Commit Graph

1675 Commits

Author SHA1 Message Date
97da6edc13 Update dependency ansible-lint to v24 2024-02-21 21:47:29 +00:00
d66708b10b Update dependency artis3n.tailscale to v4.4.2 2024-02-21 21:43:33 +00:00
7d64518840 Update matrixdotorg/synapse Docker tag to v1.101.0 2024-02-21 21:43:15 +00:00
26bcf09fea Update lscr.io/linuxserver/nextcloud Docker tag to v28.0.2 2024-02-21 21:42:50 +00:00
808e72553b Add the basics of some edge caching 2024-02-21 21:42:16 +00:00
b513c88774 Update vaultwarden/server Docker tag to v1.30.3 2024-02-19 14:13:02 +00:00
7741fbc163 Update vabene1111/recipes Docker tag to v1.5.13 2024-02-19 14:07:32 +00:00
45cf930d14 Update lscr.io/linuxserver/mastodon Docker tag to v4.2.7 2024-02-17 08:00:21 +00:00
58c48261e7 Consolidate vikunja container 2024-02-12 14:12:17 +00:00
91a247868b Add routes from forrest to tailscale network 2024-02-07 22:12:08 +00:00
df43be6f9b Set private_ip for some other machines 2024-02-07 19:27:48 +00:00
b6eca40ae0 Allow tailscale IP in more places 2024-02-07 18:21:16 +00:00
6c1c245c23 Update matrixdotorg/synapse Docker tag to v1.100.0 2024-02-02 13:38:12 +00:00
379d4a26fa Update vabene1111/recipes Docker tag to v1.5.12 2024-02-02 13:38:00 +00:00
f1a2694f1a Update lscr.io/linuxserver/mastodon Docker tag to v4.2.5 2024-02-02 13:37:05 +00:00
02847355a7 Install tailscale
Install, not configure
2024-02-01 19:41:47 +00:00
29cac09b48 Remove explicit port for headscale 2024-02-01 18:32:53 +00:00
dba0262801 Remove website tmpfs
The server's disk is probably fast enough, and container restarts will nuke that storage anyway
2024-02-01 18:15:51 +00:00
0c6528f9ca Restrict access to headscale OIDC and API 2024-01-31 21:40:43 +00:00
dfa8328e7b Move gateway logs to separate file 2024-01-31 21:06:19 +00:00
53c758a781 Monitor headscale with prometheus 2024-01-27 17:40:02 +00:00
b51677b795 Back up headscale config 2024-01-27 15:04:53 +00:00
2ceeaf091d Deploy headscale 2024-01-27 14:18:37 +00:00
06784563a7 Don't resolve ipv6
Something about this setup doesn't like it, so I'll disable v6 for now
2024-01-26 21:43:04 +00:00
4f6f4143ce Update matrixdotorg/synapse Docker tag to v1.99.0 2024-01-22 09:15:38 +00:00
5292785cd9 Update wallabag/wallabag Docker tag to v2.6.8 2024-01-22 09:11:27 +00:00
d297674fb5 Update vabene1111/recipes Docker tag to v1.5.11 2024-01-22 08:42:36 +00:00
88f0828153 Use primary Quad9 servers
DNSSEC and malware blocking is probably useful, just in case
2024-01-21 23:19:49 +00:00
cfc3de61b4 Add fallback quad9 address
This aids availability, along with a healthcheck
2024-01-21 23:05:25 +00:00
c6bae0f797 Do simple endsWith matching for docker view
This saves the need for a regex
2024-01-14 22:27:02 +00:00
4c5936b2aa Disable Grafana analytics 2024-01-14 15:30:12 +00:00
9d685d85aa Update website deployment to unify containers 2024-01-14 14:22:19 +00:00
ac166c3874 Start resolved to support mDNS 2024-01-10 13:28:45 +00:00
06b9197c5b Sync terraform state to restic
This allows it to be backed up easily
2024-01-09 19:56:06 +00:00
4a69df1d6c Ignore ansible-lint for nebula install block
I'm smarter than it is
2024-01-08 21:49:38 +00:00
f33d19e156 Move AdGuardHome configuration to Terraform
https://git.theorangeone.net/systems/adguardhome
2024-01-08 21:45:28 +00:00
ed59458f39 Add backups to tang 2024-01-08 19:20:55 +00:00
616d20e23b Tweak some AGH settings 2024-01-08 19:01:46 +00:00
383a57d1f2 Use DoH endpoint fot quad9
Seems latency is much lower
2024-01-08 18:21:03 +00:00
9f13ace88c Use newer S3 configuration resources 2024-01-07 13:49:35 +00:00
094091dd21 Add role for minio state management 2024-01-07 13:06:37 +00:00
9ac9380387 Restructure state IAM to use separate role 2024-01-07 12:58:16 +00:00
1555803d25 Move terraform state file
This lets me use the bucket for other states too
2024-01-06 21:28:57 +00:00
c8211d4756 Use Debian repo version of nginx
It's older, and doesn't have `stream` compiled in, but the repo one can't link to any of the installed modules, which is a non-starter.
2024-01-04 14:17:36 +00:00
57ad143268 Set password for homeassistant SMB mount
It had an IP restriction, but still
2024-01-03 21:23:49 +00:00
16e9952b2f Replace custom restic logs with runitor 2024-01-03 21:09:07 +00:00
f5154d1683 Use CoreDNS to do recursive CNAME aliasing for AGH 2024-01-02 17:48:47 +00:00
3ed7074af6 Rename coredns role 2024-01-02 17:02:34 +00:00
5581bbc01a Replace pihole with adguardhome
AGH is much simpler to install and manage, and does DoH natively.
2024-01-01 15:48:14 +00:00
6a14679edf Only add IPv4 address for PVE sys domain
For some reason, ipv6 doesn't really work with my current setup. It'll change at another time, so it's future me's problem
2023-12-31 23:01:53 +00:00