Tips-Of-Mine/infrastructure
3
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
641 Commits 15 Branches 0 Tags
76eeeec260b1f5ccf1ec5f1330c8ab27b9f99f94
Commit Graph
100 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Jake Howard 76eeeec260 Update wallabag 2021-01-20 20:39:27 +00:00
Jake Howard 3321b852a5 Update traefik to v2.4 2021-01-20 20:33:57 +00:00
Jake Howard 700360eb96 Update synapse 2021-01-20 20:20:09 +00:00
Jake Howard 3e8a3b2c6b Update gotify 2021-01-20 20:02:01 +00:00
Jake Howard 48c507e0c3 Up page sizes for gitea stuff 
Screw paginating!
 2021-01-19 21:20:00 +00:00
Jake Howard 26905e245b Hide heatmap on gitea 
It's kinda useless at this scale
 2021-01-19 17:42:10 +00:00
Jake Howard 41915ec69c Replace gitlab with gitea 
Leave gitlab in place for a bit in case I need to get at data
 2021-01-18 20:14:38 +00:00
Jake Howard f519b18d38 Move website over to traefik-pages 
Woo rust!
 2021-01-17 21:41:32 +00:00
Jake Howard f9187109c7 Correct router name for pages 2021-01-17 20:03:02 +00:00
Jake Howard bef2468f12 Add gitea domain 
Configuration to come
 2021-01-17 17:03:12 +00:00
Jake Howard ac4a93e0ed Setup DNS for pages 2021-01-17 12:49:23 +00:00
Jake Howard b992df0313 Fix variable name for traefik conditional provider 2021-01-16 23:30:09 +00:00
Jake Howard 604202fdce Add traefik pages 
Add it ready for the migration in future
 2021-01-16 23:29:55 +00:00
Jake Howard e1ea938d59 Add file providers for jellyfin and HA 2021-01-13 22:12:58 +00:00
Jake Howard 969674772c Snapshot PVE root pool too 2021-01-10 13:23:36 +00:00
Jake Howard 7672d99aa8 Remove homeassistant configuration 
It's now in its own VM, and i'll deal with version control using the git integration there directly I suspect.
 2021-01-10 13:12:19 +00:00
Jake Howard b40266b276 Add roles to handle PVE nag and repos 2021-01-09 23:21:35 +00:00
Jake Howard 6dd86ea870 Limit ZFS ARC size on PVE 2021-01-09 22:32:55 +00:00
Jake Howard d87ec89887 Persist arc size 
Modprobe only loads the module, it doesn't ensure the ARC value persists correctly.
 2021-01-09 22:25:29 +00:00
Jake Howard 0c6e9969bc Give myself passwordless sudo access to zfs stuff 
This is needed for syncoid pulls
 2021-01-09 21:36:09 +00:00
Jake Howard c3053e9378 Fix location for sanoid install 
This makes it sync up with where the systemd services expect them to be
 2021-01-09 21:28:16 +00:00
Jake Howard 7d235e67e0 Add ZFS configuration for PVE 2021-01-09 21:27:52 +00:00
Jake Howard decf5176f7 Use systemd rather than cron for sanoid 
It's more reliable and easier to get logs
 2021-01-09 20:57:47 +00:00
Jake Howard 57d9c9d288 Allow configuring of pools to scrub 2021-01-09 20:52:51 +00:00
Jake Howard 721bdf60b3 Fix quotes 2021-01-09 18:32:16 +00:00
Jake Howard 1b72afdd29 Remove scrutiny role 
SMART checks are handeld by PVE / something else in future
 2021-01-09 18:30:28 +00:00
Jake Howard 0506a78d02 Listen on public port 
Makes connection so much easier
 2021-01-09 18:25:08 +00:00
Jake Howard 8fe8788458 Move ARC size to defaults so it can be easily changed 2021-01-09 18:24:52 +00:00
Jake Howard 5b495688cd Remove intersect wireguard keys 2021-01-09 18:23:10 +00:00
Jake Howard c38ecfebd7 Update gateway to point to ingress instance 2021-01-09 18:17:54 +00:00
Jake Howard fef7f2c2b4 Move docker containers to new PVE container 2021-01-09 18:02:17 +00:00
Jake Howard a35f2f91ff Default to using python3 over "legacy python" 2021-01-09 17:55:29 +00:00
Jake Howard 0355b6b214 Remove jellyfin docker config 
It'll be replaced by something else later, don't worry.
 2021-01-09 17:17:12 +00:00
Jake Howard 2300426f0f Move default variables into role defaults rather than group vars 2020-12-28 16:23:12 +00:00
Jake Howard 422062ae63 Fix lint warning around missing mode 
This only applies to directories https://stackoverflow.com/a/29793833
 2020-12-28 16:16:35 +00:00
Jake Howard 3338a1f898 Add jellyfin host 
Role TBC
 2020-12-28 16:08:15 +00:00
Jake Howard 6267363ab0 Provision docker VM 2020-12-28 15:57:44 +00:00
Jake Howard bdfd38c9fe Allow traefik to run on non-wireguard host 2020-12-28 15:55:45 +00:00
Jake Howard 4f1e54baab Actually enable timer 2020-12-28 15:14:50 +00:00
Jake Howard 58879d2e1d Ensure fail2ban and logrotate are available on all machines 2020-12-27 22:39:33 +00:00
Jake Howard b11dbfc829 Move traefik file provider to use directory rather than single file 
This makes future composition possible
 2020-12-22 15:53:03 +00:00
Jake Howard 0353887590 Add override to ensure ZFS starts before docker 
Stolen with love from https://github.com/IronicBadger/infra/commit/7dda0bc7cbb9a38e17561c80f40f518b9f472ef7
 2020-12-21 21:37:46 +00:00
Jake Howard 30cb9e52e7 Install and provision wireguard client on ingress server 2020-12-21 18:24:35 +00:00
Jake Howard 3197953796 Provision PVE and ingress VM 2020-12-21 17:11:38 +00:00
Jake Howard 44fb8f5380 Set some image resizing preferences 
This stops the thumbnailing being quite as intensive
 2020-12-11 17:39:58 +00:00
Jake Howard 2bfad84071 Pin wallabag to newer version 
2.4.0 came out *finally*
 2020-12-11 17:39:35 +00:00
Jake Howard 5a808e90e0 Update synapse 2020-12-11 17:36:06 +00:00
Jake Howard af1b7f754c Update nextcloud to 20.0.3 2020-12-11 17:35:50 +00:00
Jake Howard 8e6a3324a1 Install duplicati on grimes 
Makes backing up website things a bit easier
 2020-12-07 18:09:29 +00:00
Jake Howard 48e23e8c00 Track new linode instance in terraform 
The definition is pretty verbose. Apparently it does that if you create it through the UI
 2020-12-05 13:25:50 +00:00
Jake Howard 6d75272d34 Move plausible to new server 2020-12-05 12:33:50 +00:00
Jake Howard 87120ae0f3 Pin terraform provider versions 2020-12-04 23:11:25 +00:00
Jake Howard e1dd6c4c05 Init new web server on Linode 
I'll terraform it later, honest!
 2020-12-04 23:02:19 +00:00
Jake Howard 08bb8f22ca Add feediron plugin for tt-rss 2020-11-25 13:16:13 +00:00
Jake Howard b5d676b6fe Install fever plugin for tt-rss 
Had to chown the directory afterwards, as git wouldn't play nice with `become_user`
 2020-11-25 13:00:06 +00:00
Jake Howard 48762bcfcd Remove redundant quoting 2020-11-25 11:41:26 +00:00
Jake Howard a35ee7c824 Change base URL to default so the tracker script still uses disguised domain 2020-11-25 11:40:54 +00:00
Jake Howard 2b291548f9 Just do plain path replacement 2020-11-25 11:38:47 +00:00
Jake Howard a81e2793f8 Add a secondary domain for plausible less likely to match blockers 
Might change things, might not. But it's a fun experiment to try anyway.

Using a custom middleware to override the path due to https://github.com/plausible/analytics/pull/340
 2020-11-25 11:11:29 +00:00
Jake Howard 6c27401cd5 Replace terraform action with official one 2020-11-22 16:21:48 +00:00
Jake Howard e8d3a72ea8 Update nextcloud to 20.0.2 2020-11-22 15:40:23 +00:00
Jake Howard 1d8f54c778 Update synapse 2020-11-22 15:32:17 +00:00
Jake Howard 3ddfd77bdf Stop running synapse as root 2020-11-22 15:08:08 +00:00
Jake Howard 310feaf332 Use correct args to build synapse DB 2020-11-22 15:07:34 +00:00
Jake Howard 367de37fab Actually disable unnecessary logging rather than change level 
Also disable even more of them
 2020-11-12 23:01:32 +00:00
Jake Howard dfd77d104b Force yaml to be detected as its own language 
That's what most of this repo is, anyway.
 2020-11-11 09:05:08 +00:00
Jake Howard 2a4b3ec3e6 Increase timeout for SSH sessions 
Stll check relatively often the client is still there, but check many times so the connection stays open a decent amount of time. Especially useful for long-running commands.
 2020-11-08 22:04:30 +00:00
Jake Howard f5c7c094d3 Fix gotify container name 
Gotify != duplicati
 2020-11-08 11:07:57 +00:00
Jake Howard 5c1f17e2aa Update synapse 2020-10-28 18:22:30 +00:00
Jake Howard 0fc57049e4 Update nextcloud to 20.0.1 2020-10-28 15:22:49 +00:00
Jake Howard f450d4a8f2 Pin jellyfin version 2020-10-27 17:38:10 +00:00
Jake Howard f414781182 Use new whoami container 2020-10-27 16:13:14 +00:00
Jake Howard c63506d2bc Pin traefik to patch version 2020-10-27 16:13:14 +00:00
Jake Howard 6ae8d0febe Pin plausible versions 2020-10-27 16:13:14 +00:00
Jake Howard f665b87965 Allow NTP role to manage config 
Hopefully this closes the port
 2020-10-24 17:36:39 +01:00
Jake Howard ff72f5a25e Move nextcloud data dir to ZFS 2020-10-24 14:26:30 +01:00
Jake Howard 5eb3870fbe Set mode on fail2ban filter and jail 2020-10-24 12:10:54 +01:00
Jake Howard 8932ac828f Add geoip database for plausible 2020-10-24 12:10:37 +01:00
Jake Howard 47ad40bb52 Remove watchtower, and do updates manually from now on 
Keeps @IronicBadger happy!
 2020-10-22 18:07:48 +01:00
Jake Howard efd22010b7 Use new LSIO mod which does more 2020-10-19 17:29:28 +01:00
Jake Howard a46525aa80 Move configuration for custom port to Traefik config rather than custom container expose 
Still a work-around for https://github.com/plausible/analytics/pull/237
 2020-10-18 22:31:23 +01:00
Jake Howard 0ca3f36f7a Move some more nextcloud components to ZFS 2020-10-18 18:02:48 +01:00
Jake Howard 58605c1c24 Don't snapshot tank root 
This makes syncoid unhappy, and is generally unnecessary
 2020-10-18 17:45:49 +01:00
Jake Howard bedbb0f5f4 Fix service to restart 2020-10-16 19:16:42 +01:00
Jake Howard 1930cc83e8 Use generic package module 2020-10-16 19:16:42 +01:00
Jake Howard b2e91d7d6d Update haproxy fail2ban jail to use systemd for logs 2020-10-16 19:16:42 +01:00
Jake Howard 4890c3d3e5 Revert "Remove fail2ban" 
This reverts commit 1f0e33acc8.
 2020-10-16 19:16:42 +01:00
Jake Howard 30baed441e Mount external files into nextcloud 
Means some bits can live outside the nextcloud dir
 2020-10-10 18:01:27 +01:00
Jake Howard b8ea056455 Remove netdata 
Don't use it anyway
 2020-10-09 23:39:55 +01:00
Jake Howard 6852b84406 Change watchtower to run daily 
A holdover until less of the containers are using `:latest`
 2020-10-09 23:20:07 +01:00
Jake Howard 5496744428 Remove web-rng 2020-10-09 23:11:53 +01:00
Jake Howard f7afaacbdc Move website to be hosted on GitLab pages 2020-10-09 21:35:57 +01:00
Jake Howard 7f09db5d20 Add heimdall 2020-10-07 14:09:23 +01:00
Jake Howard e9f61070f8 Update nextcloud to version 20 
Using the new LSIO tags for version specific pins! 🎉
 2020-10-07 09:18:32 +01:00
Jake Howard 0a9deb3d9e Update plausible environment so it's compatible with v1 
Read the changelog, folks!
 2020-10-06 21:48:34 +01:00
Jake Howard 93ccb686e7 Drive watchtower config from environment 2020-10-06 09:10:26 +01:00
Jake Howard 413ff4dad9 Add script to update containers 
This is an attended update, which is better. Eventually replace watchtower
 2020-10-06 08:44:01 +01:00
Jake Howard 2c4e1e0414 Pin Plausible to major version 2020-10-05 18:43:12 +01:00
Jake Howard 29c9e14f62 Remove haproxy chroot 
This is technically _slightly_ less secure, but means it logs to journald properly, so can be picked up by fail2ban in future
 2020-10-05 11:10:29 +01:00
Jake Howard 4c40faf21d Move clickhouse off ZFS 
For some reason, they really don't play well together!
 2020-10-03 17:18:11 +01:00