CCCHH/nix-infra
CCCHH/nix-infra
2
3
Fork 2
Code Issues 1 Pull requests 1 Wiki Activity
55 commits 7 branches 0 tags 807 KiB
Commit graph

55 commits

This branch
This branch
All branches
Author SHA1 Message Date
June
f9fc034556 Set PostgreSQL package to PostgreSQL 15 for matrix host 
Also remove the upgrade script again.

Bascially do steps 4 and 5 of the following section of the manual:
https://nixos.org/manual/nixos/stable/#module-services-postgres-upgrading
 2023-12-06 00:52:05 +01:00
June
0944a1749c Add and run script for upgrading PostgreSQL of matrix host 
The script is a modified version of the script shown in the PostgreSQL
Upgrading section of the NixOS manual. Our version is for upgrading
PostgreSQL 14 to 15.
Basically do steps 1-3 of the section.

Link to the section:
https://nixos.org/manual/nixos/stable/#module-services-postgres-upgrading
 2023-12-06 00:46:47 +01:00
June
87e6735662 Switch to new proxyProtocol option instead of using extraParameters 2023-12-05 18:26:16 +01:00
June
df9b76528d Switch to pkgs from stable 
I think we used pkgs from unstable (as pkgs-unstable), because the Go
version in NixOS 23.05 was too old. But now that we're on 23.11, which
has a newer Go version, we can use pkgs from stable.
 2023-12-05 17:51:52 +01:00
June
8889db28a3 Upgrade to NixOS 23.11 
Also see the release notes for more information:
https://nixos.org/manual/nixos/stable/release-notes#sec-release-23.11
 2023-12-05 17:33:49 +01:00
yuri
b030b10055 Update netbox host to NixOS 23.11 and netbox to v3.6.3 2023-12-01 21:53:58 +01:00
julian
25cab7982b Update spaceapid 
Also set StateDirectory in the systemd service to persist state.
 2023-11-10 21:56:25 +01:00
julian
9e0b6b7f23 flake.lock: Update 
Flake lock file updates:

• Updated input 'nixpkgs':
    'github:nixos/nixpkgs/556a75f6a1302b6718fecd3ca8cbd109eb6cb067' (2023-11-03)
  → 'github:nixos/nixpkgs/33e938c7823e47a787ad4f76003d14ff92ad96dd' (2023-11-07)
• Updated input 'nixpkgs-unstable':
    'github:nixos/nixpkgs/e4082efedb483eb0478c3f014fa851449bca43f9' (2023-11-04)
  → 'github:nixos/nixpkgs/cfbb29d76949ae53c457f152c52c173ea4bdd862' (2023-11-07)
 2023-11-09 22:16:19 +01:00
julian
b1b34c54ba Update spaceapid 2023-11-09 22:15:35 +01:00
julian
a8379c3cf2 Update spaceapid 2023-11-09 19:59:08 +01:00
julian
0c33845fea flake.lock: Update 
Flake lock file updates:

• Updated input 'nixpkgs':
    'github:nixos/nixpkgs/912f754fa9f9a16b9ddf85fbbd17dcc7c59df64e' (2023-10-26)
  → 'github:nixos/nixpkgs/556a75f6a1302b6718fecd3ca8cbd109eb6cb067' (2023-11-03)
• Updated input 'nixpkgs-unstable':
    'github:nixos/nixpkgs/37c290f0203a9eaad110535c923c7e6b4013e801' (2023-10-26)
  → 'github:nixos/nixpkgs/e4082efedb483eb0478c3f014fa851449bca43f9' (2023-11-04)
 2023-11-05 00:08:16 +01:00
julian
c2e46406e1 Introduce spaceapid running at spaceapi.hamburg.ccc.de 2023-11-05 00:07:19 +01:00
yuri
26a1fe0e84 Add esphome host 2023-11-04 22:20:49 +01:00
julian
5803c6ddc6 Configure Audio-Hauptraum-Tafel 2023-11-04 20:49:02 +01:00
julian
ed4b43ebfd Rename Audio to Audio Hauptraum Küche 2023-11-02 23:26:55 +01:00
julian
c9310374af Move audio configuration into a service module 
- Move audio configuration into a service module to make it easily
  usable by multiple hosts.
- Allow configuration of AirPlay 2 name.
- Don't set MQTT topic of Shairport-Sync (AirPlay 2) explictly. Defaults
  to hostname now.
- Don't set sound.enable anymore, since its not needed.
 2023-11-02 21:57:08 +01:00
julian
8355a6f635 flake.lock: Update 
Flake lock file updates:

• Updated input 'nixpkgs':
    'github:nixos/nixpkgs/21443a102b1a2f037d02e1d22e3e0ffdda2dbff9' (2023-10-21)
  → 'github:nixos/nixpkgs/912f754fa9f9a16b9ddf85fbbd17dcc7c59df64e' (2023-10-26)
• Updated input 'nixpkgs-unstable':
    'github:nixos/nixpkgs/8dfad603247387df1df4826b8bea58efc5d012d8' (2023-10-22)
  → 'github:nixos/nixpkgs/37c290f0203a9eaad110535c923c7e6b4013e801' (2023-10-26)
 2023-10-28 02:23:17 +02:00
julian
e2cd652cb6 Also set Restart to on-failure for nqptp service for good measure 2023-10-26 21:30:21 +02:00
julian
616f65c6ca Set Restart to on-failure for shairport-sync service 
Do that, since it recently crashed for some reason and just restarting
should probably work pretty well.
 2023-10-26 21:08:57 +02:00
julian
b0995784fc Add next.hamburg.ccc.de virtualHost config for hosting the new website 
In the future next.hamburg.ccc.de might also be used for hosting website
builds of branches or MRs.
 2023-10-25 02:17:21 +02:00
julian
567bd65d99 flake.lock: Update 
Flake lock file updates:

• Updated input 'nixpkgs':
    'github:nixos/nixpkgs/0e1cff585c1a85aeab059d3109f66134a8f76935' (2023-10-15)
  → 'github:nixos/nixpkgs/21443a102b1a2f037d02e1d22e3e0ffdda2dbff9' (2023-10-21)
• Updated input 'nixpkgs-unstable':
    'github:nixos/nixpkgs/982b24c40e743793c966b47b3bb3699881489ae0' (2023-10-15)
  → 'github:nixos/nixpkgs/8dfad603247387df1df4826b8bea58efc5d012d8' (2023-10-22)
 2023-10-23 22:04:39 +02:00
julian
ae11e1f3da Move PipeWire configuration into own file 
Also add link to documentation.
 2023-10-16 22:52:35 +02:00
julian
28cd59c957 Add Spotify Connect receiver using librespot 2023-10-16 22:29:09 +02:00
julian
abce3dee7a Use Pipewire and switch to Pipewire audio backend 2023-10-16 16:59:14 +02:00
julian
c72b30aa6a Make AirPlay 2 work for Shairport Sync on Audio host 
- use nqptp
- use Shairport Sync and nqptp versions, which work
- disable IPv6, since Shairport Sync doesn't work with it for some
  reason
- configure firewall for AirPlay 2
- use correct subnet
 2023-10-15 21:44:25 +02:00
julian
eaedf34aa2 flake.lock: Update 
Flake lock file updates:

• Updated input 'nixpkgs':
    'github:nixos/nixpkgs/8be69c1764f58e07099e4a24b926f49bbada8c7f' (2023-10-09)
  → 'github:nixos/nixpkgs/0e1cff585c1a85aeab059d3109f66134a8f76935' (2023-10-15)
• Updated input 'nixpkgs-unstable':
    'github:nixos/nixpkgs/5a9c737c587d2c34d63c5b3cb53c6ab0705bdf4f' (2023-10-09)
  → 'github:nixos/nixpkgs/982b24c40e743793c966b47b3bb3699881489ae0' (2023-10-15)
 2023-10-15 21:03:09 +02:00
julian
83e74fd4b5 flake.lock: Update 
Flake lock file updates:

• Updated input 'nixpkgs':
    'github:nixos/nixpkgs/e49c28b3baa3a93bdadb8966dd128f9985ea0a09' (2023-10-04)
  → 'github:nixos/nixpkgs/8be69c1764f58e07099e4a24b926f49bbada8c7f' (2023-10-09)
• Updated input 'nixpkgs-unstable':
    'github:nixos/nixpkgs/349bdd9653c42f1793d338b43aefe08883c5ebee' (2023-10-04)
  → 'github:nixos/nixpkgs/5a9c737c587d2c34d63c5b3cb53c6ab0705bdf4f' (2023-10-09)
 2023-10-09 23:50:30 +02:00
julian
534db2a68f Configure IPv6 (and static IPs) for audio host 2023-10-09 23:49:41 +02:00
yuri
3ee198bc10 Change Content-Security-Policy "frame-ancestors" to "self" 
This allows for downloading files as the download button
spawns an iframe when clicking it.
 2023-10-07 05:43:18 +02:00
julian
c3a9e56437 Fix synapse systemd service by allowing access to the media store 2023-10-07 05:38:47 +02:00
julian
ddcf4eff0d Introduce branding-resources site and brand Element welcome/auth page 2023-10-07 05:17:53 +02:00
yuri
02411bb800 Configure public-web-static host for Element Web hosting 
Co-authored-by: julian <julian@jsts.xyz>
 2023-10-07 04:29:08 +02:00
yuri
3053eb9b2f Proxy to IPv4 local address 
Only proxy to the local host on IPv4, because localhost doesn't seem to work
even if matrix-synapse is listening on ::1 as well.
 2023-10-07 03:30:24 +02:00
julian
95ac75c355 Add configuration for Chaosknoten NixOS Proxmox image 2023-10-07 03:13:22 +02:00
yuri
58d529d0ba Configure Matrix host 
Co-authored-by: julian <julian@jsts.xyz>
 2023-10-06 05:33:28 +02:00
julian
3d8f0fa040 flake.lock: Update 
Flake lock file updates:

• Updated input 'nixos-generators':
    'github:nix-community/nixos-generators/8ee78470029e641cddbd8721496da1316b47d3b4' (2023-09-04)
  → 'github:nix-community/nixos-generators/150f38bd1e09e20987feacb1b0d5991357532fb5' (2023-09-30)
• Updated input 'nixpkgs':
    'github:nixos/nixpkgs/e27ca312d56522b907b998c2ff99169bf12639f2' (2023-09-13)
  → 'github:nixos/nixpkgs/e49c28b3baa3a93bdadb8966dd128f9985ea0a09' (2023-10-04)
• Updated input 'nixpkgs-unstable':
    'github:nixos/nixpkgs/f2ea252d23ebc9a5336bf6a61e0644921f64e67c' (2023-09-14)
  → 'github:nixos/nixpkgs/349bdd9653c42f1793d338b43aefe08883c5ebee' (2023-10-04)
 2023-10-05 23:16:54 +02:00
julian
01a6d189f2 Migrate NetBox to Chaosknoten and hamburg.ccc.de domain 2023-09-21 19:09:28 +02:00
julian
2e3e8c7031 Configure NetBox 2023-09-14 23:52:20 +02:00
julian
e0c7180ecf Add common acme configuration for upcoming use of acme 2023-09-14 23:51:40 +02:00
julian
b680cbbd0b Actually import common nginx configuration 2023-09-14 23:50:46 +02:00
julian
cd13c189b1 Configure Public-Reverse-Proxy 2023-09-14 22:12:38 +02:00
julian
30b4139d23 Add common nginx configuration for upcoming nginx hosts 2023-09-14 21:43:20 +02:00
julian
3fd9964110 Fix tags 2023-09-14 21:02:27 +02:00
julian
2199247c59 Use the small channels for stable and unstable 2023-09-14 20:44:54 +02:00
julian
4d599efbcf Give the proxmox nixos template output a more descriptive name 2023-09-14 20:23:00 +02:00
julian
1803025193 Introduce colmena-deploy user 2023-09-14 20:19:49 +02:00
julian
bd1d59e8b4 Give the Proxmox VM template a nicer name 2023-09-14 20:14:35 +02:00
julian
c427ff934a Switch from BIOS and GRUB to UEFI and systemd-boot for Proxmox VMs 2023-09-14 20:12:09 +02:00
julian
5bfa655d3e Add config for fstrim 2023-09-14 20:09:51 +02:00
julian
32c549447d Tag audio host with thinkcccluster 2023-09-11 23:25:19 +02:00