| Commit message (Collapse) | Author | Files | Lines | ||
|---|---|---|---|---|---|
| 2023-12-09 | delete even more unused configurations | Franck Cuny | 1 | -78/+0 | |
| 2023-05-12 | profiles/monitoring: a bunch of fixes | Franck Cuny | 1 | -1/+1 | |
| 2023-05-12 | profiles/loki: fix a few configuration errors | Franck Cuny | 1 | -1/+1 | |
| 2023-05-08 | profile/acme: default DNS provider is gandi | Franck Cuny | 1 | -8/+3 | |
| Add the API key for gandi to the secrest, create a profile for acme with my defaults. The profile is loaded by tahoe since that's where our services are running on. Update all the servers in nginx to listen on their wireguard interface. | |||||
| 2023-04-23 | hosts/tahoe: loki and prometheus listen only on the wg0 interface | Franck Cuny | 1 | -2/+2 | |
| I don't want to have to deal with authentication and TLS certificates for these endpoints. If they are only listening on the wireguard interface I can trust that only authorized hosts are sending traffic to these endpoints. I trust what's running on these machines. | |||||
| 2023-04-23 | modules/monitoring: consolidate all monitoring services together | Franck Cuny | 1 | -2/+2 | |
| This will help to organize and structure monitoring modules a bit better. | |||||
| 2023-04-23 | modules/grafana: add loki as a source to grafana | Franck Cuny | 1 | -6/+13 | |
| 2023-01-19 | ref(hosts/tahoe): exclude more paths from backups | Franck Cuny | 1 | -1/+4 | |
| 2023-01-07 | fix(modules/grafana): a number of options have been renamed | Franck Cuny | 1 | -7/+10 | |
| 2022-06-23 | fix(modules/grafana): configure nginx to bind to tailscale IP | Franck Cuny | 1 | -0/+12 | |
| Only serve a response if the request is coming from tailscale. To ensure this is the case, let's configure nginx to only listen on the tailscale IP of the host for that server. Note: the IP for tailscale is hard coded, there has to be a better way. Change-Id: I83952484f60206df215e8c03017cfe7722d32697 Reviewed-on: https://cl.fcuny.net/c/world/+/487 Tested-by: CI Reviewed-by: Franck Cuny <franck@fcuny.net> | |||||
| 2022-06-10 | fix(fmt): correct formatting for all nix files | Franck Cuny | 1 | -1/+2 | |
| This was done by running `nixpkgs-fmt .'. Change-Id: I4ea6c1e759bf468d08074be2111cbc7af72df295 Reviewed-on: https://cl.fcuny.net/c/world/+/404 Tested-by: CI Reviewed-by: Franck Cuny <franck@fcuny.net> | |||||
| 2022-06-10 | fix(backups): exclude more files from the backups | Franck Cuny | 1 | -1/+4 | |
| We don't need to backup log files for grafana and sourcegraph. Change-Id: I8ed6f6ce1270a12233cad268bcd12e28ac2785cf Reviewed-on: https://cl.fcuny.net/c/world/+/383 Tested-by: CI Reviewed-by: Franck Cuny <franck@fcuny.net> | |||||
| 2022-05-12 | grafana: there was already something on port 3030 ... | Franck Cuny | 1 | -1/+1 | |
| 2022-05-12 | grafana: run on port 3030 | Franck Cuny | 1 | -0/+1 | |
| There's already something on port 3000. | |||||
| 2022-04-13 | grafana: the vhost is configurable | Franck Cuny | 1 | -4/+11 | |
| 2022-04-13 | grafana: bind to localhost | Franck Cuny | 1 | -4/+0 | |
| 2022-04-13 | grafana: set proper port for reverse proxy | Franck Cuny | 1 | -1/+1 | |
| 2022-04-13 | grafana: use proper cert | Franck Cuny | 1 | -1/+1 | |
| 2022-04-13 | grafana: try to configure the domain with acme+dns | Franck Cuny | 1 | -1/+17 | |
| 2022-04-11 | grafana: backup the whole directory | Franck Cuny | 1 | -1/+1 | |
| 2022-04-10 | add a module for backup with restic | Franck Cuny | 1 | -14/+1 | |
| Do a single backup for the host, instead of running multiple ones. | |||||
| 2022-04-06 | refactor grafana as a module | Franck Cuny | 1 | -0/+47 | |
 |
index : infra | |
| nix configuration for my machines | Gitolite user |
| aboutsummaryrefslogtreecommitdiff |