1
0
Fork 0
mirror of https://github.com/zhaofengli/attic.git synced 2024-12-14 11:57:30 +00:00
Commit graph

362 commits

Author SHA1 Message Date
Zhaofeng Li
9c5e603e4b nixos: Allow settings to be omitted with null
This allows for suppressing the default database.url setting
in the NixOS module.

In the future, we need to rethink about the precedence of
configuration sources. It makes sense for the environment
variables to take precedence over configuration files.
2024-11-21 13:29:00 -07:00
Zhaofeng Li
79b0ad0553 server/config: Allow omitting database section entirely 2024-11-21 13:29:00 -07:00
Zhaofeng Li
4775242756
Merge pull request #202 from zhaofengli/nixos-remove-same-dir
nixos: Remove --same-dir in systemd-run invocation
2024-11-10 13:29:24 -07:00
Zhaofeng Li
edbe66288e nixos: Remove --same-dir in systemd-run invocation
`--working-directory /` was added in #26 but we forgot to remove
`--same-dir`.

Fixes #201.
2024-11-10 12:10:24 -07:00
Zhaofeng Li
75d4dd962d
Merge pull request #198 from zhaofengli/renovate/notify-7.x
fix(deps): update rust crate notify to v7
2024-11-10 07:47:35 -07:00
Zhaofeng Li
566494780a
Merge pull request #196 from zhaofengli/renovate/determinatesystems-nix-installer-action-15.x
chore(deps): update determinatesystems/nix-installer-action action to v15
2024-11-10 07:47:11 -07:00
renovate[bot]
7ee3fcdd41
fix(deps): update rust crate notify to v7 2024-11-10 01:45:59 +00:00
renovate[bot]
82bf5d645a
chore(deps): update determinatesystems/nix-installer-action action to v15 2024-11-09 23:04:03 +00:00
Zhaofeng Li
a02bf38a75
Merge pull request #194 from zhaofengli/renovate/configure
chore: Configure Renovate
2024-11-09 15:59:32 -07:00
Zhaofeng Li
cc136a24e4 renovate.json: Group non-major updates together 2024-11-09 15:07:11 -07:00
Zhaofeng Li
7f02603740 renovate.json: Enable Nix & lock file maintenance 2024-11-09 15:07:11 -07:00
renovate[bot]
e8b7bc035e
Add renovate.json 2024-11-09 01:03:23 +00:00
Zhaofeng Li
d0b66cf897
Merge pull request #191 from zhaofengli/fix-static
flake/packages: Update patch for static builds
2024-11-06 08:20:42 -07:00
Zhaofeng Li
48c8b395bf
Merge pull request #186 from zhaofengli/nixos-hardening
nixos: Apply changes from nixpkgs module
2024-10-29 21:01:35 -06:00
Zhaofeng Li
2f9d76915a flake/packages: Update patch for static builds 2024-10-29 12:26:08 -06:00
Adam Stephens
ba5ba2d6bc nixos/atticd: wants network-online.target
fixes:

trace: evaluation warning: atticd.service is ordered after 'network-online.target' but doesn't depend on it
2024-10-29 12:25:04 -06:00
Zhaofeng Li
6a82638aa8 nixos: Adjust Nix store warning for environmentFile 2024-10-29 12:23:15 -06:00
Zhaofeng Li
94fa54632d nixos: Use lib.getExe
Co-authored-by: Adam Stephens <adam@valkor.net>
2024-10-29 12:23:15 -06:00
Zhaofeng Li
78a3119c6d nixos: Depend on network-online.target for Postgres
Co-authored-by: Adam Stephens <adam@valkor.net>
2024-10-29 12:23:15 -06:00
Zhaofeng Li
9acfdccfdf nixos: Add service hardening
Co-authored-by: Adam Stephens <adam@valkor.net>
2024-10-29 12:23:15 -06:00
Zhaofeng Li
ebd0618526 nixos: Rename credentialsFile option to environmentFile
Co-authored-by: Adam Stephens <adam@valkor.net>
2024-10-29 12:23:15 -06:00
Zhaofeng Li
7ffcf2d138 nixos: Match nixpkgs formatting
Co-authored-by: Adam Stephens <adam@valkor.net>
2024-10-29 12:23:15 -06:00
Zhaofeng Li
b3a76bc237 package: Add mainProgram 2024-10-29 12:23:15 -06:00
Zhaofeng Li
b322faab01
Merge pull request #192 from valan/patch-1
Add brief description of how to disable use of a cache
2024-10-29 12:20:51 -06:00
Zhaofeng Li
0fe1b1cd34
Merge pull request #190 from zhaofengli/gha-integration-tests
Move integration tests to GitHub Actions
2024-10-28 12:29:30 -06:00
valan
c1d6abeb28
Update README.md
Brief description of how to disable use of a cache
2024-10-26 15:51:38 -07:00
Zhaofeng Li
b109cc369d .github/build: Build packages in Nix matrix
Currently only integration tests.
2024-10-26 12:49:18 -06:00
Zhaofeng Li
0acbde64ef .github/build: Add job to build main packages 2024-10-26 12:49:18 -06:00
Zhaofeng Li
d20160548e flake/integration-tests: Expose GitHub Actions matrix
Currently only integration tests.
2024-10-26 12:49:18 -06:00
Zhaofeng Li
e305e7ef79 .github: Fix CI cache push condition
$ATTIC_TOKEN is not available after setup.
2024-10-26 12:49:18 -06:00
Zhaofeng Li
2b05b7d986
Merge pull request #187 from cole-h/stream-error-better
Display anyhow error chains better
2024-10-16 16:09:56 -06:00
Cole Helbling
566ef5ebc3 Display anyhow error chains better
The default Display / `{}` formatter only shows the outermost error. We
have to use `{:#}` to show all the errors in the chain. This will make
stream errors somewhat more informational.

Before:

    Stream error: Storage error: service error

After:

    Stream error e=Storage error: service error: NoSuchKey: The specified key does not exist.: NoSuchKey: The specified key does not exist.

(after I manually mucked with the DB to change the S3 url for an item to
a non-existent name)
2024-10-15 13:33:36 -07:00
Zhaofeng Li
e5c8d2d509
Merge pull request #185 from zhaofengli/nixos-use-hs256-placeholder-secret
nixos: Switch back to setting a placeholder HS256 secret
2024-10-10 10:22:51 -06:00
Zhaofeng Li
f36329a299 nixos: Switch back to setting a placeholder HS256 secret when checking config 2024-10-08 08:31:44 -06:00
Zhaofeng Li
1b29816235
Merge pull request #182 from zhaofengli/push-stdin-fixes
client/push: Misc fixes
2024-10-06 13:03:10 -06:00
Zhaofeng Li
880ca6d477
Merge pull request #181 from zhaofengli/hs256-allow-arbitrary-byte-string
token: Don't require valid UTF-8 for HS256 secrets
2024-10-06 12:29:24 -06:00
Zhaofeng Li
96383ccab4 integration-tests/basic: Add --stdin test 2024-10-06 12:29:03 -06:00
Zhaofeng Li
c54c26d82e client/push: Disallow paths on the command line with --stdin 2024-10-06 12:29:03 -06:00
Zhaofeng Li
014fb92a9e client/push: Suggest --stdin if stdin isn't a terminal 2024-10-06 12:29:03 -06:00
Zhaofeng Li
8f215042db client/push: Ignore empty lines 2024-10-06 12:29:03 -06:00
Zhaofeng Li
3d10425b6a server/config: Fail fast on token decoding errors 2024-10-06 11:19:03 -06:00
Zhaofeng Li
dcadbec66b token: Don't require valid UTF-8 for HS256 secrets 2024-10-06 11:19:03 -06:00
Zhaofeng Li
b4338a1670
Merge pull request #179 from zhaofengli/config-allow-omitting-jwt
server/config: Allow omitting jwt section entirely
2024-10-05 18:14:40 -06:00
Zhaofeng Li
77f76d55ed server/config: Allow omitting jwt section entirely 2024-10-05 17:42:16 -06:00
Zhaofeng Li
858120c450
Merge pull request #177 from zhaofengli/rs256-support
Support RS256 JWTs
2024-10-05 12:34:44 -06:00
Zhaofeng Li
d2363b5879 server/config: Provide instructions for the user to migrate their HS256 config 2024-10-05 11:50:48 -06:00
Zhaofeng Li
0d2b20025e token: Bring back HS256 test
This does make it decode the keys every iteration in the stability
test, which isn't too much of an issue and can be fixed later.
2024-10-05 11:50:48 -06:00
Zhaofeng Li
5d6560e409 Merge branch 'main' into HEAD 2024-10-05 11:50:16 -06:00
Zhaofeng Li
61ebdef2e2
Merge pull request #176 from jzbor/push-from-stdin
attic-client/push: Add flag to read paths from stdin
2024-10-04 13:36:12 -06:00
Zhaofeng Li
c5764fca3b client/push: Use PushSession for --stdin
Instead of eagerly consuming stdin, read line-by-line and feed into
PushSession. This allows for a `nix-build | attic push` workflow.
2024-10-04 13:18:15 -06:00