about summary refs log tree commit diff
path: root/ops/nixos
AgeCommit message (Collapse)AuthorFilesLines
2020-06-11 r/907 fix(monorepo-gerrit): Disable 'DynamicUser' feature for GerritVincent Ambo1-0/+13
This change makes Gerrit run as the 'git' user, which can be shared by other services such as hound or cgit to access the git trees. Change-Id: Ic6c91f3e852184f5ef21f4374738cbf687462194 Reviewed-on: https://cl.tvl.fyi/c/depot/+/21 Reviewed-by: lukegb <lukegb@tvl.fyi> Reviewed-by: isomer <isomer@tvl.in>
2020-06-11 r/906 fix(monorepo-gerrit): Extract SSH username from LDAP correctlyVincent Ambo2-2/+3
2020-06-11 r/905 feat(tvl-slapd): Add lukegb's user accountVincent Ambo1-0/+9
2020-06-11 r/904 fix(monorepo-gerrit): Configure nginx reverse proxy correctlyVincent Ambo2-3/+9
Configures the reverse-proxy as per Gerrit's documentation at https://gerrit-review.googlesource.com/Documentation/config-reverseproxy.html
2020-06-11 r/903 feat(ops/nixos/modules): Add myself.Perry Lorier1-6/+15
Also alphabetise
2020-06-11 r/902 chore(ops/nixos/modules): Add riking to slapdKane York2-0/+14
2020-06-11 r/901 fix(ops/nixos/camden): Include /var/cache/nginx in nginx fix timerVincent Ambo1-1/+1
2020-06-11 r/899 feat(monorepo-gerrit): Configure Gerrit for LDAP authenticationVincent Ambo1-0/+15
2020-06-11 r/898 feat(ops/nixos/modules): Add TVL slapd moduleVincent Ambo3-0/+60
This initialises an OpenLDAP server for tvl.fyi This is the least annoying way to bootstrap Gerrit. Yep.
2020-06-11 r/897 feat(ops/nixos): Add module for configuring Gerrit for the repoVincent Ambo2-1/+35
2020-06-11 r/896 chore(ops/nixos/camden): Move camden back to nixos-unstableVincent Ambo1-1/+1
2020-06-11 r/892 feat(nixos/frog): Enable settings required for hardware supportVincent Ambo1-2/+7
... also updates to the latest kernel (this is 5.4 -> 5.6 atm)
2020-06-11 r/891 fix(nixos/frog): Use correct label for LUKS deviceVincent Ambo1-1/+1
2020-06-11 r/890 feat(ops/nixos): Initial NixOS configuration for frogVincent Ambo3-0/+240
This is mostly based on the nugget configuration, because frog replaces nugget.
2020-06-07 r/885 feat(ops/nixos/camden): Link to the TVL monorepo docVincent Ambo1-0/+2
2020-05-31 r/874 feat(ops/nixos/nugget): Install zoxideVincent Ambo1-1/+7
2020-05-26 r/858 feat(ops/nixos/camden): Index nixpkgs in houndVincent Ambo1-0/+8
There is a local nixpkgs clone at /var/git/nixpkgs which must be manually set to have 'master' point at the desired ref (hound only supports master).
2020-05-26 r/855 feat(ops/nixos/camden): Set up hound at cs.tazj.inVincent Ambo1-2/+30
2020-05-26 r/854 feat(ops/nixos): Add a module for houndVincent Ambo1-0/+62
This module sets up hound, a generic code search engine.
2020-05-26 r/853 ffeat(ops/nixos): Add a dummy to make depot available in modulesVincent Ambo2-0/+21
Because modules are not called via the default depot setup (for now ...), this introduces a dummy module that stores the depot tree itself in the module configurations. This makes it possible to write modules that use packages from the depot.
2020-05-24 r/837 feat(ops/nixos/nugget): Add sysctl setting necessary for perfVincent Ambo1-0/+4
2020-05-24 r/836 feat(ops/nixos/nugget): Install perf toolVincent Ambo1-0/+1
2020-05-23 r/830 feat(ops/nixos/nugget): Install rr and hyperfineVincent Ambo1-0/+2
2020-05-22 r/814 fix(ops/nixos): Pin systems to stable channelVincent Ambo2-2/+2
NixOS unstable has some software I want when building things, but it's also broken. This pins systems to the stable channel for now.
2020-05-22 r/810 chore: Update from Clang 9 to Clang 10 for all projectsVincent Ambo1-1/+1
2020-05-22 r/809 chore(ops/nixos/nugget): Increase user RuntimeDirectory size to 4GBVincent Ambo1-0/+5
clangd needs more space to run successfully on the Nix repository.
2020-05-22 r/807 chore(ops/nixos/nugget): Use upstream Chromium againVincent Ambo1-1/+1
Ostensibly there is also a new way to enable VAAPI, need to look into that.
2020-05-21 r/798 chore(ops/nixos/nugget): Enable fstrim serviceVincent Ambo1-0/+3
2020-05-17 r/746 feat(ops/nixos/nugget): Replace system-nix with meson-built oneVincent Ambo1-0/+1
What could possibly go wrong.
2020-05-17 r/722 feat(ops/nixos/nugget): Install meson build systemVincent Ambo1-0/+1
2020-05-11 r/711 feat(ops/nixos/camden): add /meet/ redirect to tvl.fyiLuke Granger-Brown1-0/+2
I'm too lazy to keep going to the website to click the button and also too lazy to add my own redirect. Add one to tvl.fyi.
2020-04-26 r/696 feat(ops/nixos/nugget): Enable SSH agent on nuggetVincent Ambo1-0/+1
2020-04-26 r/695 feat(ops/nixos/camden): Enable SSH agent authVincent Ambo1-0/+3
2020-04-26 r/694 feat(ops/nixos/nugget): Install idualctlVincent Ambo1-0/+1
2020-04-26 r/693 fix(ops/nixos/camden): Use new //fun/idual CLI structureVincent Ambo1-1/+2
2020-04-26 r/690 feat(ops/nixos/camden): Disable camden firewallVincent Ambo1-1/+1
The local network is considered trusted and ingress from the outside world is now handled by the Edgerouter.
2020-04-26 r/688 feat(fun/idual && nixos/camden): Add light alarm systemd unitsVincent Ambo1-1/+11
Adds a systemd unit to run the idual light alarm using a transient timer created by systemd-run.
2020-04-25 r/684 chore(ops/nixos/nugget): Remove camden from /etc/hostsVincent Ambo1-4/+0
The new router can actually deal with this sensibly.
2020-04-22 r/669 fix(ops/nixos/camden): Introduce brute-force nginx issue fixVincent Ambo1-0/+19
This adds a timer running every minute that fixes the nginx permissions that were broken in NixOS 20.03
2020-04-21 feat(ops/nixos/camden): Install 'bat' and 'ripgrep' on camdenVincent Ambo1-0/+2
2020-04-21 feat(ops/nixos/camden): Use my cachix cache on camdenVincent Ambo1-0/+8
This cache is populated by sourcehut builds.
2020-04-21 r/650 feat(ops/nixos/camden): Add vhost for TVL homepageVincent Ambo1-0/+15
2020-04-21 r/648 feat(ops/nixos/camden): Provision certificate for tvl.fyiVincent Ambo1-0/+7
2020-04-20 r/640 feat(ops/nixos/camden): Add static IPv6 address to camdenVincent Ambo1-0/+7
2020-04-19 r/639 feat(ops/nixos/camden): Configure honk serviceVincent Ambo1-0/+18
2020-04-19 r/637 feat(ops/nixos/camden): Install honkVincent Ambo1-0/+1
2020-04-17 r/630 feat(ops/nixos/nugget): Add chromium with VAAPI patchesVincent Ambo1-2/+2
These patches enable hardware-accelerated video decoding, which is useful for Stadia. The main issue with this is that Hydra doesn't currently cache Chromium with these patches, which means that it is built from scratch which takes in the order of 5 hours on an otherwise unused nugget.
2020-04-11 r/629 chore(ops/nixos/nugget): Install steam againVincent Ambo1-0/+1
2020-04-04 r/626 chore(ops/nixos/camden): Enable HSTS headers on *.tazj.inVincent Ambo1-0/+2
2020-04-04 r/623 chore(ops/nixos/camden): Use upstream tailscale moduleVincent Ambo1-18/+1
generated by cgit-pink 1.4.1 (git 2.44.2) at 2024-12-24T23·38+0000