world.git - nix configuration for my machines

	Commit message (Collapse)	Author	Age	Files	Lines
*	fix(fmt): correct formatting for all nix files	Franck Cuny	2022-06-10	1	-1/+2
\| \| \| \| \| \| \| \| \|	This was done by running `nixpkgs-fmt .'. Change-Id: I4ea6c1e759bf468d08074be2111cbc7af72df295 Reviewed-on: https://cl.fcuny.net/c/world/+/404 Tested-by: CI Reviewed-by: Franck Cuny <franck@fcuny.net>
*	fix(secrets): buildKite agents can read gerrit secrets	Franck Cuny	2022-06-09	1	-0/+4
\| \| \| \| \| \| \| \| \|	We need to ensure the agents can read the secrets / tokens to vote after a build. Change-Id: I066c2482a795b21badaa9cc3c525373d7945b084 Reviewed-on: https://cl.fcuny.net/c/world/+/341 Reviewed-by: Franck Cuny <franck@fcuny.net>
*	fix(secrets): set the owner for buildkite agent secrets	Franck Cuny	2022-06-04	1	-0/+1
\| \| \| \| \| \| \| \| \|	There's one user per agent. If we don't set an owner for that file, it will be owned by root. Let's set the ownership to the first builder. Change-Id: I1270e6858c0bf2797bd12c2557d84a494cef5081 Reviewed-on: https://cl.fcuny.net/c/world/+/281 Reviewed-by: Franck Cuny <franck@fcuny.net>
*	ref(drone): remove secret and CLI for drone	Franck Cuny	2022-06-04	1	-5/+0
\| \| \| \| \| \| \| \| \|	I'm not using drone anymore. I don't need the CLI and the secret to be installed. Change-Id: I9c8ecfe5f051fd70d78f0e2e9aaa705e48627714 Reviewed-on: https://cl.fcuny.net/c/world/+/261 Reviewed-by: Franck Cuny <franck@fcuny.net>
*	feat(gerrit): add secret for gerrit-hook	Franck Cuny	2022-06-04	1	-0/+5
\| \| \| \| \| \| \| \| \| \| \|	The secret is the configuration for the gerrit-hook tool. It contains the URL to our gerrit instance, the username/password for the gerrit user used by the tool, the API token for buildKite and the name of the organization in buildKite. Change-Id: I58233e085c92d4c5db5635eb9942a5e87ee9e55d Reviewed-on: https://cl.fcuny.net/c/world/+/204 Reviewed-by: Franck Cuny <franck@fcuny.net>
*	feat(buildkite): add the auth token	Franck Cuny	2022-05-30	1	-0/+7
\| \| \| \| \| \|	Change-Id: I652a3326caf8f949e9734849d1492f7b9764a766 Reviewed-on: https://cl.fcuny.net/c/world/+/167 Reviewed-by: Franck Cuny <franck@fcuny.net>
*	syncthing: configure the keys for tahoe	Franck Cuny	2022-04-21	1	-0/+10
\|
*	drone: initial attempt at configuring it	Franck Cuny	2022-04-13	1	-0/+5
\|
*	tahoe: set owner for secret related to ACME	Franck Cuny	2022-04-13	1	-1/+4
\|
*	secrets: re-key all secrets for tahoe	Franck Cuny	2022-04-13	1	-7/+10
\|
*	grafana: try to configure the domain with acme+dns	Franck Cuny	2022-04-13	1	-1/+2
\|
*	secrets: move the actual secrets with hosts config	Franck Cuny	2022-04-13	1	-0/+14
	Having the secrets closer to the host is easier to manage. At the moment I don't have secrets that are shared across multiple hosts, so that's an OK approach.