Tips-Of-Mine/infrastructure
3
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
673 Commits 15 Branches 0 Tags
c4999d7b256cde180834d71d247f24d7d77236c0
Commit Graph
100 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Jake Howard c4999d7b25 Use ansible collections for things 2021-02-07 13:02:14 +00:00
Jake Howard e8496ddced Deploy deluge in docker 
Makes version managing so much easier!
 2021-02-01 17:24:36 +00:00
Jake Howard ac68b36841 Initially provision deluge machine 
Based on Docker, so deluge itself is easier to install and keep updated. Until such time it's in the repos
 2021-02-01 15:40:06 +00:00
Jake Howard 54eee03524 Fix YAML linting and service name 2021-01-31 17:27:44 +00:00
Jake Howard 7b9bab14fa Remove stray variables file 2021-01-31 16:56:25 +00:00
Jake Howard c7fba8107a Move grafana to forrest 2021-01-31 16:52:24 +00:00
Jake Howard a79e54d45a Add forrest instance 2021-01-31 15:18:20 +00:00
Jake Howard 058290b321 Keep track of IPs for PVE hosts 
Yea they're all random, I'll deal with that later
 2021-01-31 12:46:43 +00:00
Jake Howard 9023b269eb Allow PVE VMs to access nebula hosts via ingress 2021-01-31 12:19:33 +00:00
Jake Howard 643d843bfb Enable unsafe routing to PVE network over nebula 2021-01-30 22:59:56 +00:00
Jake Howard da301eb7dd Provision remaining nebula instances 2021-01-30 20:47:11 +00:00
Jake Howard 08ff5dcf94 Provision nebula certs using Ansible 2021-01-30 20:06:31 +00:00
Jake Howard 92815a6f76 Add platform-agnostic installation of nebula 2021-01-30 19:10:52 +00:00
Jake Howard 723372dd09 Name keys after hostname 2021-01-30 18:16:28 +00:00
Jake Howard 1ddb68224e Nebula actually runs over UDP 
derp
 2021-01-30 18:16:10 +00:00
Jake Howard 703b3b194f Make index read-only so it's not always reowned 2021-01-29 21:52:22 +00:00
Jake Howard 062742bc5e Update synapse 2021-01-29 21:44:34 +00:00
Jake Howard e1f3572a7c Set pages install directory correctly 2021-01-29 21:35:01 +00:00
Jake Howard c5050381fc Update plausible to v1.2 2021-01-29 21:34:44 +00:00
Jake Howard 698804ff38 Remove gitlab 2021-01-28 19:54:03 +00:00
Jake Howard 89a6c7680c Decommission walker 
Kimsufi is just too annoying of a host. Everything has either been moved off, killed, or has further plans.
 2021-01-28 18:56:39 +00:00
Jake Howard b339cb0e2d Move upload to grimes 2021-01-28 14:04:55 +00:00
Jake Howard 909f693cba Fix location of zpool command 
TIL lookups are executed on the host
 2021-01-26 22:02:58 +00:00
Jake Howard 3de14efd9e Remove heimdall 
I've literally not used it since setting it up
 2021-01-26 21:53:52 +00:00
Jake Howard a44a79031a Init some skeleton nebula stuff 2021-01-25 21:53:04 +00:00
Jake Howard 0ecd884a9a Deploy yourls 2021-01-22 21:29:27 +00:00
Jake Howard 2a8f715eca Add redis cache for gitea 2021-01-22 18:59:52 +00:00
Jake Howard cc847a069c Resolve zpool location 
Hopefully this means they actually run
 2021-01-22 15:29:41 +00:00
Jake Howard a2c6d7c276 Swap out alpine for debian on ingress 
Mostly for future nebula deployment
 2021-01-22 14:53:02 +00:00
Jake Howard 0f9802a46c Install duplicati on PVE docker machine 
Requires some changes to how private IPs are specified, which I really need to clean up at some point!
 2021-01-20 21:38:01 +00:00
Jake Howard f6c176d2f0 Ensure duplicati base is always updated 2021-01-20 21:30:25 +00:00
Jake Howard fce8cf3768 Update nextcloud 2021-01-20 20:58:28 +00:00
Jake Howard 76eeeec260 Update wallabag 2021-01-20 20:39:27 +00:00
Jake Howard 3321b852a5 Update traefik to v2.4 2021-01-20 20:33:57 +00:00
Jake Howard 700360eb96 Update synapse 2021-01-20 20:20:09 +00:00
Jake Howard 3e8a3b2c6b Update gotify 2021-01-20 20:02:01 +00:00
Jake Howard 48c507e0c3 Up page sizes for gitea stuff 
Screw paginating!
 2021-01-19 21:20:00 +00:00
Jake Howard 26905e245b Hide heatmap on gitea 
It's kinda useless at this scale
 2021-01-19 17:42:10 +00:00
Jake Howard 41915ec69c Replace gitlab with gitea 
Leave gitlab in place for a bit in case I need to get at data
 2021-01-18 20:14:38 +00:00
Jake Howard f519b18d38 Move website over to traefik-pages 
Woo rust!
 2021-01-17 21:41:32 +00:00
Jake Howard f9187109c7 Correct router name for pages 2021-01-17 20:03:02 +00:00
Jake Howard bef2468f12 Add gitea domain 
Configuration to come
 2021-01-17 17:03:12 +00:00
Jake Howard ac4a93e0ed Setup DNS for pages 2021-01-17 12:49:23 +00:00
Jake Howard b992df0313 Fix variable name for traefik conditional provider 2021-01-16 23:30:09 +00:00
Jake Howard 604202fdce Add traefik pages 
Add it ready for the migration in future
 2021-01-16 23:29:55 +00:00
Jake Howard e1ea938d59 Add file providers for jellyfin and HA 2021-01-13 22:12:58 +00:00
Jake Howard 969674772c Snapshot PVE root pool too 2021-01-10 13:23:36 +00:00
Jake Howard 7672d99aa8 Remove homeassistant configuration 
It's now in its own VM, and i'll deal with version control using the git integration there directly I suspect.
 2021-01-10 13:12:19 +00:00
Jake Howard b40266b276 Add roles to handle PVE nag and repos 2021-01-09 23:21:35 +00:00
Jake Howard 6dd86ea870 Limit ZFS ARC size on PVE 2021-01-09 22:32:55 +00:00
Jake Howard d87ec89887 Persist arc size 
Modprobe only loads the module, it doesn't ensure the ARC value persists correctly.
 2021-01-09 22:25:29 +00:00
Jake Howard 0c6e9969bc Give myself passwordless sudo access to zfs stuff 
This is needed for syncoid pulls
 2021-01-09 21:36:09 +00:00
Jake Howard c3053e9378 Fix location for sanoid install 
This makes it sync up with where the systemd services expect them to be
 2021-01-09 21:28:16 +00:00
Jake Howard 7d235e67e0 Add ZFS configuration for PVE 2021-01-09 21:27:52 +00:00
Jake Howard decf5176f7 Use systemd rather than cron for sanoid 
It's more reliable and easier to get logs
 2021-01-09 20:57:47 +00:00
Jake Howard 57d9c9d288 Allow configuring of pools to scrub 2021-01-09 20:52:51 +00:00
Jake Howard 721bdf60b3 Fix quotes 2021-01-09 18:32:16 +00:00
Jake Howard 1b72afdd29 Remove scrutiny role 
SMART checks are handeld by PVE / something else in future
 2021-01-09 18:30:28 +00:00
Jake Howard 0506a78d02 Listen on public port 
Makes connection so much easier
 2021-01-09 18:25:08 +00:00
Jake Howard 8fe8788458 Move ARC size to defaults so it can be easily changed 2021-01-09 18:24:52 +00:00
Jake Howard 5b495688cd Remove intersect wireguard keys 2021-01-09 18:23:10 +00:00
Jake Howard c38ecfebd7 Update gateway to point to ingress instance 2021-01-09 18:17:54 +00:00
Jake Howard fef7f2c2b4 Move docker containers to new PVE container 2021-01-09 18:02:17 +00:00
Jake Howard a35f2f91ff Default to using python3 over "legacy python" 2021-01-09 17:55:29 +00:00
Jake Howard 0355b6b214 Remove jellyfin docker config 
It'll be replaced by something else later, don't worry.
 2021-01-09 17:17:12 +00:00
Jake Howard 2300426f0f Move default variables into role defaults rather than group vars 2020-12-28 16:23:12 +00:00
Jake Howard 422062ae63 Fix lint warning around missing mode 
This only applies to directories https://stackoverflow.com/a/29793833
 2020-12-28 16:16:35 +00:00
Jake Howard 3338a1f898 Add jellyfin host 
Role TBC
 2020-12-28 16:08:15 +00:00
Jake Howard 6267363ab0 Provision docker VM 2020-12-28 15:57:44 +00:00
Jake Howard bdfd38c9fe Allow traefik to run on non-wireguard host 2020-12-28 15:55:45 +00:00
Jake Howard 4f1e54baab Actually enable timer 2020-12-28 15:14:50 +00:00
Jake Howard 58879d2e1d Ensure fail2ban and logrotate are available on all machines 2020-12-27 22:39:33 +00:00
Jake Howard b11dbfc829 Move traefik file provider to use directory rather than single file 
This makes future composition possible
 2020-12-22 15:53:03 +00:00
Jake Howard 0353887590 Add override to ensure ZFS starts before docker 
Stolen with love from https://github.com/IronicBadger/infra/commit/7dda0bc7cbb9a38e17561c80f40f518b9f472ef7
 2020-12-21 21:37:46 +00:00
Jake Howard 30cb9e52e7 Install and provision wireguard client on ingress server 2020-12-21 18:24:35 +00:00
Jake Howard 3197953796 Provision PVE and ingress VM 2020-12-21 17:11:38 +00:00
Jake Howard 44fb8f5380 Set some image resizing preferences 
This stops the thumbnailing being quite as intensive
 2020-12-11 17:39:58 +00:00
Jake Howard 2bfad84071 Pin wallabag to newer version 
2.4.0 came out *finally*
 2020-12-11 17:39:35 +00:00
Jake Howard 5a808e90e0 Update synapse 2020-12-11 17:36:06 +00:00
Jake Howard af1b7f754c Update nextcloud to 20.0.3 2020-12-11 17:35:50 +00:00
Jake Howard 8e6a3324a1 Install duplicati on grimes 
Makes backing up website things a bit easier
 2020-12-07 18:09:29 +00:00
Jake Howard 48e23e8c00 Track new linode instance in terraform 
The definition is pretty verbose. Apparently it does that if you create it through the UI
 2020-12-05 13:25:50 +00:00
Jake Howard 6d75272d34 Move plausible to new server 2020-12-05 12:33:50 +00:00
Jake Howard 87120ae0f3 Pin terraform provider versions 2020-12-04 23:11:25 +00:00
Jake Howard e1dd6c4c05 Init new web server on Linode 
I'll terraform it later, honest!
 2020-12-04 23:02:19 +00:00
Jake Howard 08bb8f22ca Add feediron plugin for tt-rss 2020-11-25 13:16:13 +00:00
Jake Howard b5d676b6fe Install fever plugin for tt-rss 
Had to chown the directory afterwards, as git wouldn't play nice with `become_user`
 2020-11-25 13:00:06 +00:00
Jake Howard 48762bcfcd Remove redundant quoting 2020-11-25 11:41:26 +00:00
Jake Howard a35ee7c824 Change base URL to default so the tracker script still uses disguised domain 2020-11-25 11:40:54 +00:00
Jake Howard 2b291548f9 Just do plain path replacement 2020-11-25 11:38:47 +00:00
Jake Howard a81e2793f8 Add a secondary domain for plausible less likely to match blockers 
Might change things, might not. But it's a fun experiment to try anyway.

Using a custom middleware to override the path due to https://github.com/plausible/analytics/pull/340
 2020-11-25 11:11:29 +00:00
Jake Howard 6c27401cd5 Replace terraform action with official one 2020-11-22 16:21:48 +00:00
Jake Howard e8d3a72ea8 Update nextcloud to 20.0.2 2020-11-22 15:40:23 +00:00
Jake Howard 1d8f54c778 Update synapse 2020-11-22 15:32:17 +00:00
Jake Howard 3ddfd77bdf Stop running synapse as root 2020-11-22 15:08:08 +00:00
Jake Howard 310feaf332 Use correct args to build synapse DB 2020-11-22 15:07:34 +00:00
Jake Howard 367de37fab Actually disable unnecessary logging rather than change level 
Also disable even more of them
 2020-11-12 23:01:32 +00:00
Jake Howard dfd77d104b Force yaml to be detected as its own language 
That's what most of this repo is, anyway.
 2020-11-11 09:05:08 +00:00
Jake Howard 2a4b3ec3e6 Increase timeout for SSH sessions 
Stll check relatively often the client is still there, but check many times so the connection stays open a decent amount of time. Especially useful for long-running commands.
 2020-11-08 22:04:30 +00:00
Jake Howard f5c7c094d3 Fix gotify container name 
Gotify != duplicati
 2020-11-08 11:07:57 +00:00