Commit graph

164 commits

Author SHA1 Message Date
0ee91ff317
Preconfigure pgadmin database and user
The initialScript doesn't work, really, because it only runs on database
creation, but it does document what I need.
2026-05-08 18:14:07 +00:00
bf861cca28
Initial add of pgadmin to nidus systems
This is to allow Ben to do his own delving into the data we have
2026-05-08 16:35:49 +00:00
f34755ff34
Make restic not fail if we don't configure it
This is relevant for the new quadcore server
2026-05-08 16:33:28 +00:00
0e0391eadb
Initial creation of llm-agent pi role.
Still building, not sure it'll work, but it's at least building so let's
roll with it.
2026-05-08 16:30:29 +00:00
2acb23790c
Get sentry symbol upload working in staging 2026-04-30 04:10:57 +00:00
d89d9b318c
Proxy requests to nidus through systemd socket
This should make it far more possible to have zero-downtime deployments
and avoid crash reports for expiring contexts in Glitchtip
2026-04-29 05:00:38 +00:00
133cc115ef
Push latest build to prod 2026-04-28 08:22:31 +00:00
2b379fa938
Deploy nidus sync 0.0.12, with mailer support. 2026-04-18 00:02:06 +00:00
16640ac022
Restart nidus-sync on failure 2026-03-11 15:52:01 +00:00
a61f904098
Make tegola domain name configurable by environment 2026-02-18 22:07:22 +00:00
f9fee85606
Create needed data directories for nidus-sync on deploy 2026-02-18 21:30:06 +00:00
31335d19f7
Create separate prod/staging nidus-sync sops environments 2026-02-18 06:09:50 +00:00
f86239a8ce
Make RMO domain name a config option 2026-02-18 05:07:22 +00:00
f0e9d04dc1
Make nidus-sync domain a variable
The beginning of separating out staging
2026-02-17 17:38:42 +00:00
ddf0f92dfb
Fix reference to sops file
I changed the directory, got to change the relative path.
2026-01-29 16:40:56 +00:00
be02588bc5
Clean up minio
Because I was looking at it.
2026-01-29 16:29:00 +00:00
3e9cf203e0
Add restic backup for glitchtip data 2026-01-29 16:25:30 +00:00
62c2e33f44
Remove override of glitchtip module.
I'm using the packaged version now.
2026-01-29 16:15:43 +00:00
fa9dc7edb1
Get Glitchtip working on latest NixOS
I had thrashed around trying to fix some problems with Glitchtip on
25.05. Now that we're on 25.11 we can get a much more recent version
that hopefully doesn't have disk leaks.
2026-01-29 15:10:05 +00:00
7ac27f6a94
Re-enable glitchtip
See if the latest version has slightly fewer problems :/
2026-01-26 02:57:45 +00:00
7394dec056
Update tegola for latest nidus-sync 2026-01-22 05:22:37 +00:00
92871929b1
Restart frps on config change, add liam site to sovr 2026-01-21 16:28:39 +00:00
83685f761d
Fix synapse and twenty-crm backing up to the wrong repo 2026-01-18 02:43:47 +00:00
4cf7bc285b
Switch to mainline maintained librechat
I can't build my custom version anymore anyway.
2026-01-13 17:06:56 +00:00
27779f8256
Attempt to update librechat to the latest release candidate
This doesn't work, I fail to build with:

error: Cannot build '/nix/store/g6l9hkdpagw2bnmwahc02l52mkrffvgg-librechat-0.8.2-rc2.drv'.
       Reason: builder failed with exit code 1.
       Output paths:
         /nix/store/q4qgw0i8jwphy8zay91mc0ryn6dnrw94-librechat-0.8.2-rc2
       Last 25 log lines:
       > Running phase: patchPhase
       > applying patch /nix/store/bilh0c0cmfgnw2a7qn3dwxp71q2pl9ac-0001-npm-pack.patch
       > patching file package.json
       > applying patch /nix/store/0dk9z8sxk35dgwkfw0qsb1w683qw89yn-0002-logs.patch
       > patching file api/config/meiliLogger.js
       > patching file api/config/winston.js
       > applying patch /nix/store/h0m3hci4giadx23h8a47qwmabvz90s54-0003-upload-paths.patch
       > patching file api/config/paths.js
       > Executing npmConfigHook
       > Configuring npm
       > Validating consistency between /build/source/package-lock.json and /nix/store/sd3xvlghlw83aacmyqkxlcxvvxk3srad-librechat-0.8.2-rc2-npm-deps/package-lock.json
       > Making cache writable
       > Setting npm_config_cache to /build/cache
       > Installing dependencies
       > npm error code ENOTCACHED
       > npm error request to https://registry.npmjs.org/@testing-library%2freact failed: cache mode is 'only-if-cached' but no cached response is available.
       > npm error A complete log of this run can be found in: /build/cache/_logs/2026-01-13T16_43_25_772Z-debug-0.log
       >
       > ERROR: npm failed to install dependencies
       >
       > Here are a few things you can try, depending on the error:
       > 1. Set `makeCacheWritable = true`
       >   Note that this won't help if npm is complaining about not being able to write to the logs directory -- look above that for the actual error.
       > 2. Set `npmFlags = [ "--legacy-peer-deps" ]`
       >
       For full logs, run:
         nix log /nix/store/g6l9hkdpagw2bnmwahc02l52mkrffvgg-librechat-0.8.2-rc2.drv
error: Cannot build '/nix/store/mwicxm33crq9iv9gc3pkyns3dsfijvc4-system-path.drv'.
       Reason: 1 dependency failed.
       Output paths:
         /nix/store/kgm1vrr5vp07jswzqn9v70k8i8vq38i6-system-path
error: Cannot build '/nix/store/56ck3y67vqv06vjhi55smz2zcczch8rr-unit-librechat.service.drv'.
       Reason: 1 dependency failed.
       Output paths:
         /nix/store/1p3js87qgsdvdnfmisli6jwck474h4xj-unit-librechat.service
error: Cannot build '/nix/store/x6lmb98l84hjvrlvla1hrmqs7mjxndwn-nixos-system-nocix-amd-legacy-octacore-25.11.20260110.d030887.drv'.
       Reason: 1 dependency failed.
       Output paths:
         /nix/store/yd6x6a6grvahryrfazdd8xqmb7znmpfs-nixos-system-nocix-amd-legacy-octacore-25.11.20260110.d030887
2026-01-13 16:56:10 +00:00
bd0b2c4b3d
Move to standard label-studio image
It's got my fix incorporated, I think, so I don't have to build my
custom image.
2026-01-13 16:55:34 +00:00
1f8b2c1aa7
Upgrade to the latest cloudreve 2026-01-13 15:14:58 +00:00
435b4970cb
Disable rag_api startup script
This prevents a fresh install of postgres from even starting. There has
to be a better way to run these commands.
2026-01-13 15:04:05 +00:00
ff0c139dc8
Use the new authentik config pattern for setting listening addresses 2026-01-13 14:58:11 +00:00
5288c5857a
Add separate restic roles for separate credentials
I don't want corp and prod accidentally smashing each other, or being
used as a credentials escalation attack.
2026-01-13 14:57:33 +00:00
d6fc5502f6
Add report/sync URLs for nidus 2026-01-12 14:12:56 +00:00
d66286d663
Remove now-defunct and failing fssync export process 2026-01-12 14:12:56 +00:00
1055f382fc
Move nidus sync to its own backup buckets
When doing the restore recently it seemed likely that there were
conflicts with sharing the buckets.
2026-01-12 14:12:12 +00:00
b5defe1bf0
Add restic backup for all corp services 2026-01-12 00:49:27 +00:00
0ac27f8b99 Add switch-fix commands 2026-01-05 00:27:23 +00:00
e5f5117cdd Add eliribble to trusted users for pushing updates
This should make it possible to push remote builds.
2026-01-04 21:07:51 +00:00
23a61985dc WIP getting legacy-sexcore back up
At this point I was able to successfully nixos-anywhere the system and
SSH back in afterwards. That's progress worth keeping.
2026-01-04 21:07:51 +00:00
840c68524f
Add alternative IP address and SSH port
I was trying to use it to get around public wifi firewalls
2025-12-11 14:31:58 +00:00
af1de58c28
Add initial attempt at qgis
Doesn't work, likely due to missing CPU instruction support (AVX).
2025-12-11 14:31:57 +00:00
63bd931034 Clean up old, unused restic 2025-11-29 16:30:58 +00:00
1c3ca5909b
Reverse proxy for tegola through caddy to get TLS 2025-11-15 15:00:39 +00:00
423c1e6d9f
Working tegola delpoy
This uses the data from Bonn, Germany which I downloaded from
https://github.com/go-spatial/tegola-example-bonn/tree/main
2025-11-14 18:58:42 +00:00
f3b8602f30
Actually serve sync.nidus.cloud with the new config. 2025-11-11 17:57:35 +00:00
44c0d83bf6
Add nidus-sync production module
This will allow me to keep nidus-sync stable while continuing to do
development on this same server on a different port.
2025-11-11 17:24:41 +00:00
a94d491929
Add jq to all servers
Generically useful
2025-11-11 17:24:41 +00:00
e1f7581bde
Add asterisk
It seems to work - I connected a client to it - but I never successfully
made any calls.
2025-11-11 17:24:40 +00:00
273d42024b
Add git-lfs to all systems 2025-11-11 17:24:40 +00:00
0fad3ec351
Add watchexec to all servers
Really useful tool for continuously changing things.
2025-11-11 17:24:39 +00:00
d7feca7bea Get twenty CRM actually running
I had to punt and allow IP-based connection over the docker network port
rather than mount the unix domain socket.

For now.
2025-10-22 21:36:19 +00:00
9683488ef9 Add initial draft of twenty-crm
Not sure if any of it works, this is a checkpoint to debug other things.
2025-10-22 18:17:13 +00:00