Sebastien Bourdeauducq
68534d2ce2
nixbld: IPv6 on internal networks
2019-10-16 13:48:13 +08:00
Sebastien Bourdeauducq
e89afabdfb
nixbld: isolate wifi network. Closes #20
2019-10-15 19:42:26 +08:00
Sebastien Bourdeauducq
dd490121b6
nixbld: filter CUPS access using firewall
...
CUPS listenAddresses is problematic.
2019-10-15 19:20:32 +08:00
Sebastien Bourdeauducq
f3fe798126
nixbld: disable libvirtd ( #20 )
2019-10-15 17:26:51 +08:00
Sebastien Bourdeauducq
c0c9af04d4
nixbld: add openhardware.hk site
2019-10-09 21:33:37 +08:00
Sebastien Bourdeauducq
a85a16ff73
nixbld: remove fractalide
2019-10-09 21:08:12 +08:00
Sebastien Bourdeauducq
dfe48379c5
nixbld: document secret permissions
2019-10-09 10:41:15 +08:00
Sebastien Bourdeauducq
6a09d1cc6f
nixbld: add QF users
2019-09-30 10:33:28 +08:00
Sebastien Bourdeauducq
e05fd797fd
nixbld: install gdb system-wide
2019-09-30 10:33:28 +08:00
Sebastien Bourdeauducq
771b91f4f3
nixbld: support yubikey+password 2FA
2019-09-22 20:25:03 +08:00
Sebastien Bourdeauducq
099b7dee2a
nixbld: store email account info in /etc/nixos/secret
2019-09-19 09:44:34 +08:00
Sebastien Bourdeauducq
d28167badf
Revert "nixbld: use store_uri for hydra"
...
secret-key should not be used with the local store (https://github.com/NixOS/hydra/issues/679#issuecomment-532607341 )
This reverts commit ef80154c64
2019-09-18 18:46:18 +08:00
Sebastien Bourdeauducq
ef80154c64
nixbld: use store_uri for hydra
...
Note that binary_cache_secret_key_file is actually not ignored, contrary to what the hydra warning message says.
binary_cache_secret_key_file is used by the perl code, when hydra itself as acting as a binary cache (over http), but store-uri is used by the c++ code, when the queue-runner is copying artifacts into whatever the store-uri is
This mess ought to be cleaned up in hydra at some point.
2019-09-18 17:35:39 +08:00
Sebastien Bourdeauducq
361d7445a5
nixbld: cleanup
2019-09-18 15:38:07 +08:00
Sebastien Bourdeauducq
0f45d03e32
nixbld: fix flarum 'bad gateway' error
2019-09-18 14:23:14 +08:00
Sebastien Bourdeauducq
f531f0c0d7
nixbld: add IPv6 tunnel
2019-09-18 12:38:35 +08:00
Sebastien Bourdeauducq
9ea3e2e47b
nixbld: factor out network interface names
2019-09-18 12:20:03 +08:00
Sebastien Bourdeauducq
3bd0f2c1e9
nixbld: LAN router
...
Replaces OpenWrt router that was limited to 100Mbps (new fiber is 300Mbps).
2019-09-18 12:13:10 +08:00
Sebastien Bourdeauducq
44018d0a56
nixbld: handle upstream patches properly in overridden packages
2019-09-18 11:57:13 +08:00
Sebastien Bourdeauducq
8efe227959
nixbld: NixOS 19.09 fixes
2019-09-17 17:22:43 +08:00
Sebastien Bourdeauducq
4f648fba07
nixbld: fix nginx alias_traversal configuration issue
...
https://github.com/yandex/gixy/blob/master/docs/en/plugins/aliastraversal.md
2019-09-17 16:40:22 +08:00
Sebastien Bourdeauducq
bd9062421d
nixbld: enable apparmor
...
This doesn't do much for now and apparmor support needs some work, but this enables the
kernel boot options so we can fix apparmor later without having to reboot the server.
2019-09-16 09:32:58 +08:00
Sebastien Bourdeauducq
b8b6fdbba5
nixbld: add prototype mail server
2019-09-13 12:48:51 +08:00
Sebastien Bourdeauducq
40e87731e0
nixbld: enable UPS monitoring
2019-09-11 17:37:59 +08:00
Sebastien Bourdeauducq
350701c682
nixbld: update installed packages
2019-09-05 16:47:01 +08:00
Sebastien Bourdeauducq
8a8f987098
nixbld: act as wifi access point
2019-09-05 15:27:44 +08:00
Astro
dc3cc3f596
nixbld: run hydra hooks for artiq-manual only on success
...
should fix GH issue #18
2019-08-14 00:05:04 +02:00
Sebastien Bourdeauducq
f92d6b96f4
nixbld: disable docker
2019-08-01 10:37:47 +08:00
Sebastien Bourdeauducq
405492b2e9
nixbld: add fish shell
2019-07-31 22:48:42 +08:00
Sebastien Bourdeauducq
a86f29733e
nixbld: redirect old artiq resources page
2019-07-31 22:48:42 +08:00
Sebastien Bourdeauducq
552b872bac
nixbld: add legacy migen manual URL
2019-07-29 11:44:48 +08:00
Sebastien Bourdeauducq
820ede4ac3
nixbld: optimize web server settings
2019-07-27 11:27:28 +08:00
Sebastien Bourdeauducq
049ef39c29
remove ARTIQ-2 manual
2019-07-27 10:38:06 +08:00
Sebastien Bourdeauducq
4d0c0e295a
nixbld: use custom 404 page
2019-07-26 21:29:54 +08:00
Sebastien Bourdeauducq
06e8e67d10
nixbld: increase max push size for HTTPS gitea
2019-07-22 19:34:07 +08:00
Sebastien Bourdeauducq
af31db6d21
nixbld: add ARTIQ-4 manual legacy URL
2019-07-22 19:32:18 +08:00
Sebastien Bourdeauducq
00de3141b0
nixbld: update fractalide settings
2019-07-19 16:24:04 +08:00
Sebastien Bourdeauducq
618486ca8a
nixbld: update web settings
2019-07-19 16:23:47 +08:00
Sebastien Bourdeauducq
78caeebf02
serve website from hydra
2019-07-19 15:57:35 +08:00
Sebastien Bourdeauducq
5326cab419
use recommended nginx patch
2019-07-19 15:19:39 +08:00
Sebastien Bourdeauducq
c134bfd3c1
web fixes and improvements
2019-07-19 15:00:06 +08:00
Sebastien Bourdeauducq
4d9e1f6e36
nixbld: redirect old URLs
2019-07-18 23:25:35 +08:00
Sebastien Bourdeauducq
5173a26468
nixbld: ignore broken conda-generated index.html
2019-07-18 00:47:18 +08:00
Sebastien Bourdeauducq
f51d24ac2e
nixbld: publish conda channel on WWW
2019-07-18 00:20:05 +08:00
Sebastien Bourdeauducq
dfa2a4017e
nixbld: update documentation jobset name
2019-07-18 00:10:33 +08:00
Sebastien Bourdeauducq
41a19cbf34
update stewart settings
2019-07-01 22:53:39 +08:00
Sebastien Bourdeauducq
8d9faac567
backup: exclude gitea archives
2019-07-01 22:53:03 +08:00
Sebastien Bourdeauducq
9e796e5073
nixbld: add password on munin output
2019-06-24 18:54:44 +08:00
Sebastien Bourdeauducq
e149012443
backup: fix improper copy/paste
2019-06-01 16:05:41 +08:00
Sebastien Bourdeauducq
b01f6aee27
ensure hydra does not fill hard disk
2019-05-29 15:48:59 +08:00
