diff options
| -rw-r--r-- | krebs/3modules/makefu/default.nix | 1 | ||||
| -rw-r--r-- | lass/2configs/mail.nix | 18 | ||||
| -rw-r--r-- | makefu/1systems/wbob/config.nix | 6 | ||||
| -rw-r--r-- | makefu/2configs/git/cgit-retiolum.nix | 1 | ||||
| -rw-r--r-- | makefu/2configs/hydra/stockholm.nix | 34 | ||||
| -rw-r--r-- | makefu/5pkgs/default.nix | 2 | ||||
| -rw-r--r-- | makefu/5pkgs/programs-db/default.nix | 12 | 
7 files changed, 55 insertions, 19 deletions
diff --git a/krebs/3modules/makefu/default.nix b/krebs/3modules/makefu/default.nix index 0bed4d6da..e137da7ca 100644 --- a/krebs/3modules/makefu/default.nix +++ b/krebs/3modules/makefu/default.nix @@ -503,6 +503,7 @@ with import <stockholm/lib>;            # ip6.addr = "42:5a02:2c30:c1b1:3f2e:7c19:2496:a732";            aliases = [              "wbob.r" +            "hydra.wbob.r"            ];            tinc.pubkey = ''              -----BEGIN RSA PUBLIC KEY----- diff --git a/lass/2configs/mail.nix b/lass/2configs/mail.nix index e83201cd8..c6866c69d 100644 --- a/lass/2configs/mail.nix +++ b/lass/2configs/mail.nix @@ -21,13 +21,21 @@ let    '';    mailboxes = { -    wireguard = [ "to:wireguard@lists.zx2c4" ];      c-base = [ "to:c-base.org" ]; -    security = [ "to:seclists.org" "to:security" "to:bugtraq" ]; +    dezentrale = [ "to:dezentrale.space" ]; +    kaosstuff = [ "to:gearbest@lassul.us" "to:banggood@lassul.us" ];      nix-devel = [ "to:nix-devel@googlegroups.com" ]; +    patreon = [ "to:patreon@lassul.us" ]; +    security = [ "to:seclists.org" "to:security" "to:bugtraq" ];      shack = [ "to:shackspace.de" ]; +    wireguard = [ "to:wireguard@lists.zx2c4" ];    }; +  tag-mails = pkgs.writeDashBin "nm-init-tag" '' +    ${pkgs.notmuch}/bin/notmuch new +    ${concatMapStringsSep "\n" (i: ''${pkgs.notmuch}/bin/notmuch tag -inbox +${i.name} -- tag:inbox ${concatMapStringsSep " or " (f: "${f}") i.value}'') (mapAttrsToList nameValuePair mailboxes)} +  ''; +    muttrc = pkgs.writeText "muttrc" ''      # gpg      source ${pkgs.neomutt}/share/doc/mutt/samples/gpg.rc @@ -80,10 +88,9 @@ let        # V      ''} %r |" -    virtual-mailboxes "INBOX" "notmuch://?query=tag:inbox ${concatMapStringsSep " " (f: "and NOT ${f}") (flatten (attrValues mailboxes))}" +    virtual-mailboxes "INBOX" "notmuch://?query=tag:inbox"      virtual-mailboxes "Unread" "notmuch://?query=tag:unread" -    ${concatMapStringsSep "\n" (i: ''${"  "}virtual-mailboxes "${i.name}" "notmuch://?query=${concatMapStringsSep " or " (f: "${f}") i.value}"'') (mapAttrsToList nameValuePair mailboxes)} -    virtual-mailboxes "BOX" "notmuch://?query=${concatMapStringsSep " and " (f: "NOT ${f}") (flatten (attrValues mailboxes))}" +    ${concatMapStringsSep "\n" (i: ''${"  "}virtual-mailboxes "${i.name}" "notmuch://?query=tag:${i.name}"'') (mapAttrsToList nameValuePair mailboxes)}      virtual-mailboxes "TODO" "notmuch://?query=tag:TODO"      virtual-mailboxes "Starred" "notmuch://?query=tag:*"      virtual-mailboxes "Archive" "notmuch://?query=tag:archive" @@ -163,5 +170,6 @@ in {      mutt      pkgs.much      pkgs.notmuch +    tag-mails    ];  } diff --git a/makefu/1systems/wbob/config.nix b/makefu/1systems/wbob/config.nix index 6434ba273..637d8e2d8 100644 --- a/makefu/1systems/wbob/config.nix +++ b/makefu/1systems/wbob/config.nix @@ -29,7 +29,8 @@ in {        # <stockholm/makefu/2configs/vncserver.nix>        # Services -      <stockholm/makefu/2configs/remote-build/slave.nix> +      <stockholm/makefu/2configs/hydra/stockholm.nix> +        <stockholm/makefu/2configs/share/wbob.nix>        (let          musicDirectory = "/data/music"; @@ -83,6 +84,9 @@ in {              load-module module-filter-apply              load-module module-native-protocol-tcp auth-ip-acl=127.0.0.1              load-module module-switch-on-connect +            # may be required for "system-wide" pulse to connect to bluetooth +            #module-bluez5-device +            #module-bluez5-discover              '';          };          # connect via https://nixos.wiki/wiki/Bluetooth#Using_Bluetooth_headsets_with_PulseAudio diff --git a/makefu/2configs/git/cgit-retiolum.nix b/makefu/2configs/git/cgit-retiolum.nix index eacbd99cf..1109e2519 100644 --- a/makefu/2configs/git/cgit-retiolum.nix +++ b/makefu/2configs/git/cgit-retiolum.nix @@ -28,6 +28,7 @@ let      init-stockholm = {        cgit.desc = "Init stuff for stockholm";      }; +    hydra-stockholm = { };    };    priv-repos = mapAttrs make-priv-repo { diff --git a/makefu/2configs/hydra/stockholm.nix b/makefu/2configs/hydra/stockholm.nix new file mode 100644 index 000000000..4bdb09213 --- /dev/null +++ b/makefu/2configs/hydra/stockholm.nix @@ -0,0 +1,34 @@ +# iterative: +# $ hydra-create-user krebs --password derp --role admin +# curl 'http://hydra.wbob.r/project/.new' -X PUT -H 'Host: hydra.wbob.r' -H 'Content-Type: application/x-www-form-urlencoded; charset=UTF-8' -H 'X-Requested-With: XMLHttpRequest' -H 'Cookie: redirect_to=%252F; hydra_session=abcdefghijklmnopqrstuvwxyz' -H 'Connection: keep-alive' --data 'enabled=on&visible=on&name=stockholm&displayname=Stockholm&description=make+all+systems+into+1systems&homepage=https%3A%2F%2Fkrebsco.de&owner=krebs&declfile=spec.json&decltype=git&declvalue=http%3A%2F%2Fcgit.euer.krebsco.de%2Fhydra-stockholm' + +{ + +  # TODO postgres backup +  services.postgresql.enable = true; + +  services.hydra = { +    enable = true; +    hydraURL = "http://hydra.wbob.r"; # externally visible URL +    notificationSender = "hydra@wbob.r"; +    # you will probably also want, otherwise *everything* will be built from scratch +    useSubstitutes = true; +    port = 3030; +    buildMachinesFiles = []; +  }; + +  networking.firewall.allowedTCPPorts = [ 80 ]; +  services.nginx = { +    enable = true; +    virtualHosts."hydra.wbob.r" = { +      locations."/" =  { +        proxyPass = "http://localhost:3030/"; +        extraConfig = '' +          proxy_set_header   Host $host; +          proxy_set_header   X-Real-IP          $remote_addr; +          proxy_set_header   X-Forwarded-For $proxy_add_x_forwarded_for; +        ''; +      }; +    }; +  }; +} diff --git a/makefu/5pkgs/default.nix b/makefu/5pkgs/default.nix index 80a0d33cd..b1d6df67e 100644 --- a/makefu/5pkgs/default.nix +++ b/makefu/5pkgs/default.nix @@ -3,7 +3,7 @@ self: super: let    # This callPackage will try to detect obsolete overrides.    callPackage = path: args: let -    override = super.callPackage path args; +    override =  super.callPackage path args;      upstream = optionalAttrs (override ? "name")        (super.${(parseDrvName override.name).name} or {});    in if upstream ? "name" && diff --git a/makefu/5pkgs/programs-db/default.nix b/makefu/5pkgs/programs-db/default.nix deleted file mode 100644 index f40b1b96e..000000000 --- a/makefu/5pkgs/programs-db/default.nix +++ /dev/null @@ -1,12 +0,0 @@ -{ stdenv }: - -stdenv.mkDerivation rec { -  name = "programs-db"; -  src = builtins.fetchTarball https://nixos.org/channels/nixos-unstable/nixexprs.tar.xz ; - -  phases = [ "unpackPhase" "installPhase" ]; -  installPhase = '' -    cp programs.sqlite $out -  ''; - -}  | 
