Commit graph

197 commits

Author SHA1 Message Date
goeranh
d0fc6af265
add blake3 hashing experimental feature 2026-05-03 14:13:19 +02:00
goeranh
9c50baee2e
add gradient nix cache 2026-05-03 14:05:26 +02:00
goeranh
b5329ad61f
run gradient server and worker all in one 2026-05-03 13:50:47 +02:00
goeranh
20b1103a6c
set worker log level to debug 2026-05-02 00:31:56 +02:00
goeranh
05c8508c18
run gradient cache 2026-05-02 00:31:56 +02:00
goeranh
66d6857710
use nftables on all haproxy host for better blacklisting 2026-05-02 00:29:06 +02:00
goeranh
d0a8fb0c09
enable nginx access logs for now 2026-05-01 23:54:32 +02:00
goeranh
855cd7bd9b
fix build failure because of new upstream release 2026-05-01 23:16:24 +02:00
goeranh
1e5cd75652
set http mode for port 80 2026-04-30 17:59:32 +02:00
goeranh
b2ac4a6ac1
haproxy acme rule ordering 2026-04-30 17:50:22 +02:00
goeranh
590f42d5d9
enable proxy protocol for plone backends 2026-04-29 18:42:20 +02:00
goeranh
ed10898adb
flake.lock: Update
Flake lock file updates:

• Updated input 'authentik':
    'github:nix-community/authentik-nix/7e4730351fb6df479c46a1bf7e23d46a0b0c5d46?narHash=sha256-hcstQ1Z9aQSJM3AVCLb0/OPTicbME9nhP01GiPrOjZM%3D' (2026-03-07)
  → 'github:nix-community/authentik-nix/4370b561c8bafb59773ce3a518506bcf1161dbdb?narHash=sha256-JvvWVbXJYSY8qOReMbAOD4lxcN2cjKV6lg/jLz8CEuY%3D' (2026-04-13)
• Updated input 'authentik/authentik-src':
    'github:goauthentik/authentik/0dccbd4193c45c581e9fb7cd89df0c1487510f1f?narHash=sha256-0Vpf1hj9C8r%2BrhrCgwoNazpQ%2BmwgjdjDhuoKCxYQFWw%3D' (2026-03-03)
  → 'github:goauthentik/authentik/5249546862986202b901c2afd860992ec48c6ef6?narHash=sha256-Xq7JGI/8ppIydIuWd9KRJKUrh7UpeniwvZ4NAtXbYJ4%3D' (2026-04-07)
• Updated input 'disko':
    'github:nix-community/disko/7b9f7f88ab3b339f8142dc246445abb3c370d3d3?narHash=sha256-khlHllTsovXgT2GZ0WxT4%2BRvuMjNeR5OW0UYeEHPYQo%3D' (2026-03-09)
  → 'github:nix-community/disko/32f4236bfc141ae930b5ba2fb604f561fed5219d?narHash=sha256-gC9Cp5ibBmGD5awCA9z7xy6MW6iJufhazTYJOiGlCUI%3D' (2026-04-19)
• Updated input 'mailserver':
    'git+https://gitlab.com/simple-nixos-mailserver/nixos-mailserver?ref=nixos-25.11&rev=9cdd6869e513df8153db4b920c8f15d394e150f7' (2026-03-12)
  → 'git+https://gitlab.com/simple-nixos-mailserver/nixos-mailserver?ref=nixos-25.11&rev=25e6dbb8fca3b6e779c5a46fd03bd760b2165bb5' (2026-03-19)
• Updated input 'mailserver/flake-compat':
    'github:edolstra/flake-compat/f387cd2afec9419c8ee37694406ca490c3f34ee5?narHash=sha256-XKUZz9zewJNUj46b4AJdiRZJAvSZ0Dqj2BNfXvFlJC4%3D' (2025-10-27)
  → 'github:edolstra/flake-compat/5edf11c44bc78a0d334f6334cdaf7d60d732daab?narHash=sha256-vNpUSpF5Nuw8xvDLj2KCwwksIbjua2LZCqhV1LNRDns%3D' (2025-12-29)
• Updated input 'mailserver/git-hooks':
    'github:cachix/git-hooks.nix/7275fa67fbbb75891c16d9dee7d88e58aea2d761?narHash=sha256-YG19IyrTdnVn0l3DvcUYm85u3PaqBt6tI6VvolcuHnA%3D' (2025-11-16)
  → 'github:cachix/git-hooks.nix/8baab586afc9c9b57645a734c820e4ac0a604af9?narHash=sha256-JDqZMgxUTCq85ObSaFw0HhE%2BlvdOre1lx9iI6vYyOEs%3D' (2026-03-07)
• Updated input 'mailserver/nixpkgs':
    'github:NixOS/nixpkgs/a320ce8e6e2cc6b4397eef214d202a50a4583829?narHash=sha256-6zddwDs2n%2Bn01l%2B1TG6PlyokDdXzu/oBmEejcH5L5%2BA%3D' (2025-11-24)
  → 'github:NixOS/nixpkgs/826430a188181a750ffa5948daff334039c5d741?narHash=sha256-JW2/QPyCVzmouqEp1H9kNa8JXd7xEhlam9sy3TYfhDY%3D' (2026-03-18)
• Updated input 'nixpkgs':
    'github:nixos/nixpkgs/0590cd39f728e129122770c029970378a79d076a?narHash=sha256-BHoB/XpbqoZkVYZCfXJXfkR%2BGXFqwb/4zbWnOr2cRcU%3D' (2026-03-11)
  → 'github:nixos/nixpkgs/10e7ad5bbcb421fe07e3a4ad53a634b0cd57ffac?narHash=sha256-vl3dkhlE5gzsItuHoEMVe%2BDlonsK%2B0836LIRDnm6MXQ%3D' (2026-04-21)
• Updated input 'sops':
    'github:Mic92/sops-nix/d1ff3b1034d5bab5d7d8086a7803c5a5968cd784?narHash=sha256-M3zEnq9OElB7zqc%2BmjgPlByPm1O5t2fbUrH3t/Hm5Ag%3D' (2026-03-09)
  → 'github:Mic92/sops-nix/bef289e2248991f7afeb95965c82fbcd8ff72598?narHash=sha256-DRFGPfFV6hbrfO9a1PH1FkCi7qR5FgjSqsQGGvk1rdI%3D' (2026-04-21)
2026-04-24 14:42:39 +02:00
goeranh
c0c528ae29
geoip haproxy 2026-04-21 11:35:06 +02:00
goeranh
c89b6e7ee9
accept accept v6proxy proxy protocol 2026-04-21 11:34:31 +02:00
goeranh
1ba340e2a4
process metrics 2026-04-21 11:34:10 +02:00
goeranh
6ea0361692
send proxy protocol from hetzner 2026-04-21 09:06:13 +02:00
goeranh
3c186a9e56 Merge pull request 'monitoring' (#8) from monitoring into master
Reviewed-on: https://codeberg.org/stura-htw-dresden/stura-infra/pulls/8
2026-04-20 14:29:19 +02:00
goeranh
c31063ca56
purge logs and metrics after 4 weeks 2026-04-20 14:28:13 +02:00
goeranh
9a5716f2df
increase max series for queries 2026-04-20 14:10:33 +02:00
goeranh
e1530c606f
use extra input sink options 2026-04-20 13:53:12 +02:00
goeranh
53c592abd9
add extra inputs option for the loki and mimir sinks 2026-04-20 13:52:57 +02:00
goeranh
93e27dd3e5
receive proxmox logs 2026-04-20 13:07:21 +02:00
goeranh
dd2aa96e25
fix mimir 2026-04-20 13:07:13 +02:00
goeranh
fd02a136ef
scrape haproxy metrics 2026-04-20 13:06:04 +02:00
goeranh
e7cba90a45
fix vector settings 2026-04-20 12:10:18 +02:00
goeranh
e9fe620fa9
increase mimir and loki rate limits 2026-04-20 12:01:36 +02:00
goeranh
ef8607e38e
include monitoring module per default 2026-04-20 11:55:49 +02:00
goeranh
5ef710f8f2
dont generate domains, doesnt work for mon.adm.htw for example 2026-04-20 11:52:40 +02:00
goeranh
d435d8d487
use three letter domains 2026-04-20 11:52:26 +02:00
goeranh
9beef4e013
use recommended proxy settings 2026-04-20 11:40:07 +02:00
goeranh
641feb1b84
monitoring host# 2026-04-20 11:40:07 +02:00
goeranh
8c358daf56 Merge pull request 'proxy-protocol' (#7) from proxy-protocol into master
Reviewed-on: https://codeberg.org/stura-htw-dresden/stura-infra/pulls/7
2026-04-20 10:28:37 +02:00
goeranh
334c977988
enable proxy protocol for redmine 2026-04-20 10:26:54 +02:00
goeranh
29cff6eee8
enable proxy protocol for wiki 2026-04-20 10:26:46 +02:00
goeranh
f91ac73b72
enable proxy protocol in nextcloud 2026-04-20 10:26:33 +02:00
goeranh
5b2eb482df
formatting in proxy 2026-04-20 10:24:30 +02:00
goeranh
582822cd5b
remove explicit proxy, its in this flake 2026-04-20 09:45:47 +02:00
goeranh
279e106427
fix cloud duplicate 2026-04-20 09:17:36 +02:00
goeranh
a96f976be1
does not work on port 80 with acme 2026-04-20 09:02:20 +02:00
goeranh
9041fe3d69
conditionally send proxy protocol 2026-04-20 08:56:40 +02:00
goeranh
fe6650622f
haproxy maxconn 2026-04-10 15:38:30 +02:00
oxce
ca8c213e74 Änderung der adresse vom smtp mailserver 2026-03-27 18:11:47 +01:00
goeranh
9e3fa025cd
redirect bbb 2026-03-20 17:09:01 +01:00
goeranh
5bed1bbba1
remove git hooks 2026-03-20 16:24:09 +01:00
goeranh
52eb5d90d9
recursive resolver because we can 2026-03-13 23:20:13 +01:00
goeranh
242f8b7563
generate dns zone from forwards attrset 2026-03-13 22:24:27 +01:00
goeranh
006c95424f
enable bind dns and chrony ntp server and set them up in default.nix 2026-03-13 22:14:45 +01:00
goeranh
7d01f35fd0
host dns and ntp server on proxy 2026-03-13 21:51:25 +01:00
goeranh
982d984910
let nextlocud build again 2026-03-13 18:32:11 +01:00
goeranh
47d48d193d
explain hugo docs site 2026-03-13 18:17:49 +01:00