alpha
Login
or
Join now
lass.pds.lassul.us
/
superconfig
Star
0
Fork
1
Atom
Configure Feed
Issues
Pull Requests
Commits
Tags
Feed URL
Select the types of activity you want to include in your feed.
This repository has no description
Star
0
Fork
1
Atom
Configure Feed
Issues
Pull Requests
Commits
Tags
Feed URL
Select the types of activity you want to include in your feed.
Overview
Issues
Pulls
1
Pipelines
superconfig
/
configs
/
monitoring
1 folder
5 files
at
e67b63ddd98321cdd52b1d7d4aec273e36ee323c
lassulus
configs.monitoring.agent: monitoring.extraMetrics for machine specific metrics
3d ago
e67b63dd
dashboards
configs.monitoring: export the superconfig revision each machine runs autoUpgrade pins the upgrade to the revision the forward-only guard resolved and writes it to /var/lib/superconfig-revision after a successful upgrade, like deploy does. Vector reads that file every 30s and exports nixos_system_info{host,revision,revision_short}; the node dashboard shows host -> revision_short.
6 days ago
agent.nix
configs.monitoring.agent: monitoring.extraMetrics for machine specific metrics
3 days ago
alerts.nix
configs.monitoring: exempt every mount of the download dataset from DiskAlmostFull yellow mounts the same ZFS dataset (tank/download) as neoprism's /var/download, which is covered by DownloadSpace*, so DiskAlmostFull fired for it. Match the exemption on the device of neoprism's series instead of host and mountpoint.
4 days ago
checks.nix
configs.byoidc: init on neoprism (byoidc.lassul.us) byoidc lets people sign in with their own OpenID provider; Zitadel will offer it as one generic OIDC IdP. The downstream client "zitadel" gets its secret from a prompt-less clan var, which root-owned is fine for both byoidc (LoadCredential) and zitadel-reconcile (root). Its state (cached upstream clients, signing key) is not backed up: subjects are derived from issuer and upstream sub, a new signing key is picked up through JWKS, and upstream clients are registered again on demand.
4 days ago
default.nix
machines.orange: remove, move mumble-reminder to neoprism
6 days ago
server.nix
retiolum: drop self.retiolum, acheron and starkstrom are in kartei now kartei carries both cards (krebs/kartei#92), so the superconfig-only host set is empty; read hosts, own addresses and tinc host files from kartei alone.
6 days ago