e28f501316
Begin adding some alerts and add postgres exporter
/ dev-shell (push) Successful in 2m31s
/ rust-packages (push) Successful in 6m57s
/ check (push) Failing after 11m24s
/ terraform-providers (push) Successful in 14m45s
/ systems (push) Successful in 34m47s
2025-07-22 00:01:13 +02:00
0233431feb
Increase rate limit (triggered easily on grafana)
/ dev-shell (push) Successful in 30s
/ check (push) Successful in 1m10s
/ rust-packages (push) Successful in 36s
/ terraform-providers (push) Successful in 31s
/ systems (push) Successful in 3m44s
2025-07-20 23:43:40 +02:00
d5cca90a4d
Adjust some more nginx fail2ban
/ rust-packages (push) Successful in 37s
/ dev-shell (push) Successful in 30s
/ terraform-providers (push) Successful in 58s
/ check (push) Successful in 1m14s
/ systems (push) Successful in 3m41s
2025-07-20 23:35:05 +02:00
61741b5680
Apply req limits to fail2ban
/ dev-shell (push) Successful in 30s
/ rust-packages (push) Successful in 35s
/ terraform-providers (push) Successful in 31s
/ check (push) Successful in 1m11s
/ systems (push) Successful in 13m48s
2025-07-20 23:13:56 +02:00
c03a508586
Remove non helpful comments
/ dev-shell (push) Successful in 31s
/ rust-packages (push) Successful in 36s
/ check (push) Successful in 1m10s
/ terraform-providers (push) Successful in 31s
/ systems (push) Has been cancelled
2025-07-20 23:03:52 +02:00
9ddab7b706
Add some basic fail2ban setup of nginx
/ dev-shell (push) Successful in 30s
/ rust-packages (push) Successful in 37s
/ check (push) Has been cancelled
/ terraform-providers (push) Has been cancelled
/ systems (push) Has been cancelled
2025-07-20 23:03:14 +02:00
95414d4380
Tweak nginx fail2ban
/ rust-packages (push) Successful in 38s
/ terraform-providers (push) Successful in 59s
/ check (push) Successful in 2m0s
/ dev-shell (push) Successful in 31s
/ systems (push) Has been cancelled
2025-07-20 22:55:21 +02:00
277f7dbb57
Work on nginx setup to get logs into loki
...
/ dev-shell (push) Successful in 59s
/ rust-packages (push) Successful in 3m17s
/ check (push) Failing after 4m35s
/ systems (push) Successful in 25m43s
/ terraform-providers (push) Successful in 5m44s
Also add default robots.txt file
2025-07-20 13:26:52 +02:00
b2f59a9c77
Make some notes on how to bring up servers
/ dev-shell (push) Successful in 30s
/ rust-packages (push) Successful in 37s
/ check (push) Successful in 1m11s
/ terraform-providers (push) Successful in 59s
/ systems (push) Successful in 3m33s
2025-07-19 23:03:40 +02:00
e7c73f98dd
Hardcode path to usermod
...
/ dev-shell (push) Successful in 30s
/ rust-packages (push) Successful in 35s
/ check (push) Successful in 1m11s
/ terraform-providers (push) Successful in 58s
/ systems (push) Successful in 3m30s
Apparently adding dependency on `su` does not seem
to put usermod in path
2025-07-19 22:50:23 +02:00
ac1c6adc75
Attempt to fix some random bugs
/ dev-shell (push) Successful in 30s
/ rust-packages (push) Successful in 37s
/ check (push) Successful in 1m13s
/ terraform-providers (push) Successful in 1m1s
/ systems (push) Successful in 3m34s
2025-07-19 22:46:51 +02:00
293dbdab94
Change set unix user command to service
/ dev-shell (push) Successful in 29s
/ rust-packages (push) Successful in 36s
/ terraform-providers (push) Successful in 32s
/ check (push) Successful in 1m10s
/ systems (push) Successful in 3m33s
2025-07-19 22:41:55 +02:00
16cd4f241e
Fix another derp bug
/ dev-shell (push) Successful in 29s
/ rust-packages (push) Successful in 37s
/ terraform-providers (push) Successful in 58s
/ check (push) Successful in 1m14s
/ systems (push) Successful in 3m32s
2025-07-19 22:36:22 +02:00
567098b4a4
Fix bug and add utility to store unix password
/ dev-shell (push) Successful in 29s
/ rust-packages (push) Successful in 34s
/ terraform-providers (push) Successful in 30s
/ check (push) Successful in 1m10s
/ systems (push) Failing after 1m41s
2025-07-19 22:34:06 +02:00
9c828ea0e4
Clarify some code
/ dev-shell (push) Successful in 30s
/ rust-packages (push) Successful in 35s
/ check (push) Failing after 52s
/ systems (push) Failing after 1m36s
/ terraform-providers (push) Successful in 30s
2025-07-19 22:07:07 +02:00
daf5aac32d
Add git to khs base
/ dev-shell (push) Successful in 28s
/ rust-packages (push) Successful in 35s
/ check (push) Failing after 54s
/ terraform-providers (push) Successful in 1m0s
/ systems (push) Failing after 1m37s
2025-07-19 22:05:02 +02:00
8c3d372586
Support setting khs unix user password from vault
/ rust-packages (push) Successful in 36s
/ terraform-providers (push) Successful in 57s
/ dev-shell (push) Successful in 29s
/ check (push) Failing after 52s
/ systems (push) Failing after 1m38s
2025-07-19 22:04:04 +02:00
57c4fd3d35
Begin adding support for setting unix password for users
2025-07-19 21:47:52 +02:00
a7339120a0
Fix double usage of same secret file
/ dev-shell (push) Successful in 30s
/ rust-packages (push) Successful in 35s
/ check (push) Successful in 2m5s
/ systems (push) Successful in 3m31s
/ terraform-providers (push) Successful in 30s
2025-07-19 19:43:16 +02:00
a3eaca7fb0
Add git to nixos upgrade script
/ dev-shell (push) Successful in 30s
/ rust-packages (push) Successful in 37s
/ terraform-providers (push) Successful in 56s
/ check (push) Failing after 2m0s
/ systems (push) Successful in 3m32s
2025-07-19 12:05:11 +02:00
9bd9eb328b
Get kas.codes minimally functioning
/ systems (push) Successful in 31m26s
/ dev-shell (push) Successful in 1m48s
/ rust-packages (push) Successful in 4m13s
/ check (push) Failing after 5m8s
/ terraform-providers (push) Successful in 11m14s
2025-07-18 23:42:46 +02:00
dec0048a7b
Begin preparing kas.codes domain
/ check (push) Waiting to run
/ dev-shell (push) Waiting to run
/ rust-packages (push) Waiting to run
/ terraform-providers (push) Waiting to run
/ systems (push) Waiting to run
2025-07-18 22:58:35 +02:00
eff84d05da
Render secrets more often
/ rust-packages (push) Successful in 36s
/ dev-shell (push) Successful in 28s
/ terraform-providers (push) Successful in 59s
/ check (push) Successful in 2m3s
/ systems (push) Successful in 3m47s
2025-07-18 13:56:21 +02:00
1f7139f793
Move monitoring.kaareskovgaard.net to new openbao setup
/ dev-shell (push) Successful in 1m52s
/ rust-packages (push) Successful in 4m3s
/ check (push) Failing after 4m59s
/ terraform-providers (push) Successful in 11m1s
/ systems (push) Successful in 31m7s
2025-07-18 00:18:26 +02:00
905b1096ac
Fix some notes
/ check (push) Failing after 2m22s
/ dev-shell (push) Successful in 25s
/ rust-packages (push) Successful in 33s
/ systems (push) Successful in 18m35s
/ terraform-providers (push) Successful in 2m23s
2025-07-17 01:28:58 +02:00
f3175b9b03
Begin setting up authentication and secrets engine
/ dev-shell (push) Successful in 1m9s
/ rust-packages (push) Successful in 4m36s
/ check (push) Failing after 5m57s
/ systems (push) Successful in 27m33s
/ terraform-providers (push) Successful in 12m41s
2025-07-17 01:20:19 +02:00
81551dd791
Reenable systemd collectors
/ dev-shell (push) Successful in 26s
/ rust-packages (push) Successful in 31s
/ terraform-providers (push) Successful in 27s
/ check (push) Successful in 1m19s
/ systems (push) Failing after 5m0s
2025-07-15 23:02:07 +02:00
005ac30c21
Fix prometheus/loki cache keys not writing to same file
/ dev-shell (push) Successful in 26s
/ check (push) Successful in 1m19s
/ rust-packages (push) Successful in 33s
/ terraform-providers (push) Successful in 56s
/ systems (push) Has been cancelled
2025-07-15 22:59:37 +02:00
24c28283d4
Disable systemd metrics to see if it helps alloy not fail
/ dev-shell (push) Successful in 26s
/ rust-packages (push) Successful in 31s
/ terraform-providers (push) Successful in 27s
/ check (push) Successful in 1m19s
/ systems (push) Has been cancelled
2025-07-15 22:51:54 +02:00
8fb47705f4
Add time zone to khs-base and collect systemd metrics
/ dev-shell (push) Successful in 26s
/ rust-packages (push) Successful in 37s
/ terraform-providers (push) Successful in 1m2s
/ check (push) Successful in 1m24s
/ systems (push) Failing after 5m5s
2025-07-15 22:36:00 +02:00
0cb6ecb1f6
Prepare some post provisioning stuff
/ dev-shell (push) Successful in 2m50s
/ rust-packages (push) Successful in 2m57s
/ systems (push) Failing after 7m45s
/ terraform-providers (push) Successful in 1m6s
/ check (push) Successful in 5m17s
2025-07-15 17:24:04 +02:00
11bb2af2bb
Remove desktop.qcow2 from git
...
/ systems (push) Successful in 1h29m35s
/ dev-shell (push) Successful in 25s
/ rust-packages (push) Successful in 32s
/ terraform-providers (push) Successful in 55s
/ check (push) Successful in 1m20s
Former-commit-id: de8ddee60c702f6877dca54180c22ec6574ee13b
2025-07-15 08:43:55 +02:00
749045904a
Add to list of systems built
...
Former-commit-id: fbfbf97fc3
2025-07-15 08:33:57 +02:00
7e7ffbb4c4
Build authentik as well
...
Former-commit-id: 7cad695983
2025-07-15 08:30:57 +02:00
3e4db99246
Make openstack servers be a server
...
Former-commit-id: b83cfce0af
2025-07-15 08:25:43 +02:00
3c3e33b075
Restructure conditionals on desktop in homes
...
Former-commit-id: b0c972f5b3
2025-07-15 08:22:59 +02:00
a5384c8105
Fix wrong config path
...
Former-commit-id: 80af3c16e5
2025-07-15 08:16:39 +02:00
0b124838b2
More fixes
...
Former-commit-id: 5826c78a68
2025-07-15 08:13:26 +02:00
fee2017fd4
Fix some minor issues
...
Former-commit-id: f8a0434e2b
2025-07-14 23:41:25 +02:00
7a995baca4
Begin moving openbao and authentik server to new setup
...
Former-commit-id: 8cd2737aca
2025-07-14 23:34:02 +02:00
3a42f156f7
Add hetzner user-data url
...
Former-commit-id: a996ba3083
2025-07-13 00:58:40 +02:00
3deafa7317
Begin adding services to the monitoring stack
...
Former-commit-id: e360abdf4b
2025-07-13 00:51:31 +02:00
891558aebf
Begin creating monitoring.kaareskovgaard.net
...
Former-commit-id: 32ece6eb43
2025-07-11 12:40:45 +02:00
5037d791db
Get basic nginx and acme setup working
...
This should enable DNS-01 acme for all khs openstack servers,
thus removing the pain of setting up acme for those servers.
Do note that this might not really be needed that much anymore,
as I should be able to hit them over IPv6, but for ease of mind,
this will enable ACME trivially, also for non https workloads, as well
as servers without open ports.
Do note that currently there's a global unifi firewall rule in place to
allow port 80 and 443 to my own servers over ipv6, I'd like to remove this
and have Nix configure firewall rules for each server individually, as
requested in the setup.
Former-commit-id: c402ada8f7
2025-07-11 00:38:31 +02:00
ba28ad8d03
Begin working on nginx setup
...
Former-commit-id: 365b16c380
2025-07-10 21:42:33 +02:00
6d1c9ff2dc
Attempt to fix compilation error on Macos
...
Former-commit-id: 12ab4ce918
2025-07-10 20:57:01 +02:00
bb93578b88
Get openstack working again
...
Also first instance of getting server up with working certificate
right away, through cloud user data.
Former-commit-id: 459b45ccc5
2025-07-10 00:51:28 +02:00
d406c83aa1
Begin testing bootstrapping of vault authentication
...
However, the nixos-install script fails on khs openstack
as the system won't boot up after installation due it
being unable to locate the root disk. I am not sure what disk
it ends up finding.
Former-commit-id: 608d758f30
2025-07-09 23:53:42 +02:00
07360c41da
Make some more changes to machine setup
...
Work being done as an attempt to be able to
create a small monitoring server
Former-commit-id: f7d4bef46c
2025-07-09 15:12:11 +02:00
84818b01be
Fix some test issues
...
Former-commit-id: 89d410cb6c
2025-07-08 23:47:54 +02:00
