depot - monorepo for the virus lounge

Age	Commit message (Collapse)	Author	Files	Lines
2021-12-26	r/3410 feat(monorepo-gerrit): Configure for Keycloak compatibility	Vincent Ambo	1	-0/+0
	Change-Id: Ic3fce02b071c09cf03e652510f16bafb795a5a1d Reviewed-on: https://cl.tvl.fyi/c/depot/+/4614 Autosubmit: tazjin <mail@tazj.in> Tested-by: BuildkiteCI Reviewed-by: lukegb <lukegb@tvl.fyi> Reviewed-by: grfn <grfn@gws.fyi>
2021-12-25	r/3402 refactor(ops/whitby): Move Gerrit secrets into agenix	Vincent Ambo	2	-0/+16
	Gerrit has OAuth2 and email related secrets which now live in agenix instead of a random file on disk. Change-Id: I6220fbb7a2e2ec0102a900b4bcf6150b8b4d32ef Reviewed-on: https://cl.tvl.fyi/c/depot/+/4612 Tested-by: BuildkiteCI Autosubmit: tazjin <mail@tazj.in> Reviewed-by: lukegb <lukegb@tvl.fyi>
2021-12-25	r/3401 feat(whitby): Configure initial Keycloak setup	Vincent Ambo	2	-0/+1
	Trialing this as an alternative to CAS that is a little easier to configure and can help us delegate authentication to other OIDC services. Change-Id: Iad63724d349334910af8fed0b148e4ba428f796b Reviewed-on: https://cl.tvl.fyi/c/depot/+/4608 Tested-by: BuildkiteCI Autosubmit: tazjin <mail@tazj.in> Reviewed-by: lukegb <lukegb@tvl.fyi>
2021-12-12	r/3209 feat(ops/secrets): Make (encrypted) secrets part of the tree	Vincent Ambo	1	-0/+21
	Currently in NixOS configuration using agenix secrets there is no build time validation of secret paths - things fail at runtime (system activation). To prevent that, this CL makes the secrets part of the tree based on the same configuration file used by agenix itself. This guards against: * agenix secrets.nix definition for a non-existent file * age.secrets value in a NixOS config for a non-existent secret Change-Id: I5b191dcbd5b2522566ff7c38f8a988bbf7679364
2021-12-11	r/3208 chore(ops/secrets): Reencrypt all secrets with sterni included	Vincent Ambo	12	-63/+81
	Change-Id: I14043c2bd9da43a6b7de65baf0ebb75eaf3c4e22
2021-12-11	r/3207 feat(ops/secrets): add keys for sterni	sterni	1	-1/+5
	Change-Id: Idf13f7737dd51e74e87093e07cdf22ad24407944
2021-12-10	r/3205 fix(ops/secrets): Fix missing file	Vincent Ambo	1	-0/+13
	... okay, this is like the 5th error related to something with this and file paths. Need to write some validation logic. Change-Id: I4314818aa1bc25b8cf7bd3593850d3836ccb867c
2021-12-10	r/3203 refactor(ops): Move panettone secrets to agenix	Vincent Ambo	1	-0/+1
	Relates to b/161 Change-Id: I508e5a0eacab668f4bd39a2c888d894b96bed093
2021-12-10	r/3199 refactor(ops): Move Nix cache secret to agenix	Vincent Ambo	3	-0/+25
	... and also the public key, just to keep the distribution mechanism the same. Change-Id: Ief14daf9344c0fb99eeb5789c1ec9bfb1f12bee0
2021-12-10	r/3198 refactor(ops): Use besadii configuration from agenix	Vincent Ambo	2	-0/+10
	We already checked this in, but this commit adds the configuration for making use of it. There are two copies of besadii's JSON configuration with different permissions. Note that the buildkite-graphql-token path needs to be updated in static-pipeline.yml, but this needs to happen in a separate commit after deploy because the pipeline will break otherwise. Change-Id: I6fab4bf1a2e679df7cf76521e2b53bd9dadbac62
2021-12-10	r/3197 refactor(ops): Move grafana secret into agenix	Vincent Ambo	2	-0/+1
	Change-Id: Id141758135c796881e91d20b950dae74c40d9ab3
2021-12-10	r/3189 chore(ops/secrets): Reencrypt with grfn's key included	Vincent Ambo	7	-18/+21
	Change-Id: I66df150ab5070a81a92f0741334639df9df1f86f
2021-12-10	r/3187 feat(ops/secrets): Add key for grfn	Griffin Smith	1	-1/+5
	Change-Id: I8063ae804932e3815e9a499e0206806818b9b021
2021-12-10	r/3184 refactor(ops): Move irccat secret into agenix	Vincent Ambo	2	-1/+13
	The irccat module uses DynamicUser, so to grant permission to it a new group has been added for irccat. I have some vague memory of DynamicUser + Group not behaving as one would expect, but we'll see what happens. Change-Id: Iab9f6a3f1a53c4133b635458ce173250cc9a3fac
2021-12-10	r/3183 refactor(ops): Move clbot SSH key into agenix	Vincent Ambo	2	-0/+1
	Change-Id: Iae03ead7dda0509689a76f0d76f9cfeb8434e967
2021-12-10	r/3176 refactor(ops): Move buildkite-agent-token into agenix	Vincent Ambo	2	-0/+11
	Relates to b/161 Change-Id: I5d3a698d437928966d8b78ce9e0ba226c1437655
2021-12-10	r/3175 refactor(ops): Move owothia secret into agenix	Vincent Ambo	2	-1/+2
	Relates to b/161 Change-Id: I25445281b0dd3c3f3660f8bb0d8337506a1e427b
2021-12-10	r/3174 refactor(ops): Move clbot secret into agenix	Vincent Ambo	2	-0/+11
	Relates to b/161 Change-Id: I7badf22ff93bb4e8b06e4dd4a8bf880b0bd48f09
2021-12-10	r/3173 feat(ops/secrets): Configure secrets for gerrit-queue	Vincent Ambo	2	-0/+10
	Adds a systemd EnvironmentFile secret that contains the Gerrit username & password for gerrit-queue. Change-Id: I25acf87764c26774045138402b8a417b6813ee8f
2021-12-08	r/3159 feat(ops/secrets): Bootstrap agenix secrets folder	Vincent Ambo	4	-0/+15
	Sets up the key set and adds an initial secret (besadii config with tokens) to be deployed to whitby. Change-Id: Ic07fd5e66b9e7a533013e04c35e052c2aa11f77d
2020-06-29	r/1130 chore(ops): Clean up old GCP infrastructure files	Vincent Ambo	7	-1/+0
	This removes almost all of the GCP-infrastructure leftovers from my previous setup. The DNS configuration is retained, but moves to my user folder instead. Change-Id: I1867acd379443882f11a3c645846c9902eadd5b0 Reviewed-on: https://cl.tvl.fyi/c/depot/+/782 Tested-by: BuildkiteCI Reviewed-by: eta <eta@theta.eu.org> Reviewed-by: isomer <isomer@tvl.fyi>
2020-01-18	r/408 feat(ops/infra/k8s): Add sourcehut configuration to sync-gcsr	Vincent Ambo	1	-0/+0

2020-01-05	r/338 chore(ops/secrets): Add Google Maps API key	Vincent Ambo	1	-0/+0

2019-12-25	r/300 chore(lieer): Remove OAuth client patch	Vincent Ambo	1	-0/+0
	This is now done in my work-specific configuration, which is elsewhere.
2019-12-23	r/294 feat(third_party/lieer): Overwrite included client secret	Vincent Ambo	1	-0/+0

2019-12-20	r/238 refactor: Fix a variety of filepaths for repo relayouting	Vincent Ambo	1	-0/+1
	This fixes readTree and the various project builds, as well as (hopefully) most documentation links inside of the projects.
2019-12-20	r/237 chore: Significantly restructure folder layout	Vincent Ambo	4	-0/+0
	This moves the various projects from "type-based" folders (such as "services" or "tools") into more appropriate semantic folders (such as "nix", "ops" or "web"). Deprecated projects (nixcon-demo & gotest) which only existed for testing/demonstration purposes have been removed. (Note: all builds are broken with this commit)