41f04732c2
Switch from colmena to standard nixosConfigurations
...
Those can then be deployed using for example nixos-rebuild or bij.
Also ensure all hosts have an fqdn, where possible, in order for bij to
be able to work with them more easily. Tho not really, since for actual
deployment one still needs to set the target manually to set usage of
the colmena-deploy user.
https://git.clerie.de/clerie/bij
2024-05-27 01:43:53 +02:00
7c7da0db05
Add a nix box managed by June
...
Every admin can login as its own user with the keys listed here:
https://git.hamburg.ccc.de/CCCHH/infrastructure-authorized-keys/src/branch/trunk/authorized_keys
2024-05-26 14:39:28 +02:00
3aae597752
Switch the public-web-static hosts secret mngmt from colmena to sops-nix
2024-05-26 03:49:43 +02:00
dc439abefe
Switch the netbox hosts secret management from colmena to sops-nix
2024-05-26 03:14:31 +02:00
154edc1972
Switch the matrix hosts secret management from colmena to sops-nix
2024-05-26 03:01:34 +02:00
361ccac69f
Switch the forgejo-actions-runners secret mngmt from colmena to sops-nix
2024-05-26 02:50:08 +02:00
88e3da11a6
Introduce sops and sops-nix for secret management
...
Use the GPG keys used for the password-store noc directory for the admin
keys.
Switch the git hosts secret management from colmena to sops-nix.
https://github.com/getsops/sops
https://github.com/Mic92/sops-nix
2024-05-25 16:47:34 +02:00
475ab8cc66
Configure EH22 Wiki
2024-05-17 20:42:48 +02:00
c97f169b77
Add print server for label printer to have it easily usable via SSH
...
Add and configure a print server for the Brother P-touch QL 500 label
printer, so that it can be easily used via SSH.
Do the following to make that work:
- Configure the print server host.
- Package printer-driver-ptouch to have a working driver for the label
printer.
- Configure CUPS.
- Add a script "forcecommand-lpr-wrapper", which works together with the
ForceCommand sshd_config option and wraps lpr to provide an easy
interface to use the Brother QL 500 label printer via SSH.
- Add a print user and configure SSH to have the
"forcecommand-lpr-wrapper" script accessible without a password using
the print user via SSH.
2024-04-14 18:46:51 +02:00
1ad6ac9dc0
Run "nix fmt" to format this entire flake
2024-03-06 22:50:32 +01:00
71e1684f76
Add a formatter, which can be used by running "nix fmt"
...
Use nixpkgs-fmt because what it does closely aligns to this repos
already established conventions and it doesn't do weird stuff.
Also see:
https://nixos.org/manual/nix/stable/command-ref/new-cli/nix3-fmt.html
https://github.com/nix-community/nixpkgs-fmt
2024-03-06 22:50:26 +01:00
f6567bffb2
Use Forgejo 1.21 from NixOS unstable to make Actions work properly
...
1.21 has scheduled Actions for example, which we need.
2024-01-20 21:34:09 +01:00
85c059c75c
Configure new forgejo-actions-runner host
...
Configure it to host a forgejo-actions-runner capable of handling CI
workloads running on Docker.
2024-01-18 05:03:21 +01:00
ec5430ee34
Add and configure new Git server using Forgejo
2024-01-14 23:19:41 +01:00
df9b76528d
Switch to pkgs from stable
...
I think we used pkgs from unstable (as pkgs-unstable), because the Go
version in NixOS 23.05 was too old. But now that we're on 23.11, which
has a newer Go version, we can use pkgs from stable.
2023-12-05 17:51:52 +01:00
8889db28a3
Upgrade to NixOS 23.11
...
Also see the release notes for more information:
https://nixos.org/manual/nixos/stable/release-notes#sec-release-23.11
2023-12-05 17:33:49 +01:00
b030b10055
Update netbox host to NixOS 23.11 and netbox to v3.6.3
2023-12-01 21:53:58 +01:00
c2e46406e1
Introduce spaceapid running at spaceapi.hamburg.ccc.de
2023-11-05 00:07:19 +01:00
26a1fe0e84
Add esphome host
2023-11-04 22:20:49 +01:00
5803c6ddc6
Configure Audio-Hauptraum-Tafel
2023-11-04 20:49:02 +01:00
ed4b43ebfd
Rename Audio to Audio Hauptraum Küche
2023-11-02 23:26:55 +01:00
abce3dee7a
Use Pipewire and switch to Pipewire audio backend
2023-10-16 16:59:14 +02:00
c72b30aa6a
Make AirPlay 2 work for Shairport Sync on Audio host
...
- use nqptp
- use Shairport Sync and nqptp versions, which work
- disable IPv6, since Shairport Sync doesn't work with it for some
reason
- configure firewall for AirPlay 2
- use correct subnet
2023-10-15 21:44:25 +02:00
02411bb800
Configure public-web-static host for Element Web hosting
...
Co-authored-by: julian <julian@jsts.xyz>
2023-10-07 04:29:08 +02:00
95ac75c355
Add configuration for Chaosknoten NixOS Proxmox image
2023-10-07 03:13:22 +02:00
58d529d0ba
Configure Matrix host
...
Co-authored-by: julian <julian@jsts.xyz>
2023-10-06 05:33:28 +02:00
01a6d189f2
Migrate NetBox to Chaosknoten and hamburg.ccc.de domain
2023-09-21 19:09:28 +02:00
2e3e8c7031
Configure NetBox
2023-09-14 23:52:20 +02:00
cd13c189b1
Configure Public-Reverse-Proxy
2023-09-14 22:12:38 +02:00
3fd9964110
Fix tags
2023-09-14 21:02:27 +02:00
2199247c59
Use the small channels for stable and unstable
2023-09-14 20:44:54 +02:00
4d599efbcf
Give the proxmox nixos template output a more descriptive name
2023-09-14 20:23:00 +02:00
1803025193
Introduce colmena-deploy user
2023-09-14 20:19:49 +02:00
32c549447d
Tag audio host with thinkcccluster
2023-09-11 23:25:19 +02:00
79def99252
Enable Shairport Sync metadata and MQTT support
2023-09-11 23:20:41 +02:00
096f2ffa91
Introduce colmena config and add shairport-sync host
2023-09-11 23:20:41 +02:00
4193e65a04
Initial commit. Add configuration for NixOS Proxmox image
2023-09-11 23:20:34 +02:00
