Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

feat(nixosConfigurations): add new machine serving {turn,signal,bootstrap}.infra.holochain.org #64

Merged
merged 32 commits into from
Mar 21, 2024
Merged
Show file tree
Hide file tree
Changes from 23 commits
Commits
Show all changes
32 commits
Select commit Hold shift + click to select a range
c0229d0
feat(nixosConfigurations): add turn-infra-holochain-org
steveej Mar 15, 2024
3018052
feat(flake): expose nixos-anywhere package
steveej Mar 15, 2024
7605759
flake: update disko
steveej Mar 15, 2024
cf44ccc
fix(turn-infra-holochain-org): adapt for EFI
steveej Mar 15, 2024
2d215f9
feat(dweb-reverse-proxy/caddy): pass through acme challenges to turn …
steveej Mar 15, 2024
e8ebdad
feat(holochain-turn-server): add and use flake-part coturn overlay an…
steveej Mar 15, 2024
9b0d359
fix missing quotes in flake
steveej Mar 15, 2024
78f2c08
feat: add tx5 signal server module and stub package; add signal DNS e…
steveej Mar 15, 2024
7a58ba3
set tx5 tag
steveej Mar 15, 2024
2b96e73
feat(tx5 signal server): working TLS, name changes, config file chmod
steveej Mar 18, 2024
3d06304
feat(flake); add nixpkgs 23.11 and crane inputs
steveej Mar 18, 2024
8d4ef8c
holochain-turn-server: simplify naming
steveej Mar 18, 2024
7c62b92
feat(tx5): package all upstream rust binaries
steveej Mar 18, 2024
5ece4e7
chore: nix fmt
steveej Mar 18, 2024
3bef126
feat(holo-users): add neonphog
steveej Mar 18, 2024
be35f6f
fix(holochain-turn-server): use production ACME server
steveej Mar 18, 2024
26bd929
feat(flake): readd zippy's keys
steveej Mar 18, 2024
7a0fe8e
chore(secrets): rotate dweb-reverse-tls-proxy key
steveej Mar 18, 2024
49f19e3
chore(secrets): rotate dweb-reverse-tls-proxy key
steveej Mar 18, 2024
50a469c
feat(modules/nixos): add kitsune-bootstrap
steveej Mar 18, 2024
2f932b9
repo-wide bump to nixos-23.11 and configure kitsune-bootstrap server
steveej Mar 18, 2024
6c489ad
feat: initial github pr checks
steveej Mar 18, 2024
c90b58e
fix(flake/nixpkgs): change branch release-23.11 -> nixos-23.11
steveej Mar 18, 2024
67c8ce6
Merge remote-tracking branch 'upstream/develop' into turn-server
steveej Mar 20, 2024
f7d28ce
chore: run deadnix
steveej Mar 20, 2024
d29bc23
feat(holochain-turn-server): document remaining options
steveej Mar 20, 2024
bdb4329
holochain-turn-server: remove perSystem attr
steveej Mar 20, 2024
5368299
chore(modules): add comment on ACME staging server to explain when it…
steveej Mar 20, 2024
965cb00
fix(modules/kitsune-bootstrap): don't proxy websockets in nginx
steveej Mar 20, 2024
3a751f2
fix: revert deadnix on apps.ssh-/default.nix
steveej Mar 20, 2024
1cb54dc
feat(packages/tx5-signal-srv): only compile single binary
steveej Mar 21, 2024
fdfd132
fix(coturn): use patched coturn for now to enable cli login
steveej Mar 21, 2024
File filter

Filter by extension

Filter by extension


Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
19 changes: 19 additions & 0 deletions .github/workflows/pr.yml
Original file line number Diff line number Diff line change
@@ -0,0 +1,19 @@
on:
pull_request:
push:
branches: [develop]

jobs:
lints:
name: Build
runs-on: ubuntu-22.04
permissions:
id-token: "write"
contents: "read"
steps:
- uses: actions/checkout@v4
- uses: DeterminateSystems/nix-installer-action@main
- uses: DeterminateSystems/magic-nix-cache-action@main
- uses: DeterminateSystems/flake-checker-action@main
# - name: Run `nix build`
# run: nix build .
4 changes: 2 additions & 2 deletions .sops.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -6,7 +6,7 @@
keys:
- &steveej 6F7069FE6B96E894E60EC45C6EEFA706CB17E89B
- &jost-s D299483493EAE6B2B3D892B6D33548FA55FF167F
- &dweb-reverse-proxy age1p4udet5m63tccqqpy38d2m90cv4rffe3cn3965jpmakkwcs7t56qvlp2vw
- &dweb-reverse-proxy age1ygzy9clj0xavlmau0ham7j5nw8yy4z0q8hvkfpdgwc4fcr8nufpqrdxgvx
- &linux-builder-01 age1kxkr407jz77ljrhgsfwfmv2yvqjprc6unvx389xp2f48xj8r0vqq2wew5r

creation_rules:
Expand All @@ -30,7 +30,7 @@ creation_rules:
key_groups:
- pgp:
- *steveej
- *jost-s
# - *jost-s
age:
- *dweb-reverse-proxy
- path_regex: ^secrets/nomad/admin/.+$
Expand Down
Loading