e89afabdfb
nixbld: isolate wifi network. Closes #20
2019-10-15 19:42:26 +08:00
dd490121b6
nixbld: filter CUPS access using firewall
...
CUPS listenAddresses is problematic.
2019-10-15 19:20:32 +08:00
f3fe798126
nixbld: disable libvirtd ( #20 )
2019-10-15 17:26:51 +08:00
c0c9af04d4
nixbld: add openhardware.hk site
2019-10-09 21:33:37 +08:00
a85a16ff73
nixbld: remove fractalide
2019-10-09 21:08:12 +08:00
dfe48379c5
nixbld: document secret permissions
2019-10-09 10:41:15 +08:00
6a09d1cc6f
nixbld: add QF users
2019-09-30 10:33:28 +08:00
e05fd797fd
nixbld: install gdb system-wide
2019-09-30 10:33:28 +08:00
771b91f4f3
nixbld: support yubikey+password 2FA
2019-09-22 20:25:03 +08:00
099b7dee2a
nixbld: store email account info in /etc/nixos/secret
2019-09-19 09:44:34 +08:00
d28167badf
Revert "nixbld: use store_uri for hydra"
...
secret-key should not be used with the local store (https://github.com/NixOS/hydra/issues/679#issuecomment-532607341 )
This reverts commit ef80154c64
.
2019-09-18 18:46:18 +08:00
ef80154c64
nixbld: use store_uri for hydra
...
Note that binary_cache_secret_key_file is actually not ignored, contrary to what the hydra warning message says.
binary_cache_secret_key_file is used by the perl code, when hydra itself as acting as a binary cache (over http), but store-uri is used by the c++ code, when the queue-runner is copying artifacts into whatever the store-uri is
This mess ought to be cleaned up in hydra at some point.
2019-09-18 17:35:39 +08:00
361d7445a5
nixbld: cleanup
2019-09-18 15:38:07 +08:00
0f45d03e32
nixbld: fix flarum 'bad gateway' error
2019-09-18 14:23:14 +08:00
f531f0c0d7
nixbld: add IPv6 tunnel
2019-09-18 12:38:35 +08:00
9ea3e2e47b
nixbld: factor out network interface names
2019-09-18 12:20:03 +08:00
3bd0f2c1e9
nixbld: LAN router
...
Replaces OpenWrt router that was limited to 100Mbps (new fiber is 300Mbps).
2019-09-18 12:13:10 +08:00
44018d0a56
nixbld: handle upstream patches properly in overridden packages
2019-09-18 11:57:13 +08:00
8efe227959
nixbld: NixOS 19.09 fixes
2019-09-17 17:22:43 +08:00
4f648fba07
nixbld: fix nginx alias_traversal configuration issue
...
https://github.com/yandex/gixy/blob/master/docs/en/plugins/aliastraversal.md
2019-09-17 16:40:22 +08:00
bd9062421d
nixbld: enable apparmor
...
This doesn't do much for now and apparmor support needs some work, but this enables the
kernel boot options so we can fix apparmor later without having to reboot the server.
2019-09-16 09:32:58 +08:00
b8b6fdbba5
nixbld: add prototype mail server
2019-09-13 12:48:51 +08:00
40e87731e0
nixbld: enable UPS monitoring
2019-09-11 17:37:59 +08:00
350701c682
nixbld: update installed packages
2019-09-05 16:47:01 +08:00
8a8f987098
nixbld: act as wifi access point
2019-09-05 15:27:44 +08:00
dc3cc3f596
nixbld: run hydra hooks for artiq-manual only on success
...
should fix GH issue #18
2019-08-14 00:05:04 +02:00
f92d6b96f4
nixbld: disable docker
2019-08-01 10:37:47 +08:00
405492b2e9
nixbld: add fish shell
2019-07-31 22:48:42 +08:00
a86f29733e
nixbld: redirect old artiq resources page
2019-07-31 22:48:42 +08:00
552b872bac
nixbld: add legacy migen manual URL
2019-07-29 11:44:48 +08:00
820ede4ac3
nixbld: optimize web server settings
2019-07-27 11:27:28 +08:00
049ef39c29
remove ARTIQ-2 manual
2019-07-27 10:38:06 +08:00
4d0c0e295a
nixbld: use custom 404 page
2019-07-26 21:29:54 +08:00
06e8e67d10
nixbld: increase max push size for HTTPS gitea
2019-07-22 19:34:07 +08:00
af31db6d21
nixbld: add ARTIQ-4 manual legacy URL
2019-07-22 19:32:18 +08:00
00de3141b0
nixbld: update fractalide settings
2019-07-19 16:24:04 +08:00
618486ca8a
nixbld: update web settings
2019-07-19 16:23:47 +08:00
78caeebf02
serve website from hydra
2019-07-19 15:57:35 +08:00
5326cab419
use recommended nginx patch
2019-07-19 15:19:39 +08:00
c134bfd3c1
web fixes and improvements
2019-07-19 15:00:06 +08:00
4d9e1f6e36
nixbld: redirect old URLs
2019-07-18 23:25:35 +08:00
5173a26468
nixbld: ignore broken conda-generated index.html
2019-07-18 00:47:18 +08:00
f51d24ac2e
nixbld: publish conda channel on WWW
2019-07-18 00:20:05 +08:00
dfa2a4017e
nixbld: update documentation jobset name
2019-07-18 00:10:33 +08:00
41a19cbf34
update stewart settings
2019-07-01 22:53:39 +08:00
8d9faac567
backup: exclude gitea archives
2019-07-01 22:53:03 +08:00
9e796e5073
nixbld: add password on munin output
2019-06-24 18:54:44 +08:00
e149012443
backup: fix improper copy/paste
2019-06-01 16:05:41 +08:00
b01f6aee27
ensure hydra does not fill hard disk
2019-05-29 15:48:59 +08:00
3da02d5f47
raise hydra max_output_size
...
Anaconda is large and reinstalling it sometimes goes over that limit.
2019-05-29 15:32:19 +08:00