ab9caaf520
systems: add git.forkos.org
2024-07-16 15:44:08 +02:00
dd069c40d7
forgejo: init service
2024-07-16 15:44:06 +02:00
9899b083ad
forgejo: init custom Forgejo patchset
2024-07-16 15:44:01 +02:00
d4caf7b71a
admins: add emilylange
2024-07-16 15:43:58 +02:00
37ec674984
dns: pre-add git.forkos.org
...
Reserved for a Forgejo instances with Emily's optimizations.
Plans: a mirror, code search and will see how it goes!
Signed-off-by: Raito Bezarius <masterancpp@gmail.com>
2024-07-16 11:54:09 +02:00
e3e60a5e72
services/monitoring: add scraping of Gerrit's internal metrics
2024-07-15 11:02:54 +00:00
2e86babc8a
services/gerrit: add metrics-prometheus-exporter
2024-07-15 11:02:54 +00:00
2b8f42dcda
secrets: add gerrit-prometheus-bearer-token
2024-07-15 11:02:54 +00:00
f14bba14a3
gitignore: add secrets (but not encrypted secrets) to gitignore
2024-07-15 11:02:54 +00:00
0723b7de42
Merge pull request 'terraform/gandi: more sniproxying for bagel-box,meta-01' ( #67 ) from ckie/moarr-v4 into main
...
Reviewed-on: #67
Reviewed-by: raito <raito@noreply.git.lix.systems>
2024-07-14 18:44:21 +00:00
3c2691d9e2
terraform/gandi: introduce proxyRecords and proxy web services
2024-07-14 21:39:42 +03:00
a44196fc3c
flake: update nix-gerrit
2024-07-13 18:24:05 +01:00
7a937e837a
Unlimit Mimir max series
2024-07-13 15:52:46 +03:00
ecfe0ec886
flake.lock: Update
...
Flake lock file updates:
• Updated input 'hydra':
'git+https://git.lix.systems/lix-project/hydra.git?ref=refs/heads/main&rev=05d620a54f38f3764a643d824b55f7790736bb14 ' (2024-07-13)
→ 'git+https://git.lix.systems/lix-project/hydra.git?ref=refs/heads/main&rev=fb9e29d4d0f2f591cd1d706fd3b7334af7d34b84 ' (2024-07-13)
2024-07-13 06:13:22 +02:00
7d9461808c
builders: configure a swapfile + zswap
2024-07-13 04:40:51 +02:00
293bc52ace
hydra: reduce number of parallel builds per builder to limit RAM consumption
2024-07-13 04:38:24 +02:00
64079be3c0
flake.lock: Update
...
Flake lock file updates:
• Updated input 'agenix':
'github:ryantm/agenix/3a56735779db467538fb2e577eda28a9daacaca6' (2024-06-14)
→ 'github:ryantm/agenix/de96bd907d5fbc3b14fc33ad37d1b9a3cb15edc6' (2024-07-09)
• Updated input 'hydra':
'git+https://git.lix.systems/lix-project/hydra.git?ref=refs/heads/main&rev=a9a2679793a17325c966dec4cbb27d44b0531694 ' (2024-06-24)
→ 'git+https://git.lix.systems/lix-project/hydra.git?ref=refs/heads/main&rev=05d620a54f38f3764a643d824b55f7790736bb14 ' (2024-07-13)
• Updated input 'hydra/nix':
'git+https://git@git.lix.systems/lix-project/lix?ref=refs/heads/main&rev=4c3d93611f2848c56ebc69c85f2b1e18001ed3c7 ' (2024-06-24)
→ 'git+https://git@git.lix.systems/lix-project/lix?ref=refs/heads/main&rev=4b109ec1a8fc4550150f56f0f46f2f41d844bda8 ' (2024-07-11)
• Updated input 'nixpkgs':
'github:NixOS/nixpkgs/ab82a9612aa45284d4adf69ee81871a389669a9e' (2024-07-07)
→ 'github:NixOS/nixpkgs/6794d064edc69918bb0fc0e0eda33ece324be17a' (2024-07-12)
2024-07-13 03:12:13 +02:00
9189b73a5f
devShell: change colmena to the nixpkgs version
...
this is done to avoid unnecessarily recompiling colmena
2024-07-13 01:10:59 +00:00
af515792cc
admins: add janik
2024-07-13 01:10:39 +00:00
b4deee29af
editorconfig: init
...
Add a barebones `.editorconfig` to at least trim whitspaces and enforce some minimal norms
2024-07-13 01:10:18 +00:00
756341ea4c
builders: tune sshd MaxStartups to avoid rate limiting Hydra
2024-07-12 21:57:04 +02:00
e6ead602f0
builders get a special treatment for dns64
2024-07-11 02:05:58 +02:00
329f267b02
enable nftables on all hosts
2024-07-11 02:05:35 +02:00
b14f155d55
add ipmitool on vpn-gw and builders
2024-07-10 20:49:17 +02:00
c8208f42ef
flake: attempt to fix the hydraJobs definition
2024-07-10 19:03:18 +02:00
087d17c681
tf/hydra: add a project/jobset for infra machine configurations
2024-07-10 18:52:43 +02:00
d2336262fb
hydra: set allowed URIs in restricted mode for flake inputs
2024-07-10 18:52:22 +02:00
f35cfbd567
flake: configure some hydra jobs (all machine configurations)
2024-07-10 18:43:54 +02:00
58325e30dd
common/nix: use bagel-cache by default
2024-07-10 18:17:30 +02:00
411d514ab9
hydra: user hydra-www needs nix-daemon access too
2024-07-10 17:36:39 +02:00
f74d1ca0f6
hydra: start signing paths
2024-07-10 17:34:57 +02:00
70e608a8f7
common: provide a pinned nixpkgs on all infra machines
2024-07-10 17:17:18 +02:00
4e869a9f43
fix bmc dhcp
2024-07-10 15:54:46 +02:00
3cbdbc45f7
more quality of life improvements...
2024-07-10 15:54:30 +02:00
7ba42d99d1
reduce hydra builders to 4
2024-07-10 15:08:28 +02:00
254e161c07
Give wob-vpn-gw a proper hostname
2024-07-10 15:34:05 +03:00
a9f45daac8
Rename machine folders, clean up flake
2024-07-10 15:24:47 +03:00
787b3af638
Add wob-vpn-gw key, rekey metrics push password for it
2024-07-10 15:13:05 +03:00
e608b92e4f
Add htop and btop to default machine config
2024-07-10 15:01:09 +03:00
e84b362b7a
Allow 12 hour of backfill for metrics
...
This is somewhat experimental and may explode, but we'll see, I guess
2024-07-10 14:59:09 +03:00
9e7e6d42ab
Make nginx/loki/mimir go fast
2024-07-10 14:55:28 +03:00
f2c2bc5ab6
hydra: output machine host key as base64 in the generated machines.conf
2024-07-10 02:16:45 +02:00
f214da9228
hydra: add hydra to nix trusted-users
2024-07-10 02:03:33 +02:00
0e24c18815
tf/hydra: add a test staging-small nixpkgs jobset
2024-07-10 01:57:12 +02:00
2ac0a599fb
bagel-box: fix missing toString
2024-07-10 01:51:31 +02:00
0ccf0b023e
Merge pull request 'hydra: moar power' ( #51 ) from moar-builders into main
...
Reviewed-on: #51
Reviewed-by: Luke Granger-Brown <lukegb@noreply.git.lix.systems>
2024-07-09 23:32:38 +00:00
82db8f7f1e
gerrit01: some more tuning
...
* flip off proxy_buffering again
* enable REVWALK_USE_PRIORITY_QUEUE
* enable delta compression, because that's not a bottleneck and it's
nicer on bandwidth
2024-07-10 00:27:36 +01:00
7b7a645cfc
hydra: moar power
...
Signed-off-by: Raito Bezarius <masterancpp@gmail.com>
2024-07-10 01:27:35 +02:00
39d2352bbc
general quality of life improvements
2024-07-09 23:26:12 +00:00
a7d21e96a0
add global hardening options
2024-07-09 23:26:12 +00:00
