Commit Graph

125 Commits

Author SHA1 Message Date
Sebastien Bourdeauducq dd490121b6 nixbld: filter CUPS access using firewall
CUPS listenAddresses is problematic.
2019-10-15 19:20:32 +08:00
Sebastien Bourdeauducq f3fe798126 nixbld: disable libvirtd (#20) 2019-10-15 17:26:51 +08:00
Sebastien Bourdeauducq c0c9af04d4 nixbld: add openhardware.hk site 2019-10-09 21:33:37 +08:00
Sebastien Bourdeauducq a85a16ff73 nixbld: remove fractalide 2019-10-09 21:08:12 +08:00
Sebastien Bourdeauducq dfe48379c5 nixbld: document secret permissions 2019-10-09 10:41:15 +08:00
Sebastien Bourdeauducq 6a09d1cc6f nixbld: add QF users 2019-09-30 10:33:28 +08:00
Sebastien Bourdeauducq e05fd797fd nixbld: install gdb system-wide 2019-09-30 10:33:28 +08:00
Sebastien Bourdeauducq 771b91f4f3 nixbld: support yubikey+password 2FA 2019-09-22 20:25:03 +08:00
Sebastien Bourdeauducq 099b7dee2a nixbld: store email account info in /etc/nixos/secret 2019-09-19 09:44:34 +08:00
Sebastien Bourdeauducq d28167badf Revert "nixbld: use store_uri for hydra"
secret-key should not be used with the local store (https://github.com/NixOS/hydra/issues/679#issuecomment-532607341)

This reverts commit ef80154c64.
2019-09-18 18:46:18 +08:00
Sebastien Bourdeauducq ef80154c64 nixbld: use store_uri for hydra
Note that binary_cache_secret_key_file is actually not ignored, contrary to what the hydra warning message says.
binary_cache_secret_key_file is used by the perl code, when hydra itself as acting as a binary cache (over http), but store-uri is used by the c++ code, when the queue-runner is copying artifacts into whatever the store-uri is
This mess ought to be cleaned up in hydra at some point.
2019-09-18 17:35:39 +08:00
Sebastien Bourdeauducq 361d7445a5 nixbld: cleanup 2019-09-18 15:38:07 +08:00
Sebastien Bourdeauducq 0f45d03e32 nixbld: fix flarum 'bad gateway' error 2019-09-18 14:23:14 +08:00
Sebastien Bourdeauducq f531f0c0d7 nixbld: add IPv6 tunnel 2019-09-18 12:38:35 +08:00
Sebastien Bourdeauducq 9ea3e2e47b nixbld: factor out network interface names 2019-09-18 12:20:03 +08:00
Sebastien Bourdeauducq 3bd0f2c1e9 nixbld: LAN router
Replaces OpenWrt router that was limited to 100Mbps (new fiber is 300Mbps).
2019-09-18 12:13:10 +08:00
Sebastien Bourdeauducq 44018d0a56 nixbld: handle upstream patches properly in overridden packages 2019-09-18 11:57:13 +08:00
Sebastien Bourdeauducq 8efe227959 nixbld: NixOS 19.09 fixes 2019-09-17 17:22:43 +08:00
Sebastien Bourdeauducq 4f648fba07 nixbld: fix nginx alias_traversal configuration issue
https://github.com/yandex/gixy/blob/master/docs/en/plugins/aliastraversal.md
2019-09-17 16:40:22 +08:00
Sebastien Bourdeauducq bd9062421d nixbld: enable apparmor
This doesn't do much for now and apparmor support needs some work, but this enables the
kernel boot options so we can fix apparmor later without having to reboot the server.
2019-09-16 09:32:58 +08:00
Sebastien Bourdeauducq b8b6fdbba5 nixbld: add prototype mail server 2019-09-13 12:48:51 +08:00
Sebastien Bourdeauducq 40e87731e0 nixbld: enable UPS monitoring 2019-09-11 17:37:59 +08:00
Sebastien Bourdeauducq 350701c682 nixbld: update installed packages 2019-09-05 16:47:01 +08:00
Sebastien Bourdeauducq 8a8f987098 nixbld: act as wifi access point 2019-09-05 15:27:44 +08:00
Astro dc3cc3f596 nixbld: run hydra hooks for artiq-manual only on success
should fix GH issue #18
2019-08-14 00:05:04 +02:00
Sebastien Bourdeauducq f92d6b96f4 nixbld: disable docker 2019-08-01 10:37:47 +08:00
Sebastien Bourdeauducq 405492b2e9 nixbld: add fish shell 2019-07-31 22:48:42 +08:00
Sebastien Bourdeauducq a86f29733e nixbld: redirect old artiq resources page 2019-07-31 22:48:42 +08:00
Sebastien Bourdeauducq 552b872bac nixbld: add legacy migen manual URL 2019-07-29 11:44:48 +08:00
Sebastien Bourdeauducq 820ede4ac3 nixbld: optimize web server settings 2019-07-27 11:27:28 +08:00
Sebastien Bourdeauducq 049ef39c29 remove ARTIQ-2 manual 2019-07-27 10:38:06 +08:00
Sebastien Bourdeauducq 4d0c0e295a nixbld: use custom 404 page 2019-07-26 21:29:54 +08:00
Sebastien Bourdeauducq 06e8e67d10 nixbld: increase max push size for HTTPS gitea 2019-07-22 19:34:07 +08:00
Sebastien Bourdeauducq af31db6d21 nixbld: add ARTIQ-4 manual legacy URL 2019-07-22 19:32:18 +08:00
Sebastien Bourdeauducq 00de3141b0 nixbld: update fractalide settings 2019-07-19 16:24:04 +08:00
Sebastien Bourdeauducq 618486ca8a nixbld: update web settings 2019-07-19 16:23:47 +08:00
Sebastien Bourdeauducq 78caeebf02 serve website from hydra 2019-07-19 15:57:35 +08:00
Sebastien Bourdeauducq 5326cab419 use recommended nginx patch 2019-07-19 15:19:39 +08:00
Sebastien Bourdeauducq c134bfd3c1 web fixes and improvements 2019-07-19 15:00:06 +08:00
Sebastien Bourdeauducq 4d9e1f6e36 nixbld: redirect old URLs 2019-07-18 23:25:35 +08:00
Sebastien Bourdeauducq 5173a26468 nixbld: ignore broken conda-generated index.html 2019-07-18 00:47:18 +08:00
Sebastien Bourdeauducq f51d24ac2e nixbld: publish conda channel on WWW 2019-07-18 00:20:05 +08:00
Sebastien Bourdeauducq dfa2a4017e nixbld: update documentation jobset name 2019-07-18 00:10:33 +08:00
Sebastien Bourdeauducq 41a19cbf34 update stewart settings 2019-07-01 22:53:39 +08:00
Sebastien Bourdeauducq 8d9faac567 backup: exclude gitea archives 2019-07-01 22:53:03 +08:00
Sebastien Bourdeauducq 9e796e5073 nixbld: add password on munin output 2019-06-24 18:54:44 +08:00
Sebastien Bourdeauducq e149012443 backup: fix improper copy/paste 2019-06-01 16:05:41 +08:00
Sebastien Bourdeauducq b01f6aee27 ensure hydra does not fill hard disk 2019-05-29 15:48:59 +08:00
Sebastien Bourdeauducq 3da02d5f47 raise hydra max_output_size
Anaconda is large and reinstalling it sometimes goes over that limit.
2019-05-29 15:32:19 +08:00
Sebastien Bourdeauducq 5f7def845a nixbld: forward more traffic to stewart's machine 2019-05-27 00:42:50 +08:00