Tips-Of-Mine/infrastructure
3
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
1,208 Commits 15 Branches 0 Tags
051b5b0e19147497f09645052b3599f9e2aee1ae
Commit Graph
100 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Jake Howard 051b5b0e19 Add ICMP checks 2023-01-31 14:29:27 +00:00
Jake Howard ddc91059b5 Replace telegraf with prometheus exporters 
Still missing SMART and ping, but those can come later.

Swapped as the polling model for prometheus doesn't play especially well with telegraf, and leads to gaps in data
 2023-01-31 09:11:09 +00:00
Jake Howard 0322291557 Use better DNS servers from quad9 
Mostly using more
 2023-01-30 20:15:44 +00:00
Jake Howard 5017b3ad78 Add mastodon cleanup script 2023-01-29 19:46:47 +00:00
Jake Howard f063b09540 Enable gitea federation 2023-01-29 17:45:39 +00:00
Jake Howard 360a250b4a Merge branch 'renovate/ghcr.io-goauthentik-server-2023.x' into 'master' 
Update ghcr.io/goauthentik/server Docker tag to v2023.1.2

See merge request sys/infrastructure!100
 2023-01-28 22:03:15 +00:00
Jake Howard c0b179c312 Merge branch 'renovate/gitea-gitea-1.x' into 'master' 
Update gitea/gitea Docker tag to v1.18.3

See merge request sys/infrastructure!102
 2023-01-28 22:02:58 +00:00
Jake Howard 4fd3945c47 Add robots.txt for gitea 2023-01-28 15:32:34 +00:00
Jake Howard 52d543d758 Mark vault files as generated 
They kinda are, and kinda aren't.
 2023-01-27 17:33:04 +00:00
Jake Howard a443d56a1c Add a gitea deployment 
Yep, it's that time of year _again_
 2023-01-27 17:28:45 +00:00
Jake Howard 120b7d97c4 Explicitly allow cross-domain DMARC reports 2023-01-26 12:11:01 +00:00
Jake Howard d08268baba Remove pct tag from DMARC 
This is the default
 2023-01-26 12:02:12 +00:00
Jake Howard 5e9c5f7683 Version pihole settings 2023-01-24 20:15:21 +00:00
Jake Howard 7edf6899f3 Update nextcloud to 25.0.3 2023-01-19 22:43:09 +00:00
Jake Howard 37af66e944 Merge branch 'renovate/matrixdotorg-synapse-1.x' into 'master' 
Update matrixdotorg/synapse Docker tag to v1.75.0

See merge request sys/infrastructure!98
 2023-01-19 22:28:59 +00:00
Jake Howard ec22c45c54 Merge branch 'renovate/ghcr.io-goauthentik-server-2023.x' into 'master' 
Update ghcr.io/goauthentik/server Docker tag to v2023

See merge request sys/infrastructure!99
 2023-01-19 22:24:20 +00:00
Jake Howard d7ae77247b Setup NTP on tang 2023-01-16 09:11:15 +00:00
Jake Howard ad50176ee9 Add internal alias to pihole 2023-01-08 18:36:03 +00:00
Jake Howard 5753cd2cf1 Provision my pi with ansible now 
It's insanely slow, but works
 2023-01-08 17:59:22 +00:00
Jake Howard e8ac8b304e Merge branch 'renovate/matrixdotorg-synapse-1.x' into 'master' 
Update matrixdotorg/synapse Docker tag to v1.74.0

See merge request sys/infrastructure!94
 2023-01-06 09:00:01 +00:00
Jake Howard 413422cc87 Merge branch 'renovate/ghcr.io-goauthentik-server-2022.x' into 'master' 
Update ghcr.io/goauthentik/server Docker tag to v2022.12.2

See merge request sys/infrastructure!95
 2023-01-06 08:59:17 +00:00
Jake Howard cf04738eed Merge branch 'renovate/vaultwarden-server-1.x' into 'master' 
Update vaultwarden/server Docker tag to v1.27.0

See merge request sys/infrastructure!96
 2023-01-03 08:39:31 +00:00
Jake Howard 6d5570b0f2 Update YOURLS' mariadb to 10.10 2022-12-13 09:14:06 +00:00
Jake Howard b6705788e6 Update nextcloud's mariadb to 10.6 
This is the latest it supports
 2022-12-13 09:14:06 +00:00
Jake Howard 167b8bd140 Keep GitLab backups for 2 weeks 2022-12-13 09:14:06 +00:00
Jake Howard 7c168fd28c Update plausible to 1.5 
Update Clickhouse at the same time
 2022-12-13 09:14:06 +00:00
Jake Howard 6fc6366c33 Update nextcloud to 25.0.2 2022-12-13 09:14:06 +00:00
Jake Howard 345f047902 Merge branch 'renovate/python-3.x' into 'master' 
Update python Docker tag to v3.11

See merge request sys/infrastructure!80
 2022-12-13 09:13:46 +00:00
Jake Howard 6c2c87e43e Merge branch 'renovate/ghcr.io-goauthentik-server-2022.x' into 'master' 
Update ghcr.io/goauthentik/server Docker tag to v2022.11.3

See merge request sys/infrastructure!77
 2022-12-13 08:55:08 +00:00
Jake Howard 55764ada6c Merge branch 'renovate/matrixdotorg-synapse-1.x' into 'master' 
Update matrixdotorg/synapse Docker tag to v1.73.0

See merge request sys/infrastructure!79
 2022-12-13 08:54:50 +00:00
Jake Howard 7a89e7f3bc Define alert contacts for uptimerobot monitors 2022-12-09 19:05:35 +00:00
Jake Howard e86ed81102 Decommission decker server 
It's been replaced by prometheus running internally, and uptimerobot checking.
 2022-12-09 19:04:54 +00:00
Jake Howard 413400cbc6 Terraform uptimerobot 2022-12-08 21:55:03 +00:00
Jake Howard f1c9e10d9a Use IPv4 on blackbox 
The docker networks they're running on are v4 only at the moment, so the DNS resolution passes by the connection fails.
 2022-12-06 20:46:43 +00:00
Jake Howard bb4361e25f Use a blackbox with custom DNS rather than proxy 
This makes timing information more relevant and should improve reliability
 2022-12-06 10:04:23 +00:00
Jake Howard 772cf7536a Run prometheus stack as docker user 2022-12-05 21:17:23 +00:00
Jake Howard 53c969f2b8 Make prometheus config files read only 2022-12-05 21:12:55 +00:00
Jake Howard 3e5b00d176 Add alertmanager 2022-12-05 21:10:41 +00:00
Jake Howard 60514d191a Exclude python stats for HA 2022-12-05 20:36:57 +00:00
Jake Howard ed7faf4678 Scrape healthchecks.io with prometheus and use it for outbound monitoring of prometheus scrapes 2022-12-05 14:41:48 +00:00
Jake Howard 8e3b381b8d Remove unused prometheus network 2022-12-04 22:12:55 +00:00
Jake Howard 75862dbaf9 Setup blackbox for some HTTP monitoring 2022-12-04 22:11:49 +00:00
Jake Howard e89f13b8a9 Add collabora 2022-12-02 22:37:42 +00:00
Jake Howard ebfe057658 Add support for public dashboards in Grafana 2022-12-01 13:48:36 +00:00
Jake Howard 41a853db55 Define tmpfs for website /tmp 
This is needed for imagemagick to function correctly without consuming all disk space on the system
 2022-11-30 14:08:10 +00:00
Jake Howard d09afef4cc Merge branch 'renovate/redis-7.x' into 'master' 
Update redis Docker tag to v7

See merge request sys/infrastructure!87
 2022-11-23 20:40:48 +00:00
Jake Howard 8f78f24ea8 Unpin redis minor version on website 2022-11-21 15:21:33 +00:00
Jake Howard 8076c62198 Merge branch 'renovate/vabene1111-recipes-1.x' into 'master' 
Update vabene1111/recipes Docker tag to v1.4.5

See merge request sys/infrastructure!90
 2022-11-21 14:51:06 +00:00
Jake Howard c388e6bbe1 Add more nginx processes for mastodon 2022-11-20 23:21:09 +00:00
Jake Howard 406d9dbf09 Reduce mastodon streaming threads and run 1 thread per core 2022-11-20 23:00:58 +00:00
Jake Howard 9b69b419a7 Reduce sidekiq threads on GitLab 2022-11-20 23:00:33 +00:00
Jake Howard a51854f48c Shuffle around cron jobs to run earlier at night 2022-11-20 22:52:00 +00:00
Jake Howard 3ec359ed0e Deploy me a mastodon 2022-11-18 09:12:28 +00:00
Jake Howard 88e3eee059 Prune containers more regularly 2022-11-17 20:37:24 +00:00
Jake Howard a1a153977e Only keep 2 package versions 
3 is the default
 2022-11-17 20:36:58 +00:00
Jake Howard c91b1ba871 Allow website to handle traffic to second domain 2022-11-16 14:56:17 +00:00
Jake Howard 330e7e9305 Clear pacman cache 2022-11-14 09:04:53 +00:00
Jake Howard 77e83fec6d Fix synapse-admin URL 
It no longer supports being run on a subdirectory with the stock container
 2022-11-07 13:57:14 +00:00
Jake Howard b513858893 Update nextcloud to 25.0.1 2022-11-07 09:03:40 +00:00
Jake Howard 2bbd1c681b Allow proxying to any ports 
On the assumption they're HTTP, it's probably fine to route to anything. We're not trying to act as a firewall
 2022-11-06 22:16:48 +00:00
Jake Howard b9283ec445 Set port for HTTP proxies 2022-11-06 21:55:05 +00:00
Jake Howard 041f791b60 Add squid as a forwarding proxy so containers are exposed through a VPN 
Implementation isn't perfect, but as `qbittorrent` already had an outbound VPN connection, it makes sense to just reuse it.
 2022-11-06 18:26:09 +00:00
Jake Howard fc577f21b8 Update Traefik to 2.9 2022-11-01 20:50:30 +00:00
Jake Howard 4c8d5ffe44 Remove all references to traefik pages 2022-11-01 20:30:16 +00:00
Jake Howard d81ed290d7 Put the new website live 2022-10-30 12:04:15 +00:00
Jake Howard 08afdd951e Add hosting for new website 
Top sneaky
 2022-10-29 18:09:30 +01:00
Jake Howard 8dd1f6cddf Add nextcloud email config 2022-10-26 14:23:08 +01:00
Jake Howard 0d24bd7e0c Use correct location for nextcloud config file 2022-10-26 14:10:26 +01:00
Jake Howard d0cef763e1 Update Nextcloud to 25 2022-10-26 14:09:47 +01:00
Jake Howard fb1ed14315 Merge branch 'renovate/renovate-renovate-34-x' into 'master' 
Update renovate/renovate Docker tag to v34

See merge request sys/infrastructure!71
 2022-10-26 13:22:28 +01:00
Jake Howard bfacd3b6df Merge branch 'renovate/wallabag-wallabag-2.x' into 'master' 
Update wallabag/wallabag Docker tag to v2.5.2

See merge request sys/infrastructure!50
 2022-10-25 08:46:19 +01:00
Jake Howard a3f54023b7 Merge branch 'renovate/renovate-renovate-33.x' into 'master' 
Update renovate/renovate Docker tag to v33

See merge request sys/infrastructure!52
 2022-10-25 08:46:06 +01:00
Jake Howard 4e77f0165a Use persistent storage for tt-rss 
Otherwise the container fails to find the cache directory due to how updates are handled.
 2022-10-17 13:44:06 +01:00
Jake Howard c0a4c35e5b Merge branch 'renovate/ansible-lint-5.x' into 'master' 
Update dependency ansible-lint to v5.4.0

See merge request sys/infrastructure!40
 2022-10-17 13:43:39 +01:00
Jake Howard d13d49447e Merge branch 'renovate/louislam-uptime-kuma-1.x' into 'master' 
Update louislam/uptime-kuma Docker tag to v1.18.5

See merge request sys/infrastructure!45
 2022-10-17 13:33:41 +01:00
Jake Howard 36f8b84ed6 Merge branch 'renovate/vaultwarden-server-1.x' into 'master' 
Update vaultwarden/server Docker tag to v1.26.0

See merge request sys/infrastructure!46
 2022-10-17 13:33:23 +01:00
Jake Howard 7adda6ed1c Update nextcloud to 24.0.6 2022-10-09 19:41:17 +01:00
Jake Howard 2188c59372 Merge branch 'renovate/louislam-uptime-kuma-1.x' into 'master' 
Update louislam/uptime-kuma Docker tag to v1.18.4

See merge request sys/infrastructure!44
 2022-10-09 19:33:07 +01:00
Jake Howard 58730fcbeb Move pages hosting to GitLab pages 2022-10-09 18:26:49 +01:00
Jake Howard 491061d900 Remove shenanigans 
It's not enabled, and it's 1 less container to deal with
 2022-10-09 17:40:22 +01:00
Jake Howard 6d890a6991 Setup slides domain 2022-10-08 17:37:28 +01:00
Jake Howard 41582f50db Set up GitLab pages 2022-10-08 15:51:37 +01:00
Jake Howard 2dc13c6f40 Update nebula to 1.6.1 2022-10-05 08:42:01 +01:00
Jake Howard 521e6320fd Merge branch 'renovate/matrixdotorg-synapse-1.x' into 'master' 
Update matrixdotorg/synapse Docker tag to v1.68.0

See merge request sys/infrastructure!39
 2022-10-04 13:42:30 +01:00
Jake Howard 681cff5ea7 Merge branch 'renovate/louislam-uptime-kuma-1.x' into 'master' 
Update louislam/uptime-kuma Docker tag to v1.18.2

See merge request sys/infrastructure!42
 2022-10-04 13:40:52 +01:00
Jake Howard e715770665 Merge branch 'renovate/vabene1111-recipes-1.x' into 'master' 
Update vabene1111/recipes Docker tag to v1.4.4

See merge request sys/infrastructure!38
 2022-10-04 13:39:32 +01:00
Jake Howard 02d5b2d8d3 Upgrade sanoid 2022-09-26 19:32:55 +01:00
Jake Howard 67b890d639 Merge branch 'renovate/vabene1111-recipes-1.x' into 'master' 
Update vabene1111/recipes Docker tag to v1.4.2

See merge request sys/infrastructure!37
 2022-09-26 13:56:40 +01:00
Jake Howard d9e8b91672 Merge branch 'renovate/ghcr.io-goauthentik-server-2022.x' into 'master' 
Update ghcr.io/goauthentik/server Docker tag to v2022.9.0

See merge request sys/infrastructure!36
 2022-09-26 13:56:38 +01:00
Jake Howard 1eaa33e664 Add DMARC to mailgun 2022-09-22 21:29:21 +01:00
Jake Howard 8c1f088b19 Harden DMARC and SPF rules 
Hopefully people still get my emails...
 2022-09-22 21:26:26 +01:00
Jake Howard 6268c0f451 Add DNS records for mailgun 2022-09-22 21:22:05 +01:00
Jake Howard 72795591ac Add DMARC 2022-09-22 21:12:41 +01:00
Jake Howard cf6cc7de7a Add email to tandoor 2022-09-22 09:13:28 +01:00
Jake Howard 356e04c005 Fewer workers / threads for authentik 2022-09-22 08:52:41 +01:00
Jake Howard 92fdfd252a Add email to authentik 2022-09-22 08:47:01 +01:00
Jake Howard 98f2eea59b Add email to plausible 2022-09-22 08:37:00 +01:00
Jake Howard 9098fec232 Disable erlang multi-node distribution 2022-09-22 08:23:30 +01:00
Jake Howard f8abc9fc7e Merge branch 'renovate/vabene1111-recipes-1.x' into 'master' 
Update vabene1111/recipes Docker tag to v1.4.1

See merge request sys/infrastructure!35
 2022-09-22 08:16:10 +01:00
Jake Howard 71732b7b7c Don't keep quite so many backups 
This results in a huge index which some smaller VMs can't handle
 2022-09-21 08:48:05 +01:00