Commit Graph

219 Commits (7d2e5f7576e9f4cb18cccd44ed7f63b1e99f9727)

Author SHA1 Message Date
stuebinm 7d2e5f7576 ci: split up pipelines by host
Rationale: if one build fails, the other one will still continue running.
Especially since we already have some (and will presumably add more)
proprietary software to nixda which may require manual intervention
using nix-prefetch-url, this seems like a good idea.

An alternative would be to just specifiy `--keep-going`, but this seems
likely to lead to unreadable output.

However, I'm not sure what exactly happens when we try to run builds for
both hosts at once on the same nix store — it may be that this isn't the
best idea, but I guess we can just make the pipelines sequential instead
if necessary.

pipeline: fix mistake in build command

(previous commit contained two builds for nixda, none for hainich)
2021-05-10 14:41:42 +00:00
hexchen 3b39b0f316 hainich/gitlab-runner: limit nix builds to 1
running concurrent builds might cause stuff to be redownloaded/rebuilt.
2021-05-10 14:39:51 +00:00
stuebinm 3d8db75c48
mail: add addresses for c3wooc
Assuming I've understood the format of this config correctly, this
should add two new addresses for the c3wooc (one for general contact,
one for patches); both forwarding to its members (currently only hxchn
and me).
2021-05-08 20:06:00 +02:00
schweby 1e57204b7a
sources: update packages 2021-05-01 18:48:15 +02:00
stuebinm 9e7a277b6a workadventure: fix turn ipv4 address
apparently I missed changing that; it still pointed to my own
server (flora.stuebinm.eu) instead of hainich.
2021-04-29 22:20:10 +00:00
schweby ae8bf7c8f6
sources: manage mattermost with niv
also reenables mattermost
also updated to version 5.34.2
2021-04-28 22:29:31 +02:00
schweby 148741f4c3
sources: update packages 2021-04-28 22:01:02 +02:00
schweby 3067d1b8fb
hainich/mediawiki: set static URL for WikiDB 2021-04-27 11:09:42 +02:00
hexchen bc684b1626 services/mail: clean up the config file 2021-04-26 17:08:34 +00:00
schweby 908d6df2da
sources: update sources
this also disables mattermost-beta because of a version mismatch with
the development branch
will be readded with MR
2021-04-20 21:52:18 +02:00
schweby 9770b4089a
sources.json: replace refs with branches
refs are the old way of referring to what niv tracks for updates
niv actively encourages to switch to branches or tags so this is done
here
2021-04-20 21:39:17 +02:00
schweby df31a3da35
hainich/minecraft: get server.jar via sources.json 2021-04-17 17:19:52 +02:00
schweby 3473603f91
sources: add papermc 2021-04-17 17:16:04 +02:00
schweby 243d0bf14d
hainich/minecraft: fix & reorder config
fixes a formatting error in jvmOpts and slightly reoders the config
2021-04-17 17:15:49 +02:00
schweby 75ec36dda2
hainich/mumble: import website from sources.json 2021-04-16 15:54:25 +02:00
schweby 18ed88727f
sources: add mumble-website 2021-04-16 15:52:17 +02:00
stuebinm 6e36ff58e2 workadventure: update and manage sources with niv
Changes:
 - workadventure is now pulled from stuebinm.eu/git via niv, and
   should be updated automatically along with the other sources
 - the same is true for the default map, which gets pulled directly from
   its gitlab sources.
 - this setup may potentially break things if I decide to rename an
   option upstream, but I don't think that'll happen too often
 - made the code a little nicer
 - uses workadventure-xce now, since the tabascoeye version is now gone

Open for discussion:
 - afaik know, the current version of workadventure-xce now contains
   fediventure-specific patches. Do we want that, or should we switch
   to the unfederated version?
2021-04-15 20:12:32 +00:00
hexchen c3c3bca114 hainich/mail: update mailing lists, remove unused 2021-04-15 20:09:49 +00:00
schweby 1c446bec8d
hainich/hedgedoc: redirect pad.hacc.earth to pad.hacc.space 2021-04-15 14:13:15 +02:00
schweby 25568db129
hainich/nginx: disable interest cohort globally 2021-04-15 10:16:20 +02:00
schweby 0c55ccb47b
hainich: reduce backup retention 2021-04-15 06:37:12 +02:00
schweby ccb4469922
hainich: Set more sensible snapshot retention time 2021-04-15 06:35:31 +02:00
schweby b136ca090f
hainich: remove hasenloch 2021-04-15 06:18:26 +02:00
schweby 1f40f1f142
hainich: disable workadventure 2021-04-14 22:47:25 +02:00
schweby caa45759a1
hainich/minecraft: update to paper 1.16.5-592 2021-04-14 22:43:35 +02:00
schweby 289c82e529
sources: update sources 2021-04-14 22:43:19 +02:00
schweby 7c04319456
hainich/minecraft: update to paper 1.16.5-583 2021-04-07 09:38:09 +02:00
schweby 2112e6e40e
sources: update packages 2021-04-07 09:38:05 +02:00
L3D ワッフルマイスター b2d2235d4d remove newline in murmur.nix 😉 2021-04-05 06:46:34 +00:00
schweby ee53d85b94
hainich/mumble: switch to updated site 2021-04-05 08:39:34 +02:00
schweby 6f7c79f93e
sources: update packages 2021-04-04 12:37:40 +02:00
schweby 87b3518ebd
hainich/minecraft: update to paper 1.16.5-576 2021-04-03 21:17:21 +02:00
schweby cfb0cd5013
hainich/minecraft: add optimised GC options 2021-04-03 21:17:21 +02:00
schweby d48c7cdcac
pkgs: set jre_headless to jdk11_headless
this is a workaround to be able to use java 11 with the
minecraft-server module
minecraft calls for jre_headless, which is still java 8
newer java version don't ship jre, which now have to be custom built or
the jdk used
2021-04-03 21:07:02 +02:00
schweby 5b37fde996
Merge branch 'mattermost-upgrade' 2021-04-03 10:23:00 +02:00
schweby 6db58c4a01
hasenloch: add FAQ and Contact 2021-04-03 08:00:59 +02:00
schweby 2974b9688b
hasenloch: update to newer version 2021-04-02 16:38:31 +02:00
schweby a2bd7880b4
hainich/docker: stop docker from loading iptables 2021-03-30 23:59:05 +02:00
schweby c10caa5b0f
hainich/mattermost: disable container firewall 2021-03-30 23:57:52 +02:00
schweby 78e607a28d
hainich: block x_tables module
this also blocks the x_tables module to prent it from loading
ip_tables
2021-03-30 17:59:26 +02:00
schweby 8a17da7761
sources: update nix packages 2021-03-27 11:53:49 +01:00
schweby d1e88ef87a
hainich/nginx: disable /var/secrets/ingest.conf
If the file in not present, the preExec check for the config fails and
disrupts the deploy.
Before readding make sure the file will always be present!
2021-03-27 11:48:43 +01:00
schweby 1064836092
Revert "security: remove hexchen"
This reverts commit bab826b1c7.
Also fixes hexchen nix due new logic
2021-03-26 22:04:27 +01:00
schweby 5579a60b4e
Revert "security: remove hexchen mail"
This reverts commit 32b5958279.
2021-03-26 21:53:17 +01:00
schweby 49fa714861
sources: update nix packages 2021-03-25 21:53:21 +01:00
stuebinm 011196f875
mattermost: disable analytics & telemetry
note that this ALSO disables the security alert features of mattermost [1],
which would send us alerts in case of security updates for our current
mattermost version. I have disabled it since it would send information
about our instance (including e.g. the current number of active users) to
mattermost every 24 hours.

Since we now essentially maintain our own set of mattermost packages, I
recommend at least some of us subscribe to the mattermost release blog [2],
and manually update the mattermost sources in `/pkgs/mattermost` as required
(I have done so already). The release blog is also available as an rss feed [3].

[1] https://docs.mattermost.com/administration/telemetry.html#security-update-check-feature
[2] https://mattermost.com/blog/category/releases
[3] https://mattermost.com/blog/category/releases/rss
2021-03-25 15:51:01 +01:00
stuebinm d3af36bd3c
mattermost: update to version 5.30.3
This should be compatible with the version we currently use, and also include all hot-fixes
etc. which we definitely want to have.
2021-03-25 15:32:47 +01:00
stuebinm d5cf2abccc
hainich: init mattermost beta 2021-03-24 22:37:38 +01:00
schweby 29e15bc2bd
sources: update nix packages 2021-03-24 22:22:10 +01:00
schweby e4a0367a51
sources: remove unecessary refs 2021-03-24 21:30:06 +01:00