- Rust 73.9%
- Nix 26.1%
| Filename | Latest commit message | Latest commit date |
|---|---|---|
Ryan Li
bb6122e662
GRANT CREATE ON DATABASE is issued unconditionally so the explicit ACL entry exists; ownership-based implicit CREATE is not inherited through role membership in PostgreSQL, so without this the system user cannot run CREATE SCHEMA outside public. Fix inspired as CMUGPT needs CREATE SCHEMA perms Reviewed-on: #27 |
||
| .forgejo | ||
| crates | ||
| nix | ||
| sites/docs | ||
| .gitattributes | ||
| .gitignore | ||
| Cargo.lock | ||
| Cargo.toml | ||
| devenv.lock | ||
| devenv.nix | ||
| devenv.yaml | ||
| flake.lock | ||
| flake.nix | ||
| LICENSE | ||
| osv-scanner.toml | ||
| README.md | ||
| secretspec.toml | ||
kennel
Kennel is the deployment platform for ScottyLabs. On every push it builds the project with Nix, runs its services as systemd units and static sites through Caddy, provisions per-deployment resources, resolves secrets from OpenBao, manages DNS through Cloudflare, and serves it over HTTPS.
Every branch and open pull request gets its own deployment at {project}-{branch}.scottylabs.net, redeployed on every push and torn down when the branch or PR closes.
A project's devenv.nix, built on the shared ScottyLabs devenv modules in this repo (nix/modules), defines its local development environment, its CI, and its production deployment. The daemon and the modules are versioned together.
Internally, kennel is a single daemon that takes git webhooks, builds, deploys, and reconciles running state against declared intent. It keeps intent and build history in SQLite and leaves runtime state to systemd, Caddy, and Nix.
Kennel can also publish the hosts of its live deployments to a file. ricochet, a stateless OAuth2 callback relay, reads that file as its allowlist, so ephemeral previews can complete logins that identity providers won't issue wildcard redirect URIs for.
Layout
crates/kennel: the daemoncrates/kennel-config: shared types and the devenv config contractcrates/kennel-provision: resource provisioning (PostgreSQL, Valkey, Garage)crates/entity,crates/migration: SQLite schema and SeaORM entitiesnix/modules: the shared devenv modules projects build onnix/lib: Nix build helpers (mkLib)nix/nixos.nix: NixOS module to run the daemon on a hostsites/docs: documentation (mdBook)
Adding modules, checks, or build helpers is documented in nix/README.md.
License
Licensed under the GNU Affero General Public License v3.0.