1171 Commits

Author SHA1 Message Date
Jake Howard
699673c3b5
Update Synapse to 1.49.0 2021-12-15 20:19:51 +00:00
Jake Howard
9e899d0f52
Update nebula to 1.5.2 2021-12-15 20:18:25 +00:00
Jake Howard
bbfd872a24
Mount the whole host into the restic LXC, so I can backup PVE config 2021-12-11 13:17:58 +00:00
Jake Howard
4452cc4eeb
Update synapse to 1.47.1 2021-11-23 22:04:42 +00:00
Jake Howard
eed75d8648
Mount homeassistant data into restic for external backup 2021-11-21 21:53:35 +00:00
Jake Howard
47bcbd855e
Update nextcloud to 22.2.3 2021-11-16 21:04:54 +00:00
Jake Howard
5c0987de4d
Update uptime-kuma 2021-11-15 20:26:29 +00:00
Jake Howard
e1205564cb
Update nebula to 1.5.0 2021-11-15 20:26:20 +00:00
Jake Howard
ccaff503da
Move decker from AMS to Paris
The AMS DC has a bit of a flaky network connection, which isn't what you want for monitoring.
2021-11-06 16:45:09 +00:00
Jake Howard
64695c3be1
Don't pipe dat ainto curl for healthchecks
See https://github.com/IronicBadger/ansible-role-snapraid/pull/9
2021-11-04 16:46:59 +00:00
Jake Howard
ef22a43293
Update uptime-kuma to fix security issue 2021-10-29 21:52:09 +01:00
Jake Howard
1b4d5de701
Rename plausible embed router
There's nothing really "bare" about it
2021-10-29 20:47:02 +01:00
Jake Howard
0cb2a70d24
Upgrade Plausible to 1.4 2021-10-29 20:46:28 +01:00
Jake Howard
090745456f
Update vaultwarden to 1.23.0 2021-10-23 16:24:42 +01:00
Jake Howard
41fadd892e
Update uptime-kuma 2021-10-23 16:24:29 +01:00
Jake Howard
4cdaba4692
Swap certificates for wildcards 2021-10-18 21:59:10 +01:00
Jake Howard
ebb571bf20
Increase GC frequenc to work around restic's high memory usage
https://github.com/restic/restic/issues/1988
2021-10-15 12:39:16 +01:00
Jake Howard
6cc7d0b89e
Update synapse 2021-10-14 18:34:49 +01:00
Jake Howard
31208856c2
Pin uptime-kuma version
It's pretty important now
2021-10-14 18:34:00 +01:00
Jake Howard
6f0d4b60df
Run more web processes for tt-rss 2021-10-03 16:45:18 +01:00
Jake Howard
c867efbe3b
Use alternative container registries where available 2021-10-03 16:26:10 +01:00
Jake Howard
3727dd473c
Update synapse to 1.43 2021-10-01 21:17:13 +01:00
Jake Howard
7fd176466d
Update nextcloud to 22.2.0
Required quite some hacks around federatedfilesharing app not wanting to update
2021-10-01 20:52:07 +01:00
Jake Howard
4293d030d4
Don't lint globally installed roles 2021-09-27 14:50:08 +01:00
Jake Howard
4db474034e
Ignore my VMs from a fail2ban 2021-09-27 14:49:56 +01:00
Jake Howard
7e2d01c612
Change domain
Now there's a status page, we can consider it public
2021-09-25 21:34:18 +01:00
Jake Howard
3daf939b32
Update uptime-kuma container
Now does user management itself
2021-09-25 21:08:42 +01:00
Jake Howard
8a37a9d41b
Move uptime-kuma to decker 2021-09-25 21:03:56 +01:00
Jake Howard
a135aae5f3
Provision new VM
This will be used for monitoring
2021-09-25 16:59:23 +01:00
Jake Howard
48934ad2c5
Apply gzip to everything
The middleware is smart enough to only apply it when needed, and only when it's not already compressed, so it's fine.
2021-09-19 22:48:48 +01:00
Jake Howard
83ed8879dc
Correctly set smtp user for GitLab
The user and from are different in my case.
2021-09-19 22:34:40 +01:00
Jake Howard
178ca6b2c4
Add privatebin config
Disable super long expirations, among other things
2021-09-19 19:29:05 +01:00
Jake Howard
d70f450e2d
Change forget resolution to 30d
Restic is really annoying with its retention arguments, not really allowing what I want, so this is the easiest way to get decent retention.
2021-09-07 22:04:23 +01:00
Jake Howard
0a8167c839
Remove stray expose
Traefik picks up the port just fine
2021-09-07 21:04:19 +01:00
Jake Howard
eedba465c4
Update synapse 2021-09-07 21:04:04 +01:00
Jake Howard
a866938207
Fix hostname of restic server 2021-09-06 21:07:10 +01:00
Jake Howard
2db8ca5059
Add basic auth to dokku 2021-09-05 23:11:28 +01:00
Jake Howard
a278443850
Use auto on nginx configs
Let nginx work it out, and default to 1 per core
2021-09-04 22:41:30 +01:00
Jake Howard
6e25403b3d
Update synapse to 1.41.1 2021-08-31 19:08:38 +01:00
Jake Howard
86e9d12ce6
Update nextcloud to 22.1.1 2021-08-31 19:03:19 +01:00
Jake Howard
c2cd2e6e34
Add backups for grimes 2021-08-30 21:50:55 +01:00
Jake Howard
07b2ea2ccb
Add the ability to exclude certain paths from backup 2021-08-30 21:49:58 +01:00
Jake Howard
259b0ca7a6
Use upstream telegraf role
https://github.com/rossmcdonald/telegraf/pull/54 shipped
2021-08-30 21:22:26 +01:00
Jake Howard
dcbe6e8e72
Use upstream version of ansible-role-snapraid
https://github.com/IronicBadger/ansible-role-snapraid/pull/7 shipped
2021-08-30 21:21:58 +01:00
Jake Howard
95216b32c4
Consolidate server blocks 2021-08-24 14:31:12 +01:00
Jake Howard
453a374801
Replace ingress proxy with nginx
This enables HTTPS redirecting at it too much more easily, and matches the gateway configuration.

Requires using upstream versions of nginx to enable https://nginx.org/en/docs/stream/ngx_stream_realip_module.html
2021-08-24 14:21:51 +01:00
Jake Howard
f14e723d40
Fix service name on ingress
It's not alpine
2021-08-24 11:52:35 +01:00
Jake Howard
601b916b43
Remove deprecated clients from wireguard server
I use nebula now for all that
2021-08-24 11:14:04 +01:00
Jake Howard
edc5c325b7
Correctly check hostname against PVE hosts
Some of the hostnames have `-` in instead, which caused issues with the SSH config detecting which users to allow
2021-08-23 19:56:04 +01:00
Jake Howard
ecb946bab4
Remove nginx version from headers 2021-08-23 16:12:34 +01:00