Commit Graph

126 Commits

Author SHA1 Message Date
e89afabdfb nixbld: isolate wifi network. Closes #20 2019-10-15 19:42:26 +08:00
dd490121b6 nixbld: filter CUPS access using firewall
CUPS listenAddresses is problematic.
2019-10-15 19:20:32 +08:00
f3fe798126 nixbld: disable libvirtd (#20) 2019-10-15 17:26:51 +08:00
c0c9af04d4 nixbld: add openhardware.hk site 2019-10-09 21:33:37 +08:00
a85a16ff73 nixbld: remove fractalide 2019-10-09 21:08:12 +08:00
dfe48379c5 nixbld: document secret permissions 2019-10-09 10:41:15 +08:00
6a09d1cc6f nixbld: add QF users 2019-09-30 10:33:28 +08:00
e05fd797fd nixbld: install gdb system-wide 2019-09-30 10:33:28 +08:00
771b91f4f3 nixbld: support yubikey+password 2FA 2019-09-22 20:25:03 +08:00
099b7dee2a nixbld: store email account info in /etc/nixos/secret 2019-09-19 09:44:34 +08:00
d28167badf Revert "nixbld: use store_uri for hydra"
secret-key should not be used with the local store (https://github.com/NixOS/hydra/issues/679#issuecomment-532607341)

This reverts commit ef80154c64.
2019-09-18 18:46:18 +08:00
ef80154c64 nixbld: use store_uri for hydra
Note that binary_cache_secret_key_file is actually not ignored, contrary to what the hydra warning message says.
binary_cache_secret_key_file is used by the perl code, when hydra itself as acting as a binary cache (over http), but store-uri is used by the c++ code, when the queue-runner is copying artifacts into whatever the store-uri is
This mess ought to be cleaned up in hydra at some point.
2019-09-18 17:35:39 +08:00
361d7445a5 nixbld: cleanup 2019-09-18 15:38:07 +08:00
0f45d03e32 nixbld: fix flarum 'bad gateway' error 2019-09-18 14:23:14 +08:00
f531f0c0d7 nixbld: add IPv6 tunnel 2019-09-18 12:38:35 +08:00
9ea3e2e47b nixbld: factor out network interface names 2019-09-18 12:20:03 +08:00
3bd0f2c1e9 nixbld: LAN router
Replaces OpenWrt router that was limited to 100Mbps (new fiber is 300Mbps).
2019-09-18 12:13:10 +08:00
44018d0a56 nixbld: handle upstream patches properly in overridden packages 2019-09-18 11:57:13 +08:00
8efe227959 nixbld: NixOS 19.09 fixes 2019-09-17 17:22:43 +08:00
4f648fba07 nixbld: fix nginx alias_traversal configuration issue
https://github.com/yandex/gixy/blob/master/docs/en/plugins/aliastraversal.md
2019-09-17 16:40:22 +08:00
bd9062421d nixbld: enable apparmor
This doesn't do much for now and apparmor support needs some work, but this enables the
kernel boot options so we can fix apparmor later without having to reboot the server.
2019-09-16 09:32:58 +08:00
b8b6fdbba5 nixbld: add prototype mail server 2019-09-13 12:48:51 +08:00
40e87731e0 nixbld: enable UPS monitoring 2019-09-11 17:37:59 +08:00
350701c682 nixbld: update installed packages 2019-09-05 16:47:01 +08:00
8a8f987098 nixbld: act as wifi access point 2019-09-05 15:27:44 +08:00
dc3cc3f596 nixbld: run hydra hooks for artiq-manual only on success
should fix GH issue #18
2019-08-14 00:05:04 +02:00
f92d6b96f4 nixbld: disable docker 2019-08-01 10:37:47 +08:00
405492b2e9 nixbld: add fish shell 2019-07-31 22:48:42 +08:00
a86f29733e nixbld: redirect old artiq resources page 2019-07-31 22:48:42 +08:00
552b872bac nixbld: add legacy migen manual URL 2019-07-29 11:44:48 +08:00
820ede4ac3 nixbld: optimize web server settings 2019-07-27 11:27:28 +08:00
049ef39c29 remove ARTIQ-2 manual 2019-07-27 10:38:06 +08:00
4d0c0e295a nixbld: use custom 404 page 2019-07-26 21:29:54 +08:00
06e8e67d10 nixbld: increase max push size for HTTPS gitea 2019-07-22 19:34:07 +08:00
af31db6d21 nixbld: add ARTIQ-4 manual legacy URL 2019-07-22 19:32:18 +08:00
00de3141b0 nixbld: update fractalide settings 2019-07-19 16:24:04 +08:00
618486ca8a nixbld: update web settings 2019-07-19 16:23:47 +08:00
78caeebf02 serve website from hydra 2019-07-19 15:57:35 +08:00
5326cab419 use recommended nginx patch 2019-07-19 15:19:39 +08:00
c134bfd3c1 web fixes and improvements 2019-07-19 15:00:06 +08:00
4d9e1f6e36 nixbld: redirect old URLs 2019-07-18 23:25:35 +08:00
5173a26468 nixbld: ignore broken conda-generated index.html 2019-07-18 00:47:18 +08:00
f51d24ac2e nixbld: publish conda channel on WWW 2019-07-18 00:20:05 +08:00
dfa2a4017e nixbld: update documentation jobset name 2019-07-18 00:10:33 +08:00
41a19cbf34 update stewart settings 2019-07-01 22:53:39 +08:00
8d9faac567 backup: exclude gitea archives 2019-07-01 22:53:03 +08:00
9e796e5073 nixbld: add password on munin output 2019-06-24 18:54:44 +08:00
e149012443 backup: fix improper copy/paste 2019-06-01 16:05:41 +08:00
b01f6aee27 ensure hydra does not fill hard disk 2019-05-29 15:48:59 +08:00
3da02d5f47 raise hydra max_output_size
Anaconda is large and reinstalling it sometimes goes over that limit.
2019-05-29 15:32:19 +08:00