5bd3003c4a
Fix reference to webserver service
2025-09-30 17:47:32 +00:00
24ecd65cf0
Add backup for fieldseeker-sync files.
...
This required changing the directory of the user files so that I don't
accidentially backup Gleipnir test files.
2025-09-30 17:46:46 +00:00
a728e62a72
Add restic to all servers
...
Used for backups
2025-09-30 15:51:21 +00:00
9020b3e6d5
Remove old commented-out authentik logic
...
This has been replaced with a separate authentik flake
2025-09-29 22:48:47 +00:00
7acb0fd016
Switch timers for "startAt" in fieldseeker-sync services
...
I'm trying to troubleshoot why I always have time out on these services
when I run nixos-rebuild. Simplification is a plus as well.
2025-09-29 21:13:25 +00:00
b0e373932e
Release latest fieldseeker-sync
2025-09-29 21:13:25 +00:00
f5ea2676ef
Add fieldseeker-sync migrate service
...
Avoids one of my other services randomly failing because they are racing
to migrate the DB.
2025-09-29 21:13:25 +00:00
40517face6
Add timecard-bot deployment to corp
...
This currently has the architecture hard-coded. That's bad, but nix is
hard, and there's probably a much better way to integrate this into the
system when I can be bothered to do it.
2025-09-26 19:08:26 +00:00
dcc294e979
Add ghostty terminfo support to all servers
2025-09-26 17:27:46 +00:00
09ba3f4abe
Fix up static website hosting on corp
2025-09-26 17:27:46 +00:00
35777dc9cb
Enable vikunja search for SSO users when editing teams
...
See https://vikunja.io/docs/config-options/#1-service-enableopenidteamusersearch
2025-09-26 17:27:46 +00:00
83c4802ff1
Add audio post-processing pipeline to fieldseeker-sync
2025-09-11 19:12:19 +00:00
bb4d7e95a8
Update librechat rag to use locally-built and local DB
...
I have to do the local build because I no longer have access to the one
at docker.io.
2025-09-09 21:34:09 +00:00
c535915ae0
Move cloudreve to the latest version, and the data to the big disk
2025-09-09 21:33:45 +00:00
2c101e6aaa
Get cloudreve working on new corp with local database
...
This was a huge hassle. I really wanted to see it working under a
non-root user since it writes files, but that ended up being impossible
because of several bugs in podman's rootless integration with NixOS.
I've kept pieces of the logic around and commented out in case I can fix
it in the future as it would be more secure.
I also tried to connect to Postgres over the unix domain socket, but the
problem here is that the container is built to run as root and I'd need
to do some elaborate mapping of the root user inside the container, the
non-root user outside the container, and the Postgres auth scheme.
This would be great stuff to sort out, but I'm out of time now to work
on it.
2025-09-09 19:47:22 +00:00
b652029e73
Remove seafile
...
I like Cloudreve well enough, and didn't like Seafile much
2025-09-09 15:07:32 +00:00
57843f6b8a
Get matrix-synapse up and running on new corp
...
I move the secrets file to be more consistent with the naming.
I removed parts of the postgres config that is no longer needed now that
the database is running locally.
2025-09-09 15:05:28 +00:00
e025d2dce3
Increase open file limits for building the system
...
Without this I was hitting issues when building the authentik flake
which apparently is quite large and complex.
2025-09-09 15:03:52 +00:00
4d5de177b5
Get authentik working on the new corp server without podman
...
The podman integration was pretty janky because it relied on running a
pod and the NixOS integration with pods are essentially non-existent.
This led to issues with the port being improperly forwarded when
partially restarted.
Now instead I use a flake dedicated to running authentik. This allows me
to specify some of the config in the module directly and some in
secrets, which is really nice. I've additionally added some changes to
the listen address so that the service isn't exposed over public IP
addresses.
2025-09-09 15:03:43 +00:00
3fcadf2047
Massively decrease the timeout waiting for the network to come online
2025-08-27 17:52:15 +00:00
c1446b9e51
Make the working directory for Glitchtip configurable
2025-08-27 17:52:15 +00:00
a12f1c409d
Copy glitchtip working files to a writeable directory
...
It's not configurable, but it works, and was able to take my build
system upload.
2025-08-27 17:52:15 +00:00
1f663c3e42
Don't wait until timeout on systemd-networkd-wait-online
...
I believe this is caused by having a number of virtual interfaces from
OCI containers and the system wants to see them all online before
considering networkd online
2025-08-27 17:52:15 +00:00
2e07572759
Move matrix secrets to central secrets location
2025-08-27 17:52:15 +00:00
ca16db4add
Vendor-in the original glitchtip module
...
I'm going to be making some changes
2025-08-27 17:52:15 +00:00
011d63390a
Add sentry integration deployment to fieldseeker-sync
2025-08-26 00:43:15 +00:00
a8b3f92fab
Fix bad merge
2025-08-23 18:33:48 +00:00
107db4a325
Add second, test-only fieldseeker config
2025-08-23 18:33:35 +00:00
86637074e8
Don't wait to run export on nixos-rebuild
2025-08-23 17:18:32 +00:00
f8f8bc368a
Add glitchtip self-hosted
...
This doesn't yet do SSO correctly, I'm still trying to figure out how to
configure Django allauth via environment variable.
2025-08-22 22:18:23 +00:00
d5403cc9fb
Add binutils to all servers
...
It gives me access to 'strings' which allows me to debug environment
variables of running programs
2025-08-22 22:18:22 +00:00
3f509cc124
Add fieldseeker webserver
2025-08-20 23:58:18 +00:00
1f0173ab1a
Add timer to run fsync export on 15m intervals
2025-08-18 22:01:49 +00:00
b91bb281e0
Remove fieldseeker-sync.toml config file
...
It's all configured via environment variables now.
2025-08-18 22:01:43 +00:00
f277375075
Get a database created and connected for fieldseeker-sync
2025-08-18 21:44:43 +00:00
ba87117ed3
Reference a built binary in fieldseeker-sync, add initial service
...
This won't work yet as we don't read from the environment variables
and are missing a complete config file
2025-08-18 20:29:31 +00:00
884c372b17
Fully use networkd
...
This quiets a warning we get for having networkd not fully enabled.
2025-08-18 19:45:05 +00:00
7af1ff3698
Update to rev that actually builds
...
Last one has a syntax error.
2025-08-18 19:44:47 +00:00
25739ab71b
First inklings of fieldseeker-sync building for our sync host
2025-08-18 19:39:13 +00:00
5e59add85b
Enable network on all hosts
...
I've been using networkd quite a bit in my personal work. Adding this
fixed my DNS resolution issues, so I'm keeping it.
2025-08-18 19:39:13 +00:00
fed9049f4c
Add cloud-init and dig to the base system image
...
I'm having problems with DNS resolution and network routing on the new
sync server, I'm hoping these will help me.
2025-08-18 19:39:13 +00:00
c427bda5b0
Create sync nidus host configuration
...
It has next to nothing in it, at this point.
2025-08-15 00:34:21 +00:00
34c105f73d
Use librechat 0.8.0-rc2, add config directory
...
This is an attempt to build LibreChat myself to get access to the
config/ directory which contains scripts for managing the balance.
2025-08-11 18:45:18 +00:00
fe8a9b0b0d
Add librechat config for rate limiting
2025-07-28 20:23:41 +00:00
7530a91823
Add myutils to base system
...
So I can import it everywhere.
2025-07-24 15:58:32 +00:00
47056f3df8
Add initial authentik backup script
...
This includes a new paradigm for using a pgpass file, which is great, as
well as sorting out how to properly do a bash script shebang in a
service file.
2025-07-24 15:58:32 +00:00
a31e1dfe88
Add commented-out port specification for openssh
...
May be handy at some future point for getting around intermediate
firewalls
2025-07-23 00:16:22 +00:00
d29e7f242b
Remove redundant negation of isNormalUser
2025-07-23 00:14:57 +00:00
3ba2d19292
Add rag-api to our librechat stack.
...
Works as tested with a pdf document embedding.
2025-07-23 00:14:20 +00:00
6b237aa4f3
Add meilisearch to librechat
...
This allows us to search previous chat messages and get fast results.
2025-07-22 16:44:40 +00:00
