b652029e73
Remove seafile
...
I like Cloudreve well enough, and didn't like Seafile much
2025-09-09 15:07:32 +00:00
57843f6b8a
Get matrix-synapse up and running on new corp
...
I move the secrets file to be more consistent with the naming.
I removed parts of the postgres config that is no longer needed now that
the database is running locally.
2025-09-09 15:05:28 +00:00
e025d2dce3
Increase open file limits for building the system
...
Without this I was hitting issues when building the authentik flake
which apparently is quite large and complex.
2025-09-09 15:03:52 +00:00
4d5de177b5
Get authentik working on the new corp server without podman
...
The podman integration was pretty janky because it relied on running a
pod and the NixOS integration with pods are essentially non-existent.
This led to issues with the port being improperly forwarded when
partially restarted.
Now instead I use a flake dedicated to running authentik. This allows me
to specify some of the config in the module directly and some in
secrets, which is really nice. I've additionally added some changes to
the listen address so that the service isn't exposed over public IP
addresses.
2025-09-09 15:03:43 +00:00
3fcadf2047
Massively decrease the timeout waiting for the network to come online
2025-08-27 17:52:15 +00:00
c1446b9e51
Make the working directory for Glitchtip configurable
2025-08-27 17:52:15 +00:00
a12f1c409d
Copy glitchtip working files to a writeable directory
...
It's not configurable, but it works, and was able to take my build
system upload.
2025-08-27 17:52:15 +00:00
1f663c3e42
Don't wait until timeout on systemd-networkd-wait-online
...
I believe this is caused by having a number of virtual interfaces from
OCI containers and the system wants to see them all online before
considering networkd online
2025-08-27 17:52:15 +00:00
2e07572759
Move matrix secrets to central secrets location
2025-08-27 17:52:15 +00:00
ca16db4add
Vendor-in the original glitchtip module
...
I'm going to be making some changes
2025-08-27 17:52:15 +00:00
011d63390a
Add sentry integration deployment to fieldseeker-sync
2025-08-26 00:43:15 +00:00
a8b3f92fab
Fix bad merge
2025-08-23 18:33:48 +00:00
107db4a325
Add second, test-only fieldseeker config
2025-08-23 18:33:35 +00:00
86637074e8
Don't wait to run export on nixos-rebuild
2025-08-23 17:18:32 +00:00
f8f8bc368a
Add glitchtip self-hosted
...
This doesn't yet do SSO correctly, I'm still trying to figure out how to
configure Django allauth via environment variable.
2025-08-22 22:18:23 +00:00
d5403cc9fb
Add binutils to all servers
...
It gives me access to 'strings' which allows me to debug environment
variables of running programs
2025-08-22 22:18:22 +00:00
3f509cc124
Add fieldseeker webserver
2025-08-20 23:58:18 +00:00
1f0173ab1a
Add timer to run fsync export on 15m intervals
2025-08-18 22:01:49 +00:00
b91bb281e0
Remove fieldseeker-sync.toml config file
...
It's all configured via environment variables now.
2025-08-18 22:01:43 +00:00
f277375075
Get a database created and connected for fieldseeker-sync
2025-08-18 21:44:43 +00:00
ba87117ed3
Reference a built binary in fieldseeker-sync, add initial service
...
This won't work yet as we don't read from the environment variables
and are missing a complete config file
2025-08-18 20:29:31 +00:00
884c372b17
Fully use networkd
...
This quiets a warning we get for having networkd not fully enabled.
2025-08-18 19:45:05 +00:00
7af1ff3698
Update to rev that actually builds
...
Last one has a syntax error.
2025-08-18 19:44:47 +00:00
25739ab71b
First inklings of fieldseeker-sync building for our sync host
2025-08-18 19:39:13 +00:00
5e59add85b
Enable network on all hosts
...
I've been using networkd quite a bit in my personal work. Adding this
fixed my DNS resolution issues, so I'm keeping it.
2025-08-18 19:39:13 +00:00
fed9049f4c
Add cloud-init and dig to the base system image
...
I'm having problems with DNS resolution and network routing on the new
sync server, I'm hoping these will help me.
2025-08-18 19:39:13 +00:00
c427bda5b0
Create sync nidus host configuration
...
It has next to nothing in it, at this point.
2025-08-15 00:34:21 +00:00
34c105f73d
Use librechat 0.8.0-rc2, add config directory
...
This is an attempt to build LibreChat myself to get access to the
config/ directory which contains scripts for managing the balance.
2025-08-11 18:45:18 +00:00
fe8a9b0b0d
Add librechat config for rate limiting
2025-07-28 20:23:41 +00:00
7530a91823
Add myutils to base system
...
So I can import it everywhere.
2025-07-24 15:58:32 +00:00
47056f3df8
Add initial authentik backup script
...
This includes a new paradigm for using a pgpass file, which is great, as
well as sorting out how to properly do a bash script shebang in a
service file.
2025-07-24 15:58:32 +00:00
a31e1dfe88
Add commented-out port specification for openssh
...
May be handy at some future point for getting around intermediate
firewalls
2025-07-23 00:16:22 +00:00
d29e7f242b
Remove redundant negation of isNormalUser
2025-07-23 00:14:57 +00:00
3ba2d19292
Add rag-api to our librechat stack.
...
Works as tested with a pdf document embedding.
2025-07-23 00:14:20 +00:00
6b237aa4f3
Add meilisearch to librechat
...
This allows us to search previous chat messages and get fast results.
2025-07-22 16:44:40 +00:00
8f1b53286c
Librechat add google and openai, drop back to working package
...
I'm going to spin up some dev resources to see if I can figure out how
to compile the latest. In the mean time, this is doing what I want and
is going to get deployed.
2025-07-21 23:51:23 +00:00
9c025b86c8
Move to a newer version of librechat with an override.
...
This may get us access to use the latest Claude models since the API
changed in the past 2 months.
2025-07-21 23:23:36 +00:00
8e293abad4
Better specify the librechat service to restart on changes
...
Without the '.service' it can't find it. Odd.
2025-07-21 20:31:14 +00:00
80380c4ee3
Add sops to all servers
...
Because then I can edit files in-place.
2025-07-21 20:16:30 +00:00
d4a75abe51
Get librechat working
...
With these changes I have librechat running and being properly
reverse-proxied and I can login via SSO. I was not able to get a
reasonable response yet from Claude.
2025-07-21 20:14:35 +00:00
049565c491
Add tig to all hosts
...
I use it frequently when doing things with git.
2025-07-21 19:30:01 +00:00
e1bdaae278
Finish removing neovim module
2025-07-21 19:30:01 +00:00
daa1387f38
Fix Cloudreve group membership
...
Copy-paste error.
2025-07-21 18:53:03 +00:00
db1f3a03d9
Re-add stateVersion
...
I removed it to be able to run on corp, but I need it when spinning up
new servers, so I'm re-adding it.
2025-07-21 18:52:41 +00:00
888a4ad65d
Add module for sillytavern.
...
I'm probably not going to use it, and prefer librechat instead.
I mostly gave up on it because I couldn't make heads-nor-tails of their
SSO settings. It just says "authelia=true" - that's not enough to
configure any SSO, even Authelia.
I probably misunderstand what Sillytavern fundamentally is.
2025-07-21 18:51:32 +00:00
acfef00f7d
Remove old neovim module
...
I'm now using nixvim, which is very powerful, and I'm already using it
to do far more comprehensive things.
2025-07-21 18:50:51 +00:00
852fe09471
Update fish home module to user user config, and enable shell
...
The 'user' config was only used by this fish module, and became silly
as soon as I had to duplicate it to the git module. Instead I set it
once in the home config and reference it.
In addition this change includes enabling the fish shell. This makes it
possible to do things like set session variables, which I'll do in the
next commit.
2025-07-21 18:48:11 +00:00
6bdcc2ccfe
Create an option for defining the user in home-manager modules
...
This will replace existing per-module user configuration.
Or, rather, it already did for git.
2025-07-21 18:47:29 +00:00
6dc2fc4e44
Add git home module
...
Allows me to avoid configuring my name any time I want to use git
2025-07-21 18:47:02 +00:00
cef526f0c0
Move seafile to filez.gleipnir.technology
2025-07-19 00:46:16 +00:00
