Tips-Of-Mine/infrastructure
2
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
1,036 Commits 15 Branches 0 Tags
c54ce7b209831e68df96d0d9e59d40e82ae51580
Commit Graph

925 Commits

Author SHA1 Message Date
Jake Howard
f14e723d40 Fix service name on ingress 
It's not alpine
 2021-08-24 11:52:35 +01:00
Jake Howard
601b916b43 Remove deprecated clients from wireguard server 
I use nebula now for all that
 2021-08-24 11:14:04 +01:00
Jake Howard
edc5c325b7 Correctly check hostname against PVE hosts 
Some of the hostnames have `-` in instead, which caused issues with the SSH config detecting which users to allow
 2021-08-23 19:56:04 +01:00
Jake Howard
ecb946bab4 Remove nginx version from headers 2021-08-23 16:12:34 +01:00
Jake Howard
93cba46dd1 Redirect to HTTPS at the edge 2021-08-23 16:10:37 +01:00
Jake Howard
a54d373526 Replace edge proxy with nginx 
The config makes more sense, and it has more of the features I need, which will come later.
 2021-08-22 22:35:09 +01:00
Jake Howard
23fc7bbb12 Use slightly less memory for ZFS 2021-08-22 15:58:49 +01:00
Jake Howard
1d5616a36f Update roles so they support newer Debian versions 
I'm monitoring the PRs, don't worry
 2021-08-22 15:22:11 +01:00
Jake Howard
8fabd11e31 Remove unnecessary pve role 
no-subscription is handled by the nag removal role
 2021-08-22 15:20:27 +01:00
Jake Howard
f0a3585592 Use distribution name in repo URL 2021-08-22 14:44:34 +01:00
Jake Howard
0874158a91 Update traefik to 2.5 2021-08-22 11:16:37 +01:00
Jake Howard
c04e8b628a Update synapse to 1.40.0 2021-08-22 11:16:19 +01:00
Jake Howard
c99afdd446 Disable gzip on qbittorrent egress 
It's mostly used over the internal network, so the additional gzip isn't going to gain anything when the disk is the bottleneck
 2021-08-21 16:46:21 +01:00
Jake Howard
55e3b81f06 Install release version of gitlab-dater onto GitLab server 
Rather than than hacky development one I was using before
 2021-08-10 22:51:12 +01:00
Jake Howard
e421657619 Ensure restic gets the correct permissions when it's updated 
Yes it's weird to modify the system package like this, but it's very handy.

See also https://restic.readthedocs.io/en/stable/080_examples.html#backing-up-your-system-without-running-restic-as-root
 2021-08-10 08:45:59 +01:00
Jake Howard
ab46c30df2 Start graphing some speeds 2021-08-07 10:59:42 +01:00
Jake Howard
d0e472b51a Update synapse to 1.39.0 2021-08-06 18:20:48 +01:00
Jake Howard
11bf501d8a Update nextcloud to 22.1.0 2021-08-06 18:20:38 +01:00
Jake Howard
9755974647 Update vaultwarden to 1.22.2 2021-08-06 18:17:22 +01:00
Jake Howard
f3bc72d2ba Provision uptime-kuma 2021-07-31 16:43:12 +01:00
Jake Howard
1399529a47 Move stray storage to tank 2021-07-17 20:32:26 +01:00
Jake Howard
8f831c8191 Update synapse to 1.37.1 2021-07-11 20:20:56 +01:00
Jake Howard
501fe81979 Update nextcloud to v22 2021-07-11 20:20:48 +01:00
Jake Howard
3daf3ef8ed Pin clickhouse to 21.6 
21.7 doesn't work
 2021-07-11 16:11:09 +01:00
Jake Howard
b2d226300b Update nextcloud to 21.0.3 2021-07-04 21:17:03 +01:00
Jake Howard
19eb233ffa Update vaultwarden to 1.22.1 2021-07-03 11:27:27 +01:00
Jake Howard
797c44a27d Use proxy protocol v2 
Apparently it's better for chaining, and may be faster anyway
 2021-07-01 22:28:25 +01:00
Jake Howard
b6adc53746 Revert "Capture stderr in logs, too" 
This reverts commit 8696f6d93f.

Yeah, this doesn't work. Syntax and intention.
 2021-06-28 08:33:08 +01:00
Jake Howard
41a8fe3b4d Use logrotate for backrest logging rather than nuking immediately 
Just in case something goes wrong with healthchecks
 2021-06-27 10:58:01 +01:00
Jake Howard
8696f6d93f Capture stderr in logs, too 2021-06-27 10:53:13 +01:00
Jake Howard
1c07534c40 Stop resetting dokku hostname to default 2021-06-26 21:27:39 +01:00
Jake Howard
40e785de38 Add yet more metric sources 2021-06-26 12:52:55 +01:00
Jake Howard
32f17908ad Collect metrics on disk usage 2021-06-26 12:36:00 +01:00
Jake Howard
77d2b82761 Add healthchecks for snapraid 2021-06-26 11:45:56 +01:00
Jake Howard
18603d726e Add username to proxmox-nag-removal role 
Makes it obviously not one of mine
 2021-06-25 22:47:21 +01:00
Jake Howard
09a010f28e Version snapraid config 
Using fork of role at https://github.com/IronicBadger/ansible-role-snapraid/pull/7
 2021-06-25 22:43:26 +01:00
Jake Howard
b82e87c04b Remove unnecessary which 
`cron` doesn't need a full path
 2021-06-25 20:57:19 +01:00
Jake Howard
50c5ed68e3 Install some dokku plugins 2021-06-22 22:57:02 +01:00
Jake Howard
83c84abc62 Use dokku role to install it 
I also switched the host to debian, as the arch install didn't quite work.
 2021-06-22 22:08:01 +01:00
Jake Howard
9296c88ae4 Remove date from DB backups 2021-06-20 15:23:15 +01:00
Jake Howard
bb5bbf16f5 Remove alpine special case 
https://github.com/ansible-collections/community.general/pull/1722 has shipped.
 2021-06-20 12:43:59 +01:00
Jake Howard
8948437b66 Use official extension 2021-06-20 12:39:58 +01:00
Jake Howard
e3502ae1e0 Provision dokku server 2021-06-20 12:12:34 +01:00
Jake Howard
b20ffb27c4 Remove gotify 
Never used it
 2021-06-12 19:00:39 +01:00
Jake Howard
4e5fa59c58 Add redis 
This isn't really used as a cache, but it is for a couple bits, so nice to enable it anyway, and it might become so in future
 2021-06-12 18:53:50 +01:00
Jake Howard
290b147821 Thin out synapse config 
Previously it was the vast majority of code in the whole repo. Now we only define the necessary keys, and rely much more on defaults, which is nice!
 2021-06-12 18:49:29 +01:00
Jake Howard
47e546d51a Add synapse-admin 
Useful to see what's going on on the server
 2021-06-12 18:09:18 +01:00
Jake Howard
3485f8e1f0 Actually version the ingress haproxy config 2021-06-12 17:32:47 +01:00
Jake Howard
33fcf1a9e5 Fix matrix federation 
Apparently this has been broken since like March...

It seems communication over port 8448 is required for server-to-server
comms, even if the client doesn't use it.
 2021-06-12 17:32:47 +01:00
Jake Howard
94e4592db6 Update synapse to 1.35.1 2021-06-12 16:46:16 +01:00