kiara/Fediversity
1
0
Fork 0
forked from Fediversity/Fediversity
Code Pull requests Activity
894 commits 107 branches 0 tags 49 MiB
Commit graph

75 commits

Author SHA1 Message Date
Kiara Grouwstra
e790a4450f
add tls 2025-07-17 19:11:11 +02:00
Kiara Grouwstra
5ccffb0621
have attic know it doesn't do https, for now 2025-07-17 19:07:36 +02:00
Kiara Grouwstra
0a615fa961
expose port 9000 following documentation 2025-07-17 19:07:36 +02:00
Kiara Grouwstra
16e1f9a6a3
enquote attic env values for use in source attic.env 2025-07-17 19:03:33 +02:00
Kiara Grouwstra
2cee7b315b
add generator dependency 2025-07-17 19:03:33 +02:00
Kiara Grouwstra
45e97e8339
[wip] handling env file (still fails) 
rm unused dep nix-templating

fix imports
 2025-07-17 19:03:33 +02:00
Kiara Grouwstra
ebd79d2d5e
use templating fork 2025-07-17 19:03:33 +02:00
Kiara Grouwstra
3622dc817a
add tests, fix some things 
upgrade memory to resolve oom
 2025-07-17 19:03:33 +02:00
Kiara Grouwstra
5cf5a121e4
move from dev to operator 
revert

add qemu import
 2025-07-17 19:03:33 +02:00
Kiara Grouwstra
b6eebd577f
WIP: add attic cache, see #92 
flesh out attic

TODO keys nginx-port testing

fix key

fix key
 2025-07-17 19:03:33 +02:00
Kiara Grouwstra
5140fe5935
actually pass a priority level fitting my description 2025-07-17 19:03:33 +02:00
Kiara Grouwstra
761d74a109
use defaultOverridePriority over mkDefault to fix acme error without cashing with settings from tests 2025-07-17 19:03:33 +02:00
Kiara Grouwstra
8ff5b87d00
use mkDefault to prevent acme clash in tests 2025-07-17 19:03:33 +02:00
Kiara Grouwstra
159e4107b8 fix Pixelfed test eval failure (#458) 
Reviewed-on: Fediversity/Fediversity#458
Co-authored-by: Kiara Grouwstra <kiara@procolix.eu>
Co-committed-by: Kiara Grouwstra <kiara@procolix.eu>
 2025-07-15 10:38:10 +02:00
Kiara Grouwstra
82f83eea0d fix mastodon test (#457) 
closes #34.

Co-authored-by: Valentin Gagarin <valentin.gagarin@tweag.io>
Reviewed-on: Fediversity/Fediversity#457
Reviewed-by: Valentin Gagarin <valentin.gagarin@tweag.io>
Co-authored-by: Kiara Grouwstra <kiara@procolix.eu>
Co-committed-by: Kiara Grouwstra <kiara@procolix.eu>
 2025-07-15 08:54:20 +02:00
fricklerhandwerk
ad9c61a3db docs: fix typos 2025-07-10 00:37:27 +02:00
Kiara Grouwstra
8a7984933d reinstate acme settings needed by applications (#434) 
closes #417

Reviewed-on: Fediversity/Fediversity#434
Reviewed-by: Valentin Gagarin <valentin.gagarin@tweag.io>
Co-authored-by: Kiara Grouwstra <kiara@procolix.eu>
Co-committed-by: Kiara Grouwstra <kiara@procolix.eu>
 2025-07-08 10:02:13 +02:00
Kiara Grouwstra
9a25a04bfa specify _class module attributes to explicitly declare module types (#398) 
closes #93.

note that this includes classes:

- `nixos`
- `nixosTest`
- `nixops4Resource`
- `nixops4Deployment`

.. and my (made-up, as per the [docs](https://ryantm.github.io/nixpkgs/module-system/module-system/#module-system-lib-evalModules-param-class)):

- `nix-unit`
- `package`

.. while i did not manage to cover:

- service tests, given `pkgs.nixosTest` seemed to not actually like `_class = "nixosTest"` (?!)

... nor #93's mentioned destructured arguments for that matter, as per Fediversity/Fediversity#93 (comment) - let me know if that is still desired as well.

Reviewed-on: Fediversity/Fediversity#398
Reviewed-by: Valentin Gagarin <valentin.gagarin@tweag.io>
Co-authored-by: Kiara Grouwstra <kiara@procolix.eu>
Co-committed-by: Kiara Grouwstra <kiara@procolix.eu>
 2025-06-23 17:24:54 +02:00
Kiara Grouwstra
611c961dcf separate test declarations from invocations (#396) 
see Fediversity/Fediversity#395 (comment)

Reviewed-on: Fediversity/Fediversity#396
Reviewed-by: Valentin Gagarin <valentin.gagarin@tweag.io>
Co-authored-by: Kiara Grouwstra <kiara@procolix.eu>
Co-committed-by: Kiara Grouwstra <kiara@procolix.eu>
 2025-06-19 18:11:08 +02:00
Valentin Gagarin
1b832c1f5b bypass native flake input for Nixpkgs (#374) 
@Niols the sheer amount of hassle and noise indicates that it may be better to first split out a `flake.nix` just for the tests. And all this clutter doesn't even explain yet *why* we thought it needs to be there.

closes #279.

Co-authored-by: Nicolas “Niols” Jeannerod <nicolas.jeannerod@moduscreate.com>
Reviewed-on: Fediversity/Fediversity#374
Reviewed-by: kiara Grouwstra <kiara@procolix.eu>
Co-authored-by: Valentin Gagarin <valentin.gagarin@tweag.io>
Co-committed-by: Valentin Gagarin <valentin.gagarin@tweag.io>
 2025-06-12 13:05:11 +02:00
Nicolas “Niols” Jeannerod
ee5c2b90b7 Introduce test for deploying all services with nixops4 apply (#329) 
Closes Fediversity/Fediversity#276

This PR adds a CLI deployment test. It builds on top of Fediversity/Fediversity#323. This test features a deployer node and four target nodes. The deployer node runs `nixops4 apply` on a deployment built with our actual code in `deployment/default.nix`, which pushes onto the four target machines combinations of Garage/Mastodon/Peertube/Pixelfed depending on a JSON payload. We check that the expected services are indeed deployed on the machines. Getting there involved reworking the existing basic test to extract common patterns, and adding support for ACME certificates negotiation inside the NixOS test.

What works:
- deployer successfully runs `nixops4 apply` with various payloads
- target machines indeed get the right services pushed onto them and removed
- services on target machines successfully negotiate ACME certificates

What does not work: the services themselves depend a lot on DNS and that is not taken care of at all, so they are probably very broken. Still, this is a good milestone.

Test it yourself by running `nix build .#checks.x86_64-linux.deployment-basic -vL` and `nix build .#checks.x86_64-linux.deployment-cli -vL`. On the very beefy machine that I am using, the basic test runs in ~4 minutes and the CLI test in ~17 minutes. We know from Fediversity/Fediversity#323 that the basic test runs in ~12 minutes on the CI runner, so maybe about an hour for the CLI test?

Co-authored-by: Valentin Gagarin <valentin.gagarin@tweag.io>
Reviewed-on: Fediversity/Fediversity#329
Reviewed-by: kiara Grouwstra <kiara@procolix.eu>
Reviewed-by: Valentin Gagarin <valentin.gagarin@tweag.io>
Co-authored-by: Nicolas “Niols” Jeannerod <nicolas.jeannerod@moduscreate.com>
Co-committed-by: Nicolas “Niols” Jeannerod <nicolas.jeannerod@moduscreate.com>
 2025-05-19 02:18:54 +02:00
Kiara Grouwstra
f4ebf55a15
unify versioning (minus around nixops, for now) 2025-05-01 13:24:45 +02:00
Nicolas “Niols” Jeannerod
086a69ac53
Support injecting initial user in Pixelfed service 2025-02-28 10:56:22 +01:00
Nicolas “Niols” Jeannerod
2ee563f5d9
Fix Pixelfed 2025-02-21 17:52:50 +01:00
Nicolas “Niols” Jeannerod
cd83536e2f
Allow Garage and services to run on different machines 2025-02-21 17:52:50 +01:00
Nicolas “Niols” Jeannerod
1eeaa04df6
Introduce fediversity.garage.enable 2025-02-21 17:52:50 +01:00
Nicolas “Niols” Jeannerod
a5d226ed22
Get rid of fediversity.enable 2025-02-21 17:52:50 +01:00
Nicolas “Niols” Jeannerod
78a85b27ff
Put the S3 secrets into files 
...but not everywhere, there remains some FIXMEs where ultimately the
secrets do get into the store.
 2025-02-21 17:52:50 +01:00
Nicolas “Niols” Jeannerod
8c5bf79ba2
Share options that can be shared 2025-02-21 17:52:50 +01:00
Nicolas “Niols” Jeannerod
b547912794
Make access and secret keys parameters 2025-02-21 17:52:50 +01:00
Nicolas “Niols” Jeannerod
1965e83e5d
Same treatment for Pixelfed 2025-02-21 17:52:50 +01:00
Nicolas “Niols” Jeannerod
a1cfcf1d71
Same treatment for Peertube 2025-02-21 17:52:50 +01:00
Nicolas “Niols” Jeannerod
ca6642c8d4
Same treatment for Mastodon 2025-02-21 17:52:50 +01:00
Nicolas “Niols” Jeannerod
f4babe38a8
Consolidate Garage options 
- `fediversity.internal.garage` -> `fediversity.garage`
- all in the same place
 2025-02-21 17:52:50 +01:00
Nicolas “Niols” Jeannerod
d9188427ed
services.garage -> fediversity.garage 
for the options that are ours; we want to avoid clashes if possible
 2025-02-21 17:52:50 +01:00
Nicolas “Niols” Jeannerod
b68a821b77
Searate Garage config and options 2025-02-21 17:52:50 +01:00
Nicolas “Niols” Jeannerod
ff03d12dc1
Move Garage configuration to own directory 2025-02-21 17:52:49 +01:00
Nicolas “Niols” Jeannerod
237c56791f
Basic services README 2025-02-21 17:52:49 +01:00
Nicolas “Niols” Jeannerod
3a881979f9
Move old services README to a HACKING file 2025-02-21 17:52:49 +01:00
Kiara Grouwstra
647d89798e
replace nixos wiki link with official one 2025-02-18 21:29:08 +01:00
Nicolas “Niols” Jeannerod
1864e20a8c
Add Peertube test 2024-12-17 17:15:11 +01:00
Nicolas “Niols” Jeannerod
f1440bc735
Rename Mastodon test 2024-12-17 17:14:58 +01:00
Nicolas “Niols” Jeannerod
a5875376b8
Fix Peertube service 2024-12-17 17:14:27 +01:00
Nicolas “Niols” Jeannerod
51c3ec754f
Rename the test simply “mastodon” 2024-11-27 12:39:26 +01:00
Nicolas “Niols” Jeannerod
7c88d47fb8
Notes and cleanup 2024-11-27 12:39:26 +01:00
Nicolas “Niols” Jeannerod
f4f1ecdf71
Rework and cleanup the Mastodon test 2024-11-27 12:39:26 +01:00
Nicolas “Niols” Jeannerod
5699ca8ba6
Note on more nginx proxy options for Garage 2024-11-27 12:39:26 +01:00
Nicolas “Niols” Jeannerod
37aac118ce
Remove useless S3_HOSTNAME envionment variable 
`S3_HOSTNAME` is only usedful for path-style buckets where Mastodon will
use `<S3_HOSTNAME>/<S3_BUCKET>`. However, we use domain-style, and that
is exactly what `S3_ALIAS_HOST` is for
 2024-11-27 12:39:26 +01:00
Nicolas “Niols” Jeannerod
6ef263f53e
Fix typo 2024-11-27 12:39:26 +01:00
Nicolas “Niols” Jeannerod
6e260b3bdc
Consolidate virtualisation options 2024-11-27 12:39:26 +01:00