about summary refs log tree commit diff
AgeCommit message (Collapse)AuthorFilesLines
2019-11-15 feat(nix): Filter projects that should be built by CIVincent Ambo4-15/+25
Instead of specifying CI projects manually, this filters them to move the CI configuration into the derivations `meta` attributes.
2019-11-15 chore(nix): Move files around to conform to new read-tree layoutVincent Ambo19-102/+112
Broadly speaking, the following things are included: * there is now a uniform `args` struct that is passed to all derivations, package headers have been changed appropriately * overrides are now loaded from a separate `override` folder just using read-tree.nix * third-party packages have moved into the `third_party` attribute set
2019-11-15 feat(build): Add initial read-tree.nix implementationVincent Ambo1-0/+67
This file can read a directory tree into a package set structure, paving the way for getting rid of top-level mapping in default.nix.
2019-11-14 chore: Remove unstable channel (no longer in use)Vincent Ambo1-7/+0
2019-10-26 feat(nixcon-demo): Add CLI mode for NixCon demoVincent Ambo1-2/+13
Maybe a bit more sane than trying to do a network based setup.
2019-10-26 feat(services): Add nixcon-demo service with simple web serverVincent Ambo5-0/+922
2019-10-26 feat(third_party): Add naersk to package setVincent Ambo1-0/+6
2019-10-26 r/93 fix: Enable building of broken packagesVincent Ambo1-0/+1
Happstack is currently erroneously (afaict) marked as broken.
2019-10-26 r/92 chore(k8s): Bump deployed Nixery versionVincent Ambo1-1/+1
2019-10-25 r/91 Merge pull request #7 from tazjin/chore/bump-19.09Vincent Ambo4-5/+8
Update nixpkgs set to NixOS 19.09
2019-10-25 chore: Bump Nixery version & package set configurationVincent Ambo3-2/+5
2019-10-25 chore: Bump nixpkgs and use Terraform from stableVincent Ambo1-3/+3
2019-09-22 r/90 refactor(build): Only build projects explicitly set as CI projectsVincent Ambo1-1/+1
2019-09-22 r/89 chore(gemma): Mark gemma as broken (again)Vincent Ambo1-1/+3
Something broke in one of the Lisp dependencies (again).
2019-09-22 r/88 refactor(build): Add ciProjects attribute for CI buildsVincent Ambo1-0/+8
This attribute contains a list of all derivations that should be built by the CI for this repository. This includes all of my own packages that are not marked as broken, as well as select third-party packages.
2019-09-22 r/87 chore(tazblog): Remove more unneeded dependenciesVincent Ambo1-4/+4
2019-09-21 r/86 chore(k8s): Bump deployed Nixery versionVincent Ambo1-1/+1
2019-09-21 r/85 chore: Bump Nix channel to a more recent versionVincent Ambo1-2/+2
This version has Nixery popularity data available.
2019-09-21 r/84 chore(third_party): Bump Nixery versionVincent Ambo1-2/+2
2019-09-21 r/83 refactor(k8s): Parameterise the nginx versionVincent Ambo2-1/+3
2019-09-04 r/82 fix(k8s): Reinsert passLookup newline after kontemplate trims itVincent Ambo2-1/+2
SSH can not read the key without the trailing newline. Ideally kontemplate would expose a toggle for this.
2019-09-04 r/81 Merge pull request #6 from tazjin/fix/nixery-secrets-namespaceVincent Ambo2-10/+18
Fix Nixery resources namespace & bump kontemplate
2019-09-04 chore: Update kontemplate to v1.8.0Vincent Ambo1-4/+13
This version is agnostic of the working directory even if insertFile/insertTemplate are used, which makes it a lot nicer to work with in this repository structure.
2019-09-04 fix(k8s): Move nixery-secrets to the correct namespaceVincent Ambo1-6/+5
2019-09-03 r/80 Merge pull request #5 from tazjin/feat/cloud-kms-secretsVincent Ambo14-15/+129
Introduce secrets management via Google Cloud KMS
2019-09-03 feat(k8s): Insert Nixery's secrets via kontemplateVincent Ambo5-4/+25
Instead of having a manually prepared secret, use Cloud KMS (as per the previous commits) to decrypt the in-repo secrets and template them into the Secret resource in Kubernetes. Not all of the values are actually secret, it has thus become a bit easier to edit the known hosts, SSH config and such now.
2019-09-03 feat(secrets): Check in secrets required by NixeryVincent Ambo3-0/+0
2019-09-03 feat(tools): Introduce pass-compatible wrapper using Cloud KMSVincent Ambo5-0/+78
Adds a shell script that supports a subset of the 'pass' interface for compatibility with kontemplate, and wraps kontemplate in a script that places this version on the PATH. This makes it possible to use Cloud KMS encrypted secrets with kontemplate.
2019-09-03 feat(gcp): Create Cloud KMS resources for encrypting secretsVincent Ambo1-8/+28
The idea here is to use Cloud KMS and a shell script that mimics 'pass' to trick kontemplate into using Cloud KMS to decrypt secrets.
2019-09-03 chore(gcp): Remove monorepo repositoryVincent Ambo1-5/+0
The repository is now public on Github.
2019-09-03 r/79 Merge pull request #4 from tazjin/fix/blog-substitutesVincent Ambo1-6/+10
fix(tazblog): Explicitly allow substitutes for the blog
2019-09-03 fix(tazblog): Explicitly allow substitutes for the blogVincent Ambo1-6/+10
Not entirely sure which part of the setup set this to 'false', but this is potentially the key for why tazblog ends up being rebuilt all the time.
2019-09-03 r/78 chore(k8s): Update deployed Nixery versionVincent Ambo1-1/+1
2019-09-03 r/77 chore(third_party): Bump Nixery versionVincent Ambo1-3/+3
2019-09-02 r/76 Merge pull request #3 from tazjin/chore/pin-travis-nixVincent Ambo7-95/+1
Pin Nix version in Travis builds
2019-09-02 chore(tazblog): Clean up unneeded filesVincent Ambo5-76/+0
2019-09-02 chore(gemma): Delete old image build configurationVincent Ambo1-19/+0
2019-09-02 chore: Pin Nix version in Travis buildsVincent Ambo1-0/+1
There are some unexpected cache misses in the Travis builds and I suspect this might be due to mismatching Nix versions.
2019-09-02 r/75 fix(k8s): Add nginx route for load-balancer health checksVincent Ambo3-3/+11
2019-09-02 r/74 chore(third_party): Remove git-appraiseVincent Ambo43-7327/+0
Not actually in use here ...
2019-09-02 r/73 Merge pull request #2 from tazjin/refactor/nixos-nginx-cleanupVincent Ambo14-3793/+110
Remove old NixOS config and move oslo.pub
2019-09-02 fix(k8s): nginx does not need to be pinned to gitHEADVincent Ambo1-1/+1
2019-09-02 chore(k8s): Point Nixery at public depot URLVincent Ambo1-2/+1
2019-09-02 feat(k8s): Route oslo.pub to nginx in ingressVincent Ambo1-1/+9
2019-09-02 feat(k8s): Add nginx instance for oslo.pub redirectVincent Ambo3-0/+92
The redirect is currently all that this instance does. It is required because HTTP load balancers in GCP don't support URL rewriting.
2019-09-02 chore(k8s): Provision certificate for oslo.pubVincent Ambo1-0/+5
2019-09-02 feat(tools): Add stern, a k8s log watcherVincent Ambo2-0/+4
2019-09-02 chore(infra): Remove NixOS configuration for serversVincent Ambo8-3791/+0
This configuration is no longer in use. The Gemma configuration file has been moved over to the k8s folder from where it will be templated into the actual configuration.
2019-09-02 r/72 Merge pull request #1 from tazjin/feat/travis-ciVincent Ambo5-4/+30
Add Travis CI configuration
2019-09-02 chore: Catch all Nix results in gitignoreVincent Ambo1-0/+1
generated by cgit-pink 1.4.1 (git 2.44.2) at 2024-11-05T12·21+0000