oysteikt
5c4bab875f
flake.lock: bump
2026-02-17 08:41:15 +01:00
oysteikt
5205ccc902
topology: extend some more
2026-02-17 08:41:15 +01:00
oysteikt
348561b906
.gitea/workflows/build-topology-graph: init
2026-02-17 08:41:15 +01:00
oysteikt
43c1f9528f
topology: extend
2026-02-17 08:41:15 +01:00
oysteikt
716ac7af60
topology: add a bunch of non-nixos machines
2026-02-17 08:41:15 +01:00
oysteikt
767139a24b
topology: localize nixos module, add custom extractor, fix misc
2026-02-17 08:41:15 +01:00
danio
318f7c0a7d
buskerud no longer nix rip
2026-02-17 08:41:15 +01:00
danio
7adeb0b3c5
topology: init with placeholder values
2026-02-17 08:41:15 +01:00
oysteikt
55cf9b1a57
flake.lock: bump
2026-02-17 08:41:15 +01:00
oysteikt
c974f9b438
flake.nix: pin git ref for all inputs
2026-02-17 08:41:15 +01:00
oysteikt
a9cc479445
misc/metrics-exporters: move to base
2026-02-17 08:41:15 +01:00
oysteikt
809a936dde
misc/rust-motd: drop
2026-02-17 08:41:15 +01:00
oysteikt
efb4c7a985
wenche: flatten builder config
2026-02-17 08:41:15 +01:00
oysteikt
f8af632e9d
flake.nix: add pkgs as an output for ease of why-depends
2026-02-17 08:41:15 +01:00
oysteikt
5755947925
docs/{development, development-misc}: init, README: clean
2026-02-17 08:41:15 +01:00
oysteikt
0f8d4f762a
README: lowercase filename extension
2026-02-17 08:41:15 +01:00
oysteikt
7396209c2b
README: add links to new docs
2026-02-17 08:41:15 +01:00
oysteikt
b862d11a2d
docs/secret-management.md: init
2026-02-17 08:41:15 +01:00
oysteikt
e93a743acb
docs/users.md: init
2026-02-17 08:41:15 +01:00
oysteikt
ee4063ffcd
mediawiki-extensions: bump
2026-02-17 08:41:15 +01:00
oysteikt
6c08d88049
base/nginx: enable extra listen paramenters by default
2026-02-17 08:41:15 +01:00
oysteikt
8b8211a0e8
bekkalokk/bluemap: enable kTLS, HTTP3 and QUIC for nginx
2026-02-17 08:41:15 +01:00
oysteikt
7ed4906e37
bekkalokk/bluemap: rewrite prestart as StateDirectory + ExecStartPre
2026-02-17 08:41:15 +01:00
oysteikt
89031e132d
modules/bluemap: expand script
2026-02-17 08:41:15 +01:00
oysteikt
d3fbf09576
modules/bluemap: set CPUSchedulingPolicy=batch
2026-02-17 08:41:15 +01:00
oysteikt
80980167b3
modules/bluemap: declare render-mask option
2026-02-17 08:41:15 +01:00
oysteikt
eeca8778a0
modules/bluemap: remove max-y, bekkalokk/bluemap: fix
2026-02-17 08:41:15 +01:00
oysteikt
d9db63af2e
bekkalokk/bluemap: fix start-pos in map configs
2026-02-17 08:41:15 +01:00
oysteikt
a3c372df9d
bekkalokk/bluemap: set world names
2026-02-17 08:41:15 +01:00
oysteikt
78d3efc1e3
modules/bluemap: update map config defaults
2026-02-17 08:41:15 +01:00
oysteikt
eeb588b1ae
modules/bluemap: declare 'name' option
2026-02-17 08:41:15 +01:00
oysteikt
399b48cbe9
bluemap: move module and package, expose through flake, bekkalokk/bluemap: use correct package version
2026-02-17 08:41:15 +01:00
oysteikt
d5a2270111
bluemap: update module to reflect upstream better
2026-02-17 08:41:15 +01:00
oysteikt
486bac9ebf
bluemap: bump from 5.2 -> 5.15
2026-02-17 08:41:15 +01:00
oysteikt
3941da4306
bekkalokk/bluemap: update config
2026-02-17 08:41:15 +01:00
oysteikt
2b51f5b0de
various: set sops restartUnits
2026-02-17 08:41:15 +01:00
oysteikt
84fd544659
kommode/gitea: fix sops restarts and systemd ordering
2026-02-17 08:41:15 +01:00
oysteikt
0a280f7571
kommode/gitea: declarative pubkey
2026-02-17 08:41:15 +01:00
oysteikt
93c984eda8
kommode/gitea: add restartUnits for some sops secrets
2026-02-17 08:41:15 +01:00
oysteikt
79aa90b987
secrets/bakke: update keys
2026-02-17 08:41:15 +01:00
oysteikt
5717e200c1
secrets/kommode: update gitea signing key
2026-02-17 08:41:15 +01:00
oysteikt
2b6fe0e3ab
.sops.yaml: remove remains of jokum
2026-02-17 08:41:15 +01:00
oysteikt
87f7f33875
bekkalokk/mediawiki: add dark mode support
2026-02-17 08:41:15 +01:00
oysteikt
b921d8fd97
bicep/postgres: bindmount datadir
2026-02-17 08:41:15 +01:00
oysteikt
0c4b11ba14
bekkalokk/nettsiden: remove old handling of alternative domains
2026-02-17 08:41:15 +01:00
oysteikt
db40e066a1
bekkalokk/nettsiden: use SSL cert for redirects
2026-02-17 08:41:15 +01:00
oysteikt
299d7cc05e
bekkalokk/nettsiden: use redirects for alternative domains
2026-02-17 08:41:15 +01:00
felixalb
35d03b6734
Init bakke ( !87 )
...
New backup server just dropped!
This server is awfully slow, and the mdraid setup is awfully slow, and I doubt that this will be a good experience, but we now have a backup server again?
- Tried Disko and nixos-anywhere
- Tried using mdraid
- Found that md is ancient and bad
- Found that disko is 100% extra steps, and a lot more complicated and noisy than just formatting your disks yourself
- Found that systemd-boot doesn't support mdraid
- Found that we probably don't need to mirror the boot partition :)
- Found that old hardware is slow
- Found that old hardware can have poor support for iPXE with UEFI, and might do weird BIOS stuff on you when you least expect it
- Reaffirmed that zfs is love
Current disk layout:
- mdraid for boot/root disk
- 4TB WD Red with 500MiB ESP with systemd-boot, Remaining mdraid - Old?
- 4TB WD Red with 500MiB Unused partition, Remaining mdraid - Old?
- zfs pool "tank" for the actual backup data
- 8TB Toshiba MG08 - New
- 8TB Exos 7E10 - New
TODO:
- Document the death of Toriel on the wiki
- Document Bakke on the wiki
- ... describing the poco loco disk layout
- Start backing stuff up
- Restic? Borg? Rsync?
- Make backup retention policy and zfs snapshot system
- Document backup procedures
Reviewed-on: #87
Co-authored-by: Felix Albrigtsen <felix@albrigtsen.it >
Co-committed-by: Felix Albrigtsen <felix@albrigtsen.it >
2026-02-17 08:41:15 +01:00
oysteikt
0c16747c63
kommode/gitea: move some links from top to bottom
2026-02-17 08:41:15 +01:00
oysteikt
15aa8e70c9
bekkalokk/kerberos: remove vendored module
2026-02-17 08:41:15 +01:00