Jake Howard
|
bf73cfa846
|
Close some ports which don't need to be open
|
2021-09-25 17:04:28 +01:00 |
|
Jake Howard
|
a135aae5f3
|
Provision new VM
This will be used for monitoring
|
2021-09-25 16:59:23 +01:00 |
|
Jake Howard
|
48934ad2c5
|
Apply gzip to everything
The middleware is smart enough to only apply it when needed, and only when it's not already compressed, so it's fine.
|
2021-09-19 22:48:48 +01:00 |
|
Jake Howard
|
83ed8879dc
|
Correctly set smtp user for GitLab
The user and from are different in my case.
|
2021-09-19 22:34:40 +01:00 |
|
Jake Howard
|
178ca6b2c4
|
Add privatebin config
Disable super long expirations, among other things
|
2021-09-19 19:29:05 +01:00 |
|
Jake Howard
|
d70f450e2d
|
Change forget resolution to 30d
Restic is really annoying with its retention arguments, not really allowing what I want, so this is the easiest way to get decent retention.
|
2021-09-07 22:04:23 +01:00 |
|
Jake Howard
|
0a8167c839
|
Remove stray expose
Traefik picks up the port just fine
|
2021-09-07 21:04:19 +01:00 |
|
Jake Howard
|
eedba465c4
|
Update synapse
|
2021-09-07 21:04:04 +01:00 |
|
Jake Howard
|
a866938207
|
Fix hostname of restic server
|
2021-09-06 21:07:10 +01:00 |
|
Jake Howard
|
2db8ca5059
|
Add basic auth to dokku
|
2021-09-05 23:11:28 +01:00 |
|
Jake Howard
|
a278443850
|
Use auto on nginx configs
Let nginx work it out, and default to 1 per core
|
2021-09-04 22:41:30 +01:00 |
|
Jake Howard
|
6e25403b3d
|
Update synapse to 1.41.1
|
2021-08-31 19:08:38 +01:00 |
|
Jake Howard
|
86e9d12ce6
|
Update nextcloud to 22.1.1
|
2021-08-31 19:03:19 +01:00 |
|
Jake Howard
|
c2cd2e6e34
|
Add backups for grimes
|
2021-08-30 21:50:55 +01:00 |
|
Jake Howard
|
07b2ea2ccb
|
Add the ability to exclude certain paths from backup
|
2021-08-30 21:49:58 +01:00 |
|
Jake Howard
|
259b0ca7a6
|
Use upstream telegraf role
https://github.com/rossmcdonald/telegraf/pull/54 shipped
|
2021-08-30 21:22:26 +01:00 |
|
Jake Howard
|
dcbe6e8e72
|
Use upstream version of ansible-role-snapraid
https://github.com/IronicBadger/ansible-role-snapraid/pull/7 shipped
|
2021-08-30 21:21:58 +01:00 |
|
Jake Howard
|
95216b32c4
|
Consolidate server blocks
|
2021-08-24 14:31:12 +01:00 |
|
Jake Howard
|
453a374801
|
Replace ingress proxy with nginx
This enables HTTPS redirecting at it too much more easily, and matches the gateway configuration.
Requires using upstream versions of nginx to enable https://nginx.org/en/docs/stream/ngx_stream_realip_module.html
|
2021-08-24 14:21:51 +01:00 |
|
Jake Howard
|
f14e723d40
|
Fix service name on ingress
It's not alpine
|
2021-08-24 11:52:35 +01:00 |
|
Jake Howard
|
601b916b43
|
Remove deprecated clients from wireguard server
I use nebula now for all that
|
2021-08-24 11:14:04 +01:00 |
|
Jake Howard
|
edc5c325b7
|
Correctly check hostname against PVE hosts
Some of the hostnames have `-` in instead, which caused issues with the SSH config detecting which users to allow
|
2021-08-23 19:56:04 +01:00 |
|
Jake Howard
|
ecb946bab4
|
Remove nginx version from headers
|
2021-08-23 16:12:34 +01:00 |
|
Jake Howard
|
93cba46dd1
|
Redirect to HTTPS at the edge
|
2021-08-23 16:10:37 +01:00 |
|
Jake Howard
|
a54d373526
|
Replace edge proxy with nginx
The config makes more sense, and it has more of the features I need, which will come later.
|
2021-08-22 22:35:09 +01:00 |
|
Jake Howard
|
23fc7bbb12
|
Use slightly less memory for ZFS
|
2021-08-22 15:58:49 +01:00 |
|
Jake Howard
|
1d5616a36f
|
Update roles so they support newer Debian versions
I'm monitoring the PRs, don't worry
|
2021-08-22 15:22:11 +01:00 |
|
Jake Howard
|
8fabd11e31
|
Remove unnecessary pve role
no-subscription is handled by the nag removal role
|
2021-08-22 15:20:27 +01:00 |
|
Jake Howard
|
f0a3585592
|
Use distribution name in repo URL
|
2021-08-22 14:44:34 +01:00 |
|
Jake Howard
|
0874158a91
|
Update traefik to 2.5
|
2021-08-22 11:16:37 +01:00 |
|
Jake Howard
|
c04e8b628a
|
Update synapse to 1.40.0
|
2021-08-22 11:16:19 +01:00 |
|
Jake Howard
|
c99afdd446
|
Disable gzip on qbittorrent egress
It's mostly used over the internal network, so the additional gzip isn't going to gain anything when the disk is the bottleneck
|
2021-08-21 16:46:21 +01:00 |
|
Jake Howard
|
55e3b81f06
|
Install release version of gitlab-dater onto GitLab server
Rather than than hacky development one I was using before
|
2021-08-10 22:51:12 +01:00 |
|
Jake Howard
|
e421657619
|
Ensure restic gets the correct permissions when it's updated
Yes it's weird to modify the system package like this, but it's very handy.
See also https://restic.readthedocs.io/en/stable/080_examples.html#backing-up-your-system-without-running-restic-as-root
|
2021-08-10 08:45:59 +01:00 |
|
Jake Howard
|
ab46c30df2
|
Start graphing some speeds
|
2021-08-07 10:59:42 +01:00 |
|
Jake Howard
|
d0e472b51a
|
Update synapse to 1.39.0
|
2021-08-06 18:20:48 +01:00 |
|
Jake Howard
|
11bf501d8a
|
Update nextcloud to 22.1.0
|
2021-08-06 18:20:38 +01:00 |
|
Jake Howard
|
9755974647
|
Update vaultwarden to 1.22.2
|
2021-08-06 18:17:22 +01:00 |
|
Jake Howard
|
f3bc72d2ba
|
Provision uptime-kuma
|
2021-07-31 16:43:12 +01:00 |
|
Jake Howard
|
1399529a47
|
Move stray storage to tank
|
2021-07-17 20:32:26 +01:00 |
|
Jake Howard
|
8f831c8191
|
Update synapse to 1.37.1
|
2021-07-11 20:20:56 +01:00 |
|
Jake Howard
|
501fe81979
|
Update nextcloud to v22
|
2021-07-11 20:20:48 +01:00 |
|
Jake Howard
|
65eb6efe5a
|
Remove GitHub CI
|
2021-07-11 18:30:59 +01:00 |
|
Jake Howard
|
322843b3c1
|
chmod the correct directory
|
2021-07-11 18:20:13 +01:00 |
|
Jake Howard
|
c6266728b4
|
Fix directory permissions before install
|
2021-07-11 18:12:54 +01:00 |
|
Jake Howard
|
0364cbade5
|
Ensure current directory isn't world writable
See https://docs.ansible.com/ansible/devel/reference_appendices/config.html#cfg-in-world-writable-dir
|
2021-07-11 18:07:15 +01:00 |
|
Jake Howard
|
b0cc416d69
|
OK fine use slim and install things there
Needs a build pipeline
|
2021-07-11 17:56:31 +01:00 |
|
Jake Howard
|
e183315f02
|
Explicitly add bash
Now might as well use the alpine container
|
2021-07-11 17:50:46 +01:00 |
|
Jake Howard
|
ec9095a117
|
Use a full terraform container, not just the binary
|
2021-07-11 17:47:56 +01:00 |
|
Jake Howard
|
36f33c2547
|
Use slim python container
|
2021-07-11 17:47:42 +01:00 |
|