about summary refs log tree commit diff
path: root/users/tazjin/nixos/koptevo/default.nix
AgeCommit message (Collapse)AuthorFilesLines
2024-09-23 r/8709 chore(tazjin/koptevo): allow other device's public keysVincent Ambo1-0/+3
Change-Id: I4955c2cde3cb1ec4d7b72eaaf7f6acc80150dd73 Reviewed-on: https://cl.tvl.fyi/c/depot/+/12503 Reviewed-by: tazjin <tazjin@tvl.su> Tested-by: BuildkiteCI Autosubmit: tazjin <tazjin@tvl.su>
2024-09-23 r/8708 fix(tazjin/koptevo): bind quassel on IPv6, tooVincent Ambo1-0/+1
This should make it possible to use Quassel over Yggdrasil. Change-Id: Iad81af7c85771928fd50860393d58a14d7878a40 Reviewed-on: https://cl.tvl.fyi/c/depot/+/12502 Reviewed-by: tazjin <tazjin@tvl.su> Autosubmit: tazjin <tazjin@tvl.su> Tested-by: BuildkiteCI
2024-09-16 r/8700 fix(tazjin/koptevo): fix yggdrasil listening configurationVincent Ambo1-3/+3
Change-Id: Ic7b89fc61f7d5b74e420ae633b2ced26c20909c3 Reviewed-on: https://cl.tvl.fyi/c/depot/+/12492 Tested-by: BuildkiteCI Reviewed-by: tazjin <tazjin@tvl.su>
2024-09-15 r/8697 fix(tazjin/nixos): set rad.tazj.in as preferred seed in explorerVincent Ambo1-1/+11
This requires overriding build-time configuration, so I've added a little fixed point that takes care of that. Change-Id: Ie990e362c6e00aa6e3be66b04af4b62034b03515 Reviewed-on: https://cl.tvl.fyi/c/depot/+/12489 Tested-by: BuildkiteCI Reviewed-by: tazjin <tazjin@tvl.su> Autosubmit: tazjin <tazjin@tvl.su>
2024-09-14 r/8696 feat(tazjin/nixos): serve radicle explorer UI on koptevoVincent Ambo1-1/+21
Change-Id: Ie5075ee8d2663bfffb3f90388a46f9bc19f6e462 Reviewed-on: https://cl.tvl.fyi/c/depot/+/12488 Tested-by: BuildkiteCI Reviewed-by: tazjin <tazjin@tvl.su>
2024-09-14 r/8694 feat(tazjin/nixos): run Radicle seed node & httpd on koptevoVincent Ambo1-0/+41
Change-Id: Icd433f433c0abe8f54735ab45a636b4561fe8d3e Reviewed-on: https://cl.tvl.fyi/c/depot/+/12486 Tested-by: BuildkiteCI Reviewed-by: tazjin <tazjin@tvl.su>
2024-09-14 r/8693 feat(tazjin/nixos): set up yggdrasil on all physical machinesVincent Ambo1-0/+4
Change-Id: I1d722c6d2e6192c445e77cb9b186a5320c2a60ec Reviewed-on: https://cl.tvl.fyi/c/depot/+/12485 Reviewed-by: tazjin <tazjin@tvl.su> Tested-by: BuildkiteCI
2024-09-14 r/8692 feat(tazjin/nixos): serve homepage on yggdrasilVincent Ambo1-0/+2
First test of running an Yggdrasil service, lets see how that goes! Change-Id: Iac10b72f7314a45df13ea539c5c1cef6c994154f Reviewed-on: https://cl.tvl.fyi/c/depot/+/12484 Reviewed-by: tazjin <tazjin@tvl.su> Tested-by: BuildkiteCI
2024-09-14 r/8691 chore(users/tazjin): move my homepage module into //usersVincent Ambo1-2/+2
This was in //ops for legacy reasons, but this is really not necessary. Change-Id: I758b257838993ef0f7d55809c137118826e2ba85 Reviewed-on: https://cl.tvl.fyi/c/depot/+/12483 Tested-by: BuildkiteCI Reviewed-by: tazjin <tazjin@tvl.su>
2024-09-14 r/8690 feat(tazjin/koptevo): configure yggdrasil networkVincent Ambo1-1/+25
I'm looking to replace tailscale with this for some use-cases. Change-Id: I00f765a403879ef048e635a6fedcfdde3f685159 Reviewed-on: https://cl.tvl.fyi/c/depot/+/12482 Reviewed-by: tazjin <tazjin@tvl.su> Tested-by: BuildkiteCI
2024-09-14 r/8689 feat(tazjin/nixos): issue wildcard cert for yggdrasil servicesVincent Ambo1-2/+17
Issue a wildcard certificate using the Yandex Cloud DNS plugin (which is where DNS for tazj.in is hosted). Change-Id: I44fa48add660f4f4324ec4b056a81d78c45ff4f4 Reviewed-on: https://cl.tvl.fyi/c/depot/+/12481 Reviewed-by: tazjin <tazjin@tvl.su> Tested-by: BuildkiteCI
2024-09-13 r/8670 feat(tazjin/nixos): install radicle-node on all machinesVincent Ambo1-4/+5
Change-Id: I67ce259d890bd508cd9c9516702d51d5e70f4065 Reviewed-on: https://cl.tvl.fyi/c/depot/+/12470 Reviewed-by: tazjin <tazjin@tvl.su> Autosubmit: tazjin <tazjin@tvl.su> Tested-by: BuildkiteCI
2024-04-28 r/8025 chore(3p/sources): Bump channels & overlayssterni1-2/+4
- //tvix: address new clippy lints - //users/tazjin: Satisfy gonic module's new need for a playlist folder. - //users/aspen/games: adjust for changed location of df's default init.txt and d_init.txt. Change-Id: I00a2adb506ae866206fb6f88c39c9a6af320380f Reviewed-on: https://cl.tvl.fyi/c/depot/+/11509 Reviewed-by: tazjin <tazjin@tvl.su> Autosubmit: sterni <sternenseemann@systemli.org> Tested-by: BuildkiteCI Reviewed-by: aspen <root@gws.fyi>
2024-02-26 r/7609 fix(tazjin/koptevo): add hard dependency from gonic on geesefsVincent Ambo1-1/+4
Change-Id: Id4c8346a4bc15e7e7da7188679f54ec1e054cf53 Reviewed-on: https://cl.tvl.fyi/c/depot/+/11028 Autosubmit: tazjin <tazjin@tvl.su> Reviewed-by: tazjin <tazjin@tvl.su> Tested-by: BuildkiteCI
2024-02-25 r/7603 feat(tazjin/koptevo): experimental miniflux setupVincent Ambo1-0/+1
Change-Id: I2020a6bf2262966d41d3b47a17b122df121d661d
2024-02-25 r/7602 chore(tazjin/nixos): remove monica setupVincent Ambo1-1/+0
I never ended up actually using this for anything. Change-Id: I2bd9a46f6284d8283453d34eab6134efc92ea684 Reviewed-on: https://cl.tvl.fyi/c/depot/+/11023 Tested-by: BuildkiteCI Reviewed-by: tazjin <tazjin@tvl.su> Autosubmit: tazjin <tazjin@tvl.su>
2023-10-01 r/6684 fix(tazjin/koptevo): let gonic access /etc/resolv.confVincent Ambo1-0/+6
Without this line, accessing external APIs from Gonic (e.g. scrobbling to Listenbrainz) does not work (unless a local resolver exists). This is because in the pure Go DNS implementation used in gonic, only /etc/resolv.conf can provide resolvers. Change-Id: I26dd9a845b0a70c4cfb983c68da2b76b7e57dfec Reviewed-on: https://cl.tvl.fyi/c/depot/+/9502 Reviewed-by: tazjin <tazjin@tvl.su> Tested-by: BuildkiteCI
2023-10-01 r/6683 fix(tazjin/koptevo): minor reliability fixes for music setupVincent Ambo1-0/+1
* zramSwap: during reindexing, geesefs can be pushed to the boundaries of what the new overaggressive OOM killer accepts, and I don't want to bother configuring that thing instead. * umount: geesefs dying unexpectedly leaves broken mounts around, clean these up before proceeding This bakes in the assumption that there's only ever one geesefs service, but that assumption is baked in anyways. Change-Id: Id85c2f5bc2312a7246ea20229eb36d2cc1bd82c0 Reviewed-on: https://cl.tvl.fyi/c/depot/+/9500 Reviewed-by: tazjin <tazjin@tvl.su> Autosubmit: tazjin <tazjin@tvl.su> Tested-by: BuildkiteCI
2023-10-01 r/6682 feat(tazjin/koptevo): deploy airsonic at player.tazj.inVincent Ambo1-1/+2
Change-Id: I9f0dec6491906319550c97d4cc15b2cdda4a5ebe Reviewed-on: https://cl.tvl.fyi/c/depot/+/9499 Tested-by: BuildkiteCI Reviewed-by: tazjin <tazjin@tvl.su> Autosubmit: tazjin <tazjin@tvl.su>
2023-09-30 r/6680 feat(tazjin/koptevo): run gonic on music.tazj.inVincent Ambo1-2/+28
Change-Id: Id281142e59647d9db02f64a352cba768d4d83237 Reviewed-on: https://cl.tvl.fyi/c/depot/+/9497 Reviewed-by: tazjin <tazjin@tvl.su> Tested-by: BuildkiteCI
2023-09-30 r/6679 feat(tazjin/nixos): add geesefs mount unit for koptevo ...Vincent Ambo1-0/+1
... this will make sense soon! Change-Id: I1f8f32d655afdf868fff4bd09e1fea2943fd7558 Reviewed-on: https://cl.tvl.fyi/c/depot/+/9496 Tested-by: BuildkiteCI Reviewed-by: tazjin <tazjin@tvl.su>
2023-06-29 r/6360 feat(tazjin/nixos): deploy monica on koptevoVincent Ambo1-0/+1
Change-Id: Iaa74d995f3b2556673095a32ec2b718dcb2d82a4 Reviewed-on: https://cl.tvl.fyi/c/depot/+/8849 Tested-by: BuildkiteCI Reviewed-by: tazjin <tazjin@tvl.su>
2023-06-22 r/6343 feat(ops): introduce (head|tail)scale server at net.tvl.fyiVincent Ambo1-0/+5
This runs a headscale server on sanduny which lets users join their machines to the TVL tailscale network. This would theoretically let people communicate with each other on the internal network, but also more notably joined servers can advertise exit node capability so that we can have our own "VPN network", for starters with endpoints in Germany, UK and Russia (whitby, sanduny and koptevo respectively). This setup isn't fully stable yet, notably: * The IP range used by tailscale is just the default one right now, I'm not sure if that should be changed or what. * The system is stateful (on sanduny), but the state is not (yet) backed up anywhere. Use with caution. * Machine joining is a manual process requiring SSH & root access to sanduny. The process is to log in to sanduny, then get a headscale shell with `sudo -u headscale bash`, and to use the `headscale` CLI within there to administrate access. I've opted to create a user account `tvl` for TVL-owned machines, and a personal account for myself and my machines. Change-Id: I4f1be1fe8062a6c2e77203ff72fe8709f4e4dec8 Reviewed-on: https://cl.tvl.fyi/c/depot/+/8837 Reviewed-by: sterni <sternenseemann@systemli.org> Reviewed-by: flokli <flokli@flokli.de> Tested-by: BuildkiteCI
2023-06-18 r/6328 feat(tazjin/koptevo): deploy tgsaVincent Ambo1-0/+10
The main instance is still running on polyanka, but things are moving in this direction. Change-Id: Idfa9e508023c05148003ac4621ae01dceb284c66 Reviewed-on: https://cl.tvl.fyi/c/depot/+/8827 Reviewed-by: tazjin <tazjin@tvl.su> Tested-by: BuildkiteCI
2023-06-15 r/6320 feat(tazjin/koptevo): move some of my sites hereVincent Ambo1-0/+2
Change-Id: Ie7c55ee286d2a1ebcc623374fb02775ed8dfbb58 Reviewed-on: https://cl.tvl.fyi/c/depot/+/8789 Tested-by: BuildkiteCI Reviewed-by: tazjin <tazjin@tvl.su> Autosubmit: tazjin <tazjin@tvl.su>
2023-06-15 r/6319 feat(tazjin/koptevo): provision certificate (for quassel)Vincent Ambo1-2/+11
With this commit, Quassel becomes operative on koptevo. Change-Id: Ic877c5bb1525cf5288b0091cb0cd1328b5276264 Reviewed-on: https://cl.tvl.fyi/c/depot/+/8788 Tested-by: BuildkiteCI Reviewed-by: tazjin <tazjin@tvl.su>
2023-06-15 r/6316 chore(tazjin/koptevo): fix some initial growing painsVincent Ambo1-3/+6
Change-Id: I614bba9e28ca789d2e641391ccf3bdbc6ff95dd5 Reviewed-on: https://cl.tvl.fyi/c/depot/+/8785 Reviewed-by: tazjin <tazjin@tvl.su> Tested-by: BuildkiteCI
2023-06-15 r/6312 feat(tazjin/nixos): initialise koptevo systemVincent Ambo1-0/+117
This is the "new polyanka" (eventually), as I'm decommissioning that host slowly. Change-Id: Ia0fe664f3bf64513d8177434c6c0fface857cd99 Reviewed-on: https://cl.tvl.fyi/c/depot/+/8783 Tested-by: BuildkiteCI Reviewed-by: tazjin <tazjin@tvl.su>
generated by cgit-pink 1.4.1 (git 2.44.2) at 2024-12-27T22·08+0000