141 commits

Author	SHA1	Message	Date
June	9d7f9d0ec8	Emulate aarch64-linux on nix-box-june to be able to build aarch64 pkgs	2024-06-06 20:17:00 +02:00
June	41f04732c2	Switch from colmena to standard nixosConfigurations ... Those can then be deployed using for example nixos-rebuild or bij. Also ensure all hosts have an fqdn, where possible, in order for bij to be able to work with them more easily. Tho not really, since for actual deployment one still needs to set the target manually to set usage of the colmena-deploy user. https://git.clerie.de/clerie/bij	2024-05-27 01:43:53 +02:00
June	a7541eefa8	Add tools and other stuff for a more comf. admin enviorn. on the hosts	2024-05-26 18:32:55 +02:00
June	58ec317b02	Use IP address for eh22-wiki, which isn't already in use	2024-05-26 18:00:20 +02:00
June	7c7da0db05	Add a nix box managed by June ... Every admin can login as its own user with the keys listed here: https://git.hamburg.ccc.de/CCCHH/infrastructure-authorized-keys/src/branch/trunk/authorized_keys	2024-05-26 14:39:28 +02:00
June	3aae597752	Switch the public-web-static hosts secret mngmt from colmena to sops-nix	2024-05-26 03:49:43 +02:00
June	dc439abefe	Switch the netbox hosts secret management from colmena to sops-nix	2024-05-26 03:14:31 +02:00
June	154edc1972	Switch the matrix hosts secret management from colmena to sops-nix	2024-05-26 03:01:34 +02:00
June	361ccac69f	Switch the forgejo-actions-runners secret mngmt from colmena to sops-nix	2024-05-26 02:50:08 +02:00
June	88e3da11a6	Introduce sops and sops-nix for secret management ... Use the GPG keys used for the password-store noc directory for the admin keys. Switch the git hosts secret management from colmena to sops-nix. https://github.com/getsops/sops https://github.com/Mic92/sops-nix	2024-05-25 16:47:34 +02:00
June	475ab8cc66	Configure EH22 Wiki	2024-05-17 20:42:48 +02:00
June	14bbdea9dc	Add MPD to audio service module	2024-04-23 19:12:16 +02:00
June	bc6af32a36	Update spaceapid to latest commit and use correct logo URL	2024-04-15 17:07:50 +02:00
June	c97f169b77	Add print server for label printer to have it easily usable via SSH ... Add and configure a print server for the Brother P-touch QL 500 label printer, so that it can be easily used via SSH. Do the following to make that work: - Configure the print server host. - Package printer-driver-ptouch to have a working driver for the label printer. - Configure CUPS. - Add a script "forcecommand-lpr-wrapper", which works together with the ForceCommand sshd_config option and wraps lpr to provide an easy interface to use the Brother QL 500 label printer via SSH. - Add a print user and configure SSH to have the "forcecommand-lpr-wrapper" script accessible without a password using the print user via SSH.	2024-04-14 18:46:51 +02:00
c6ristian	6a0218c132	Serve old easterhegg pages from public-web-static. ... The old easterhegg pages from 2003, 2005, 2007, 2009, 2011 are served on the easterhegg.eu domain and all old subdomains under hamburg.ccc.de redirect to the corresponding pages under easterhegg.eu	2024-03-29 16:16:13 +01:00
Julian Schacher	1ad6ac9dc0	Run "nix fmt" to format this entire flake	2024-03-06 22:50:32 +01:00
fi	a5a994f87f	Bump element-web to 1.11.59	2024-03-02 17:22:15 +01:00
June	7ab1563c88	Add entry to public-reverse-proxy for acme challenge for light-werkstatt	2024-03-02 15:40:55 +01:00
fi	d8d0236870	Fix indentation	2024-01-28 22:03:15 +01:00
fi	2ae1ad3604	Configure matrix server .well-known delegation	2024-01-28 21:59:08 +01:00
fi	4c0decea4a	Update element-web to 1.11.55	2024-01-28 05:05:53 +01:00
June	e18b840d20	Enable offline mode for Forgejo to disable use of CDN and Gravatar	2024-01-24 20:17:59 +01:00
June	a0e92ff92a	Give Git an IPv6	2024-01-23 23:24:20 +01:00
June	7ce5c934df	Redirect old feed location to new one for CCCHH website	2024-01-23 19:57:20 +01:00
June	c83f1faaa7	Use custom 404 page for hamburg.ccc.de	2024-01-22 23:32:00 +01:00
June	1dd8651bda	Update wiki links to point to wiki.hamburg.ccc.de	2024-01-22 23:15:03 +01:00
June	394f4fe562	Deploy new website under hamburg.ccc.de ... Make next.hamburg.ccc.de hamburg.ccc.de and add redirects to handle URLs of the old website deployment properly. Also redirect the old spaceapi endpoint to the new one. Add staging.hamburg.ccc.de for hosting upcoming changes (PRs). Also give it a robots.txt, since its contents don't need to show up in search engines. Add www.hamburg.ccc.de and let it redirect to hamburg.ccc.de.	2024-01-22 23:08:38 +01:00
June	485ed0fec2	Use opensearch for code and issue search	2024-01-22 17:59:01 +01:00
June	12c38aac8b	Add CO2 sensors to spaceapid response	2024-01-22 02:05:48 +01:00
June	7fd115ca22	Use new infrastructure-authorized-keys url and latest commit	2024-01-21 04:55:57 +01:00
June	aa25b300e3	Fix temperature unit in spaceapid response ... See: https://github.com/SpaceApi/directory/pull/247#pullrequestreview-1825757336 CCCHH/spaceapid#26 https://spaceapi.io/docs/#schema-key-sensors-temperature-unit	2024-01-21 03:54:01 +01:00
June	598e110641	Don't keep artifacts for so long ... Keep them for 30 days instead of the default 90.	2024-01-20 21:39:22 +01:00
June	f6567bffb2	Use Forgejo 1.21 from NixOS unstable to make Actions work properly ... 1.21 has scheduled Actions for example, which we need.	2024-01-20 21:34:09 +01:00
June	85c059c75c	Configure new forgejo-actions-runner host ... Configure it to host a forgejo-actions-runner capable of handling CI workloads running on Docker.	2024-01-18 05:03:21 +01:00
June	4970f59052	Enable Forgejo Actions for our Forgejo	2024-01-18 05:02:47 +01:00
June	8faf83158f	Disable HTTP Basic authentication and set default repo units for Forgejo	2024-01-16 20:35:56 +01:00
Bennett Wetters	7cef911b61	Set -ldflags for spaceapid to set version string ... Co-authored-by: June <june@jsts.xyz>	2024-01-16 02:46:09 +01:00
June	b5ec5fd763	Update spaceapid	2024-01-16 02:33:13 +01:00
June	eea98d66c4	Update spaceapid	2024-01-15 23:39:09 +01:00
June	1c54a7b316	Update spaceapid	2024-01-15 22:38:00 +01:00
June	001740df0b	Link to new Git host (Forgejo) in spaceapi response	2024-01-15 03:30:34 +01:00
June	5b61a31904	Use new spaceapid version and configure temp. and humid. sensors	2024-01-15 03:25:48 +01:00
June	ec5430ee34	Add and configure new Git server using Forgejo	2024-01-14 23:19:41 +01:00
June	26132b1526	Use latest version of infrastructure-authorized-keys repo	2024-01-14 21:04:03 +01:00
June	34f5a8b229	Give NixOS template 16G of additional space using new option ... See here for the PR introducing the option: https://github.com/NixOS/nixpkgs/pull/238735	2024-01-13 20:17:40 +01:00
June	4ef0a6a02d	Add c3cat.de virtualHost config for forwarding c3cat.de to wiki	2024-01-13 18:21:01 +01:00
June	0b433a2fa7	Set PostgreSQL package to PostgreSQL 15 for netbox host ... Also remove the upgrade script again. Bascially do steps 4 and 5 of the following section of the manual: https://nixos.org/manual/nixos/stable/#module-services-postgres-upgrading	2023-12-06 01:11:25 +01:00
June	49f7ed8d60	Add and run script for upgrading PostgreSQL of netbox host ... The script is a modified version of the script shown in the PostgreSQL Upgrading section of the NixOS manual. Our version is for upgrading PostgreSQL 14 to 15. Basically do steps 1-3 of the section. Link to the section: https://nixos.org/manual/nixos/stable/#module-services-postgres-upgrading	2023-12-06 01:06:43 +01:00
June	f9fc034556	Set PostgreSQL package to PostgreSQL 15 for matrix host ... Also remove the upgrade script again. Bascially do steps 4 and 5 of the following section of the manual: https://nixos.org/manual/nixos/stable/#module-services-postgres-upgrading	2023-12-06 00:52:05 +01:00
June	0944a1749c	Add and run script for upgrading PostgreSQL of matrix host ... The script is a modified version of the script shown in the PostgreSQL Upgrading section of the NixOS manual. Our version is for upgrading PostgreSQL 14 to 15. Basically do steps 1-3 of the section. Link to the section: https://nixos.org/manual/nixos/stable/#module-services-postgres-upgrading	2023-12-06 00:46:47 +01:00
June	87e6735662	Switch to new proxyProtocol option instead of using extraParameters	2023-12-05 18:26:16 +01:00
June	df9b76528d	Switch to pkgs from stable ... I think we used pkgs from unstable (as pkgs-unstable), because the Go version in NixOS 23.05 was too old. But now that we're on 23.11, which has a newer Go version, we can use pkgs from stable.	2023-12-05 17:51:52 +01:00
yuri	b030b10055	Update netbox host to NixOS 23.11 and netbox to v3.6.3	2023-12-01 21:53:58 +01:00
julian	25cab7982b	Update spaceapid ... Also set StateDirectory in the systemd service to persist state.	2023-11-10 21:56:25 +01:00
julian	b1b34c54ba	Update spaceapid	2023-11-09 22:15:35 +01:00
julian	a8379c3cf2	Update spaceapid	2023-11-09 19:59:08 +01:00
julian	c2e46406e1	Introduce spaceapid running at spaceapi.hamburg.ccc.de	2023-11-05 00:07:19 +01:00
yuri	26a1fe0e84	Add esphome host	2023-11-04 22:20:49 +01:00
julian	5803c6ddc6	Configure Audio-Hauptraum-Tafel	2023-11-04 20:49:02 +01:00
julian	ed4b43ebfd	Rename Audio to Audio Hauptraum Küche	2023-11-02 23:26:55 +01:00
julian	c9310374af	Move audio configuration into a service module ... - Move audio configuration into a service module to make it easily usable by multiple hosts. - Allow configuration of AirPlay 2 name. - Don't set MQTT topic of Shairport-Sync (AirPlay 2) explictly. Defaults to hostname now. - Don't set sound.enable anymore, since its not needed.	2023-11-02 21:57:08 +01:00
julian	e2cd652cb6	Also set Restart to on-failure for nqptp service for good measure	2023-10-26 21:30:21 +02:00
julian	616f65c6ca	Set Restart to on-failure for shairport-sync service ... Do that, since it recently crashed for some reason and just restarting should probably work pretty well.	2023-10-26 21:08:57 +02:00
julian	b0995784fc	Add next.hamburg.ccc.de virtualHost config for hosting the new website ... In the future next.hamburg.ccc.de might also be used for hosting website builds of branches or MRs.	2023-10-25 02:17:21 +02:00
julian	ae11e1f3da	Move PipeWire configuration into own file ... Also add link to documentation.	2023-10-16 22:52:35 +02:00
julian	28cd59c957	Add Spotify Connect receiver using librespot	2023-10-16 22:29:09 +02:00
julian	abce3dee7a	Use Pipewire and switch to Pipewire audio backend	2023-10-16 16:59:14 +02:00
julian	c72b30aa6a	Make AirPlay 2 work for Shairport Sync on Audio host ... - use nqptp - use Shairport Sync and nqptp versions, which work - disable IPv6, since Shairport Sync doesn't work with it for some reason - configure firewall for AirPlay 2 - use correct subnet	2023-10-15 21:44:25 +02:00
julian	534db2a68f	Configure IPv6 (and static IPs) for audio host	2023-10-09 23:49:41 +02:00
yuri	3ee198bc10	Change Content-Security-Policy "frame-ancestors" to "self" ... This allows for downloading files as the download button spawns an iframe when clicking it.	2023-10-07 05:43:18 +02:00
julian	c3a9e56437	Fix synapse systemd service by allowing access to the media store	2023-10-07 05:38:47 +02:00
julian	ddcf4eff0d	Introduce branding-resources site and brand Element welcome/auth page	2023-10-07 05:17:53 +02:00
yuri	02411bb800	Configure public-web-static host for Element Web hosting ... Co-authored-by: julian <julian@jsts.xyz>	2023-10-07 04:29:08 +02:00
yuri	3053eb9b2f	Proxy to IPv4 local address ... Only proxy to the local host on IPv4, because localhost doesn't seem to work even if matrix-synapse is listening on ::1 as well.	2023-10-07 03:30:24 +02:00
julian	95ac75c355	Add configuration for Chaosknoten NixOS Proxmox image	2023-10-07 03:13:22 +02:00
yuri	58d529d0ba	Configure Matrix host ... Co-authored-by: julian <julian@jsts.xyz>	2023-10-06 05:33:28 +02:00
julian	01a6d189f2	Migrate NetBox to Chaosknoten and hamburg.ccc.de domain	2023-09-21 19:09:28 +02:00
julian	2e3e8c7031	Configure NetBox	2023-09-14 23:52:20 +02:00
julian	e0c7180ecf	Add common acme configuration for upcoming use of acme	2023-09-14 23:51:40 +02:00
julian	b680cbbd0b	Actually import common nginx configuration	2023-09-14 23:50:46 +02:00
julian	cd13c189b1	Configure Public-Reverse-Proxy	2023-09-14 22:12:38 +02:00
julian	30b4139d23	Add common nginx configuration for upcoming nginx hosts	2023-09-14 21:43:20 +02:00
julian	1803025193	Introduce colmena-deploy user	2023-09-14 20:19:49 +02:00
julian	bd1d59e8b4	Give the Proxmox VM template a nicer name	2023-09-14 20:14:35 +02:00
julian	c427ff934a	Switch from BIOS and GRUB to UEFI and systemd-boot for Proxmox VMs	2023-09-14 20:12:09 +02:00
julian	5bfa655d3e	Add config for fstrim	2023-09-14 20:09:51 +02:00
julian	79def99252	Enable Shairport Sync metadata and MQTT support	2023-09-11 23:20:41 +02:00
yuri	c1dd3f6011	Remove super verbose output parameter	2023-09-11 23:20:41 +02:00
yuri	096f2ffa91	Introduce colmena config and add shairport-sync host	2023-09-11 23:20:41 +02:00
yuri	10702979f1	Add nix configuration ... Make wheel group trusted users in preparation for colmena.	2023-09-11 23:20:41 +02:00
julian	4193e65a04	Initial commit. Add configuration for NixOS Proxmox image	2023-09-11 23:20:34 +02:00