Commit graph

786 commits

Author SHA1 Message Date
Rouven Seifert cb828a2188
decision: move to keycloak 2024-05-08 14:10:46 +02:00
Rouven Seifert 7b7e8858cf
secrets: cleanup 2024-05-08 14:08:05 +02:00
Rouven Seifert f40e47f871
mediawiki: fix account migration 2024-05-08 12:29:07 +02:00
Rouven Seifert 7c87808bc1
mediawiki: update secret 2024-05-08 11:54:11 +02:00
Rouven Seifert 8ea250e387
mediawiki: enable keycloak 2024-05-08 11:47:07 +02:00
Rouven Seifert a339235b33
postgres: add more databases to the backup 2024-05-08 11:41:47 +02:00
Rouven Seifert 02535cca08
grafana: configure oidc 2024-05-08 00:09:40 +02:00
Rouven Seifert 5384918ce6
directus: fix sso 2024-05-07 11:57:15 +02:00
Rouven Seifert 6abc1e75b9
directus: configure openid connect 2024-05-07 11:10:59 +02:00
Rouven Seifert 395ca48ac0
padlist: remove dex configuration 2024-05-06 23:51:28 +02:00
Rouven Seifert 6a2bcecb5e
ifsr.de: add sso redirect 2024-05-06 22:59:48 +02:00
Rouven Seifert a832b8d2a5
keycloak: fix things 2024-05-06 17:05:22 +02:00
Rouven Seifert 2c4be79f32 Merge pull request 'keycloak: init' (#92) from keycloak into main
Reviewed-on: #92
2024-05-06 16:57:53 +02:00
Rouven Seifert 5294cd68f8
keycloak: init 2024-05-06 11:24:21 +02:00
Rouven Seifert 4fa9a2fe7d
treewide: cleanup with deadnix 2024-05-06 11:21:12 +02:00
Rouven Seifert 5930da6bdf
ssh: fix type 2024-05-06 11:13:49 +02:00
Rouven Seifert 81ac3b4c0d
ssh: disable password login 2024-05-06 11:12:19 +02:00
Jonas Gaffke 7630dc4494
decisions: use newer image 2024-05-06 11:08:41 +02:00
Jonas Gaffke 993a554396
sops: decisions env 2024-05-05 09:40:31 +02:00
Rouven Seifert bdc6185fce
grafana: fix root_url 2024-05-02 19:33:50 +02:00
Rouven Seifert 197956ea90
prometheus: patch the postfix exporter to catch rspamd rejects 2024-05-02 11:23:13 +02:00
quitte 1f4e9a620b trying to get postfix running 2024-05-02 10:48:26 +02:00
quitte ab5df354ff Merge branch 'monitoring' of ifsr.de:wurzel/fruitbasket into monitoring 2024-04-30 14:23:46 +02:00
Joachim Stramke cf7ff37367 adding postfix to monitoring 2024-04-30 14:22:50 +02:00
quitte f0c73a1763 Merge branch 'monitoring' of ifsr.de:wurzel/fruitbasket into monitoring 2024-04-29 17:10:37 +02:00
quitte d92eff80ce fixing postgres warning 2024-04-29 17:10:35 +02:00
Joachim Stramke d1147621e1 changing scrape intervall 2024-04-29 17:09:37 +02:00
Joachim Stramke 3f47b32983 add first node 2024-04-29 15:12:52 +02:00
quitte 7526b9273b making grafana work 2024-04-29 15:09:56 +02:00
quitte 795e3db47f Merge branch 'main' into monitoring
merging master in monitoring
2024-04-29 14:30:23 +02:00
Rouven Seifert 126cff2263
quitte: pin kernel to 6.6.27
6.6.28 broke the network driver
2024-04-29 14:26:49 +02:00
tenksom 9327314ec9 create grafana and prometheus setup 2024-04-29 14:21:58 +02:00
Rouven Seifert d03f4c6fb1
initrd: try loading network modules in stage 1 2024-04-26 22:40:30 +02:00
Rouven Seifert ebe977672a
mailman: restrict registration to tud nets 2024-04-26 22:40:18 +02:00
Rouven Seifert 579ad274d5
nix: flake update 2024-04-26 09:47:36 +02:00
Rouven Seifert 15299bcb99
nix: flake update 2024-04-26 09:40:21 +02:00
Rouven Seifert d5ab09207a
core: set zsh as default shell for the root user 2024-04-16 21:44:48 +02:00
Rouven Seifert 375674b1b4
nginx: fix the http3 wordpress fix 2024-04-16 20:51:16 +02:00
Rouven Seifert 6cd1ba6aa5
Revert "nix: update course-management"
This reverts commit f24793bbb6.
2024-04-16 20:38:07 +02:00
Rouven Seifert 08893439e7
http3: attempt a fix for wordpress sites 2024-04-16 20:36:44 +02:00
Rouven Seifert 0d4283f109
Revert "nginx: disable http3 to prevent wordpress error"
This reverts commit 8606e89c03.
2024-04-16 20:32:29 +02:00
Rouven Seifert ceca1b3798
tomate: remove fail2ban
- Not really needed any more
2024-04-16 20:21:16 +02:00
Rouven Seifert 3a47c43741
tomate: use zsh as default shell 2024-04-16 18:50:51 +02:00
Rouven Seifert f24793bbb6
nix: update course-management 2024-04-16 13:58:32 +02:00
Rouven Seifert 5b95918c29
tomate: configure ifsr-apb network 2024-04-16 10:58:35 +02:00
Rouven Seifert 83db5399d7
quitte: format hardware config 2024-04-14 11:40:00 +02:00
Rouven Seifert 4b173581dc
mount boot drives with the nofail option
One drive failure shouldn't block the entire boot
2024-04-14 11:39:11 +02:00
Rouven Seifert be638b274d
systemd-boot: copy the entire bootloader to the second disc on every switch 2024-04-14 11:35:47 +02:00
Rouven Seifert c534e2a8e1
nix-serve: use nix-serve-ng 2024-04-12 11:21:52 +02:00
Rouven Seifert c04bef7173
forgejo: move into dedicated folder and enable initial action support 2024-04-11 15:27:10 +02:00