Commit graph

100 commits

Author SHA1 Message Date
03227f546e
Make passwordless ssh for ptouch-print-server work again
Now (with NixOS 24.05) pam.services.sshd.allowNullPassword needs to be
set to true for passwordless ssh to work apparently.
2024-10-21 17:49:03 +02:00
fb6a5444c9
Last commit didn't do, switching to Docker instead of podman does 2024-10-21 17:49:03 +02:00
becec64020
Fix clone step failing, because git.hamburg.ccc.de could not be resolved 2024-10-21 17:49:03 +02:00
2b276b2c97
Use an agent token for Woodpecker agent to stop it from re-registering
With the shared system token, every time the Woodpecker host would
restart, a new Woodpecker agent registration would be created, because
the agent receives a unique ID on first connection using the system
token, which it couldn't store however, because it doesn't have a
writable config file in NixOS.
Use an agent token now, which doesn't require the agent to store a
unique ID in a wrtiable config, therefore not making it re-register.

Also see:
https://woodpecker-ci.org/docs/administration/agent-config#agent-registration
2024-10-21 17:49:03 +02:00
4ec5afa360
Disable mjolnirs verbose logging to have it not spam the management room 2024-10-21 17:49:03 +02:00
b574cc09ab
Add woodpecker host running a woodpecker-server and -agent for CI 2024-10-21 17:49:03 +02:00
024451942e
Add mjolnir host running mjolnir for Matrix moderation
Also see:
https://wiki.hamburg.ccc.de/infrastructure:services:mjolnir
2024-10-21 17:49:02 +02:00
2ee045a296
Use forgejo package from stable (24.05) instead of from unstable 2024-10-21 17:47:58 +02:00
b6d48859cc
Add hacker.tours and a staging env. similar to the CCCHH website one 2024-10-21 17:47:58 +02:00
8a6820a418
Add mqtt server (mosquitto)
The config was based on the exsisting mosquitto setup.
2024-10-21 17:47:58 +02:00
fi
c556475efd
Bump element-web to 1.11.68 2024-10-21 17:47:58 +02:00
e24b5b6fb1
fix yate-config not pulling 2024-09-08 21:08:17 +02:00
fb458e244b
fix yate deploy key 2024-09-08 21:07:47 +02:00
f9f258a212
change yate-config repo 2024-09-08 18:52:22 +02:00
c62f722899
make sure source is available before deleting config 2024-08-08 20:11:42 +02:00
c9967f73c0
decolour the log because of blob data 2024-08-07 18:53:15 +02:00
3b83a5d8ab
recreate the full config everytime 2024-08-07 18:51:12 +02:00
149f846d32
create yate service user 2024-08-07 18:03:17 +02:00
fd525ee06f
make yate systemd service 2024-08-06 22:06:26 +02:00
1ef4c1cd48
Fix config via git 2024-08-05 20:58:09 +02:00
b4de5dbb53
introduce /etc/yate, clone/reset on service start 2024-06-09 18:26:27 +02:00
2037a1b647
add yate service for autostart 2024-06-08 23:53:52 +02:00
ef1710b09f
Configure basic yate host 2024-06-08 20:18:59 +02:00
9d7f9d0ec8
Emulate aarch64-linux on nix-box-june to be able to build aarch64 pkgs 2024-06-06 20:17:00 +02:00
41f04732c2
Switch from colmena to standard nixosConfigurations
Those can then be deployed using for example nixos-rebuild or bij.
Also ensure all hosts have an fqdn, where possible, in order for bij to
be able to work with them more easily. Tho not really, since for actual
deployment one still needs to set the target manually to set usage of
the colmena-deploy user.

https://git.clerie.de/clerie/bij
2024-05-27 01:43:53 +02:00
58ec317b02
Use IP address for eh22-wiki, which isn't already in use 2024-05-26 18:00:20 +02:00
7c7da0db05
Add a nix box managed by June
Every admin can login as its own user with the keys listed here:
https://git.hamburg.ccc.de/CCCHH/infrastructure-authorized-keys/src/branch/trunk/authorized_keys
2024-05-26 14:39:28 +02:00
3aae597752
Switch the public-web-static hosts secret mngmt from colmena to sops-nix 2024-05-26 03:49:43 +02:00
dc439abefe
Switch the netbox hosts secret management from colmena to sops-nix 2024-05-26 03:14:31 +02:00
154edc1972
Switch the matrix hosts secret management from colmena to sops-nix 2024-05-26 03:01:34 +02:00
361ccac69f
Switch the forgejo-actions-runners secret mngmt from colmena to sops-nix 2024-05-26 02:50:08 +02:00
88e3da11a6
Introduce sops and sops-nix for secret management
Use the GPG keys used for the password-store noc directory for the admin
keys.
Switch the git hosts secret management from colmena to sops-nix.

https://github.com/getsops/sops
https://github.com/Mic92/sops-nix
2024-05-25 16:47:34 +02:00
475ab8cc66
Configure EH22 Wiki 2024-05-17 20:42:48 +02:00
14bbdea9dc
Add MPD to audio service module 2024-04-23 19:12:16 +02:00
bc6af32a36
Update spaceapid to latest commit and use correct logo URL 2024-04-15 17:07:50 +02:00
c97f169b77
Add print server for label printer to have it easily usable via SSH
Add and configure a print server for the Brother P-touch QL 500 label
printer, so that it can be easily used via SSH.

Do the following to make that work:
- Configure the print server host.
- Package printer-driver-ptouch to have a working driver for the label
  printer.
- Configure CUPS.
- Add a script "forcecommand-lpr-wrapper", which works together with the
  ForceCommand sshd_config option and wraps lpr to provide an easy
  interface to use the Brother QL 500 label printer via SSH.
- Add a print user and configure SSH to have the
  "forcecommand-lpr-wrapper" script accessible without a password using
  the print user via SSH.
2024-04-14 18:46:51 +02:00
6a0218c132
Serve old easterhegg pages from public-web-static.
The old easterhegg pages from 2003, 2005, 2007, 2009, 2011 are served on the
easterhegg.eu domain and all old subdomains under hamburg.ccc.de
redirect to the corresponding pages under easterhegg.eu
2024-03-29 16:16:13 +01:00
1ad6ac9dc0
Run "nix fmt" to format this entire flake 2024-03-06 22:50:32 +01:00
fi
a5a994f87f
Bump element-web to 1.11.59 2024-03-02 17:22:15 +01:00
7ab1563c88
Add entry to public-reverse-proxy for acme challenge for light-werkstatt 2024-03-02 15:40:55 +01:00
fi
d8d0236870
Fix indentation 2024-01-28 22:03:15 +01:00
fi
2ae1ad3604
Configure matrix server .well-known delegation 2024-01-28 21:59:08 +01:00
fi
4c0decea4a
Update element-web to 1.11.55 2024-01-28 05:05:53 +01:00
e18b840d20
Enable offline mode for Forgejo to disable use of CDN and Gravatar 2024-01-24 20:17:59 +01:00
a0e92ff92a
Give Git an IPv6 2024-01-23 23:24:20 +01:00
7ce5c934df
Redirect old feed location to new one for CCCHH website 2024-01-23 19:57:20 +01:00
c83f1faaa7
Use custom 404 page for hamburg.ccc.de 2024-01-22 23:32:00 +01:00
1dd8651bda
Update wiki links to point to wiki.hamburg.ccc.de 2024-01-22 23:15:03 +01:00
394f4fe562
Deploy new website under hamburg.ccc.de
Make next.hamburg.ccc.de hamburg.ccc.de and add redirects to handle URLs
of the old website deployment properly.
Also redirect the old spaceapi endpoint to the new one.

Add staging.hamburg.ccc.de for hosting upcoming changes (PRs).
Also give it a robots.txt, since its contents don't need to show up in
search engines.

Add www.hamburg.ccc.de and let it redirect to hamburg.ccc.de.
2024-01-22 23:08:38 +01:00
485ed0fec2
Use opensearch for code and issue search 2024-01-22 17:59:01 +01:00