infra

Author	SHA1	Message	Date
raito	8c0c7b517f	feat: block automatically crawlers if the blocker is enabled This help us getting rid of useless traffic by crawlers. It is enabled for gerrit01 which is suffering the most from this. Signed-off-by: Raito Bezarius <masterancpp@gmail.com>	2024-10-19 19:12:10 +02:00
Luke Granger-Brown	de085155a6	fix: update paths to floral secrets to secrets/floral/	2024-10-07 15:48:05 +00:00
raito	92560708b8	feat: multi-tenant secrets Lix may have its own secrets and we want to maintain a certain generalization level on the NixOS modules, so we can decorrelate which secret we select dynamically by having a simple tenancy hierarchy system. This unfortunately requires to rewrite all call sites with a floral prefix until we migrate them to the simple internal secret module which is aware of this. Signed-off-by: Raito Bezarius <masterancpp@gmail.com>	2024-10-06 08:10:44 +00:00
raito	9a04ef909b	feat(nixpkgs): run oxidized channel scripts We don't need weird Perl scripts where we are going. Here's a streaming channel-scripts deployment with plenty of bells, including OTLP. Signed-off-by: Raito Bezarius <masterancpp@gmail.com>	2024-08-31 19:32:23 +02:00
raito	4f4a25a5ad	feat(gerrit): push pyroscope profiling to Pyroscope Signed-off-by: Raito Bezarius <masterancpp@gmail.com>	2024-08-23 22:37:33 +02:00
Pierre Bourdon	50fadb45e2	common: define TZ in base server configs, remove heretical host-specific configuration	2024-08-13 22:38:40 +02:00
Yureka	d635042e57	adjust timer for staging sync services	2024-08-08 15:22:44 +02:00
Yureka	b6375b8294	add staging sync services	2024-08-08 15:16:04 +02:00
raito	bd8aa2eb08	gerrit01: adjustments for master → main OWS Due to rename, we need a `mkNixpkgsJob` slightly more complicated. Signed-off-by: Raito Bezarius <masterancpp@gmail.com>	2024-07-25 23:35:06 +02:00
Yureka	297ddbb28c	one-way-sync: master -> main	2024-07-23 16:24:36 +02:00
Yureka	eedc719889	add one-way-sync jobs for staging branches	2024-07-23 11:15:27 +02:00
raito	62ccc0282b	fix(ows): per-job runtime directories + proper local refspec The local refspec was weird and exploiting a edge case for the nixpkgs jobs where local and from were the same. We are more explicit now, which fixes the sandbox jobs. Signed-off-by: Raito Bezarius <masterancpp@gmail.com>	2024-07-22 15:41:47 +02:00
raito	80c4757571	gerrit01: add a one-way-sync service It's basic and does not handle conflicts which needs to be manually managed. Signed-off-by: Raito Bezarius <masterancpp@gmail.com>	2024-07-19 17:52:44 +02:00
raito	fda59ee6c0	gerrit: factor more configuration in the NixOS module for external consumption Other modules may require information to configure themselves from the Gerrit module. Signed-off-by: Raito Bezarius <masterancpp@gmail.com>	2024-07-17 15:43:35 +02:00
Ilya K	a9f45daac8	Rename machine folders, clean up flake	2024-07-10 15:24:47 +03:00

15 commits