Tips-Of-Mine/infrastructure
2
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
1,503 Commits 15 Branches 0 Tags
46eda365158828c6819a79aec6d83272e1ba9d6f
Commit Graph
100 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Jake Howard 46eda36515 Fully block Server header 2023-12-16 21:57:19 +00:00
Jake Howard cfb498d7c6 Only add HTTPS redirect when it's needed 2023-12-16 18:13:49 +00:00
Jake Howard 48efcf4d91 Use mainline nginx release on Arch 2023-12-16 18:03:01 +00:00
Jake Howard 930cf87084 gzip as much as makes sense 2023-12-16 17:58:15 +00:00
Jake Howard 92052a3d0a Unify nginx configuration 
This creates a simple base configuration skeleton, that other configuration can be easily loaded into.
 2023-12-16 17:47:04 +00:00
Jake Howard 943c141d59 Ensure ingress proxy doesn't terminate connections 
This mostly works around a weird issues with Jellyfin
 2023-12-14 22:08:02 +00:00
Jake Howard 2ff2128330 Set pihole temp unit 2023-12-14 22:04:14 +00:00
Jake Howard b33e19e152 Remove unnecessary extra variable definitions 
The world could do with a bit less YAML!
 2023-12-14 22:03:23 +00:00
Jake Howard 7ad5d6e51e Deploy coredns as a proxy to Docker's internal DNS 2023-12-14 21:04:26 +00:00
Jake Howard 7381c1f10a Update nextcloud version in config.php 2023-12-13 17:48:46 +00:00
Jake Howard c0df505f70 Disable browser updates for nextcloud 2023-12-04 09:39:14 +00:00
Jake Howard aecd7c0a18 Upgrade nextcloud version in config 2023-12-04 09:38:43 +00:00
Jake Howard e815fcb2be Pin all redis versions to 7 
Keeps them all in sync
 2023-12-04 09:22:51 +00:00
Jake Howard 461ec71b12 Update gitea branding path 2023-11-27 19:19:58 +00:00
Jake Howard 8666933bfb Revert "Use OIDC to log in to tt-rss" 
OIDC breaks any kind of API integration, which is very annoying

This reverts commit 66ddef96e2.
 2023-11-18 21:57:16 +00:00
Jake Howard 3df1e1d46b Update Nextcloud version in config.php 2023-11-13 18:22:42 +00:00
Jake Howard e4b2318c82 Monitor authentik 2023-11-12 21:25:02 +00:00
Jake Howard dfef31cbfa Deploy minio 
My own S3, for various things
 2023-11-12 21:23:54 +00:00
Jake Howard 38840402b9 Disable repo units I don't use by default 2023-11-12 18:28:01 +00:00
Jake Howard 5f31a39804 Ensure Nextcloud can talk to local servers 
Needed for Authentik
 2023-11-08 19:51:16 +00:00
Jake Howard 6b1f5343f9 Always use diff when running deploys 2023-11-08 19:46:28 +00:00
Jake Howard 66ddef96e2 Use OIDC to log in to tt-rss 2023-11-08 19:46:16 +00:00
Jake Howard 935b099c4f Decommission upload 
It was never really used for anything, and I want to replace it with something better eventually
 2023-11-07 21:17:21 +00:00
Jake Howard dbbfe55975 Deploy authentik 
_again_.
 2023-11-07 21:17:21 +00:00
Jake Howard 48dbaeed99 Deploy remark42 
To soon replace Commento
 2023-11-06 21:29:28 +00:00
Jake Howard 5fb605231d Allow pings to ingress 
This makes testing connections much simpler
 2023-11-05 21:48:25 +00:00
Jake Howard dd1558bafa Set sensible permissions on nftables config 2023-11-05 21:43:16 +00:00
Jake Howard b0347fc037 Remove redundant quotes 2023-11-05 21:43:02 +00:00
Jake Howard 64f5763571 Ensure nginx role is actually installed 2023-11-05 21:37:33 +00:00
Jake Howard f1ac40f432 Reduce pihole cache size 
This is still a lot of records, and pihole complains with values any larger
 2023-11-05 13:22:05 +00:00
Jake Howard 850278ab19 Allow nebula through firewall 2023-11-03 18:06:36 +00:00
Jake Howard b1284877a3 Update blackbox configuration for not following redirects 2023-11-01 22:14:35 +00:00
Jake Howard 6b4285a264 Let alertmanager run as its own user 
It's already not-root, and can't access the filesystem anyway
 2023-11-01 22:13:37 +00:00
Jake Howard 3ed786336e Remove wireguard_53 
I never used it - no reason to maintain it
 2023-10-26 21:50:22 +01:00
Jake Howard 9f83efa53b Use nftables for firewall on ingress 
See ya never, iptables!
 2023-10-26 21:34:06 +01:00
Jake Howard 54e2205e48 Don't bother renaming speedtest metrics 2023-10-23 22:09:25 +01:00
Jake Howard c29dfb5ad2 Add hostname label for blackbox 2023-10-23 21:06:43 +01:00
Jake Howard 4950082c28 Remove deprecated gitea config settings 2023-10-15 21:27:23 +01:00
Jake Howard ad867f9654 Add JWT secret for gitea 
This appeared in my config - it's probably important
 2023-10-15 18:55:24 +01:00
Jake Howard ad3b5bc42d Move repo archive to "files" subvolume 
It's better suited for this kind of file storage
 2023-10-15 18:53:30 +01:00
Jake Howard 0780d255ed Remove grafana-cloud 
I've migrated back to Uptime Robot, for simplicity. Sadly their API limits make it almost impossible to properly Terraform.
 2023-10-09 19:48:39 +01:00
Jake Howard 37b8c48a77 Remove legacy short domains 
I never used them, and the certificate renewal didn't work anyway.
 2023-10-02 09:37:05 +01:00
Jake Howard 54c88d4253 Fix lint issues 2023-10-01 17:10:37 +01:00
Jake Howard 5770ab4a59 Sync dokku data to tank 
This is much easier than mounting the files themselves
 2023-10-01 17:06:09 +01:00
Jake Howard 3b303e4940 Deploy db-auto-backup to dokku 
It might have DBs somewhen
 2023-10-01 16:47:06 +01:00
Jake Howard a54a91ea44 Deploy a dokku 2023-10-01 16:34:01 +01:00
Jake Howard b02be4e77a Add email to Vikunja 2023-10-01 14:08:25 +01:00
Jake Howard 28a5089190 Bootstrap a new dokku machine on PVE 2023-09-29 22:03:23 +01:00
Jake Howard 12c46e50b5 Decommission grimes 
Dokku will return, soon...
 2023-09-29 21:42:05 +01:00
Jake Howard a1285612f1 Increase pihole cache 2023-09-24 13:45:40 +01:00
Jake Howard 1801a21e5d Update nextcloud config to 27.1.1 2023-09-23 21:51:15 +01:00
Jake Howard 7de73287fd Move spotify proxy alongside website 
That's all it's really used for right now.
 2023-09-21 14:20:54 +01:00
Jake Howard 27da7a7494 Fix occ command 2023-09-18 19:21:42 +01:00
Jake Howard 0789abaa0b Update nextcloud config version 2023-09-18 18:49:04 +01:00
Jake Howard d3c6e65053 Change sensitivity to medium for all alerts 
It's a bit too flaky for 95%
 2023-09-18 18:36:06 +01:00
Jake Howard e56ffa576f Deploy vikunja 2023-09-07 20:18:32 +01:00
Jake Howard d16feb2f89 Override DNS for vaultwarden 
Make sure it finds icons for local applications
 2023-09-07 18:04:03 +01:00
Jake Howard 4aa4ac24d4 The partial probe map is enough for global coverage 2023-09-06 19:30:12 +01:00
Jake Howard a1bed2ca9f Reduce frequency on some monitoring probes 
The frequency is per-region, so it's still quite regular
 2023-09-06 19:22:02 +01:00
Jake Howard 5a0df92a6a Disable ip_forward 
I don't need P2P comms for this, so disable this for extra security.

I should add a proper firewall at some point...
 2023-09-01 19:52:36 +01:00
Jake Howard 81ccfeed30 Add helper to edit ansible vault 2023-08-31 09:21:14 +01:00
Jake Howard ccadc7fbfa Migrate wallabag to postgres 2023-08-28 19:10:37 +01:00
Jake Howard 2b75b526ac Update nextcloud version in config 2023-08-28 17:53:29 +01:00
Jake Howard 16be8dd87c Disable registration on wallabag 
The documented default is wrong
 2023-08-28 17:51:58 +01:00
Jake Howard 266601d6f5 Vaguely harden vaultwarden config 2023-08-16 22:03:22 +01:00
Jake Howard 82281c6307 Decommission BG 2023-08-01 21:49:20 +01:00
Jake Howard ce53032819 Fix nextcloud config dir 2023-08-01 21:19:35 +01:00
Jake Howard b499882ca7 Update Nextcloud to 27.0.1 2023-08-01 21:18:50 +01:00
Jake Howard dfa6ffdcd2 Update Gitea token for renovate 
It seems in a recent update, the token stopped working, possibly due to a permissions issue.
 2023-08-01 14:17:16 +01:00
Jake Howard 6224b8f675 Remove aurto 
I never used it, and trust chaotic-aur enough for AUR things
 2023-07-30 19:09:34 +01:00
Jake Howard b2f894c5da Move notes to GitHub 2023-07-26 08:39:30 +01:00
Jake Howard f5faad1b2d Upgrade Gitea to 1.20.1 2023-07-22 14:30:49 +01:00
Jake Howard a1d8764a90 Expose tt-rss plugins to nginx container 2023-07-21 12:57:01 +01:00
Jake Howard 5aff824389 Remove feediron plugin 
It causes lots of issues for GitHub feeds
 2023-07-21 09:13:24 +01:00
Jake Howard 4de69e3955 Rotate Gandi API key 
Had to regenerate it to debug an issue
 2023-07-17 15:03:04 +01:00
Jake Howard 0e9e63d8b7 Use correct gandi API 2023-07-17 15:03:04 +01:00
Jake Howard 9a65bc74a3 Correctly format domains for Gandi 
Gandi requires CNAMEs end with `.`, because it doesn't handle that magically.
 2023-07-17 14:26:12 +01:00
Jake Howard 9e7ccb81ec Fix external storage for gitea packages 2023-07-17 14:26:12 +01:00
Jake Howard 2e7d60d87d Use gandi as cert resolver for 0rng.one 2023-07-17 14:26:12 +01:00
Jake Howard d91ad7c517 Update gitea to 1.20.0 2023-07-17 09:30:33 +01:00
Jake Howard a406e72ab2 Update Vaultwarden to 1.29.0 2023-07-10 13:41:56 +01:00
Jake Howard 56c1f8563f Fix renovate base directory 2023-07-10 08:33:30 +01:00
Jake Howard 1acc8b3fd6 Mount entire config dir into Nextcloud 
Seems newer LSIO containers try and copy a config over the top, which doesn't play well with it being a Docker mount
 2023-07-09 16:17:55 +01:00
Jake Howard 56b846f38c Prune mastodon accounts and orphan media 2023-07-04 21:19:35 +01:00
Jake Howard 7619e826f4 Remove deprecated traefik hub config 2023-06-26 09:27:16 +01:00
Jake Howard aeeb097491 Fix README documentation for terraform secrets 2023-06-18 17:21:18 +01:00
Jake Howard decfbf65c9 Move scripts to justfile 2023-06-18 17:14:49 +01:00
Jake Howard 983c3adca1 Move backups out of DB directory 
I've now increased the compression and record size
 2023-06-17 16:37:07 +01:00
Jake Howard da55e3fb5f Fix references to home dir 2023-06-17 16:00:30 +01:00
Jake Howard 677c70618f Update Nextcloud to 27 2023-06-17 16:00:17 +01:00
Jake Howard b07d424d87 Move remaining DBs to SSD 2023-06-15 21:18:50 +01:00
Jake Howard 2af9f8529d Fix new ansible-lint errors 
Quite a few changes here, hopefully they work!
 2023-06-15 15:16:19 +01:00
Jake Howard 2a0d40aca9 Only pass vault pass when deploying 
This makes linting much simpler
 2023-06-15 14:45:09 +01:00
Jake Howard c27043269c Fix excluded paths for ansible lint 
We `cd` into the `ansible/` directory, so they should be relative to that
 2023-06-15 14:26:19 +01:00
Jake Howard aa8ceec290 Remove duplicate depends_on keys 2023-06-15 14:20:52 +01:00
Jake Howard cdbdca1fb8 Update dev dependencies to support newer Ansible versions 2023-06-15 14:17:16 +01:00
Jake Howard 5ccaaefdc7 Move more projects over to new "speed" SSD 2023-06-15 13:55:36 +01:00
Jake Howard 2998958ddd Provision a new SSD for DBs 
This makes the data easier to back up and splits it out from the main boot pool
 2023-06-15 09:09:48 +01:00
Jake Howard 2fa7f7212f Move synapse DB/Redis to SSD 
Wow, Postgres really does love an SSD!
 2023-06-07 21:35:07 +01:00
Jake Howard c042775f8b Update Nextcloud 2023-05-31 11:55:40 +01:00