Commit Graph

21 Commits

Author SHA1 Message Date
0491df32f7 Init bakke (!87)
All checks were successful
Eval nix flake / evals (push) Successful in 5m18s
New backup server just dropped!
This server is awfully slow, and the mdraid setup is awfully slow, and I doubt that this will be a good experience, but we now have a backup server again?

- Tried Disko and nixos-anywhere
- Tried using mdraid
- Found that md is ancient and bad
- Found that disko is 100% extra steps, and a lot more complicated and noisy than just formatting your disks yourself
- Found that systemd-boot doesn't support mdraid
- Found that we probably don't need to mirror the boot partition :)
- Found that old hardware is slow
- Found that old hardware can have poor support for iPXE with UEFI, and might do weird BIOS stuff on you when you least expect it
- Reaffirmed that zfs is love

Current disk layout:
- mdraid for boot/root disk
    - 4TB WD Red with 500MiB ESP with systemd-boot, Remaining mdraid - Old?
    - 4TB WD Red with 500MiB Unused partition, Remaining mdraid - Old?
- zfs pool "tank" for the actual backup data
    - 8TB Toshiba MG08 - New
    - 8TB Exos 7E10 - New

TODO:

- Document the death of Toriel on the wiki
- Document Bakke on the wiki
  - ... describing the poco loco disk layout
- Start backing stuff up
  - Restic? Borg? Rsync?
  - Make backup retention policy and zfs snapshot system
  - Document backup procedures

Reviewed-on: #87
Co-authored-by: Felix Albrigtsen <felix@albrigtsen.it>
Co-committed-by: Felix Albrigtsen <felix@albrigtsen.it>
2025-12-22 04:08:30 +01:00
938e916025 update bicep key
Some checks failed
Eval nix flake / evals (push) Has been cancelled
2025-12-02 01:51:40 +01:00
d9a9fcfef1 danio has a new sops key
Some checks failed
Eval nix flake / evals (push) Has been cancelled
2025-12-02 01:40:54 +01:00
043099eb37 hosts/lupine: init
Some checks failed
Eval nix flake / evals (push) Failing after 1m20s
Co-authored-by: h7x4 <h7x4@nani.wtf>
2025-07-30 20:30:28 +02:00
08b010cb93 kommode/sops: init
Some checks are pending
Eval nix flake / evals (push) Waiting to run
2025-03-16 14:04:09 +01:00
1f85208587 hosts/ustetind: set up gitea-runners 2024-12-09 22:24:54 +01:00
9dbf5d56f5 fix whitespacing issues 2024-08-04 04:37:23 +02:00
b52de48455 sops: add pederbs 2024-08-04 01:24:54 +02:00
55e8f01d1d Upgrade ildkule (!36)
Some checks failed
Eval nix flake / evals (push) Failing after 3h12m29s
This PR is made while moving Ildkule from PVE on joshua, to Openstack on stack.it.ntnu.no.

- The main monitoring dashboard is moved from https://ildkule.pvv.ntnu.no to https://grafana.pvv.ntnu.no.
- A new service is added: uptime-kuma on https://uptime.pvv.ntnu.no.
- The (hardware) configuration for ildkule is updated to fit the new virtualization environment, boot loader, network interfaces, etc.
- Metrics exporters on other hosts should be updated to allow connections from the new host

As this is the first proper server running on openstack, and therefore outside our main IP range, we might discover challenges in our network structure. For example, the database servers usually only allow connections from this range, so Ildkule can no longer access it. This should be explored, documented and/or fixed as we move more services.

Reviewed-on: #36
Co-authored-by: Felix Albrigtsen <felix@albrigtsen.it>
Co-committed-by: Felix Albrigtsen <felix@albrigtsen.it>
2024-04-21 23:36:25 +02:00
fe4dd21acb add eirikwit to sops
Some checks failed
Eval nix flake / evals (push) Failing after 1m44s
2024-03-16 22:38:16 +01:00
8ccf9e9298 Update keys and re-enable web services 2023-05-21 02:29:14 +02:00
ee73a964be move matrix to bicep 2023-05-08 03:38:59 +02:00
bddd7e438d update jokum sops secrets 2023-03-26 13:14:55 +02:00
796155481f Add host bekkalokk
`bekkalokk` is a new machine, meant to host web services and eventually
miscellaneous services.
2023-01-29 01:51:35 +01:00
5d50a9807e sops: reencrypt jokum secrets with felixalb keys 2023-01-22 00:47:22 +01:00
92280cd3d3 Merge remote-tracking branch 'origin/main' into prometheus-stack 2023-01-14 22:49:21 +01:00
c84af91c2c Add ildkule host keys 2022-12-20 18:11:32 +01:00
d52a7295b5 sops: shamir secret setting does nothing 2022-12-18 10:58:00 +01:00
57ff1fa17a Add oysteikt to secrets 2022-12-18 00:05:26 +01:00
6b1f0eb090 Add host ildkule 2022-12-17 21:51:43 +01:00
3ed65c6cfa Add sops for secret management 2022-12-07 10:16:07 +01:00