' (2023-07-13)
• Updated input 'nixpkgs':
    'github:NixOS/nixpkgs/986caf51a859110e3adba09ac5e0240e192014cd' (2023-07-09)
  → 'github:NixOS/nixpkgs/b14fb1c9c33241598f573638ce23e6e46415306b' (2023-07-12)
• Updated input 'sops-nix':
    'github:Mic92/sops-nix/b2047c8fc963407916ad3834165309007dc5a1f7' (2023-07-09)
  → 'github:Mic92/sops-nix/88b964df6981e4844c07be8c192aa6bdca768a10' (2023-07-12)
• Updated input 'srvos':
    'github:numtide/srvos/9c6158412e223963fda8172d0669211e9246e2da' (2023-07-10)
  → 'github:numtide/srvos/e8ae8c0ac816b6388199a475bd6188943e47f5b9' (2023-07-13)
• Updated input 'treefmt-nix':
    'github:numtide/treefmt-nix/3fadb6baac68068dc0196f35d3e092bf316d4409' (2023-07-09)
  → 'github:numtide/treefmt-nix/3c54278bf7b8642eba174a22ca02d5552c21dc0b' (2023-07-11)
 2023-07-13 03:06:12 +00:00
zowoq
a6de11d928 community-builder/packages: remove redundant packages 
these are included in the srvos/server
 2023-07-12 08:10:51 +00:00
Hercules CI Effects
04f9dde478 flake.lock: Update 
Flake lock file updates:

• Updated input 'darwin':
    'github:LnL7/nix-darwin/b06bab83bdf285ea0ae3c8e145a081eb95959047' (2023-07-02)
  → 'github:LnL7/nix-darwin/66a3047fa88eb6aa5c5a2e675de91f0431fbe561' (2023-07-09)
• Updated input 'nixpkgs':
    'github:NixOS/nixpkgs/cd3f496d8b0c16d3040d086a43c395702fa4acf4' (2023-07-05)
  → 'github:NixOS/nixpkgs/986caf51a859110e3adba09ac5e0240e192014cd' (2023-07-09)
• Updated input 'sops-nix':
    'github:Mic92/sops-nix/5ed3c22c1fa0515e037e36956a67fe7e32c92957' (2023-07-02)
  → 'github:Mic92/sops-nix/b2047c8fc963407916ad3834165309007dc5a1f7' (2023-07-09)
• Updated input 'srvos':
    'github:numtide/srvos/bf8ce44e0d1a380565c51bd6a707a75ac21c1a9a' (2023-07-06)
  → 'github:numtide/srvos/9c6158412e223963fda8172d0669211e9246e2da' (2023-07-10)
• Updated input 'treefmt-nix':
    'github:numtide/treefmt-nix/df3f32b0cc253dfc7009b7317e8f0e7ccd70b1cf' (2023-06-29)
  → 'github:numtide/treefmt-nix/3fadb6baac68068dc0196f35d3e092bf316d4409' (2023-07-09)
 2023-07-10 03:09:03 +00:00
zowoq
da365656a1 terraform/cloudflare: fix darwin02-AAAA 2023-07-08 06:36:47 +00:00
Jörg Thalheim
8ac5e70d7e build04: fix ipv6 address 2023-07-08 06:23:23 +00:00
zowoq
1d045ed5f6 flake.lock: Update 
Flake lock file updates:

• Updated input 'srvos':
    'github:numtide/srvos/bab498f53b16b4a05008f95d4af68de18bb212e8' (2023-07-06)
  → 'github:numtide/srvos/bf8ce44e0d1a380565c51bd6a707a75ac21c1a9a' (2023-07-06)
 2023-07-06 05:07:16 +00:00
Hercules CI Effects
981e0f2a0c flake.lock: Update 
Flake lock file updates:

• Updated input 'disko':
    'github:nix-community/disko/8002e7cb899bc2a02a2ebfb7f999fcd7c18b92a1' (2023-06-28)
  → 'github:nix-community/disko/fc3c3817c9f1fcd405463c6a7f0f98baab97c692' (2023-07-05)
• Updated input 'flake-parts':
    'github:hercules-ci/flake-parts/267149c58a14d15f7f81b4d737308421de9d7152' (2023-07-01)
  → 'github:hercules-ci/flake-parts/8e8d955c22df93dbe24f19ea04f47a74adbdc5ec' (2023-07-04)
• Updated input 'hercules-ci-effects':
    'github:hercules-ci/hercules-ci-effects/04e4ab63b9eed2452edee1bb698827e1cb8265c6' (2023-06-15)
  → 'github:hercules-ci/hercules-ci-effects/c6191e59824febda94b431146bf65628fc534e3b' (2023-07-05)
• Updated input 'nixpkgs':
    'github:NixOS/nixpkgs/3454e7a9c8c78ee815bd2d5d3ff8a977f4d419f3' (2023-07-02)
  → 'github:NixOS/nixpkgs/cd3f496d8b0c16d3040d086a43c395702fa4acf4' (2023-07-05)
• Updated input 'srvos':
    'github:numtide/srvos/64cffff50bbf91de54a5b06d60bb1ecbfec53009' (2023-07-03)
  → 'github:numtide/srvos/bab498f53b16b4a05008f95d4af68de18bb212e8' (2023-07-06)
 2023-07-06 03:06:12 +00:00
adisbladis
c91f606639 hosts.web01: init 
This machine is intended to host web applications.
Initially [Lemmy](https://join-lemmy.org/), but perhaps more down the line.

The initial PR only deals with setting up the machine and required infra like DNS, not setting up Lemmy itself which will be a follow-up.
 2023-07-05 08:57:43 +00:00
zowoq
efeb2ce042 Revert "switch to mergify" 
This reverts commit 6b948a13c8.

doesn't currently work with github merge queue
 2023-07-03 03:21:21 +00:00
Hercules CI Effects
a6282b2f52 flake.lock: Update 
Flake lock file updates:

• Updated input 'darwin':
    'github:LnL7/nix-darwin/25ae710ba3cd448c5d5678788d37f3d149378bc0' (2023-06-25)
  → 'github:LnL7/nix-darwin/b06bab83bdf285ea0ae3c8e145a081eb95959047' (2023-07-02)
• Updated input 'flake-parts':
    'github:hercules-ci/flake-parts/37dd7bb15791c86d55c5121740a1887ab55ee836' (2023-06-26)
  → 'github:hercules-ci/flake-parts/267149c58a14d15f7f81b4d737308421de9d7152' (2023-07-01)
• Updated input 'nixpkgs':
    'github:NixOS/nixpkgs/4b14ab2a916508442e685089672681dff46805be' (2023-06-27)
  → 'github:NixOS/nixpkgs/3454e7a9c8c78ee815bd2d5d3ff8a977f4d419f3' (2023-07-02)
• Updated input 'sops-nix':
    'github:Mic92/sops-nix/2ff6973350682f8d16371f8c071a304b8067f192' (2023-06-22)
  → 'github:Mic92/sops-nix/5ed3c22c1fa0515e037e36956a67fe7e32c92957' (2023-07-02)
• Updated input 'srvos':
    'github:numtide/srvos/1d882a37529bec2890204b86f89e62e4c3ccce0a' (2023-06-29)
  → 'github:numtide/srvos/64cffff50bbf91de54a5b06d60bb1ecbfec53009' (2023-07-03)
• Updated input 'treefmt-nix':
    'github:numtide/treefmt-nix/0a4f06c27610a99080b69433873885df82003aae' (2023-06-28)
  → 'github:numtide/treefmt-nix/df3f32b0cc253dfc7009b7317e8f0e7ccd70b1cf' (2023-06-29)
 2023-07-03 03:18:54 +00:00
zowoq
8c3dcc3951 docs/continuous-integration: add darwin 2023-07-02 23:53:39 +00:00
zowoq
d40867bc26 refactor storage box 
this is now under the nix-community hetzner account
 2023-07-02 23:45:27 +00:00
zowoq
6b948a13c8 switch to mergify 
this lets us consolidate automerges and remove GH_TOKEN_FOR_UPDATES
 2023-07-02 23:41:02 +00:00
zowoq
aba917aac1 reencrypt secrets 2023-07-02 17:31:49 +00:00
adisbladis
dcd03ebd64 .sops.yml: Add adisbladis key 2023-07-02 17:31:49 +00:00
zowoq
9f921e27c5 modules: refactor cachix secrets, watch-store 
move cachix related files into directory
 2023-07-01 22:08:15 +00:00
zowoq
7f0c3d5ffd modules: refactor hydra, nur-update 
these are single files, don't need to be in a directory
 2023-07-01 22:08:15 +00:00
zowoq
a7f4795647 modules: builder -> community-builder 
slightly better name for this module
 2023-07-01 22:08:15 +00:00
zowoq
4dada30f83 Revert "switch back to post-build-hook" 
This reverts commit 94de107c30.

watch-store seems to be working again with cachix 1.6
 2023-07-01 09:48:51 +00:00
Hercules CI Effects
1b22419687 flake.lock: Update 
Flake lock file updates:

• Updated input 'disko':
    'github:nix-community/disko/fef67a1ddc293b595d62a660f57deabbcb70ff95' (2023-06-26)
  → 'github:nix-community/disko/8002e7cb899bc2a02a2ebfb7f999fcd7c18b92a1' (2023-06-28)
• Updated input 'flake-parts':
    'github:hercules-ci/flake-parts/71fb97f0d875fd4de4994dfb849f2c75e17eb6c3' (2023-06-01)
  → 'github:hercules-ci/flake-parts/37dd7bb15791c86d55c5121740a1887ab55ee836' (2023-06-26)
• Updated input 'nixpkgs':
    'github:NixOS/nixpkgs/e3f793e5c698717833678fb2757f48dc7738dca7' (2023-06-25)
  → 'github:NixOS/nixpkgs/4b14ab2a916508442e685089672681dff46805be' (2023-06-27)
• Updated input 'srvos':
    'github:numtide/srvos/065fecbf3c2c3b6d11f23eb8e370ba88d9534ce8' (2023-06-26)
  → 'github:numtide/srvos/1d882a37529bec2890204b86f89e62e4c3ccce0a' (2023-06-29)
• Updated input 'treefmt-nix':
    'github:numtide/treefmt-nix/b100498935f04a70605dfde0edc6e311d865b869' (2023-06-24)
  → 'github:numtide/treefmt-nix/0a4f06c27610a99080b69433873885df82003aae' (2023-06-28)
 2023-06-29 07:08:48 +00:00