This is my latest version of this, updated to work with the
packages in NixOS 21.05.

Update nixpkgs.

See merge request !249

Update whetstone hostname to private.storage.

See merge request !250

Note that changing the origin repository in the on-node deployment checkout
is also required.

See https://whetstone.private.storage/privatestorage/privatestorageops/-/merge_requests/197#note_19071

Reorder issuer domains

See merge request !211

So perhaps it is impossible for anyone to approach the payment server from
these other domains now.

Mostly though I want to force CI to run because whetstone is not currently
showing the pipeline status for this MR...

Florian Sesser authored 3 years ago and Jean-Paul Calderone committed 3 years ago

... just because I like to be consistent.

Florian Sesser authored 3 years ago and Jean-Paul Calderone committed 3 years ago

... to make private.storage the default above privatestorage.io.
Before this the privatestorage.io could be seen in the TLS cert.

Add Tom's comments to the docs

See merge request !248

Speed up evaluation of grids by evaluating custom packages once.

See merge request !246

Source: https://whetstone.privatestorage.io/privatestorage/PrivateStorageio/-/merge_requests/237#note_18712

Grafana: Allow access to /metrics only to monitoring network and localhost

Closes privatestorageops#408

See merge request !242

Thanks to @jcalderone for the suggestion!

Update nixpkgs 2022-01-17

See merge request !247

The current code evaluates our custom packages once for each node, which adds
signifcant amount of time to evaluate a grid. We can reduce this, by adding the
custom package set as an attribute to the nixpkgs set we pass to morph.

This doesn't change how we refer to those packages, as we continue to expose the
custom package set as a module attribute.

These are the times to evaluate all three grids (on a partially loaded system),
when there was nothing new to build:

```
before:
real	2m27.837s
user	3m35.528s
sys	0m3.722s

after:
real	1m12.748s
user	1m34.047s
sys	0m3.346s
```

Change yet another IP from 67 to 56 subnet

See merge request !243

Bump to PaymentServer 2022-01-17

See merge request !244

Bump to ZKAPAuthorizer 2022-01-17

See merge request !245

For some reason this had eluded my earlier grepping.

Fixes privatestorageops#408

Fix Grafana start on local dev after upgrade to NixOS 21.11

See merge request !241

Grafana 8 on NixOS 21.11 fails harder than 7.x on 21.05 when its
`grafana-admin.password` file is missing.  Provide it regardless
whether Google auth is configured or not.

Minor factoring improvements to the tests

Closes #104

See merge request !239

Fix up local dev VM grid IPs to be in line with MR !232

See merge request !240

Update nixos to 21.11

See merge request !222

This also update ZKAPAuthorizer to a python3 using version.

This is disallowed in nixos 21.11 as it is a potential security issue.