about summary refs log tree commit diff
path: root/ops
AgeCommit message (Collapse)AuthorFilesLines
2020-02-21 r/559 chore: Rename pkgs->depot in all Nix file headersVincent Ambo9-46/+44
2020-02-17 r/557 Merge branch 'fix/camden-trusted-users'Vincent Ambo1-0/+2
2020-02-17 fix(ops/nixos/camden): Add myself to trusted Nix usersVincent Ambo1-0/+2
2020-02-17 r/556 fix(ops/nixos/camden): Use pounce from //third_partyVincent Ambo1-1/+1
2020-02-17 r/553 feat(ops/nixos/camden): Install pounce on camdenVincent Ambo1-1/+8
2020-02-17 r/552 feat(ops/nixos/camden): Enable support for moshVincent Ambo1-0/+2
2020-02-17 r/551 Merge branch 'feat/camden-migration'Vincent Ambo1-1/+1
2020-02-17 chore(ops/nixos/nugget): Add /etc/hosts entries for camden hostnamesVincent Ambo1-1/+1
2020-02-14 r/550 refactor(ops/nixos/camden): Merge ACME certificate blocksVincent Ambo1-11/+7
2020-02-14 r/549 feat(camden): Move to actual tazj.in hostnamesVincent Ambo1-4/+15
2020-02-12 r/548 feat(ops/nixos/nugget): Add camden to /etc/hostsVincent Ambo1-0/+7
At the moment there is no other way for requests from nugget to camden to resolve correctly, as the Hyperoptic router is eating this traffic on the LAN.
2020-02-12 r/547 feat(ops/nixos/camden): Add nginx vhost for cgit at git.camdenVincent Ambo1-0/+21
2020-02-12 r/546 feat(ops/nixos/camden): Move ACME configuration out of nginxVincent Ambo1-4/+13
This makes it possible to re-use the same provisioning mechanism for multiple related domains.
2020-02-12 r/545 feat(ops/nixos/camden): Set up cgit serviceVincent Ambo1-5/+27
Adds a user & group which are configured to own the local depot copy, and a cgit service to serve it. The depot checkout was configured as: mkdir -p /var/git && chown git: /var/git # now, as the git user, in /var/git git clone --bare ... depot chmod -R g+rw /var/git chmod g+s (find /var/git -type d) git init --bare --shared=all depot My personal user is a member of the git group, which means that after the above configuration I can push to the bare repo as my user and things work. Also, crucially, the `post-update` hook must be enabled as cgit uses the dumb HTTP transport.
2020-02-11 r/543 fix(nix/tailscale): Fix incorrect Tailscale ACL config typeVincent Ambo1-8/+10
2020-02-11 r/542 feat(ops/nixos/camden): Serve /blobs/ from /var/www/blobsVincent Ambo1-1/+5
This directory is writeable by me and is intended to make it easy to serve random blobs.
2020-02-11 r/541 feat(ops/nixos/camden): Enable haveged entropy "generator"Vincent Ambo1-3/+4
2020-02-11 r/540 feat(ops/nixos/nugget): Set up nginx serving homepage & blogVincent Ambo1-0/+53
This nginx does not currently log access correctly because for some impenetrable reason (as is tradition), neither /dev/stdout nor /dev/fd/1 exist for nginx at runtime. This is probably systemd's doing, but I'll debug it later.
2020-02-11 r/538 fix(ops/nixos/camden): Use package set from depot pinVincent Ambo1-2/+9
2020-02-11 r/537 feat(nix/tailscale): Add function for generating tailscale ACLsVincent Ambo1-1/+8
... and use it on Camden!
2020-02-11 r/536 feat(ops/nixos/camden): Join camden.tazj.in into Tailscale meshVincent Ambo1-3/+21
2020-02-11 r/535 fix(ops/nixos): Add camden to rebuilder scriptVincent Ambo1-0/+4
This should probably be templated instead.
2020-02-11 r/534 feat(ops/nixos): Add initial configuration for host camdenVincent Ambo3-7/+96
2020-02-11 r/533 feat(ops/nixos/nugget): Enable tailscale-relayVincent Ambo1-0/+12
2020-02-11 r/532 feat(ops/nixos): Add NixOS module for running tailscaleVincent Ambo2-0/+78
This uses the "legacy" tailscale Linux client, but built from source as per the previous commits.
2020-02-11 r/530 chore(ops/nixos/nugget): Install tailscale on nuggetVincent Ambo1-0/+1
2020-02-09 r/508 chore(ops/infra/k8s): Bump website replicas to 3Vincent Ambo1-1/+1
There are typically 3 machines in the cluster, might as well have 3 website instances!
2020-02-09 r/506 fix(ops/infra/k8s): Send www.* to nginx for redirectionsVincent Ambo1-1/+9
2020-02-09 r/503 feat(ops/infra/k8s): Add website deployment configurationVincent Ambo1-0/+37
2020-02-09 r/502 docs: Update README with new website setupVincent Ambo1-1/+1
2020-02-09 r/500 chore(ops/infra/k8s): Delete tazblog deploymentVincent Ambo3-37/+3
2020-02-08 r/483 feat(ops/nixos/nugget): Install i3lockVincent Ambo1-0/+1
2020-02-07 r/478 feat(ops/nixos/nugget): Enable pcscd & install Yubikey toolsVincent Ambo1-0/+8
2020-02-04 r/476 feat(ops/nixos/nugget): Enable U2F hardware supportVincent Ambo1-0/+1
2020-01-25 r/456 feat(ops/nixos/nugget): Install unzipVincent Ambo1-0/+1
2020-01-20 r/435 feat(ops/nixos/nugget): Enable Keybase "service"Vincent Ambo1-0/+2
2020-01-20 r/434 feat(ops/mq_cli): Bump dependencies & add derivationVincent Ambo4-124/+62
2020-01-20 r/433 feat(ops/posix_mq.rs): Set up Nix buildVincent Ambo3-1/+57
2020-01-20 r/432 chore(ops): Remove deprecated .travis.yml filesVincent Ambo2-6/+0
2020-01-20 r/431 chore(ops/posix_mq.rs): Update crate dependencies to recent versionsVincent Ambo5-26/+18
First bump since 2017! This changes the code to be compatible with newer versions of the `nix` crate, which has shuffled things around a bit.
2020-01-20 r/430 Add 'ops/mq_cli/' from commit 'df29b08bffc90cfd4f2d963a8e48d89f7a86308d'Vincent Ambo8-0/+537
git-subtree-dir: ops/mq_cli git-subtree-mainline: b59c7e693c21cf76619ad89ae008d92ebbb92dad git-subtree-split: df29b08bffc90cfd4f2d963a8e48d89f7a86308d
2020-01-20 r/429 Add 'ops/posix_mq.rs/' from commit 'f7d1a38da67e92e0e87dbb988d288f0be2714f5c'Vincent Ambo9-0/+521
git-subtree-dir: ops/posix_mq.rs git-subtree-mainline: 8f684972695aeb64d1c09499bb14c5cd65bafd91 git-subtree-split: f7d1a38da67e92e0e87dbb988d288f0be2714f5c
2020-01-19 r/423 feat(third_party/guile): Override guile to version 3.0.0Vincent Ambo1-0/+1
Lets try this thing out!
2020-01-19 r/422 feat(ops/nixos/nugget): Install millerVincent Ambo1-0/+1
2020-01-19 r/419 chore(ops/nixos/nugget): Aimlessly tweak font configurationVincent Ambo1-0/+11
These settings seem to be very mildly better than what I had before, but I'm not entirely sure.
2020-01-19 r/417 fix(infra/k8s/nixery): Add GCSR hosts to SSH known_hosts for NixeryVincent Ambo1-0/+1
Unsure how this worked at all previously?
2020-01-19 r/416 feat(ops/nixos/nugget): Connect to wifi & install Google ChromeVincent Ambo1-0/+10
This adds configuration which, sometimes, when the stars align just right, makes it possible to cast to the Chromecast from nugget.
2020-01-19 r/415 chore(build): Rename tazjins-depot -> depotVincent Ambo1-1/+1
Sourcehut namespaces this under ~tazjin/ anyways.
2020-01-19 r/414 chore(ops/sync-gcsr): Rotate Cachix secret in sourcehutVincent Ambo1-1/+1
2020-01-18 r/413 fix(ops/sync-gcsr): Ensure cachix is installedVincent Ambo1-0/+1
generated by cgit-pink 1.4.1 (git 2.44.2) at 2024-11-05T04·07+0000