Commit Graph

2261 Commits

Author SHA1 Message Date
6bd1521941 add oidc_client_secret2
client id: e25c15ea-41ca-4bf0-9ebf-2be9f2d1ccea
2023-08-14 10:05:28 +03:00
92c8136ce4 secrets: move to blocks 2023-08-14 09:30:04 +03:00
eae289f94e remove coturn 2023-08-14 09:09:14 +03:00
98a4ad79f8 grafana now on https://grafana.jakstys.lt, over vpn 2023-08-14 09:04:09 +03:00
7fcb4b7ad0 flake.lock: Update
Flake lock file updates:

• Updated input 'nixpkgs':
    'github:NixOS/nixpkgs/9f9706b24de8a80687acc3fed49e6aa9cfb59e77' (2023-08-12)
  → 'github:NixOS/nixpkgs/771b86d407c567b57d791197ec464b46a5480b0b' (2023-08-13)
2023-08-14 05:13:02 +00:00
b3869ef601 flake.lock: Update
Flake lock file updates:

• Updated input 'nixpkgs':
    'github:NixOS/nixpkgs/19e8c15d08060861e218a161dfb83ca0669dff8c' (2023-08-11)
  → 'github:NixOS/nixpkgs/9f9706b24de8a80687acc3fed49e6aa9cfb59e77' (2023-08-12)
2023-08-12 23:30:47 +00:00
9b2abd8157 flake.lock: Update
Flake lock file updates:

• Updated input 'nixpkgs':
    'github:NixOS/nixpkgs/18784aac1013da9b442adf29b6c7c228518b5d3f' (2023-08-10)
  → 'github:NixOS/nixpkgs/19e8c15d08060861e218a161dfb83ca0669dff8c' (2023-08-11)
2023-08-11 23:30:44 +00:00
91351cfa82 flake.lock: Update
Flake lock file updates:

• Updated input 'nixpkgs':
    'github:NixOS/nixpkgs/9034b46dc4c7596a87ab837bb8a07ef2d887e8c7' (2023-08-09)
  → 'github:NixOS/nixpkgs/18784aac1013da9b442adf29b6c7c228518b5d3f' (2023-08-10)
2023-08-10 23:30:48 +00:00
a2a741d27e fmt and formatting; nsd-acme is less verbose 2023-08-10 10:48:34 +03:00
fa435f65d0 zones don't need to be sanitized
it's DNS!
2023-08-10 10:46:06 +03:00
7bedc09abb deployerbot: do not restart if changed
leads to interesting deadlocks when upgrading self
2023-08-10 10:40:07 +03:00
fbdaedeb04 flake.lock: Update
Flake lock file updates:

• Updated input 'nixpkgs':
    'github:NixOS/nixpkgs/01510579d08c4e13125b8838963069f255fbf782' (2023-08-08)
  → 'github:NixOS/nixpkgs/9034b46dc4c7596a87ab837bb8a07ef2d887e8c7' (2023-08-09)
2023-08-10 07:00:33 +03:00
4878c42ca9 cron + alerting for cert updates 2023-08-10 00:46:36 +03:00
9059f84632 uacme can return 1 when cert is up to date 2023-08-10 00:37:21 +03:00
76a748e086 grafana is now prod 2023-08-10 00:29:56 +03:00
98816538d2 trying grafana1 2023-08-10 00:24:36 +03:00
6b795bd6f4 Revert "grafana.jakstys.lt: non-staging"
This reverts commit b8435f3d97.
2023-08-09 16:08:04 +03:00
b8435f3d97 grafana.jakstys.lt: non-staging 2023-08-09 15:57:08 +03:00
69e6734eb7 nsd-acme: misc fixes 2023-08-09 15:55:05 +03:00
9a456192af nsd-acme 2023-08-09 15:34:44 +03:00
3e66f95668 zfsunlock nitpick 2023-08-09 14:26:49 +03:00
9fecb7ab4e flake.lock: Update
Flake lock file updates:

• Updated input 'nixpkgs':
    'github:NixOS/nixpkgs/9ba5e0b04727309ed8583079a3eaefd0290c7a2b' (2023-08-07)
  → 'github:NixOS/nixpkgs/01510579d08c4e13125b8838963069f255fbf782' (2023-08-08)
2023-08-08 23:30:48 +00:00
52d94a128a flake.lock: Update
Flake lock file updates:

• Updated input 'nixpkgs':
    'github:NixOS/nixpkgs/2a15a55536094751bc438c07bfca95dc309e57f1' (2023-08-07)
  → 'github:NixOS/nixpkgs/9ba5e0b04727309ed8583079a3eaefd0290c7a2b' (2023-08-07)
2023-08-07 23:30:44 +00:00
4cd41382c2 nsd-control-setup: try to fix triggering conditions 2023-08-07 14:55:45 +03:00
9a7e42b95d nsd: ConditionPathExists all files 2023-08-07 14:50:32 +03:00
125ebdac56 flake.lock: Update
Flake lock file updates:

• Updated input 'nixpkgs':
    'github:NixOS/nixpkgs/61676e4dcfeeb058f255294bcb08ea7f3bc3ce56' (2023-08-06)
  → 'github:NixOS/nixpkgs/2a15a55536094751bc438c07bfca95dc309e57f1' (2023-08-07)
2023-08-07 11:42:06 +00:00
5ae9886929 deployerbot: set PATH in systemd service definition 2023-08-07 14:39:38 +03:00
afb9c5f309 nsd: acme pattern zonefile 2023-08-07 09:28:28 +03:00
132669d69d nsd: add acme pattern 2023-08-07 09:12:57 +03:00
efa76812e8 remove _acme-endpoint.grafana.jakstys.lt. from main config 2023-08-07 09:05:02 +03:00
10de4e7ce2 letsencrypt: add account.key
we will be doing dns challenges manually
2023-08-07 08:31:00 +03:00
b7908a51fb nsd: nsd_control.pem is the last thing in nsd-control-setup 2023-08-07 08:26:48 +03:00
993487bea8 flake.lock: Update
Flake lock file updates:

• Updated input 'nixpkgs':
    'github:NixOS/nixpkgs/240472b7e47a641e9e7675f58b64d3626ca7824d' (2023-08-06)
  → 'github:NixOS/nixpkgs/61676e4dcfeeb058f255294bcb08ea7f3bc3ce56' (2023-08-06)
2023-08-06 23:30:46 +00:00
a8bf8d7504 nsd: enable remote-control 2023-08-07 01:36:28 +03:00
275c4ee8ca _acme-theone 2023-08-07 01:15:36 +03:00
a783e84e0b _acme-challenge points to _acme 2023-08-07 00:46:26 +03:00
5041d4d262 vno1-oh2: allow port 53 2023-08-07 00:33:37 +03:00
36280e1624 wip playing with acme-challenge 2023-08-07 00:27:33 +03:00
3127fd3ee6 wip grafana.jakstys.lt 2023-08-07 00:18:08 +03:00
c847b0095b flake.lock: Update
Flake lock file updates:

• Updated input 'nixpkgs':
    'github:NixOS/nixpkgs/9607b9149c9d81fdf3dc4f3bcc278da146ffbd77' (2023-08-05)
  → 'github:NixOS/nixpkgs/240472b7e47a641e9e7675f58b64d3626ca7824d' (2023-08-06)
2023-08-06 21:20:00 +03:00
a1c1310184 prometheus: change scrape_interval to 15s 2023-08-06 21:18:14 +03:00
d8fb8a618d grafana listen on wildcard 2023-08-06 20:39:48 +03:00
a9fb4319d3 Revert "add grafana.jakst"
This reverts commit 56c01c7dd0.

Will do https://grafana.jakstys.lt instead
2023-08-06 20:35:58 +03:00
56c01c7dd0 add grafana.jakst 2023-08-06 11:14:17 +03:00
0d113f6d69 flake.lock: Update
Flake lock file updates:

• Updated input 'nixpkgs':
    'github:NixOS/nixpkgs/ed7e7122ecffad01022c9ce010557ad8b4fd6978' (2023-08-05)
  → 'github:NixOS/nixpkgs/9607b9149c9d81fdf3dc4f3bcc278da146ffbd77' (2023-08-05)
2023-08-05 23:30:52 +00:00
c8525b4e6b node_exporter on hel1-a 2023-08-06 01:00:02 +03:00
e1581adf18 node_exporter collect processes too 2023-08-06 00:32:23 +03:00
051e07d67b flake.lock: Update
Flake lock file updates:

• Updated input 'nixpkgs':
    'github:NixOS/nixpkgs/a7c57ba85e9cbbe79c42c2f3e2a38411db52eff9' (2023-08-05)
  → 'github:NixOS/nixpkgs/ed7e7122ecffad01022c9ce010557ad8b4fd6978' (2023-08-05)
2023-08-06 00:20:26 +03:00
7c74d8c1ed expose more ports to self 2023-08-06 00:15:13 +03:00
a5b1b4637f grafana/prometheus provisioning 2023-08-06 00:11:16 +03:00