Commit graph

150 commits

Author SHA1 Message Date
ddf0f92dfb
Fix reference to sops file
I changed the directory, got to change the relative path.
2026-01-29 16:40:56 +00:00
be02588bc5
Clean up minio
Because I was looking at it.
2026-01-29 16:29:00 +00:00
3e9cf203e0
Add restic backup for glitchtip data 2026-01-29 16:25:30 +00:00
62c2e33f44
Remove override of glitchtip module.
I'm using the packaged version now.
2026-01-29 16:15:43 +00:00
fa9dc7edb1
Get Glitchtip working on latest NixOS
I had thrashed around trying to fix some problems with Glitchtip on
25.05. Now that we're on 25.11 we can get a much more recent version
that hopefully doesn't have disk leaks.
2026-01-29 15:10:05 +00:00
7ac27f6a94
Re-enable glitchtip
See if the latest version has slightly fewer problems :/
2026-01-26 02:57:45 +00:00
7394dec056
Update tegola for latest nidus-sync 2026-01-22 05:22:37 +00:00
92871929b1
Restart frps on config change, add liam site to sovr 2026-01-21 16:28:39 +00:00
83685f761d
Fix synapse and twenty-crm backing up to the wrong repo 2026-01-18 02:43:47 +00:00
4cf7bc285b
Switch to mainline maintained librechat
I can't build my custom version anymore anyway.
2026-01-13 17:06:56 +00:00
27779f8256
Attempt to update librechat to the latest release candidate
This doesn't work, I fail to build with:

error: Cannot build '/nix/store/g6l9hkdpagw2bnmwahc02l52mkrffvgg-librechat-0.8.2-rc2.drv'.
       Reason: builder failed with exit code 1.
       Output paths:
         /nix/store/q4qgw0i8jwphy8zay91mc0ryn6dnrw94-librechat-0.8.2-rc2
       Last 25 log lines:
       > Running phase: patchPhase
       > applying patch /nix/store/bilh0c0cmfgnw2a7qn3dwxp71q2pl9ac-0001-npm-pack.patch
       > patching file package.json
       > applying patch /nix/store/0dk9z8sxk35dgwkfw0qsb1w683qw89yn-0002-logs.patch
       > patching file api/config/meiliLogger.js
       > patching file api/config/winston.js
       > applying patch /nix/store/h0m3hci4giadx23h8a47qwmabvz90s54-0003-upload-paths.patch
       > patching file api/config/paths.js
       > Executing npmConfigHook
       > Configuring npm
       > Validating consistency between /build/source/package-lock.json and /nix/store/sd3xvlghlw83aacmyqkxlcxvvxk3srad-librechat-0.8.2-rc2-npm-deps/package-lock.json
       > Making cache writable
       > Setting npm_config_cache to /build/cache
       > Installing dependencies
       > npm error code ENOTCACHED
       > npm error request to https://registry.npmjs.org/@testing-library%2freact failed: cache mode is 'only-if-cached' but no cached response is available.
       > npm error A complete log of this run can be found in: /build/cache/_logs/2026-01-13T16_43_25_772Z-debug-0.log
       >
       > ERROR: npm failed to install dependencies
       >
       > Here are a few things you can try, depending on the error:
       > 1. Set `makeCacheWritable = true`
       >   Note that this won't help if npm is complaining about not being able to write to the logs directory -- look above that for the actual error.
       > 2. Set `npmFlags = [ "--legacy-peer-deps" ]`
       >
       For full logs, run:
         nix log /nix/store/g6l9hkdpagw2bnmwahc02l52mkrffvgg-librechat-0.8.2-rc2.drv
error: Cannot build '/nix/store/mwicxm33crq9iv9gc3pkyns3dsfijvc4-system-path.drv'.
       Reason: 1 dependency failed.
       Output paths:
         /nix/store/kgm1vrr5vp07jswzqn9v70k8i8vq38i6-system-path
error: Cannot build '/nix/store/56ck3y67vqv06vjhi55smz2zcczch8rr-unit-librechat.service.drv'.
       Reason: 1 dependency failed.
       Output paths:
         /nix/store/1p3js87qgsdvdnfmisli6jwck474h4xj-unit-librechat.service
error: Cannot build '/nix/store/x6lmb98l84hjvrlvla1hrmqs7mjxndwn-nixos-system-nocix-amd-legacy-octacore-25.11.20260110.d030887.drv'.
       Reason: 1 dependency failed.
       Output paths:
         /nix/store/yd6x6a6grvahryrfazdd8xqmb7znmpfs-nixos-system-nocix-amd-legacy-octacore-25.11.20260110.d030887
2026-01-13 16:56:10 +00:00
bd0b2c4b3d
Move to standard label-studio image
It's got my fix incorporated, I think, so I don't have to build my
custom image.
2026-01-13 16:55:34 +00:00
1f8b2c1aa7
Upgrade to the latest cloudreve 2026-01-13 15:14:58 +00:00
435b4970cb
Disable rag_api startup script
This prevents a fresh install of postgres from even starting. There has
to be a better way to run these commands.
2026-01-13 15:04:05 +00:00
ff0c139dc8
Use the new authentik config pattern for setting listening addresses 2026-01-13 14:58:11 +00:00
5288c5857a
Add separate restic roles for separate credentials
I don't want corp and prod accidentally smashing each other, or being
used as a credentials escalation attack.
2026-01-13 14:57:33 +00:00
d6fc5502f6
Add report/sync URLs for nidus 2026-01-12 14:12:56 +00:00
d66286d663
Remove now-defunct and failing fssync export process 2026-01-12 14:12:56 +00:00
1055f382fc
Move nidus sync to its own backup buckets
When doing the restore recently it seemed likely that there were
conflicts with sharing the buckets.
2026-01-12 14:12:12 +00:00
b5defe1bf0
Add restic backup for all corp services 2026-01-12 00:49:27 +00:00
0ac27f8b99 Add switch-fix commands 2026-01-05 00:27:23 +00:00
e5f5117cdd Add eliribble to trusted users for pushing updates
This should make it possible to push remote builds.
2026-01-04 21:07:51 +00:00
23a61985dc WIP getting legacy-sexcore back up
At this point I was able to successfully nixos-anywhere the system and
SSH back in afterwards. That's progress worth keeping.
2026-01-04 21:07:51 +00:00
840c68524f
Add alternative IP address and SSH port
I was trying to use it to get around public wifi firewalls
2025-12-11 14:31:58 +00:00
af1de58c28
Add initial attempt at qgis
Doesn't work, likely due to missing CPU instruction support (AVX).
2025-12-11 14:31:57 +00:00
63bd931034 Clean up old, unused restic 2025-11-29 16:30:58 +00:00
1c3ca5909b
Reverse proxy for tegola through caddy to get TLS 2025-11-15 15:00:39 +00:00
423c1e6d9f
Working tegola delpoy
This uses the data from Bonn, Germany which I downloaded from
https://github.com/go-spatial/tegola-example-bonn/tree/main
2025-11-14 18:58:42 +00:00
f3b8602f30
Actually serve sync.nidus.cloud with the new config. 2025-11-11 17:57:35 +00:00
44c0d83bf6
Add nidus-sync production module
This will allow me to keep nidus-sync stable while continuing to do
development on this same server on a different port.
2025-11-11 17:24:41 +00:00
a94d491929
Add jq to all servers
Generically useful
2025-11-11 17:24:41 +00:00
e1f7581bde
Add asterisk
It seems to work - I connected a client to it - but I never successfully
made any calls.
2025-11-11 17:24:40 +00:00
273d42024b
Add git-lfs to all systems 2025-11-11 17:24:40 +00:00
0fad3ec351
Add watchexec to all servers
Really useful tool for continuously changing things.
2025-11-11 17:24:39 +00:00
d7feca7bea Get twenty CRM actually running
I had to punt and allow IP-based connection over the docker network port
rather than mount the unix domain socket.

For now.
2025-10-22 21:36:19 +00:00
9683488ef9 Add initial draft of twenty-crm
Not sure if any of it works, this is a checkpoint to debug other things.
2025-10-22 18:17:13 +00:00
7147413112 Switch fieldseeker to not do a top-level merge
This actually breaks on any servers that don't define the fieldseeker
deployments as an empty list. Instead we do the clunkier, but working,
import-then-merge-each-attr.
2025-10-22 18:02:15 +00:00
dd3ae9f4d3 Add ffmpeg to webserver runtime
Because it's running it as a subprocess now for transcoding.
2025-10-22 18:02:15 +00:00
6d780d8ada Add non-standard SSH port 2025-10-22 18:02:15 +00:00
c83b46a352 Deploy fssync without separate audio post processor 2025-10-22 18:02:15 +00:00
fff3fa31b9 Switch to full domains in frps config 2025-10-22 18:02:15 +00:00
4e68e938ef Add config for frps subdomains 2025-10-22 18:02:15 +00:00
d739394ae2 Specify the bind port directly
It's not a secret, and this will make it possible to use the
address/interface configured in the host configuration.
2025-10-22 18:02:15 +00:00
010cabfe14 Add frps systemd unit for running frps all the time 2025-10-22 18:02:15 +00:00
71d1109bf8 Disable glitchtip private tmp
I can't auto-clean the temp files when private temp is enabled according
to Claude
2025-10-20 23:00:07 +00:00
2d5ccb7a8c Disable glitchtip
Apparently our problems are fixed in the latest release, but we can't
have it until we go NixOS unstable, which I don't want to do yet.
2025-10-20 23:00:07 +00:00
512a86e0b9 Remove warning about string type. 2025-10-20 23:00:07 +00:00
62b4eb1933 Add frps systemd unit for running frps all the time 2025-10-13 22:03:15 +00:00
311890c861 Add frpc/frps to the system packages 2025-10-13 17:10:22 +00:00
8995e95041 Add the sovr role and initial frps deployment 2025-10-13 17:06:15 +00:00