792 Commits

Author SHA1 Message Date
Jake Howard
48e23e8c00
Track new linode instance in terraform
The definition is pretty verbose. Apparently it does that if you create it through the UI
2020-12-05 13:25:50 +00:00
Jake Howard
6d75272d34
Move plausible to new server 2020-12-05 12:33:50 +00:00
Jake Howard
87120ae0f3
Pin terraform provider versions 2020-12-04 23:11:25 +00:00
Jake Howard
e1dd6c4c05
Init new web server on Linode
I'll terraform it later, honest!
2020-12-04 23:02:19 +00:00
Jake Howard
08bb8f22ca
Add feediron plugin for tt-rss 2020-11-25 13:16:13 +00:00
Jake Howard
b5d676b6fe
Install fever plugin for tt-rss
Had to chown the directory afterwards, as git wouldn't play nice with `become_user`
2020-11-25 13:00:06 +00:00
Jake Howard
48762bcfcd
Remove redundant quoting 2020-11-25 11:41:26 +00:00
Jake Howard
a35ee7c824
Change base URL to default so the tracker script still uses disguised domain 2020-11-25 11:40:54 +00:00
Jake Howard
2b291548f9
Just do plain path replacement 2020-11-25 11:38:47 +00:00
Jake Howard
a81e2793f8
Add a secondary domain for plausible less likely to match blockers
Might change things, might not. But it's a fun experiment to try anyway.

Using a custom middleware to override the path due to https://github.com/plausible/analytics/pull/340
2020-11-25 11:11:29 +00:00
Jake Howard
6c27401cd5
Replace terraform action with official one 2020-11-22 16:21:48 +00:00
Jake Howard
e8d3a72ea8
Update nextcloud to 20.0.2 2020-11-22 15:40:23 +00:00
Jake Howard
1d8f54c778
Update synapse 2020-11-22 15:32:17 +00:00
Jake Howard
3ddfd77bdf
Stop running synapse as root 2020-11-22 15:08:08 +00:00
Jake Howard
310feaf332
Use correct args to build synapse DB 2020-11-22 15:07:34 +00:00
Jake Howard
367de37fab
Actually disable unnecessary logging rather than change level
Also disable even more of them
2020-11-12 23:01:32 +00:00
Jake Howard
dfd77d104b
Force yaml to be detected as its own language
That's what most of this repo is, anyway.
2020-11-11 09:05:08 +00:00
Jake Howard
2a4b3ec3e6
Increase timeout for SSH sessions
Stll check relatively often the client is still there, but check many times so the connection stays open a decent amount of time. Especially useful for long-running commands.
2020-11-08 22:04:30 +00:00
Jake Howard
f5c7c094d3
Fix gotify container name
Gotify != duplicati
2020-11-08 11:07:57 +00:00
Jake Howard
5c1f17e2aa
Update synapse 2020-10-28 18:22:30 +00:00
Jake Howard
0fc57049e4
Update nextcloud to 20.0.1 2020-10-28 15:22:49 +00:00
Jake Howard
f450d4a8f2
Pin jellyfin version 2020-10-27 17:38:10 +00:00
Jake Howard
f414781182
Use new whoami container 2020-10-27 16:13:14 +00:00
Jake Howard
c63506d2bc
Pin traefik to patch version 2020-10-27 16:13:14 +00:00
Jake Howard
6ae8d0febe
Pin plausible versions 2020-10-27 16:13:14 +00:00
Jake Howard
f665b87965
Allow NTP role to manage config
Hopefully this closes the port
2020-10-24 17:36:39 +01:00
Jake Howard
ff72f5a25e
Move nextcloud data dir to ZFS 2020-10-24 14:26:30 +01:00
Jake Howard
5eb3870fbe
Set mode on fail2ban filter and jail 2020-10-24 12:10:54 +01:00
Jake Howard
8932ac828f
Add geoip database for plausible 2020-10-24 12:10:37 +01:00
Jake Howard
47ad40bb52
Remove watchtower, and do updates manually from now on
Keeps @IronicBadger happy!
2020-10-22 18:07:48 +01:00
Jake Howard
efd22010b7
Use new LSIO mod which does more 2020-10-19 17:29:28 +01:00
Jake Howard
a46525aa80
Move configuration for custom port to Traefik config rather than custom container expose
Still a work-around for https://github.com/plausible/analytics/pull/237
2020-10-18 22:31:23 +01:00
Jake Howard
0ca3f36f7a
Move some more nextcloud components to ZFS 2020-10-18 18:02:48 +01:00
Jake Howard
58605c1c24
Don't snapshot tank root
This makes syncoid unhappy, and is generally unnecessary
2020-10-18 17:45:49 +01:00
Jake Howard
bedbb0f5f4
Fix service to restart 2020-10-16 19:16:42 +01:00
Jake Howard
1930cc83e8
Use generic package module 2020-10-16 19:16:42 +01:00
Jake Howard
b2e91d7d6d
Update haproxy fail2ban jail to use systemd for logs 2020-10-16 19:16:42 +01:00
Jake Howard
4890c3d3e5
Revert "Remove fail2ban"
This reverts commit 1f0e33acc8f93bcf793bff5a90ee2d0bca780150.
2020-10-16 19:16:42 +01:00
Jake Howard
30baed441e
Mount external files into nextcloud
Means some bits can live outside the nextcloud dir
2020-10-10 18:01:27 +01:00
Jake Howard
b8ea056455
Remove netdata
Don't use it anyway
2020-10-09 23:39:55 +01:00
Jake Howard
6852b84406
Change watchtower to run daily
A holdover until less of the containers are using `:latest`
2020-10-09 23:20:07 +01:00
Jake Howard
5496744428
Remove web-rng 2020-10-09 23:11:53 +01:00
Jake Howard
f7afaacbdc
Move website to be hosted on GitLab pages 2020-10-09 21:35:57 +01:00
Jake Howard
7f09db5d20
Add heimdall 2020-10-07 14:09:23 +01:00
Jake Howard
e9f61070f8
Update nextcloud to version 20
Using the new LSIO tags for version specific pins! 🎉
2020-10-07 09:18:32 +01:00
Jake Howard
0a9deb3d9e
Update plausible environment so it's compatible with v1
Read the changelog, folks!
2020-10-06 21:48:34 +01:00
Jake Howard
93ccb686e7
Drive watchtower config from environment 2020-10-06 09:10:26 +01:00
Jake Howard
413ff4dad9
Add script to update containers
This is an attended update, which is better. Eventually replace watchtower
2020-10-06 08:44:01 +01:00
Jake Howard
2c4e1e0414
Pin Plausible to major version 2020-10-05 18:43:12 +01:00
Jake Howard
29c9e14f62
Remove haproxy chroot
This is technically _slightly_ less secure, but means it logs to journald properly, so can be picked up by fail2ban in future
2020-10-05 11:10:29 +01:00