Commit Graph

149 Commits

Author SHA1 Message Date
8fddcd68e8 nixbld: update mail server 2019-12-18 16:26:10 +08:00
107060f50c nixbld: remove adoptopenjdk-openj9-bin-11
This is for running NATview, but since there are fewer uTCA issues with Sayma v2 this is not really necessary anymore.

And for power control, STM32 + SSR works better than uTCA.
2019-12-10 11:59:29 +08:00
e6488e16d2 nixbld: boards are no longer connected directly 2019-12-10 11:58:52 +08:00
6680dc6c34 nixbld: remove whitequark account 2019-12-10 11:52:05 +08:00
d88137f8b7 gitea: enable emails (and password recovery) 2019-11-25 21:58:49 +08:00
4bd0495834 nixbld: set up rpi SSH port redirects for IPv4 users 2019-11-20 19:29:35 +08:00
3b3371eebf restore ARTIQ-2 manual 2019-11-19 10:18:53 +08:00
596a9bc6b4 customize gitea homepage 2019-11-18 13:48:40 +08:00
3d8252acf8 restore ARTIQ-3 manual 2019-11-17 09:33:31 +08:00
e50a89acea build ARTIQ releases 2019-11-14 17:07:46 +08:00
0136a154a8 fix sipyco doc aliases 2019-11-12 18:34:03 +08:00
57b817f07e build sipyco manual 2019-11-12 10:43:50 +08:00
e69ddf6c4c nixbld: fix munin 2019-11-07 16:14:01 +08:00
c1db80023b nixbld: add kasli-customer DNS entry 2019-10-31 11:14:20 +08:00
aa6d631863 nixops: set up devboard users 2019-10-22 20:27:02 +08:00
392e3dcb8e nixbld: use faster rpi for aarch64 builds 2019-10-22 20:10:20 +08:00
ee60f202b1 nixops: add rpi-3 and rpi-4 2019-10-22 20:09:56 +08:00
7167c34bfe nixbld: install nixops, remove virtmanager 2019-10-21 21:38:24 +08:00
379335cc6e nixbld: remove unnecessary NetworkManager setting
We are not using NetworkManager here.
2019-10-21 16:12:57 +08:00
833a9c7430 nixbld: add perso.m-labs.hk 2019-10-17 15:17:42 +08:00
3aa23cacfc nixbld: fix indentation 2019-10-17 14:36:49 +08:00
0469ca21da nixbld: get static IPs out of DHCP range, and give them DNS entries 2019-10-16 17:49:00 +08:00
68534d2ce2 nixbld: IPv6 on internal networks 2019-10-16 13:48:13 +08:00
e89afabdfb nixbld: isolate wifi network. Closes #20 2019-10-15 19:42:26 +08:00
dd490121b6 nixbld: filter CUPS access using firewall
CUPS listenAddresses is problematic.
2019-10-15 19:20:32 +08:00
f3fe798126 nixbld: disable libvirtd (#20) 2019-10-15 17:26:51 +08:00
c0c9af04d4 nixbld: add openhardware.hk site 2019-10-09 21:33:37 +08:00
a85a16ff73 nixbld: remove fractalide 2019-10-09 21:08:12 +08:00
dfe48379c5 nixbld: document secret permissions 2019-10-09 10:41:15 +08:00
6a09d1cc6f nixbld: add QF users 2019-09-30 10:33:28 +08:00
e05fd797fd nixbld: install gdb system-wide 2019-09-30 10:33:28 +08:00
771b91f4f3 nixbld: support yubikey+password 2FA 2019-09-22 20:25:03 +08:00
099b7dee2a nixbld: store email account info in /etc/nixos/secret 2019-09-19 09:44:34 +08:00
d28167badf Revert "nixbld: use store_uri for hydra"
secret-key should not be used with the local store (https://github.com/NixOS/hydra/issues/679#issuecomment-532607341)

This reverts commit ef80154c64.
2019-09-18 18:46:18 +08:00
ef80154c64 nixbld: use store_uri for hydra
Note that binary_cache_secret_key_file is actually not ignored, contrary to what the hydra warning message says.
binary_cache_secret_key_file is used by the perl code, when hydra itself as acting as a binary cache (over http), but store-uri is used by the c++ code, when the queue-runner is copying artifacts into whatever the store-uri is
This mess ought to be cleaned up in hydra at some point.
2019-09-18 17:35:39 +08:00
361d7445a5 nixbld: cleanup 2019-09-18 15:38:07 +08:00
0f45d03e32 nixbld: fix flarum 'bad gateway' error 2019-09-18 14:23:14 +08:00
f531f0c0d7 nixbld: add IPv6 tunnel 2019-09-18 12:38:35 +08:00
9ea3e2e47b nixbld: factor out network interface names 2019-09-18 12:20:03 +08:00
3bd0f2c1e9 nixbld: LAN router
Replaces OpenWrt router that was limited to 100Mbps (new fiber is 300Mbps).
2019-09-18 12:13:10 +08:00
44018d0a56 nixbld: handle upstream patches properly in overridden packages 2019-09-18 11:57:13 +08:00
8efe227959 nixbld: NixOS 19.09 fixes 2019-09-17 17:22:43 +08:00
4f648fba07 nixbld: fix nginx alias_traversal configuration issue
https://github.com/yandex/gixy/blob/master/docs/en/plugins/aliastraversal.md
2019-09-17 16:40:22 +08:00
bd9062421d nixbld: enable apparmor
This doesn't do much for now and apparmor support needs some work, but this enables the
kernel boot options so we can fix apparmor later without having to reboot the server.
2019-09-16 09:32:58 +08:00
b8b6fdbba5 nixbld: add prototype mail server 2019-09-13 12:48:51 +08:00
40e87731e0 nixbld: enable UPS monitoring 2019-09-11 17:37:59 +08:00
350701c682 nixbld: update installed packages 2019-09-05 16:47:01 +08:00
8a8f987098 nixbld: act as wifi access point 2019-09-05 15:27:44 +08:00
dc3cc3f596 nixbld: run hydra hooks for artiq-manual only on success
should fix GH issue #18
2019-08-14 00:05:04 +02:00
f92d6b96f4 nixbld: disable docker 2019-08-01 10:37:47 +08:00