about summary refs log tree commit diff
AgeCommit message (Collapse)AuthorFilesLines
2021-12-27 r/3473 feat(ops/keycloak): Import Buildkite OIDC clientVincent Ambo1-0/+21
This was previously configured in the UI. Change-Id: I68361b1489093b76736adab2e38ed7b474b10881 Reviewed-on: https://cl.tvl.fyi/c/depot/+/4711 Tested-by: BuildkiteCI Reviewed-by: grfn <grfn@gws.fyi>
2021-12-27 r/3472 feat(ops/keycloak): Import Gerrit OIDC clientVincent Ambo1-0/+21
This was previously configured in the UI. Change-Id: Ib15b8ecca96d7814dc85d62199865b22bdb63f95 Reviewed-on: https://cl.tvl.fyi/c/depot/+/4710 Tested-by: BuildkiteCI Reviewed-by: grfn <grfn@gws.fyi>
2021-12-27 r/3471 fix(ops/keycloak): Move Terraform state to GleSYS bucketVincent Ambo2-12/+24
This should never sit around locally the way it does now. Change-Id: Icfbdaf1949d6d948a796a0759282ea6144af3621 Reviewed-on: https://cl.tvl.fyi/c/depot/+/4709 Tested-by: BuildkiteCI Reviewed-by: grfn <grfn@gws.fyi>
2021-12-27 r/3470 feat(ops/secrets): Add tf-keycloak secrets fileVincent Ambo4-1/+33
This file can be sourced (somehow, depending on the user) while working with //ops/keycloak to get the relevant secrets. Change-Id: Ibb3051c4b019f64824964475451c1c3996db6421 Reviewed-on: https://cl.tvl.fyi/c/depot/+/4708 Tested-by: BuildkiteCI Reviewed-by: grfn <grfn@gws.fyi>
2021-12-27 r/3469 feat(ops/keycloak): Add OIDC client for GrafanaVincent Ambo1-0/+14
Completely forgot about Grafana, so it's currently broken. Oops! Change-Id: Ia4e6405428ad8e514d6e61635f9692c57f61defe Reviewed-on: https://cl.tvl.fyi/c/depot/+/4705 Tested-by: BuildkiteCI Reviewed-by: grfn <grfn@gws.fyi> Autosubmit: tazjin <mail@tazj.in>
2021-12-27 r/3468 fix(whitby): Point grafana at new auth providerVincent Ambo2-18/+18
Grafana was still pointing at the (now non-existent) CAS setup. This changes the endpoints to use Keycloak instead and updates the client secret. Change-Id: Ib25d38330aba2ef6d894e8c33d86852c884ab5be Reviewed-on: https://cl.tvl.fyi/c/depot/+/4706 Tested-by: BuildkiteCI Autosubmit: tazjin <mail@tazj.in> Reviewed-by: grfn <grfn@gws.fyi>
2021-12-27 r/3467 fix(bin): Add missing tf-keycloak symlinkVincent Ambo1-0/+1
Change-Id: I98e79a7c9d57a4c6085f31a382d0b1ad335f07d2 Reviewed-on: https://cl.tvl.fyi/c/depot/+/4703 Tested-by: BuildkiteCI Autosubmit: tazjin <mail@tazj.in> Reviewed-by: tazjin <mail@tazj.in>
2021-12-27 r/3466 fix(grfn/bbbg): Fix organizer role IDGriffin Smith1-1/+1
Figured this out by opening web inspector for the discord web app and looking at the responses for role memeber counts. Change-Id: I0fa6418c4d1781a65ef50c9ed14665e2b142ae32 Reviewed-on: https://cl.tvl.fyi/c/depot/+/4707 Reviewed-by: grfn <grfn@gws.fyi> Autosubmit: grfn <grfn@gws.fyi> Tested-by: BuildkiteCI
2021-12-27 r/3465 refactor(wpcarro/blog): Prefer depot.web.blogWilliam Carroll41-1119/+77
Hugo is a bit too heavyweight for my taste. Change-Id: I331bc5898bd40f1a03bbde8ad69fe3cc9f72c18b Reviewed-on: https://cl.tvl.fyi/c/depot/+/4704 Reviewed-by: wpcarro <wpcarro@gmail.com> Autosubmit: wpcarro <wpcarro@gmail.com> Tested-by: BuildkiteCI
2021-12-27 r/3464 chore(3p/nixery): Bump Nixery to latest versionVincent Ambo1-2/+2
This includes a bunch of fixes by @jpetazzo on Github: - https://github.com/tazjin/nixery/pull/145 - https://github.com/tazjin/nixery/pull/146 - https://github.com/tazjin/nixery/pull/147 - https://github.com/tazjin/nixery/pull/148 Especially the last two have some impact on the Nixery UX and it's good to get them out. Change-Id: I8a2b429281f58bd32364448190a380f8e68775f9 Reviewed-on: https://cl.tvl.fyi/c/depot/+/4702 Tested-by: BuildkiteCI Autosubmit: tazjin <mail@tazj.in> Reviewed-by: Profpatsch <mail@profpatsch.de>
2021-12-27 r/3463 feat(nix/yants): improve error message for errornous predicatezseri1-4/+9
while trying to yantsify `mkSecrets` in https://cl.tvl.fyi/c/depot/+/4688, I(zseri) needed to debug a failing evaluation which boiled down to a result.ok containing something which wasn't boolean, but the error message didn't indicate where that value came from. I debugged yants and found that the only place which didn't simply combine boolean values or use functions which always return booleans, I managed to isolate the error to the `pred v` expression. To avoid the necessity to debug yants to find this, I improve the error message for this case to mention that - a restriction predicate is invalid - what's the name of the failing restriction - the unexpected predicate return value Change-Id: I6c570a33ccc5afc445f208e2e8855c49fb37abaf Reviewed-on: https://cl.tvl.fyi/c/depot/+/4698 Tested-by: BuildkiteCI Reviewed-by: zseri <zseri.devel@ytrizja.de> Reviewed-by: tazjin <mail@tazj.in> Autosubmit: zseri <zseri.devel@ytrizja.de>
2021-12-27 r/3462 refactor(tvl.el): use flags of gerrit-ref for WIPzseri1-1/+1
Change-Id: I858070ff8e48ca7e556f33d276e89b6ae940519c Reviewed-on: https://cl.tvl.fyi/c/depot/+/4630 Tested-by: BuildkiteCI Reviewed-by: grfn <grfn@gws.fyi>
2021-12-27 r/3461 feat(3p/tvix): run formatting check in parallel to restzseri1-4/+35
Change-Id: Ia5b3a5e76672143df361fec375903e3582694112 Reviewed-on: https://cl.tvl.fyi/c/depot/+/4632 Tested-by: BuildkiteCI Reviewed-by: grfn <grfn@gws.fyi> Reviewed-by: zseri <zseri.devel@ytrizja.de> Autosubmit: zseri <zseri.devel@ytrizja.de>
2021-12-27 r/3460 refactor(grfn/system): Don't set autoOptimiseStoreGriffin Smith1-1/+0
I have a (unconfirmed) suspicion that this is paying more in CPU time than it's saving in disk space - regardless, I have a bounty of the latter and a deficit of the former. Change-Id: I3375b8d904e0878fd47c1845e3c3b9b6c6359189 Reviewed-on: https://cl.tvl.fyi/c/depot/+/4700 Reviewed-by: grfn <grfn@gws.fyi> Autosubmit: grfn <grfn@gws.fyi> Tested-by: BuildkiteCI
2021-12-27 r/3459 feat(grfn/bbbg): Update (almost) all depsGriffin Smith2-72/+59
Change-Id: I316af01af87ed6f75d57e4400c95d83d274370a4 Reviewed-on: https://cl.tvl.fyi/c/depot/+/4699 Reviewed-by: grfn <grfn@gws.fyi> Autosubmit: grfn <grfn@gws.fyi> Tested-by: BuildkiteCI
2021-12-27 r/3458 fix(grfn/bbbg): Configure web base urlGriffin Smith3-5/+15
This was originally intended to work around the issue caused by me accidentally ending up proxy_set_header'ing the Host header twice (which nginx *concatenates with slashes*, rather than overwriting!), but seems sensible regardless to make that whole thing (hopefully) a bit less brittle Change-Id: I877fa594b46e88d1ba05e793832beab3d0aaccdd Reviewed-on: https://cl.tvl.fyi/c/depot/+/4697 Reviewed-by: grfn <grfn@gws.fyi> Autosubmit: grfn <grfn@gws.fyi> Tested-by: BuildkiteCI
2021-12-27 r/3457 feat(grfn/bbbg): Add a request loggerGriffin Smith3-37/+72
Also update log deps so things actually log, using a new :outdated alias based on antq Change-Id: I6f87f474bea101fa1b396c519b234eb3aac1c4f1 Reviewed-on: https://cl.tvl.fyi/c/depot/+/4696 Reviewed-by: grfn <grfn@gws.fyi> Autosubmit: grfn <grfn@gws.fyi> Tested-by: BuildkiteCI
2021-12-27 r/3456 feat(grfn/bbbg): Production deploymentGriffin Smith9-19/+458
Start of a production deployment of the app with nixos+terraform, using provisioners and null-resources to provision nixos machines a'la espes. Change-Id: I2ddaed76d0037dadbf9fc9e2ee27e9e67a852228 Reviewed-on: https://cl.tvl.fyi/c/depot/+/4695 Reviewed-by: grfn <grfn@gws.fyi> Autosubmit: grfn <grfn@gws.fyi> Tested-by: BuildkiteCI
2021-12-27 r/3455 feat(grfn/bbbg): Add NixOS module, deploy to mugwumpGriffin Smith6-2/+156
Change-Id: I0299242982c183fa9fc1f26b1bacb14f8fc14b28 Reviewed-on: https://cl.tvl.fyi/c/depot/+/4684 Reviewed-by: grfn <grfn@gws.fyi> Reviewed-by: zseri <zseri.devel@ytrizja.de> Autosubmit: grfn <grfn@gws.fyi> Tested-by: BuildkiteCI
2021-12-27 r/3454 feat(grfn/mugwump): Set up agenixGriffin Smith6-2/+37
Start setting up agenix with secrets in //users/grfn/secrets for mugwump, starting with my cloudflare API key which I use for the ddns from my home apartment Change-Id: Ida66cb91da3415357a512039d6c23402f0ae9388 Reviewed-on: https://cl.tvl.fyi/c/depot/+/4683 Reviewed-by: grfn <grfn@gws.fyi> Autosubmit: grfn <grfn@gws.fyi> Tested-by: BuildkiteCI
2021-12-27 r/3453 refactor(ops/secrets): generalize out a mkSecrets functionGriffin Smith2-21/+22
Generalize out a reusable mkSecrets function from the secrets-tree-building that's happening in //ops/secrets, so the same thing can happen in other places in the depot (I want to use it for my personal infrastructure). Change-Id: I059295c8c257d78ad7fa0802859f57c2c105f29b Reviewed-on: https://cl.tvl.fyi/c/depot/+/4679 Reviewed-by: grfn <grfn@gws.fyi> Reviewed-by: zseri <zseri.devel@ytrizja.de> Autosubmit: grfn <grfn@gws.fyi> Tested-by: BuildkiteCI
2021-12-27 r/3452 fix(grfn/bbbg): Properly align page-header contentsGriffin Smith1-1/+3
Change-Id: Ic2ddbdfadb9d65d5ab1ca57f4593ac4c6d2754d8 Reviewed-on: https://cl.tvl.fyi/c/depot/+/4687 Tested-by: BuildkiteCI Reviewed-by: grfn <grfn@gws.fyi>
2021-12-27 r/3451 fix(grfn/bbbg): Fix attendee list styling on non-mobileGriffin Smith2-3/+12
Change-Id: I0b9671dd7e43cf25e8313a10e31b1f19cf897371 Reviewed-on: https://cl.tvl.fyi/c/depot/+/4682 Tested-by: BuildkiteCI Reviewed-by: grfn <grfn@gws.fyi> Autosubmit: grfn <grfn@gws.fyi>
2021-12-27 r/3450 feat(wpcarro/diogenes): Disable firewall 🔥William Carroll1-5/+1
Rely on GCP's VPC configuration, which dedupes my configuration efforts. Change-Id: Iab0751b2a73a4f41a82b2968ba6aa9ff73bf6ccc Reviewed-on: https://cl.tvl.fyi/c/depot/+/4691 Reviewed-by: wpcarro <wpcarro@gmail.com> Autosubmit: wpcarro <wpcarro@gmail.com> Tested-by: BuildkiteCI
2021-12-27 r/3449 feat(wpcarro/diogenes): Support moshWilliam Carroll1-1/+3
Let's see what mosh is all about... Change-Id: I0439130f55dc056370397c3e4ea8039f888703c3 Reviewed-on: https://cl.tvl.fyi/c/depot/+/4690 Reviewed-by: wpcarro <wpcarro@gmail.com> Autosubmit: wpcarro <wpcarro@gmail.com> Tested-by: BuildkiteCI
2021-12-27 r/3448 refactor(web/todolist): omit unnecessary intermediate drvzseri1-9/+13
also import yants functions explicitly Change-Id: Idd16d130a95efc30216cb54051c7193a42978003 Reviewed-on: https://cl.tvl.fyi/c/depot/+/4689 Tested-by: BuildkiteCI Reviewed-by: zseri <zseri.devel@ytrizja.de> Reviewed-by: lukegb <lukegb@tvl.fyi> Autosubmit: zseri <zseri.devel@ytrizja.de>
2021-12-26 r/3447 feat(ops/machines/all-systems): Add grfn/mugwumpGriffin Smith1-0/+1
Change-Id: I7770b58c44a5700e86c80d1058e89e9fa65d719b Reviewed-on: https://cl.tvl.fyi/c/depot/+/4686 Tested-by: BuildkiteCI Reviewed-by: grfn <grfn@gws.fyi> Autosubmit: grfn <grfn@gws.fyi>
2021-12-26 r/3446 fix(auto-deploy): Add missing packages to pathGriffin Smith1-3/+5
Building nix derivations needs tar (provided by gnutar) and gzip on the PATH in order to extract .tar.gz archives. Change-Id: Ia2df7a3a770cfd342dfede58ad34e04805fbd1f8 Reviewed-on: https://cl.tvl.fyi/c/depot/+/4685 Tested-by: BuildkiteCI Autosubmit: grfn <grfn@gws.fyi> Reviewed-by: wpcarro <wpcarro@gmail.com>
2021-12-26 r/3445 feat(sterni/aoc/2021): day 4 solutionsterni1-0/+20
Change-Id: Ib8b4206b40acad32e10ebd9103e54074ba3452fc Reviewed-on: https://cl.tvl.fyi/c/depot/+/4681 Reviewed-by: sterni <sternenseemann@systemli.org> Autosubmit: sterni <sternenseemann@systemli.org> Tested-by: BuildkiteCI
2021-12-26 r/3444 feat(sterni/aoc/2021): don't split on consecutive occurrences of 𝕨sterni1-1/+1
Change-Id: I2ab17e0238df297f580c45bc28914c6dfd0ce848 Reviewed-on: https://cl.tvl.fyi/c/depot/+/4680 Reviewed-by: sterni <sternenseemann@systemli.org> Autosubmit: sterni <sternenseemann@systemli.org> Tested-by: BuildkiteCI
2021-12-26 r/3443 feat(wpcarro/website): Add slight horizontal padding for mobile 📱William Carroll1-1/+1
The content needs small gutters to improve readability on my iPhone 12. Change-Id: I751ae5387ad93c95729e642c21c37e481412c00e Reviewed-on: https://cl.tvl.fyi/c/depot/+/4678 Reviewed-by: wpcarro <wpcarro@gmail.com> Autosubmit: wpcarro <wpcarro@gmail.com> Tested-by: BuildkiteCI
2021-12-26 r/3442 feat(wpcarro/website): Support drop-shadow on-scroll 📱William Carroll1-1/+11
Thank you, Tailwind CSS, for making this easy. Change-Id: I95f99bf480d78137797aef1e4d609acc509906a6 Reviewed-on: https://cl.tvl.fyi/c/depot/+/4677 Tested-by: BuildkiteCI Reviewed-by: wpcarro <wpcarro@gmail.com> Autosubmit: wpcarro <wpcarro@gmail.com>
2021-12-26 r/3441 feat(wpcarro/website): Add bottom padding to footer 📱William Carroll1-1/+1
Breathing room Change-Id: Ic7fe94194689a8a6189538487bb0ea82a4866c50 Reviewed-on: https://cl.tvl.fyi/c/depot/+/4676 Reviewed-by: wpcarro <wpcarro@gmail.com> Autosubmit: wpcarro <wpcarro@gmail.com> Tested-by: BuildkiteCI
2021-12-26 r/3440 fix(wpcarro/website): Link to //users/wpcarro instead of rootWilliam Carroll1-1/+1
For depot link Change-Id: Ia7f3edd5660a87ed4c6b15db60cbc3be033e1529 Reviewed-on: https://cl.tvl.fyi/c/depot/+/4675 Reviewed-by: wpcarro <wpcarro@gmail.com> Autosubmit: wpcarro <wpcarro@gmail.com> Tested-by: BuildkiteCI
2021-12-26 r/3439 fix(wpcarro/website): Adjust vertical padding in headerWilliam Carroll1-2/+2
Looks better when scrolling on mobile. Change-Id: Id5530ea12571e9470df0a76054c7426570c1a4e3 Reviewed-on: https://cl.tvl.fyi/c/depot/+/4674 Reviewed-by: wpcarro <wpcarro@gmail.com> Autosubmit: wpcarro <wpcarro@gmail.com> Tested-by: BuildkiteCI
2021-12-26 r/3438 feat(grfn/bbbg): Display attendee list on event pageGriffin Smith2-5/+53
Change-Id: I16caecf3b6edcabec05490e0d29780d45ecd1f91 Reviewed-on: https://cl.tvl.fyi/c/depot/+/4673 Tested-by: BuildkiteCI Reviewed-by: grfn <grfn@gws.fyi> Autosubmit: grfn <grfn@gws.fyi>
2021-12-26 r/3437 feat(wpcarro/website): Add responsive styling for mobile 📱William Carroll1-6/+28
Pretty easy with Tailwind CSS Change-Id: I2acf6ef3b093fbd604fb17ca5334c909e2e24b2d Reviewed-on: https://cl.tvl.fyi/c/depot/+/4672 Reviewed-by: wpcarro <wpcarro@gmail.com> Autosubmit: wpcarro <wpcarro@gmail.com> Tested-by: BuildkiteCI
2021-12-26 r/3436 feat(grfn/bbbg): Last remaining styling tweaksGriffin Smith2-5/+11
Change-Id: Ic734f6a84f8bcf8126c048e03344c7f214b9ca86 Reviewed-on: https://cl.tvl.fyi/c/depot/+/4671 Reviewed-by: grfn <grfn@gws.fyi> Autosubmit: grfn <grfn@gws.fyi> Tested-by: BuildkiteCI
2021-12-26 r/3435 fix(grfn/bbbg): Don't overwrite session on signupGriffin Smith1-1/+0
Change-Id: I9436f1690b8da8e23e1c5ca88f9dcb06380e568f Reviewed-on: https://cl.tvl.fyi/c/depot/+/4670 Reviewed-by: grfn <grfn@gws.fyi> Autosubmit: grfn <grfn@gws.fyi> Tested-by: BuildkiteCI
2021-12-26 r/3434 fix(grfn/bbbg): Fix honeysql syntax for upsertGriffin Smith1-2/+2
Change-Id: I49eb046a1897794442c748e81560de76684eda01 Reviewed-on: https://cl.tvl.fyi/c/depot/+/4669 Reviewed-by: grfn <grfn@gws.fyi> Autosubmit: grfn <grfn@gws.fyi> Tested-by: BuildkiteCI
2021-12-26 r/3433 fix(grfn/bbbg): Add margins to flash messages on mobileGriffin Smith2-2/+11
Change-Id: I5e33ba65ef4b6c55485fa4fb895bd6e7b3f24f1f Reviewed-on: https://cl.tvl.fyi/c/depot/+/4668 Reviewed-by: grfn <grfn@gws.fyi> Autosubmit: grfn <grfn@gws.fyi> Tested-by: BuildkiteCI
2021-12-26 r/3432 feat(grfn/bbbg): Style event listGriffin Smith5-44/+124
Change-Id: I917e11e453126246c4110a6e42452dda4713b441 Reviewed-on: https://cl.tvl.fyi/c/depot/+/4667 Reviewed-by: grfn <grfn@gws.fyi> Autosubmit: grfn <grfn@gws.fyi> Tested-by: BuildkiteCI
2021-12-26 r/3431 fix(wpcarro/website): Add top-0 to 👋William Carroll1-1/+1
Without this, the hand is properly position only some of the time... it's almost quantum-like behavior ⚛ Change-Id: I7d5d9ed953f84bd097623e9f8abb1b2140c5bdc3 Reviewed-on: https://cl.tvl.fyi/c/depot/+/4666 Reviewed-by: wpcarro <wpcarro@gmail.com> Autosubmit: wpcarro <wpcarro@gmail.com> Tested-by: BuildkiteCI
2021-12-26 r/3430 feat(users/tazjin/hanebuschtag): schabernackensteakProfpatsch1-0/+2
Change-Id: I6a430f1d44977f74d71f43594e2d78f743adbfad Reviewed-on: https://cl.tvl.fyi/c/depot/+/4665 Reviewed-by: tazjin <mail@tazj.in> Tested-by: BuildkiteCI
2021-12-26 r/3429 feat(wpcarro/website): Revamp wpcarro.dev 🎉William Carroll1-24/+73
- Include Tailwind CSS (use the CDN for simplicity) - Update copy - Add some easter eggs 🐰🥚 Change-Id: I329e3569506274f60faf1ac0b1e4a87e7e6c10f8 Reviewed-on: https://cl.tvl.fyi/c/depot/+/4664 Tested-by: BuildkiteCI Reviewed-by: wpcarro <wpcarro@gmail.com> Autosubmit: wpcarro <wpcarro@gmail.com>
2021-12-26 r/3428 fix(ops/keycloak): set up client for usage with oauth2_proxyVincent Ambo1-7/+7
This will be useful for things like panettone, pending a NixOS module for oauth2-proxy (the upstream one is too complicated and doesn't support what we need). Change-Id: I4ca193e10a94a29b1fb9003e945896ff8eb61116 Reviewed-on: https://cl.tvl.fyi/c/depot/+/4662 Tested-by: BuildkiteCI Reviewed-by: Profpatsch <mail@profpatsch.de> Autosubmit: tazjin <mail@tazj.in>
2021-12-26 r/3427 fix(ops/keycloak): trust email addresses from LDAPVincent Ambo1-0/+1
Verified emails are required for some things, like e.g. oauth2_proxy Change-Id: Ifb124be40d6d2863cd1b7ed5fbdfcf4827e8808c Reviewed-on: https://cl.tvl.fyi/c/depot/+/4661 Tested-by: BuildkiteCI Autosubmit: tazjin <mail@tazj.in> Reviewed-by: Profpatsch <mail@profpatsch.de>
2021-12-26 r/3426 feat(ops/keycloak): Set up oauth2_proxy clientVincent Ambo1-0/+21
Change-Id: I996d9644ed7e870d6e5a42af117eafbf841da679 Reviewed-on: https://cl.tvl.fyi/c/depot/+/4640 Tested-by: BuildkiteCI Autosubmit: tazjin <mail@tazj.in> Reviewed-by: Profpatsch <mail@profpatsch.de>
2021-12-26 r/3425 feat(ops/keycloak): Check in initial Keycloak configurationVincent Ambo4-0/+55
This is still missing most of the client configuration etc., in part due to bugs in the provider which are preventing resource imports. Change-Id: Ic224ffc001f8e1fe6dcd47b7d002580fdf7b0774 Reviewed-on: https://cl.tvl.fyi/c/depot/+/4628 Tested-by: BuildkiteCI Autosubmit: tazjin <mail@tazj.in> Reviewed-by: Profpatsch <mail@profpatsch.de>
2021-12-26 r/3424 fix(depotfmt): handle multiple terraform filesVincent Ambo1-2/+7
`terraform fmt` can only handle a single path, but treefmt expects formatters to be able to handle multiple paths at once. this wraps it in a small shell script that calls `terraform fmt` with at most one path at a time. Change-Id: I2b9c1b89b5a276f3d4915b95608ce36b2509e334 Reviewed-on: https://cl.tvl.fyi/c/depot/+/4639 Tested-by: BuildkiteCI Autosubmit: tazjin <mail@tazj.in> Reviewed-by: grfn <grfn@gws.fyi>
generated by cgit-pink 1.4.1 (git 2.44.2) at 2024-11-18T14·30+0000