Jake Howard
43ad69e118
Ensure CNAME values are absolute
2024-09-22 15:27:05 +01:00
Jake Howard
d554dabdc5
Use personal access token for traefik
2024-09-15 14:21:20 +01:00
Jake Howard
acfd2af7eb
Use Gandi as cert provider for traefik
2024-09-14 22:06:42 +01:00
Jake Howard
f1ba63818b
Migrate jakehoward.tech to Gandi
2024-09-14 22:00:24 +01:00
Jake Howard
07c53709c9
Migrate theorangeone.net to Gandi
2024-09-14 21:24:12 +01:00
Jake Howard
b125d8422b
Add Fastmail records for jakehoward.tech
2024-09-05 21:23:53 +01:00
Jake Howard
5d06ed1e5e
Add livedns resources
2024-09-01 22:27:24 +01:00
Jake Howard
aaf049a9c3
Set private ip for walker for docker proxy
2024-09-01 21:35:03 +01:00
Jake Howard
09c195afb0
Sync before downloading secrets
2024-09-01 20:53:31 +01:00
Jake Howard
01c236e4e9
Remove Nebula
...
I'm basically all in on Tailscale now
2024-09-01 20:21:29 +01:00
Jake Howard
ceaf419c04
Move matrix to public domain
2024-09-01 16:45:40 +01:00
Jake Howard
cb1faf0f59
Use personal-access token for Gandi
2024-09-01 15:49:16 +01:00
Jake Howard
a0710b003d
Update forgejo app name
2024-08-25 17:26:46 +01:00
Jake Howard
47efe411da
Disable headscale OIDC
...
For now, I'm fine using the terminal. Might bring this back later, hence only commented out.
2024-08-25 16:48:21 +01:00
Jake Howard
d0d61053ea
Remove commento configuration
2024-08-25 16:48:21 +01:00
Jake Howard
ca1d7015a7
Migrate from gitea to forgejo
...
It's not just the colour scheme, honest!
Some things still need renaming, but at least the application has moved.
2024-08-25 16:48:21 +01:00
Jake Howard
42c15b58d8
Remove link to private repo
2024-08-11 20:28:48 +01:00
Jake Howard
905f327ec5
Update Nextcloud to 29.0.4
2024-07-30 19:53:17 +01:00
Jake Howard
3a29c327b7
Remove version key from compose files
2024-07-15 18:08:14 +01:00
Jake Howard
3d281fffc2
Use modern versions of docker-compose on Debian
...
Install the plugin and use switch, rather than downloading an arbitrary binary. This way, it keeps getting updated.
2024-07-14 23:16:36 +01:00
Jake Howard
393a947cb7
Remove f2b gateway bouncer
...
To be replaced by something more sensible
2024-07-14 22:27:58 +01:00
Jake Howard
43051235bd
Add command to get ansible facts
2024-07-14 21:25:10 +01:00
Jake Howard
6d3180a332
Ensure coredns proxy restarts on boot
2024-07-10 20:16:45 +01:00
Jake Howard
545959d19c
Update nextcloud version in config
2024-07-07 16:11:11 +01:00
Jake Howard
7b5cdfafc7
Reduce sidekiq concurrency
2024-07-07 16:06:14 +01:00
Jake Howard
fdb927cce7
Use default number of threads for mastodon
2024-07-07 16:03:25 +01:00
Jake Howard
34011ea0a0
Remove trusted proxy IP from mastodon
...
It doesn't like it, and it's probably wrong anyway
2024-07-07 16:01:07 +01:00
Jake Howard
f717c1be78
Decommission dokku
...
I don't use it, still. I have a better plan for doing this in future anyway...
2024-07-07 15:56:29 +01:00
Jake Howard
608c57a421
Disable body size checks for slides
2024-07-01 20:09:53 +01:00
Jake Howard
b75e5c00c5
Pin comentario
2024-06-26 18:18:28 +01:00
Jake Howard
483833a678
Remove Plausible domain hack
2024-06-25 08:36:55 +01:00
Jake Howard
6dd4e57591
Update Plausible to 2.1
2024-06-24 19:54:40 +01:00
Jake Howard
659cccd15a
Configure secrets for comentario
2024-06-23 18:31:07 +01:00
Jake Howard
81782c5157
Deploy comentario
2024-06-22 21:20:54 +01:00
Jake Howard
a20ceab810
Remove remark42
...
Replacing with comentario
2024-06-22 18:22:31 +01:00
Jake Howard
6c2b96e151
Update nextcloud version in config.php
2024-06-17 09:35:51 +01:00
Jake Howard
c1b8c5fcc7
Change default gitea theme
2024-05-28 12:14:50 +01:00
Jake Howard
f027858cbe
Remove Vultr provider
2024-05-12 16:15:44 +01:00
Jake Howard
bbfe0e802c
Remove Walker VPS in Vultr
2024-05-12 16:14:29 +01:00
Jake Howard
253f2678fa
Update nextcloud to v29
2024-05-09 18:08:04 +01:00
Jake Howard
23aa6dcfcb
Pin synapse to latest
...
YOLO!
2024-05-09 17:46:18 +01:00
Jake Howard
e50a8b032b
Increase website workers
2024-05-05 21:13:00 +01:00
Jake Howard
9fee5c01ef
Create new walker on Hetzner
2024-05-04 13:20:15 +01:00
Jake Howard
ac36a6b323
Ensure nginx is in place before certbot tries to issue certs
2024-05-04 12:52:33 +01:00
Jake Howard
f90ae0b1b4
Use port 53053 for coredns docker proxy
...
Otherwise it causes annoying issues with systemd-resolved and mdns
2024-05-04 12:19:00 +01:00
Jake Howard
c93c7b5c16
Use external DNS for uptime-kuma
...
Keep the AGH logs cleaner
2024-04-29 18:42:17 +01:00
Jake Howard
2a799d6b03
Scrape Uptime Kuma with prometheus
2024-04-29 14:28:58 +01:00
Jake Howard
afa926c767
Remove blackbox monitoring
...
Uptime-Kuma is great
2024-04-29 14:12:21 +01:00
Jake Howard
5481554e15
Only install compose on debian
...
The rest will get it through the system package manager
2024-04-27 17:42:24 +01:00
Jake Howard
e2a94b6302
Install hetzner provider
2024-04-27 16:54:32 +01:00
Jake Howard
670ad78d44
Add wireguard config for glinet router
2024-04-23 22:19:57 +01:00
Jake Howard
8929a22ce5
Use LSIO docker socket proxy
2024-04-23 19:52:48 +01:00
Jake Howard
ee96e6ab08
Rename forrest role to prometheus
...
Makes organising much simpler
2024-04-21 19:47:02 +01:00
Jake Howard
ffbba254fb
Remove redundant quotes
2024-04-21 18:11:57 +01:00
Jake Howard
c472411801
Deploy uptime-kuma
2024-04-21 18:11:39 +01:00
Jake Howard
7564911da3
Add IPv6 to blackbox
...
This is needed to monitor private services
2024-04-20 18:12:38 +01:00
Jake Howard
7ff44ee238
Add IPv6 to proxmox internal network
2024-04-20 18:00:08 +01:00
Jake Howard
7c8d224c4a
Add headscale ACLs
...
Tags are managed entirely server side, so there's no priv esc issues.
This lets my devices do what they want, and server style devices can't do anything.
2024-04-20 15:46:21 +01:00
Jake Howard
33f9c544fd
Remove /tt-rss/ path from URL
2024-04-15 17:33:36 +01:00
Jake Howard
b6583cc823
Update Nextcloud version in config
2024-04-15 15:28:16 +01:00
Jake Howard
9c02017fed
Unpin tandoor
2024-04-15 15:28:16 +01:00
Jake Howard
8424b3211b
Allow ingress to serve as tailscale exit node
2024-03-28 23:30:24 +00:00
Jake Howard
b83e239123
Rename private domain
2024-03-23 12:55:54 +00:00
Jake Howard
5157940f20
Stop exposing homeassistant
2024-03-23 11:54:26 +00:00
Jake Howard
eb6fe3a23b
Allow forrest to access internal services
...
This is mostly for monitoring
2024-03-22 18:13:25 +00:00
Jake Howard
b2656bdf43
Make vaultwarden VPN only
...
The first service to go dark...
2024-03-21 23:20:27 +00:00
Jake Howard
124b83526d
Fix spacing
2024-03-20 17:59:32 +00:00
Jake Howard
0295507d0b
Increase frequency of snapshots
2024-03-19 21:31:27 +00:00
Jake Howard
f88d224168
Allow only exposing services over Tailscale
...
This works using public DNS, so doesn't need Tailscale's magic DNS to override my local.
2024-03-07 22:30:10 +00:00
Jake Howard
451a114262
Add IPv6 support for internal DNS overrides
...
CoreDNS 1.11.2 finally shipped!
2024-03-07 20:02:39 +00:00
Jake Howard
119b3212a9
Remove robots.txt for gitea
2024-03-04 08:38:16 +00:00
Jake Howard
82451784a8
Deploy slides hosting
2024-03-03 21:39:22 +00:00
Jake Howard
000f3d3348
Add HSTS to all nginx requests
2024-03-03 21:37:07 +00:00
Jake Howard
0dcc3f7c30
Use regular version of nginx on Arch
...
`nginx-mainline` requires modules be recompiled each time, and isn't handled automatically. It's still a very new and maintained release.
2024-02-29 19:46:32 +00:00
Jake Howard
8a1e21c79d
Ensure headscale sees the correct IP
2024-02-29 17:41:29 +00:00
Jake Howard
998d798797
Set maintenance window for nextcloud
2024-02-21 21:57:03 +00:00
Jake Howard
11a93dac55
Update nextcloud version in config
2024-02-21 21:52:58 +00:00
Jake Howard
808e72553b
Add the basics of some edge caching
2024-02-21 21:42:16 +00:00
Jake Howard
58c48261e7
Consolidate vikunja container
2024-02-12 14:12:17 +00:00
Jake Howard
91a247868b
Add routes from forrest to tailscale network
2024-02-07 22:12:08 +00:00
Jake Howard
df43be6f9b
Set private_ip for some other machines
2024-02-07 19:27:48 +00:00
Jake Howard
b6eca40ae0
Allow tailscale IP in more places
2024-02-07 18:21:16 +00:00
Jake Howard
02847355a7
Install tailscale
...
Install, not configure
2024-02-01 19:41:47 +00:00
Jake Howard
29cac09b48
Remove explicit port for headscale
2024-02-01 18:32:53 +00:00
Jake Howard
dba0262801
Remove website tmpfs
...
The server's disk is probably fast enough, and container restarts will nuke that storage anyway
2024-02-01 18:15:51 +00:00
Jake Howard
0c6528f9ca
Restrict access to headscale OIDC and API
2024-01-31 21:40:43 +00:00
Jake Howard
dfa8328e7b
Move gateway logs to separate file
2024-01-31 21:06:19 +00:00
Jake Howard
53c758a781
Monitor headscale with prometheus
2024-01-27 17:40:02 +00:00
Jake Howard
b51677b795
Back up headscale config
2024-01-27 15:04:53 +00:00
Jake Howard
2ceeaf091d
Deploy headscale
2024-01-27 14:18:37 +00:00
Jake Howard
06784563a7
Don't resolve ipv6
...
Something about this setup doesn't like it, so I'll disable v6 for now
2024-01-26 21:43:04 +00:00
Jake Howard
88f0828153
Use primary Quad9 servers
...
DNSSEC and malware blocking is probably useful, just in case
2024-01-21 23:19:49 +00:00
Jake Howard
cfc3de61b4
Add fallback quad9 address
...
This aids availability, along with a healthcheck
2024-01-21 23:05:25 +00:00
Jake Howard
c6bae0f797
Do simple endsWith matching for docker view
...
This saves the need for a regex
2024-01-14 22:27:02 +00:00
Jake Howard
4c5936b2aa
Disable Grafana analytics
2024-01-14 15:30:12 +00:00
Jake Howard
9d685d85aa
Update website deployment to unify containers
2024-01-14 14:22:19 +00:00
Jake Howard
ac166c3874
Start resolved to support mDNS
2024-01-10 13:28:45 +00:00
Jake Howard
06b9197c5b
Sync terraform state to restic
...
This allows it to be backed up easily
2024-01-09 19:56:06 +00:00
Jake Howard
4a69df1d6c
Ignore ansible-lint for nebula install block
...
I'm smarter than it is
2024-01-08 21:49:38 +00:00
Jake Howard
f33d19e156
Move AdGuardHome configuration to Terraform
...
https://git.theorangeone.net/systems/adguardhome
2024-01-08 21:45:28 +00:00
Jake Howard