summaryrefslogtreecommitdiff
path: root/deployment
AgeCommit message (Collapse)Author
3 daysRevert "[0] akashi: use the staging branch of Deployment channel"Marek Paśnikowski
This reverts commit 82a3d8b78629c66ebe2c0ace462d32532ac30e9f.
3 days[2] akashi: enable fan_control in thinkpad_acpiMarek Paśnikowski
Akashi system needs to have fan control enabled and customized. By default, the firmware fails to adequately cool the computer which results in thermal throttling. --- The goal is to have the laptop fan run at high speed at all times, regardless of CPU temperature. --- [x] Enable fan control in thinkpad_acpi module. [x] Set fan speed to level 5. --- This commit adds an appropriate entry to the kernel command line to set the fan speed level. --- Akashi system will now adequately cool itself in most circumstances.
10 days[1] akashi: enable fan_control in thinkpad_acpiMarek Paśnikowski
Akashi system needs to have fan control enabled and customized. By default, the firmware fails to adequately cool the computer which results in thermal throttling. ----- The goal is to have the laptop fan run at high speed at all times, regardless of CPU temeperature. ----- [X] Enable fan control in thinkpad_acpi module. [ ] Set fan speed to level 5. ----- This commit adds an appropriate entry to the kernel command line to enable fan control. The goal of the series is now to set level 5 fan speed, as it is more pleasing to the ear. ----- Akashi system will now allow fan control without havind to reload thinkpad_acpi module.
11 days[0] akashi: use the staging branch of Deployment channelMarek Paśnikowski
Akashi system needs to have fan control enabled and customized. By default, the firmware fails to adequately cool the computer which results in thermal throttling. ----- The goal is to have the laptop fan run at full throttle at all times, regardless of CPU temeperature. ----- [ ] Enable fan control in thinkpad_acpi module. [ ] Set fan speed to full throttle. ----- This commit configures a custom guix configuration for Akashi system in order to set up a testing loop with a staging branch. Additional modules need to be imported in order to facilitate this change. ----- Akashi system will now pull the staging branch of Deployment channel during updates.
2025-07-08mcdowell: switch default-guix-channelMarek Paśnikowski
The (sovereign channels) defines a new, simpler guix channel.
2025-07-08mcdowell: use staging branches of sovereign and deployment channelsMarek Paśnikowski
2025-07-07systems: standardise label creationMarek Paśnikowski
All operating-system records are configured to prepend default labels with respective host names. ----- Some minor adaptations had to performed.
2025-06-30aisaka: point the test subdomain to the schron subdomainMarek Paśnikowski
The purpose of the test subdomain is to try out changes in nginx configuration. As such, directories should not be created for the sake of the test subdomain. Instead, the test subdomain should point to a subdomain currently needing testing.
2025-06-29aisaka: correct target of the schron subdomainMarek Paśnikowski
2025-06-27aisaka: apply the new client certificate to schroncaMarek Paśnikowski
2025-06-27aisaka: test a new client certificateMarek Paśnikowski
2025-06-27systems/aisaka: install opensslMarek Paśnikowski
The root user need access to openssl command in order to manipulate ca secrets.
2025-06-26aisaka: improve layout of systemMarek Paśnikowski
No functional changes are introduced. This is purely visual improvement.
2025-06-20aisaka: ultimately fix the efi-directory targetMarek Paśnikowski
2025-06-20aisaka: use the standard home-environment-service of uid1000Marek Paśnikowski
The current system configuration of aisaka uses an old custom home environment from before a unified one was developed. As it is no longer useful, the (home-services) procedure definition is removed from the module.
2025-06-18aisaka: fix grub-efi targetMarek Paśnikowski
2025-06-18systems: fix mount points for efi partitionMarek Paśnikowski
2025-06-18systems: stop importing dead modulesMarek Paśnikowski
2025-06-17systems: update sudoers-file to use the definition in sovereign repositoryMarek Paśnikowski
2025-06-16systems: fix the EFI partition mount pointMarek Paśnikowski
2025-06-14ayase: remove unused import of module (suweren services)Marek Paśnikowski
2025-06-07ayase: use the name/home-environment variable for home servicesMarek Paśnikowski
2025-06-07ayase: trim services listMarek Paśnikowski
2025-06-02aisaka: point the schron subdomain to the test directoryMarek Paśnikowski
2025-06-02aisaka: certify the schron subdomainMarek Paśnikowski
2025-06-01aisaka: update dns serial numberMarek Paśnikowski
2025-06-01aisaka: set up the schron subdomainMarek Paśnikowski
2025-05-29aisaka: use a Let’s Encrypt certificate for the test subdomainMarek Paśnikowski
The prototype of the client certificate authentication is suboptimal. The use of a private certificate authority for server authentication causes unnecessary security warnings when loading the subdomain with an unauthenticated browser. Any browser in its default configuration has no right to understand the private certificate authority used for the client and server certificates. It is possible to mix Let’s Encrypt certificates with a private certificate authority to implement the authentication. None of the previously found client authentication guides mentioned that server authentication can use an authority chain different to client authentication. This change takes advantage of this separation of concerns by using a Let’s Encrypt certificate for the test subdomain server, while keeping the private certificate for client authentication.
2025-05-17aisaka: expose nonguix repositoryMarek Paśnikowski
2025-05-13aisaka: limit the publicly visible repositories to only Guix channelsMarek Paśnikowski
2025-05-12Revert "aisaka: uninstall cgit and simplify gitolite"Marek Paśnikowski
This reverts commit ba64ebfe587f05c734f24ace507d22629d350cd8.
2025-05-12aisaka: redefine operating-system*Marek Paśnikowski
2025-05-12aisaka: fix gitolite-service-type importMarek Paśnikowski
2025-05-12aisaka: uninstall cgit and simplify gitoliteMarek Paśnikowski
2025-05-11aisaka: iterate client authenticationMarek Paśnikowski
2025-05-11aisaka: add proxy_set_headers for test.marekpasnikowski.plMarek Paśnikowski
2025-05-11aisaka: configure NGINX client authentication according to DataCadamiaMarek Paśnikowski
2025-05-03aisaka: configure client certificate check on test subdomainMarek Paśnikowski
2025-05-03mcdowell: install openssh serviceMarek Paśnikowski
2025-03-15systems: use the nonguix definition of initrdMarek Paśnikowski
The indirect bindings force the Sovereign channel to unnecessarily depend on Nonguix.
2025-03-15systems: use the nonguix definition of kernel directlyMarek Paśnikowski
The indirect bindings force the Sovereign channel to unnecessarily depend on Nonguix.
2025-03-14import systems to deployment channelMarek Paśnikowski