about summary refs log tree commit diff
AgeCommit message (Collapse)AuthorFilesLines
2020-02-21 r/566 feat(ops/nixos/camden): Modify nginx log formatVincent Ambo1-8/+8
This log format contains more structured and correctly typed information, which I can now use for dashboards and stuff in Stackdriver.
2020-02-21 r/565 fix(ops/nixos/camden): Configure nginx to not log hostnamesVincent Ambo1-1/+1
Hostname prefixes break JSON serialisation, leading to useless Stackdriver Logging entries.
2020-02-21 r/564 feat(ops/nixos/camden): Install jqVincent Ambo1-0/+1
2020-02-21 r/563 feat(ops/nixos/camden): Forward logs to Stackdriver LoggingVincent Ambo1-0/+8
Enables the journaldriver service to forward logs into a "home" log-stream in the "tazjins-infrastructure" project. The service account key for camden has been placed on the machine manually.
2020-02-21 r/562 chore(ops/nixos/nugget): Remove input-fonts packageVincent Ambo1-1/+0
My default font is now Jetbrains Mono everywhere.
2020-02-21 r/561 fix(fun/amsterdump): Fix call to os.GetenvVincent Ambo1-1/+1
Not sure how this broken version ended up committed ...
2020-02-21 r/560 feat(build): Add //fun and //ops/nixos projects to CI buildsVincent Ambo1-8/+13
2020-02-21 r/559 chore: Rename pkgs->depot in all Nix file headersVincent Ambo113-349/+318
2020-02-21 r/558 refactor: Pass the depot as an argument named 'depot'Vincent Ambo1-3/+7
This change, which I've been meaning to do for a while, renames the attributes passed by readTree to things in the tree so that: * the depot root is now 'depot' * depot.third_party is additionally passed as 'pkgs' (for compatibility with exported subtrees)
2020-02-17 r/557 Merge branch 'fix/camden-trusted-users'Vincent Ambo1-0/+2
2020-02-17 fix(ops/nixos/camden): Add myself to trusted Nix usersVincent Ambo1-0/+2
2020-02-17 r/556 fix(ops/nixos/camden): Use pounce from //third_partyVincent Ambo1-1/+1
2020-02-17 r/555 chore(third_party/pounce): Override version to 1.1Vincent Ambo2-1/+19
This has not yet propagated to nixos-unstable
2020-02-17 r/554 chore(third_party): Bump nixos-unstableVincent Ambo1-3/+3
2020-02-17 r/553 feat(ops/nixos/camden): Install pounce on camdenVincent Ambo1-1/+8
2020-02-17 r/552 feat(ops/nixos/camden): Enable support for moshVincent Ambo1-0/+2
2020-02-17 r/551 Merge branch 'feat/camden-migration'Vincent Ambo1-1/+1
2020-02-17 chore(ops/nixos/nugget): Add /etc/hosts entries for camden hostnamesVincent Ambo1-1/+1
2020-02-14 r/550 refactor(ops/nixos/camden): Merge ACME certificate blocksVincent Ambo1-11/+7
2020-02-14 r/549 feat(camden): Move to actual tazj.in hostnamesVincent Ambo1-4/+15
2020-02-12 r/548 feat(ops/nixos/nugget): Add camden to /etc/hostsVincent Ambo1-0/+7
At the moment there is no other way for requests from nugget to camden to resolve correctly, as the Hyperoptic router is eating this traffic on the LAN.
2020-02-12 r/547 feat(ops/nixos/camden): Add nginx vhost for cgit at git.camdenVincent Ambo1-0/+21
2020-02-12 r/546 feat(ops/nixos/camden): Move ACME configuration out of nginxVincent Ambo1-4/+13
This makes it possible to re-use the same provisioning mechanism for multiple related domains.
2020-02-12 r/545 feat(ops/nixos/camden): Set up cgit serviceVincent Ambo1-5/+27
Adds a user & group which are configured to own the local depot copy, and a cgit service to serve it. The depot checkout was configured as: mkdir -p /var/git && chown git: /var/git # now, as the git user, in /var/git git clone --bare ... depot chmod -R g+rw /var/git chmod g+s (find /var/git -type d) git init --bare --shared=all depot My personal user is a member of the git group, which means that after the above configuration I can push to the bare repo as my user and things work. Also, crucially, the `post-update` hook must be enabled as cgit uses the dumb HTTP transport.
2020-02-12 r/544 refactor(web/cgit-taz): Serve depot from disk location on camdenVincent Ambo1-4/+3
2020-02-11 r/543 fix(nix/tailscale): Fix incorrect Tailscale ACL config typeVincent Ambo2-11/+24
2020-02-11 r/542 feat(ops/nixos/camden): Serve /blobs/ from /var/www/blobsVincent Ambo1-1/+5
This directory is writeable by me and is intended to make it easy to serve random blobs.
2020-02-11 r/541 feat(ops/nixos/camden): Enable haveged entropy "generator"Vincent Ambo1-3/+4
2020-02-11 r/540 feat(ops/nixos/nugget): Set up nginx serving homepage & blogVincent Ambo1-0/+53
This nginx does not currently log access correctly because for some impenetrable reason (as is tradition), neither /dev/stdout nor /dev/fd/1 exist for nginx at runtime. This is probably systemd's doing, but I'll debug it later.
2020-02-11 r/539 refactor(web): Let //web/ derivations build static pages onlyVincent Ambo3-93/+14
Removes nginx configuration built by the web targets (with the exception of the includable block used to set up redirects for old blog URLs).
2020-02-11 r/538 fix(ops/nixos/camden): Use package set from depot pinVincent Ambo1-2/+9
2020-02-11 r/537 feat(nix/tailscale): Add function for generating tailscale ACLsVincent Ambo2-1/+27
... and use it on Camden!
2020-02-11 r/536 feat(ops/nixos/camden): Join camden.tazj.in into Tailscale meshVincent Ambo1-3/+21
2020-02-11 r/535 fix(ops/nixos): Add camden to rebuilder scriptVincent Ambo1-0/+4
This should probably be templated instead.
2020-02-11 r/534 feat(ops/nixos): Add initial configuration for host camdenVincent Ambo3-7/+96
2020-02-11 r/533 feat(ops/nixos/nugget): Enable tailscale-relayVincent Ambo1-0/+12
2020-02-11 r/532 feat(ops/nixos): Add NixOS module for running tailscaleVincent Ambo2-0/+78
This uses the "legacy" tailscale Linux client, but built from source as per the previous commits.
2020-02-11 r/531 fix(third_party/tailscale): Add patch to make taillogin workVincent Ambo2-0/+30
2020-02-11 r/530 chore(ops/nixos/nugget): Install tailscale on nuggetVincent Ambo1-0/+1
2020-02-11 r/529 fix(third_party/tailscale): Add default relaynode acl.json to outputVincent Ambo1-1/+6
2020-02-10 r/528 fix(third_party/tailscale): Build all sub-packagesVincent Ambo1-0/+2
At the moment it seems like all of them are still required - things are in flux!
2020-02-10 r/527 feat(third_party): Add package for tailscaleVincent Ambo2-0/+33
Adds a package for the now-opensourced tailscale client tailscale client.
2020-02-10 r/526 docs(web/blog): Add some TODO entries for the draftVincent Ambo1-1/+17
2020-02-10 r/525 docs(web/blog): Rewrite some style issues in the Emacs postVincent Ambo1-35/+35
2020-02-10 r/524 feat(web/blog): Add draft blog post on EmacsVincent Ambo2-0/+223
This post is a draft, i.e. not linked from the index. It's not a secret, but if you do find it through this commit before its publication please don't share it too widely yet.
2020-02-10 r/523 style(web/homepage): Highlight <kbd> elements like buttonsVincent Ambo1-0/+14
2020-02-10 r/522 fix(web/homepage): Make .uncoloured-link work againVincent Ambo1-0/+4
2020-02-09 r/521 feat(web/blog): Add support for draft & unlisted postsVincent Ambo2-8/+39
Posts with either `draft = true;` or `listed = false;` will no longer be included in index generation and will have a warning callout inserted at the top of the page urging people not to share the links to them.
2020-02-09 r/520 style(web/blog): Minor formatting fixes in Watchguard postVincent Ambo1-4/+4
2020-02-09 r/519 style(web/homepage): Overflow long code lines into scroll barsVincent Ambo1-3/+2
generated by cgit-pink 1.4.1 (git 2.44.2) at 2024-11-15T20·35+0000