CCCHH/nix-infra
CCCHH/nix-infra
2
3
Fork 3
Code Issues Pull requests 2 Projects Wiki Activity
190 commits 9 branches 0 tags 565 KiB
Commit graph

55 commits

Author SHA1 Message Date
christian 4ecc262c9b
fix: use http clone url from forgejo 2024-11-17 21:04:47 +01:00
jopejoe1 2003367108
move authorized keys to flake input 2024-11-17 20:33:38 +01:00
christian 53e33a6641
flake.lock: Update 
Flake lock file updates:

• Updated input 'nixos-generators':
    'github:nix-community/nixos-generators/7c60ba4bc8d6aa2ba3e5b0f6ceb9fc07bc261565' (2024-10-21)
  → 'github:nix-community/nixos-generators/06ffce1a8d95e95c06a4bcfa117dd960b14a7101' (2024-11-14)
• Updated input 'nixos-generators/nixlib':
    'github:nix-community/nixpkgs.lib/cce4521b6df014e79a7b7afc58c703ed683c916e' (2024-10-20)
  → 'github:nix-community/nixpkgs.lib/e04234d263750db01c78a412690363dc2226e68a' (2024-11-10)
• Updated input 'nixos-generators/nixpkgs':
    follows 'nixpkgs'
  → 'github:NixOS/nixpkgs/aebe249544837ce42588aa4b2e7972222ba12e8f' (2024-11-10)
• Updated input 'nixpkgs':
    'github:nixos/nixpkgs/11f65b4b0405cff5b54c813626bddcf5435d7ad2' (2024-11-09)
  → 'github:nixos/nixpkgs/bf6132dc791dbdff8b6894c3a85eb27ad8255682' (2024-11-17)
• Updated input 'sops-nix':
    'github:Mic92/sops-nix/f1675e3b0e1e663a4af49be67ecbc9e749f85eb7' (2024-11-10)
  → 'github:Mic92/sops-nix/472741cf3fee089241ac9ea705bb2b9e0bfa2978' (2024-11-17)
• Removed input 'sops-nix/nixpkgs-stable'
 2024-11-17 20:25:16 +01:00
jopejoe1 e404d4740f
remove nixpkgs-unstable 
the current version of woodpecker-server in stable now has the features this was original used for, not other usages of unstable are in tree left so removing it.
 2024-11-17 19:33:00 +01:00
jopejoe1 6c85b91efb
make use of nixosModules output 2024-11-17 19:33:00 +01:00
jopejoe1 7d58a3db4a
move overlay to overlays output 2024-11-17 19:32:59 +01:00
jopejoe1 4fc8e31df0
Remove version lock for shairport-sync 
The current version in nixpkgs is newer than the one we are currently locking, the nqptp fix was also already in nixpkgs.

Co-authored-by: c6ristian <c6ristian@christian.moe>
 2024-11-04 23:35:22 +01:00
June 4f789adb21
hydra: configure hydra host 2024-10-30 01:44:12 +01:00
June fefff391b7
add hydraJobs for packages and nixosConfigurations 2024-10-29 21:30:16 +01:00
June c54b655b0e
all: setup prometheus node exporter for all hosts on Chaosknoten 
Do that so we can have monitoring for them via prometheus, alertmanager
and grafana.
Also add a local ip for the git host for PVE firewalling.
 2024-10-03 16:09:42 +02:00
June 178777007f
penpot: configure penpot host using oci-containers 2024-08-10 22:38:05 +02:00
June 028b5dc9e8
Configure Uptime-Kuma host 2024-08-04 02:19:26 +02:00
June df17b25009
Add woodpecker host running a woodpecker-server and -agent for CI 2024-06-22 04:20:38 +02:00
June 3059843e1a
Add mjolnir host running mjolnir for Matrix moderation 
Also see:
https://wiki.hamburg.ccc.de/infrastructure:services:mjolnir
 2024-06-20 23:45:44 +02:00
June f3f5d5a611
Use forgejo package from stable (24.05) instead of from unstable 2024-06-20 04:12:42 +02:00
June 33599951ef
Upgrade to NixOS 24.05 
Also bump the default state version to 24.05.

See the release notes of the 24.05 release for more information:
https://nixos.org/manual/nixos/stable/release-notes#sec-release-24.05
 2024-06-17 20:59:03 +02:00
christian b30952a049
Add mqtt server (mosquitto) 
The config was based on the exsisting mosquitto setup.
 2024-06-11 23:03:57 +02:00
June ef1710b09f
Configure basic yate host 2024-06-08 20:18:59 +02:00
June 41f04732c2
Switch from colmena to standard nixosConfigurations 
Those can then be deployed using for example nixos-rebuild or bij.
Also ensure all hosts have an fqdn, where possible, in order for bij to
be able to work with them more easily. Tho not really, since for actual
deployment one still needs to set the target manually to set usage of
the colmena-deploy user.

https://git.clerie.de/clerie/bij
 2024-05-27 01:43:53 +02:00
June 7c7da0db05
Add a nix box managed by June 
Every admin can login as its own user with the keys listed here:
https://git.hamburg.ccc.de/CCCHH/infrastructure-authorized-keys/src/branch/trunk/authorized_keys
 2024-05-26 14:39:28 +02:00
June 3aae597752
Switch the public-web-static hosts secret mngmt from colmena to sops-nix 2024-05-26 03:49:43 +02:00
June dc439abefe
Switch the netbox hosts secret management from colmena to sops-nix 2024-05-26 03:14:31 +02:00
June 154edc1972
Switch the matrix hosts secret management from colmena to sops-nix 2024-05-26 03:01:34 +02:00
June 361ccac69f
Switch the forgejo-actions-runners secret mngmt from colmena to sops-nix 2024-05-26 02:50:08 +02:00
June 88e3da11a6
Introduce sops and sops-nix for secret management 
Use the GPG keys used for the password-store noc directory for the admin
keys.
Switch the git hosts secret management from colmena to sops-nix.

https://github.com/getsops/sops
https://github.com/Mic92/sops-nix
 2024-05-25 16:47:34 +02:00
June 475ab8cc66
Configure EH22 Wiki 2024-05-17 20:42:48 +02:00
June c97f169b77
Add print server for label printer to have it easily usable via SSH 
Add and configure a print server for the Brother P-touch QL 500 label
printer, so that it can be easily used via SSH.

Do the following to make that work:
- Configure the print server host.
- Package printer-driver-ptouch to have a working driver for the label
  printer.
- Configure CUPS.
- Add a script "forcecommand-lpr-wrapper", which works together with the
  ForceCommand sshd_config option and wraps lpr to provide an easy
  interface to use the Brother QL 500 label printer via SSH.
- Add a print user and configure SSH to have the
  "forcecommand-lpr-wrapper" script accessible without a password using
  the print user via SSH.
 2024-04-14 18:46:51 +02:00
June 1ad6ac9dc0
Run "nix fmt" to format this entire flake 2024-03-06 22:50:32 +01:00
June 71e1684f76
Add a formatter, which can be used by running "nix fmt" 
Use nixpkgs-fmt because what it does closely aligns to this repos
already established conventions and it doesn't do weird stuff.

Also see:
https://nixos.org/manual/nix/stable/command-ref/new-cli/nix3-fmt.html
https://github.com/nix-community/nixpkgs-fmt
 2024-03-06 22:50:26 +01:00
June f6567bffb2
Use Forgejo 1.21 from NixOS unstable to make Actions work properly 
1.21 has scheduled Actions for example, which we need.
 2024-01-20 21:34:09 +01:00
June 85c059c75c
Configure new forgejo-actions-runner host 
Configure it to host a forgejo-actions-runner capable of handling CI
workloads running on Docker.
 2024-01-18 05:03:21 +01:00
June ec5430ee34 Add and configure new Git server using Forgejo 2024-01-14 23:19:41 +01:00
June df9b76528d Switch to pkgs from stable 
I think we used pkgs from unstable (as pkgs-unstable), because the Go
version in NixOS 23.05 was too old. But now that we're on 23.11, which
has a newer Go version, we can use pkgs from stable.
 2023-12-05 17:51:52 +01:00
June 8889db28a3 Upgrade to NixOS 23.11 
Also see the release notes for more information:
https://nixos.org/manual/nixos/stable/release-notes#sec-release-23.11
 2023-12-05 17:33:49 +01:00
yuri b030b10055 Update netbox host to NixOS 23.11 and netbox to v3.6.3 2023-12-01 21:53:58 +01:00
June c2e46406e1 Introduce spaceapid running at spaceapi.hamburg.ccc.de 2023-11-05 00:07:19 +01:00
yuri 26a1fe0e84 Add esphome host 2023-11-04 22:20:49 +01:00
June 5803c6ddc6 Configure Audio-Hauptraum-Tafel 2023-11-04 20:49:02 +01:00
June ed4b43ebfd Rename Audio to Audio Hauptraum Küche 2023-11-02 23:26:55 +01:00
June abce3dee7a Use Pipewire and switch to Pipewire audio backend 2023-10-16 16:59:14 +02:00
June c72b30aa6a Make AirPlay 2 work for Shairport Sync on Audio host 
- use nqptp
- use Shairport Sync and nqptp versions, which work
- disable IPv6, since Shairport Sync doesn't work with it for some
  reason
- configure firewall for AirPlay 2
- use correct subnet
 2023-10-15 21:44:25 +02:00
yuri 02411bb800 Configure public-web-static host for Element Web hosting 
Co-authored-by: julian <julian@jsts.xyz>
 2023-10-07 04:29:08 +02:00
June 95ac75c355 Add configuration for Chaosknoten NixOS Proxmox image 2023-10-07 03:13:22 +02:00
yuri 58d529d0ba Configure Matrix host 
Co-authored-by: julian <julian@jsts.xyz>
 2023-10-06 05:33:28 +02:00
June 01a6d189f2 Migrate NetBox to Chaosknoten and hamburg.ccc.de domain 2023-09-21 19:09:28 +02:00
June 2e3e8c7031 Configure NetBox 2023-09-14 23:52:20 +02:00
June cd13c189b1 Configure Public-Reverse-Proxy 2023-09-14 22:12:38 +02:00
June 3fd9964110 Fix tags 2023-09-14 21:02:27 +02:00
June 2199247c59 Use the small channels for stable and unstable 2023-09-14 20:44:54 +02:00
June 4d599efbcf Give the proxmox nixos template output a more descriptive name 2023-09-14 20:23:00 +02:00