87 Commits

Author SHA1 Message Date
Jake Howard
4d218248fa
Remotely connect to fail2ban to do ports
Traefik can affect the edge, so blocks work there and prevent traffic hitting home network.
2021-03-28 16:06:36 +01:00
Jake Howard
6973fb536f
Add fail2ban for traefik
Remote action coming soon
2021-03-28 13:05:38 +01:00
Jake Howard
8398a2df21
Use endpoint middleware rather than hacky router 2021-03-27 23:34:34 +00:00
Jake Howard
1d997d3c33
Remove separate private and protected IP 2021-03-27 18:42:06 +00:00
Jake Howard
116e1adb50
Disable Traefik pilot on dashboard 2021-03-24 23:14:01 +00:00
Jake Howard
b264e5cbcc
Monitor traefik with prometheus rather than influxdb 2021-03-04 16:37:53 +00:00
Jake Howard
ec0c78e6d9
Read emails from secrets 2021-02-14 12:29:14 +00:00
Jake Howard
c7fba8107a
Move grafana to forrest 2021-01-31 16:52:24 +00:00
Jake Howard
058290b321
Keep track of IPs for PVE hosts
Yea they're all random, I'll deal with that later
2021-01-31 12:46:43 +00:00
Jake Howard
0f9802a46c
Install duplicati on PVE docker machine
Requires some changes to how private IPs are specified, which I really need to clean up at some point!
2021-01-20 21:38:01 +00:00
Jake Howard
3321b852a5
Update traefik to v2.4 2021-01-20 20:33:57 +00:00
Jake Howard
604202fdce
Add traefik pages
Add it ready for the migration in future
2021-01-16 23:29:55 +00:00
Jake Howard
e1ea938d59
Add file providers for jellyfin and HA 2021-01-13 22:12:58 +00:00
Jake Howard
fef7f2c2b4
Move docker containers to new PVE container 2021-01-09 18:02:17 +00:00
Jake Howard
bdfd38c9fe
Allow traefik to run on non-wireguard host 2020-12-28 15:55:45 +00:00
Jake Howard
b11dbfc829
Move traefik file provider to use directory rather than single file
This makes future composition possible
2020-12-22 15:53:03 +00:00
Jake Howard
c63506d2bc
Pin traefik to patch version 2020-10-27 16:13:14 +00:00
Jake Howard
6cfaa3a03a
Update traefik 2020-10-02 09:20:33 +01:00
Jake Howard
5079599b9d
Require TLS 1.2 2020-09-27 12:36:49 +01:00
Jake Howard
1ecfc5b7fa
Update traefik 2020-09-10 20:16:23 +01:00
Jake Howard
ea54d1be69
Expose pages sites 2020-09-05 20:33:57 +01:00
Jake Howard
e9aeed26ee
Use cloudflare DNS challenge for Traefik 2020-09-05 18:27:04 +01:00
Jake Howard
ec751ffa1a
Add influxdb to monitor traefik 2020-08-30 15:58:03 +01:00
Jake Howard
969b0bd8d9
Update traefik
Fixes GHSA-6qq8-5wq3-86rp
2020-07-30 21:46:44 +01:00
Jake Howard
3c7c0ec3fa
GZIP plausible traffic
Plausible doesn't gzip for itself. Funnily enough the tracker is actually too small to be compressed by Traefik!
2020-07-22 12:18:49 +01:00
Jake Howard
74d40ac915
Update traefik 2020-07-18 13:29:20 +01:00
Jake Howard
7a38207ef0
Update traefik 2020-07-15 14:53:36 +01:00
Jake Howard
bb5a5b61bd
Update traefik 2020-07-13 18:04:11 +01:00
Jake Howard
3c49c80ff1
Ensure traefik only listens on wireguard network 2020-07-12 19:29:18 +01:00
Jake Howard
fe5a5984c3
Remove container names from containers
They're not needed for anything, and caused annoying weird issues when cycling containers
2020-06-27 17:45:28 +01:00
Jake Howard
e051db5e71
Remove obsolete middleware 2020-06-24 18:48:39 +01:00
Jake Howard
f878866f10
Update yamllint 2020-06-18 20:49:12 +01:00
Jake Howard
ca188ab1b4
Rename middleware
It's not actually applying a HSTS header
2020-06-13 21:09:48 +01:00
Jake Howard
7dd31c0556
Allow nextcloud to be reached over internal SSL
This removes the need for a custom config, and means traefik is proxying HTTP2, which is nice
2020-05-24 19:21:17 +01:00
Jake Howard
0256570f1c
Update traefik 2020-04-30 21:50:18 +01:00
Jake Howard
3e523bd04b
Remove traefik subdomain 2020-04-25 12:15:28 +01:00
Jake Howard
89ba23719c
Move traefik into its own role 2020-04-23 20:49:43 +01:00