79 commits

Author	SHA1	Message	Date
lilly	9e5bad593e	remove public-reverse-proxy (it is now on ansible-infra)	2026-02-18 12:12:18 +01:00
June	a085f7c2e5	mjolnir: remove mjolnir as it got moved to ansible-infra ... See: fe647da3bf	2026-02-11 03:15:51 +01:00
June	827c469415	forgejo-actions-runner: forgejo-actions-runner is forgejo-runner now ... Also use package from stable instead of unstable.	2026-01-18 22:49:43 +01:00
June	30b6d54f95	Upgrade to NixOS 25.11 ... mjolnir seems to be broken.	2026-01-18 22:48:13 +01:00
June	0ea41b3141	remove more hydra-related config	2026-01-18 21:58:56 +01:00
June	28d82f149d	status: remove status as it got replaced by a ansible-managed Gatus	2026-01-18 21:09:15 +01:00
June	b16f0190e0	disable nixos-generators input as its broken a. makes infra-rebuild fail	2025-12-27 23:21:35 +01:00
June	550b0f13ca	forgejo-actions-run.: use runner pkg from unstable to make it work again	2025-10-24 19:09:16 +02:00
June	275a3779f7	fix authorizedKeysRepo input by using type git ... Fix authorizedKeysRepo input by using type git as .tar.gz archive gives a 500.	2025-10-22 21:07:27 +02:00
June	dc4cc0469d	remove synapse overlay as there is now a recent enough version upstream	2025-09-16 19:13:39 +02:00
June	0c0457793f	bump Matrix Synapse to version 1.135.2	2025-08-12 01:11:31 +02:00
June	df365e67f9	audio: fix librespot playback and use avahi for mDNS ... Fix librespot playback by building the dev branch and applying the changes from librespot PR 1528 (https://github.com/librespot-org/librespot/pull/1528) fixing librespot issue 1527 (https://github.com/librespot-org/librespot/issues/1527). Also make librespot use Avahi, since shairport-sync already uses that.	2025-08-11 04:18:41 +02:00
June	2fda28ca5d	Upgrade to NixOS 25.05	2025-06-14 17:32:27 +02:00
c6ristian	8440b4e1ea	woodpecker nixos25.05	2025-06-02 19:45:08 +02:00
c6ristian	3803d6038e	flake.lock: Update ... Flake lock file updates: • Updated input 'authorizedKeysRepo': 'https://git.hamburg.ccc.de/api/v1/repos/CCCHH/infrastructure-authorized-keys/archive/686a6af22f6696f0c0595c56f463c078550049fc.tar.gz?narHash=sha256-plTYjM6zPzoBE/dp6EUrk9mCqmab278p8FqBCTX8Grc%3D' (2024-11-10) → 'https://git.hamburg.ccc.de/api/v1/repos/CCCHH/infrastructure-authorized-keys/archive/fc95460e9e6ae759b2b08c93b10a8e010e9e14e6.tar.gz?narHash=sha256-GMU6gfG1%2B3OjTuoiIYQg9yefzrz%2BRVVesqXa8jmOuCE%3D&rev=fc95460e9e6ae759b2b08c93b10a8e010e9e14e6' (2025-04-28) • Updated input 'nixos-generators': 'github:nix-community/nixos-generators/42ee229088490e3777ed7d1162cb9e9d8c3dbb11' (2025-03-21) → 'github:nix-community/nixos-generators/ee07ba0d36c38e9915c55d2ac5a8fb0f05f2afcc' (2025-05-19) • Updated input 'nixpkgs': 'github:nixos/nixpkgs/9684b53175fc6c09581e94cc85f05ab77464c7e3' (2025-04-21) → 'github:nixos/nixpkgs/9b5ac7ad45298d58640540d0323ca217f32a6762' (2025-05-17) • Updated input 'sops-nix': 'github:Mic92/sops-nix/5e3e92b16d6fdf9923425a8d4df7496b2434f39c' (2025-04-22) → 'github:Mic92/sops-nix/8d215e1c981be3aa37e47aeabd4e61bb069548fd' (2025-05-18)	2025-05-20 19:39:59 +02:00
c6ristian	aee3f4b385	c3cat fix	2025-04-19 15:01:59 +02:00
June	fd2414ec91	nix-box-june: remove nix-box-june as its being decommissioned ... nix-infra is built back in general, so remove nix-box-june as well.	2025-02-18 00:04:58 +01:00
June	fe5e6cebdc	netbox: remove because of migration to ansible-infra	2025-02-18 00:02:31 +01:00
June	a665aa15f4	eh22-wiki: remove because of migration to ansible-infra	2025-02-10 23:43:27 +01:00
echtnurich	2904ebee15	add yate service for autostart ... introduce /etc/yate, clone/reset on service start Fix config via git make yate systemd service create yate service user recreate the full config everytime decolour the log because of blob data make sure source is available before deleting config change yate-config repo fix yate deploy key fix yate-config not pulling	2025-01-23 23:17:35 +01:00
June	5676b1a468	netbox: configure and patch NetBox for OIDC group and role mapping ... The custom pipeline code is licensed under the Creative Commons: CC BY-SA 4.0 license. See: https://github.com/goauthentik/authentik/blob/main/LICENSE https://github.com/goauthentik/authentik/blob/main/website/integrations/services/netbox/index.md https://docs.goauthentik.io/integrations/services/netbox/	2025-01-14 20:49:14 +01:00
jopejoe1	8764841759	shairport-sync: use airplay2 variant instead of custome overlay	2024-12-09 21:21:17 +01:00
June	a039b3febf	update nixpkgs to 24.11 (small) ... Also use non-lts forgejo and adjust config for 24.11.	2024-12-08 22:21:15 +01:00
jopejoe1	e3c677ea9b	fix: use tar file	2024-11-17 21:15:05 +01:00
c6ristian	ecd9fe4adf	fix: use http clone url from forgejo	2024-11-17 21:06:27 +01:00
jopejoe1	2003367108	move authorized keys to flake input	2024-11-17 20:33:38 +01:00
c6ristian	53e33a6641	flake.lock: Update ... Flake lock file updates: • Updated input 'nixos-generators': 'github:nix-community/nixos-generators/7c60ba4bc8d6aa2ba3e5b0f6ceb9fc07bc261565' (2024-10-21) → 'github:nix-community/nixos-generators/06ffce1a8d95e95c06a4bcfa117dd960b14a7101' (2024-11-14) • Updated input 'nixos-generators/nixlib': 'github:nix-community/nixpkgs.lib/cce4521b6df014e79a7b7afc58c703ed683c916e' (2024-10-20) → 'github:nix-community/nixpkgs.lib/e04234d263750db01c78a412690363dc2226e68a' (2024-11-10) • Updated input 'nixos-generators/nixpkgs': follows 'nixpkgs' → 'github:NixOS/nixpkgs/aebe249544837ce42588aa4b2e7972222ba12e8f' (2024-11-10) • Updated input 'nixpkgs': 'github:nixos/nixpkgs/11f65b4b0405cff5b54c813626bddcf5435d7ad2' (2024-11-09) → 'github:nixos/nixpkgs/bf6132dc791dbdff8b6894c3a85eb27ad8255682' (2024-11-17) • Updated input 'sops-nix': 'github:Mic92/sops-nix/f1675e3b0e1e663a4af49be67ecbc9e749f85eb7' (2024-11-10) → 'github:Mic92/sops-nix/472741cf3fee089241ac9ea705bb2b9e0bfa2978' (2024-11-17) • Removed input 'sops-nix/nixpkgs-stable'	2024-11-17 20:25:16 +01:00
jopejoe1	e404d4740f	remove nixpkgs-unstable ... the current version of woodpecker-server in stable now has the features this was original used for, not other usages of unstable are in tree left so removing it.	2024-11-17 19:33:00 +01:00
jopejoe1	6c85b91efb	make use of nixosModules output	2024-11-17 19:33:00 +01:00
jopejoe1	7d58a3db4a	move overlay to overlays output	2024-11-17 19:32:59 +01:00
jopejoe1	4fc8e31df0	Remove version lock for shairport-sync ... The current version in nixpkgs is newer than the one we are currently locking, the nqptp fix was also already in nixpkgs. Co-authored-by: c6ristian <c6ristian@christian.moe>	2024-11-04 23:35:22 +01:00
June	4f789adb21	hydra: configure hydra host	2024-10-30 01:44:12 +01:00
June	fefff391b7	add hydraJobs for packages and nixosConfigurations	2024-10-29 21:30:16 +01:00
June	c54b655b0e	all: setup prometheus node exporter for all hosts on Chaosknoten ... Do that so we can have monitoring for them via prometheus, alertmanager and grafana. Also add a local ip for the git host for PVE firewalling.	2024-10-03 16:09:42 +02:00
June	178777007f	penpot: configure penpot host using oci-containers	2024-08-10 22:38:05 +02:00
June	028b5dc9e8	Configure Uptime-Kuma host	2024-08-04 02:19:26 +02:00
June	df17b25009	Add woodpecker host running a woodpecker-server and -agent for CI	2024-06-22 04:20:38 +02:00
June	3059843e1a	Add mjolnir host running mjolnir for Matrix moderation ... Also see: https://wiki.hamburg.ccc.de/infrastructure:services:mjolnir	2024-06-20 23:45:44 +02:00
June	f3f5d5a611	Use forgejo package from stable (24.05) instead of from unstable	2024-06-20 04:12:42 +02:00
June	33599951ef	Upgrade to NixOS 24.05 ... Also bump the default state version to 24.05. See the release notes of the 24.05 release for more information: https://nixos.org/manual/nixos/stable/release-notes#sec-release-24.05	2024-06-17 20:59:03 +02:00
c6ristian	b30952a049	Add mqtt server (mosquitto) ... The config was based on the exsisting mosquitto setup.	2024-06-11 23:03:57 +02:00
June	ef1710b09f	Configure basic yate host	2024-06-08 20:18:59 +02:00
June	41f04732c2	Switch from colmena to standard nixosConfigurations ... Those can then be deployed using for example nixos-rebuild or bij. Also ensure all hosts have an fqdn, where possible, in order for bij to be able to work with them more easily. Tho not really, since for actual deployment one still needs to set the target manually to set usage of the colmena-deploy user. https://git.clerie.de/clerie/bij	2024-05-27 01:43:53 +02:00
June	7c7da0db05	Add a nix box managed by June ... Every admin can login as its own user with the keys listed here: https://git.hamburg.ccc.de/CCCHH/infrastructure-authorized-keys/src/branch/trunk/authorized_keys	2024-05-26 14:39:28 +02:00
June	3aae597752	Switch the public-web-static hosts secret mngmt from colmena to sops-nix	2024-05-26 03:49:43 +02:00
June	dc439abefe	Switch the netbox hosts secret management from colmena to sops-nix	2024-05-26 03:14:31 +02:00
June	154edc1972	Switch the matrix hosts secret management from colmena to sops-nix	2024-05-26 03:01:34 +02:00
June	361ccac69f	Switch the forgejo-actions-runners secret mngmt from colmena to sops-nix	2024-05-26 02:50:08 +02:00
June	88e3da11a6	Introduce sops and sops-nix for secret management ... Use the GPG keys used for the password-store noc directory for the admin keys. Switch the git hosts secret management from colmena to sops-nix. https://github.com/getsops/sops https://github.com/Mic92/sops-nix	2024-05-25 16:47:34 +02:00
June	475ab8cc66	Configure EH22 Wiki	2024-05-17 20:42:48 +02:00