Commit Graph

1953 Commits

Author SHA1 Message Date
a2a741d27e fmt and formatting; nsd-acme is less verbose 2023-08-10 10:48:34 +03:00
fa435f65d0 zones don't need to be sanitized
it's DNS!
2023-08-10 10:46:06 +03:00
7bedc09abb deployerbot: do not restart if changed
leads to interesting deadlocks when upgrading self
2023-08-10 10:40:07 +03:00
fbdaedeb04 flake.lock: Update
Flake lock file updates:

• Updated input 'nixpkgs':
    'github:NixOS/nixpkgs/01510579d08c4e13125b8838963069f255fbf782' (2023-08-08)
  → 'github:NixOS/nixpkgs/9034b46dc4c7596a87ab837bb8a07ef2d887e8c7' (2023-08-09)
2023-08-10 07:00:33 +03:00
4878c42ca9 cron + alerting for cert updates 2023-08-10 00:46:36 +03:00
9059f84632 uacme can return 1 when cert is up to date 2023-08-10 00:37:21 +03:00
76a748e086 grafana is now prod 2023-08-10 00:29:56 +03:00
98816538d2 trying grafana1 2023-08-10 00:24:36 +03:00
6b795bd6f4 Revert "grafana.jakstys.lt: non-staging"
This reverts commit b8435f3d97.
2023-08-09 16:08:04 +03:00
b8435f3d97 grafana.jakstys.lt: non-staging 2023-08-09 15:57:08 +03:00
69e6734eb7 nsd-acme: misc fixes 2023-08-09 15:55:05 +03:00
9a456192af nsd-acme 2023-08-09 15:34:44 +03:00
3e66f95668 zfsunlock nitpick 2023-08-09 14:26:49 +03:00
9fecb7ab4e flake.lock: Update
Flake lock file updates:

• Updated input 'nixpkgs':
    'github:NixOS/nixpkgs/9ba5e0b04727309ed8583079a3eaefd0290c7a2b' (2023-08-07)
  → 'github:NixOS/nixpkgs/01510579d08c4e13125b8838963069f255fbf782' (2023-08-08)
2023-08-08 23:30:48 +00:00
52d94a128a flake.lock: Update
Flake lock file updates:

• Updated input 'nixpkgs':
    'github:NixOS/nixpkgs/2a15a55536094751bc438c07bfca95dc309e57f1' (2023-08-07)
  → 'github:NixOS/nixpkgs/9ba5e0b04727309ed8583079a3eaefd0290c7a2b' (2023-08-07)
2023-08-07 23:30:44 +00:00
4cd41382c2 nsd-control-setup: try to fix triggering conditions 2023-08-07 14:55:45 +03:00
9a7e42b95d nsd: ConditionPathExists all files 2023-08-07 14:50:32 +03:00
125ebdac56 flake.lock: Update
Flake lock file updates:

• Updated input 'nixpkgs':
    'github:NixOS/nixpkgs/61676e4dcfeeb058f255294bcb08ea7f3bc3ce56' (2023-08-06)
  → 'github:NixOS/nixpkgs/2a15a55536094751bc438c07bfca95dc309e57f1' (2023-08-07)
2023-08-07 11:42:06 +00:00
5ae9886929 deployerbot: set PATH in systemd service definition 2023-08-07 14:39:38 +03:00
afb9c5f309 nsd: acme pattern zonefile 2023-08-07 09:28:28 +03:00
132669d69d nsd: add acme pattern 2023-08-07 09:12:57 +03:00
efa76812e8 remove _acme-endpoint.grafana.jakstys.lt. from main config 2023-08-07 09:05:02 +03:00
10de4e7ce2 letsencrypt: add account.key
we will be doing dns challenges manually
2023-08-07 08:31:00 +03:00
b7908a51fb nsd: nsd_control.pem is the last thing in nsd-control-setup 2023-08-07 08:26:48 +03:00
993487bea8 flake.lock: Update
Flake lock file updates:

• Updated input 'nixpkgs':
    'github:NixOS/nixpkgs/240472b7e47a641e9e7675f58b64d3626ca7824d' (2023-08-06)
  → 'github:NixOS/nixpkgs/61676e4dcfeeb058f255294bcb08ea7f3bc3ce56' (2023-08-06)
2023-08-06 23:30:46 +00:00
a8bf8d7504 nsd: enable remote-control 2023-08-07 01:36:28 +03:00
275c4ee8ca _acme-theone 2023-08-07 01:15:36 +03:00
a783e84e0b _acme-challenge points to _acme 2023-08-07 00:46:26 +03:00
5041d4d262 vno1-oh2: allow port 53 2023-08-07 00:33:37 +03:00
36280e1624 wip playing with acme-challenge 2023-08-07 00:27:33 +03:00
3127fd3ee6 wip grafana.jakstys.lt 2023-08-07 00:18:08 +03:00
c847b0095b flake.lock: Update
Flake lock file updates:

• Updated input 'nixpkgs':
    'github:NixOS/nixpkgs/9607b9149c9d81fdf3dc4f3bcc278da146ffbd77' (2023-08-05)
  → 'github:NixOS/nixpkgs/240472b7e47a641e9e7675f58b64d3626ca7824d' (2023-08-06)
2023-08-06 21:20:00 +03:00
a1c1310184 prometheus: change scrape_interval to 15s 2023-08-06 21:18:14 +03:00
d8fb8a618d grafana listen on wildcard 2023-08-06 20:39:48 +03:00
a9fb4319d3 Revert "add grafana.jakst"
This reverts commit 56c01c7dd0.

Will do https://grafana.jakstys.lt instead
2023-08-06 20:35:58 +03:00
56c01c7dd0 add grafana.jakst 2023-08-06 11:14:17 +03:00
0d113f6d69 flake.lock: Update
Flake lock file updates:

• Updated input 'nixpkgs':
    'github:NixOS/nixpkgs/ed7e7122ecffad01022c9ce010557ad8b4fd6978' (2023-08-05)
  → 'github:NixOS/nixpkgs/9607b9149c9d81fdf3dc4f3bcc278da146ffbd77' (2023-08-05)
2023-08-05 23:30:52 +00:00
c8525b4e6b node_exporter on hel1-a 2023-08-06 01:00:02 +03:00
e1581adf18 node_exporter collect processes too 2023-08-06 00:32:23 +03:00
051e07d67b flake.lock: Update
Flake lock file updates:

• Updated input 'nixpkgs':
    'github:NixOS/nixpkgs/a7c57ba85e9cbbe79c42c2f3e2a38411db52eff9' (2023-08-05)
  → 'github:NixOS/nixpkgs/ed7e7122ecffad01022c9ce010557ad8b4fd6978' (2023-08-05)
2023-08-06 00:20:26 +03:00
7c74d8c1ed expose more ports to self 2023-08-06 00:15:13 +03:00
a5b1b4637f grafana/prometheus provisioning 2023-08-06 00:11:16 +03:00
665e79a984 prometheus: beginnings 2023-08-05 18:32:28 +03:00
f4e04faef3 friendlyport 2023-08-05 18:18:30 +03:00
43d6d25dd0 sysdig: enable everywhere 2023-08-05 17:27:13 +03:00
149d78ea42 hel1-a: enable sysdig 2023-08-05 17:17:51 +03:00
9140ba6268 shell: remove borgbackup
it pulls in quite a few deps.
2023-08-05 17:04:22 +03:00
246895bbda move to nixos-23.05-small 2023-08-05 15:09:15 +03:00
e0e8c9f0c0 flake.lock: Update
Flake lock file updates:

• Updated input 'nixpkgs':
    'github:NixOS/nixpkgs/bd836ac5e5a7358dea73cb74a013ca32864ccb86' (2023-08-01)
  → 'github:NixOS/nixpkgs/e9ca92b55bed47696cc7cc25d3f854a1e2e01f86' (2023-08-03)
2023-08-04 23:30:45 +00:00
52363495cb flake.lock: Update
Flake lock file updates:

• Updated input 'nixpkgs':
    'github:NixOS/nixpkgs/b7cde1c47b7316f6138a2b36ef6627f3d16d645c' (2023-07-31)
  → 'github:NixOS/nixpkgs/bd836ac5e5a7358dea73cb74a013ca32864ccb86' (2023-08-01)
2023-08-02 23:30:41 +00:00