nix-community infrastructure [maintainer=@zowoq]

Find a file

zowoq f05a9e14a5 allow hercules to access terraform secrets		2023-03-13 07:48:44 +10:00
.github	add update hound action	2023-03-10 18:13:40 +10:00
build01	sops: replace my GPG key with AGE	2023-01-21 10:51:00 +01:00
build02	sops: replace my GPG key with AGE	2023-01-21 10:51:00 +01:00
build03	build03: remove outdated secrets	2023-02-15 12:59:10 +10:00
build04	build04: switch to systemd-boot	2023-03-09 09:09:04 +01:00
docs	docs: update Gandi logo	2023-02-23 17:17:26 +01:00
roles	allow hercules to access terraform secrets	2023-03-13 07:48:44 +10:00
services	hound: change indent to 2	2023-03-10 09:03:16 +10:00
terraform	allow hercules to access terraform secrets	2023-03-13 07:48:44 +10:00
users	users: remove admins after quorum changes	2023-02-03 17:10:58 +10:00
.envrc	direnv: also reload on shell.nix and treefmt.nix changes	2023-01-21 10:39:02 +01:00
.gitignore	gitignore .direnv in terraform dir	2023-02-24 08:53:30 +01:00
.sops.yaml	allow hercules to access terraform secrets	2023-03-13 07:48:44 +10:00
bors.toml	bors.toml: remove comment	2023-01-24 14:31:47 +10:00
ci.nix	ci: inherit lib from nixpkgs	2023-03-10 22:15:46 +10:00
flake.lock	flake.lock: Update	2023-03-10 03:16:47 +00:00
flake.nix	flake: update srvos	2023-02-28 08:34:23 +10:00
HOSTS.md	deploy -> inv	2023-01-10 06:47:06 +10:00
inv	deploy -> inv	2023-01-10 06:47:06 +10:00
LICENSE	Create LICENSE	2023-01-22 13:44:41 +10:00
pyproject.toml	apply treefmt to codebase	2022-12-31 07:27:07 +01:00
README.md	docs: list all the support options	2023-01-24 11:19:07 +01:00
secrets.yaml	sops: replace my GPG key with AGE	2023-01-21 10:51:00 +01:00
shell.nix	terraform: pin terraform and providers in separate flake	2023-02-21 12:22:51 +10:00
tasks.py	change deployment to use flake only	2023-03-08 14:25:58 +10:00
treefmt.nix	treefmt: remove deadnix	2023-01-09 06:04:13 +10:00

README.md

nix-community infrastructure

Welcome to the Nix Community infrastructure project. This project holds all the NixOS and Terraform configuration for this organization.

Services

`Community builder` - build01.nix-community.org

We provide an x86 build machine as a public remote builder for the nix community, this machine also has an aarch64 machine configured as its own remote builder.

See here for more information.

`Continuous integration`

We provide x86 and aarch64 linux CI via these systems:

Hercules - https://hercules-ci.com/github/nix-community
- To enable hercules builds go to https://hercules-ci.com/github/nix-community/$REPO and click "Build this repository".
Hydra - https://hydra.nix-community.org
- To enable hydra builds add a new project in this file.

`Cache` - https://nix-community.cachix.org/

All of the above CI builds are pushed to the cache.

Thanks to Cachix for sponsoring our binary cache!

`Search` - https://search.nix-community.org

Hound code search for NixOS and nix-community GitHub organisations.

`nix-community.org DNS`

DNS is managed by terraform in this file.

`ryantm-updater bot`

Docs: https://ryantm.github.io/nixpkgs-update
Logs: https://r.ryantm.com/log/

`nur-update`

Support

For casual chat, come join us in the nix-community room.

For urgent issues, ping us in the Matrix room (see the admin list below).

For repo additions or service requests, create an issue here: New Issue.

For general conversation about governance and direction of the project, use the Discussion forum.

Pull requests from forks

As PRs from forks don't have automatic CI checks, admins can test PRs by posting a comment on the PR instead.

bors try - check if the PR builds.
bors merge - same as bors try but will also merge the PR if it builds successfully.
https://bors.tech/documentation/

nix-community administrators

@Mic92
@adisbladis
@ryantm
@zimbatm
@zowoq

Role

The role of the administrators is to support the members of the org, and the Nix project in general.

Responsibilities

The administrators are responsible for serving the community to the best of their ability and availability.

They provide services such as:

keep the systems updated and patched
reply to user requests
host new services that could help the project
on-board new projects
resolve conflict

The administrators are the only "owners" of the github organization.

Quorum of 5 rule

To reduce the attack surface on the project, the administrative team size is limited to 5 people.

Hosts

See HOSTS.md, this file also contains deployment details.