Commit Graph

1587 Commits

Author SHA1 Message Date
Jake Howard
f88d224168 Allow only exposing services over Tailscale
This works using public DNS, so doesn't need Tailscale's magic DNS to override my local.
2024-03-07 22:30:10 +00:00
Jake Howard
451a114262 Add IPv6 support for internal DNS overrides
CoreDNS 1.11.2 finally shipped!
2024-03-07 20:02:39 +00:00
Jake Howard
119b3212a9 Remove robots.txt for gitea 2024-03-04 08:38:16 +00:00
Renovate
fb0830e9fc Update actions/setup-python action to v5 2024-03-04 08:35:57 +00:00
Renovate
5aae711cb8 Update vaultwarden/server Docker tag to v1.30.5 2024-03-04 08:33:59 +00:00
Renovate
f552332598 Update lscr.io/linuxserver/mastodon Docker tag to v4.2.8 2024-03-04 08:33:51 +00:00
Jake Howard
82451784a8 Deploy slides hosting 2024-03-03 21:39:22 +00:00
Jake Howard
000f3d3348 Add HSTS to all nginx requests 2024-03-03 21:37:07 +00:00
Jake Howard
0dcc3f7c30 Use regular version of nginx on Arch
`nginx-mainline` requires modules be recompiled each time, and isn't handled automatically. It's still a very new and maintained release.
2024-02-29 19:46:32 +00:00
Jake Howard
8a1e21c79d Ensure headscale sees the correct IP 2024-02-29 17:41:29 +00:00
Jake Howard
998d798797 Set maintenance window for nextcloud 2024-02-21 21:57:03 +00:00
Jake Howard
11a93dac55 Update nextcloud version in config 2024-02-21 21:52:58 +00:00
Renovate
97da6edc13 Update dependency ansible-lint to v24 2024-02-21 21:47:29 +00:00
Renovate
d66708b10b Update dependency artis3n.tailscale to v4.4.2 2024-02-21 21:43:33 +00:00
Renovate
7d64518840 Update matrixdotorg/synapse Docker tag to v1.101.0 2024-02-21 21:43:15 +00:00
Renovate
26bcf09fea Update lscr.io/linuxserver/nextcloud Docker tag to v28.0.2 2024-02-21 21:42:50 +00:00
Jake Howard
808e72553b Add the basics of some edge caching 2024-02-21 21:42:16 +00:00
Renovate
b513c88774 Update vaultwarden/server Docker tag to v1.30.3 2024-02-19 14:13:02 +00:00
Renovate
7741fbc163 Update vabene1111/recipes Docker tag to v1.5.13 2024-02-19 14:07:32 +00:00
Renovate
45cf930d14 Update lscr.io/linuxserver/mastodon Docker tag to v4.2.7 2024-02-17 08:00:21 +00:00
Jake Howard
58c48261e7 Consolidate vikunja container 2024-02-12 14:12:17 +00:00
Jake Howard
91a247868b Add routes from forrest to tailscale network 2024-02-07 22:12:08 +00:00
Jake Howard
df43be6f9b Set private_ip for some other machines 2024-02-07 19:27:48 +00:00
Jake Howard
b6eca40ae0 Allow tailscale IP in more places 2024-02-07 18:21:16 +00:00
Renovate
6c1c245c23 Update matrixdotorg/synapse Docker tag to v1.100.0 2024-02-02 13:38:12 +00:00
Renovate
379d4a26fa Update vabene1111/recipes Docker tag to v1.5.12 2024-02-02 13:38:00 +00:00
Renovate
f1a2694f1a Update lscr.io/linuxserver/mastodon Docker tag to v4.2.5 2024-02-02 13:37:05 +00:00
Jake Howard
02847355a7 Install tailscale
Install, not configure
2024-02-01 19:41:47 +00:00
Jake Howard
29cac09b48 Remove explicit port for headscale 2024-02-01 18:32:53 +00:00
Jake Howard
dba0262801 Remove website tmpfs
The server's disk is probably fast enough, and container restarts will nuke that storage anyway
2024-02-01 18:15:51 +00:00
Jake Howard
0c6528f9ca Restrict access to headscale OIDC and API 2024-01-31 21:40:43 +00:00
Jake Howard
dfa8328e7b Move gateway logs to separate file 2024-01-31 21:06:19 +00:00
Jake Howard
53c758a781 Monitor headscale with prometheus 2024-01-27 17:40:02 +00:00
Jake Howard
b51677b795 Back up headscale config 2024-01-27 15:04:53 +00:00
Jake Howard
2ceeaf091d Deploy headscale 2024-01-27 14:18:37 +00:00
Jake Howard
06784563a7 Don't resolve ipv6
Something about this setup doesn't like it, so I'll disable v6 for now
2024-01-26 21:43:04 +00:00
Renovate
4f6f4143ce Update matrixdotorg/synapse Docker tag to v1.99.0 2024-01-22 09:15:38 +00:00
Renovate
5292785cd9 Update wallabag/wallabag Docker tag to v2.6.8 2024-01-22 09:11:27 +00:00
Renovate
d297674fb5 Update vabene1111/recipes Docker tag to v1.5.11 2024-01-22 08:42:36 +00:00
Jake Howard
88f0828153 Use primary Quad9 servers
DNSSEC and malware blocking is probably useful, just in case
2024-01-21 23:19:49 +00:00
Jake Howard
cfc3de61b4 Add fallback quad9 address
This aids availability, along with a healthcheck
2024-01-21 23:05:25 +00:00
Jake Howard
c6bae0f797 Do simple endsWith matching for docker view
This saves the need for a regex
2024-01-14 22:27:02 +00:00
Jake Howard
4c5936b2aa Disable Grafana analytics 2024-01-14 15:30:12 +00:00
Jake Howard
9d685d85aa Update website deployment to unify containers 2024-01-14 14:22:19 +00:00
Jake Howard
ac166c3874 Start resolved to support mDNS 2024-01-10 13:28:45 +00:00
Jake Howard
06b9197c5b Sync terraform state to restic
This allows it to be backed up easily
2024-01-09 19:56:06 +00:00
Jake Howard
4a69df1d6c Ignore ansible-lint for nebula install block
I'm smarter than it is
2024-01-08 21:49:38 +00:00
Jake Howard
f33d19e156 Move AdGuardHome configuration to Terraform
https://git.theorangeone.net/systems/adguardhome
2024-01-08 21:45:28 +00:00
Jake Howard
ed59458f39 Add backups to tang 2024-01-08 19:20:55 +00:00
Jake Howard
616d20e23b Tweak some AGH settings 2024-01-08 19:01:46 +00:00