Tips-Of-Mine/infrastructure
2
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
1,087 Commits 15 Branches 0 Tags
9098fec2320c81d490ba81b2de37ee1835eca03f
Commit Graph

1087 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
Jake Howard
bf73cfa846 Close some ports which don't need to be open 2021-09-25 17:04:28 +01:00
Jake Howard
a135aae5f3 Provision new VM 
This will be used for monitoring
 2021-09-25 16:59:23 +01:00
Jake Howard
48934ad2c5 Apply gzip to everything 
The middleware is smart enough to only apply it when needed, and only when it's not already compressed, so it's fine.
 2021-09-19 22:48:48 +01:00
Jake Howard
83ed8879dc Correctly set smtp user for GitLab 
The user and from are different in my case.
 2021-09-19 22:34:40 +01:00
Jake Howard
178ca6b2c4 Add privatebin config 
Disable super long expirations, among other things
 2021-09-19 19:29:05 +01:00
Jake Howard
d70f450e2d Change forget resolution to 30d 
Restic is really annoying with its retention arguments, not really allowing what I want, so this is the easiest way to get decent retention.
 2021-09-07 22:04:23 +01:00
Jake Howard
0a8167c839 Remove stray expose 
Traefik picks up the port just fine
 2021-09-07 21:04:19 +01:00
Jake Howard
eedba465c4 Update synapse 2021-09-07 21:04:04 +01:00
Jake Howard
a866938207 Fix hostname of restic server 2021-09-06 21:07:10 +01:00
Jake Howard
2db8ca5059 Add basic auth to dokku 2021-09-05 23:11:28 +01:00
Jake Howard
a278443850 Use auto on nginx configs 
Let nginx work it out, and default to 1 per core
 2021-09-04 22:41:30 +01:00
Jake Howard
6e25403b3d Update synapse to 1.41.1 2021-08-31 19:08:38 +01:00
Jake Howard
86e9d12ce6 Update nextcloud to 22.1.1 2021-08-31 19:03:19 +01:00
Jake Howard
c2cd2e6e34 Add backups for grimes 2021-08-30 21:50:55 +01:00
Jake Howard
07b2ea2ccb Add the ability to exclude certain paths from backup 2021-08-30 21:49:58 +01:00
Jake Howard
259b0ca7a6 Use upstream telegraf role 
https://github.com/rossmcdonald/telegraf/pull/54 shipped
 2021-08-30 21:22:26 +01:00
Jake Howard
dcbe6e8e72 Use upstream version of ansible-role-snapraid 
https://github.com/IronicBadger/ansible-role-snapraid/pull/7 shipped
 2021-08-30 21:21:58 +01:00
Jake Howard
95216b32c4 Consolidate server blocks 2021-08-24 14:31:12 +01:00
Jake Howard
453a374801 Replace ingress proxy with nginx 
This enables HTTPS redirecting at it too much more easily, and matches the gateway configuration.

Requires using upstream versions of nginx to enable https://nginx.org/en/docs/stream/ngx_stream_realip_module.html
 2021-08-24 14:21:51 +01:00
Jake Howard
f14e723d40 Fix service name on ingress 
It's not alpine
 2021-08-24 11:52:35 +01:00
Jake Howard
601b916b43 Remove deprecated clients from wireguard server 
I use nebula now for all that
 2021-08-24 11:14:04 +01:00
Jake Howard
edc5c325b7 Correctly check hostname against PVE hosts 
Some of the hostnames have `-` in instead, which caused issues with the SSH config detecting which users to allow
 2021-08-23 19:56:04 +01:00
Jake Howard
ecb946bab4 Remove nginx version from headers 2021-08-23 16:12:34 +01:00
Jake Howard
93cba46dd1 Redirect to HTTPS at the edge 2021-08-23 16:10:37 +01:00
Jake Howard
a54d373526 Replace edge proxy with nginx 
The config makes more sense, and it has more of the features I need, which will come later.
 2021-08-22 22:35:09 +01:00
Jake Howard
23fc7bbb12 Use slightly less memory for ZFS 2021-08-22 15:58:49 +01:00
Jake Howard
1d5616a36f Update roles so they support newer Debian versions 
I'm monitoring the PRs, don't worry
 2021-08-22 15:22:11 +01:00
Jake Howard
8fabd11e31 Remove unnecessary pve role 
no-subscription is handled by the nag removal role
 2021-08-22 15:20:27 +01:00
Jake Howard
f0a3585592 Use distribution name in repo URL 2021-08-22 14:44:34 +01:00
Jake Howard
0874158a91 Update traefik to 2.5 2021-08-22 11:16:37 +01:00
Jake Howard
c04e8b628a Update synapse to 1.40.0 2021-08-22 11:16:19 +01:00
Jake Howard
c99afdd446 Disable gzip on qbittorrent egress 
It's mostly used over the internal network, so the additional gzip isn't going to gain anything when the disk is the bottleneck
 2021-08-21 16:46:21 +01:00
Jake Howard
55e3b81f06 Install release version of gitlab-dater onto GitLab server 
Rather than than hacky development one I was using before
 2021-08-10 22:51:12 +01:00
Jake Howard
e421657619 Ensure restic gets the correct permissions when it's updated 
Yes it's weird to modify the system package like this, but it's very handy.

See also https://restic.readthedocs.io/en/stable/080_examples.html#backing-up-your-system-without-running-restic-as-root
 2021-08-10 08:45:59 +01:00
Jake Howard
ab46c30df2 Start graphing some speeds 2021-08-07 10:59:42 +01:00
Jake Howard
d0e472b51a Update synapse to 1.39.0 2021-08-06 18:20:48 +01:00
Jake Howard
11bf501d8a Update nextcloud to 22.1.0 2021-08-06 18:20:38 +01:00
Jake Howard
9755974647 Update vaultwarden to 1.22.2 2021-08-06 18:17:22 +01:00
Jake Howard
f3bc72d2ba Provision uptime-kuma 2021-07-31 16:43:12 +01:00
Jake Howard
1399529a47 Move stray storage to tank 2021-07-17 20:32:26 +01:00
Jake Howard
8f831c8191 Update synapse to 1.37.1 2021-07-11 20:20:56 +01:00
Jake Howard
501fe81979 Update nextcloud to v22 2021-07-11 20:20:48 +01:00
Jake Howard
65eb6efe5a Remove GitHub CI 2021-07-11 18:30:59 +01:00
Jake Howard
322843b3c1 chmod the correct directory 2021-07-11 18:20:13 +01:00
Jake Howard
c6266728b4 Fix directory permissions before install 2021-07-11 18:12:54 +01:00
Jake Howard
0364cbade5 Ensure current directory isn't world writable 
See https://docs.ansible.com/ansible/devel/reference_appendices/config.html#cfg-in-world-writable-dir
 2021-07-11 18:07:15 +01:00
Jake Howard
b0cc416d69 OK fine use slim and install things there 
Needs a build pipeline
 2021-07-11 17:56:31 +01:00
Jake Howard
e183315f02 Explicitly add bash 
Now might as well use the alpine container
 2021-07-11 17:50:46 +01:00
Jake Howard
ec9095a117 Use a full terraform container, not just the binary 2021-07-11 17:47:56 +01:00
Jake Howard
36f33c2547 Use slim python container 2021-07-11 17:47:42 +01:00