Jake Howard
|
f88d224168
|
Allow only exposing services over Tailscale
This works using public DNS, so doesn't need Tailscale's magic DNS to override my local.
|
2024-03-07 22:30:10 +00:00 |
|
Jake Howard
|
451a114262
|
Add IPv6 support for internal DNS overrides
CoreDNS 1.11.2 finally shipped!
|
2024-03-07 20:02:39 +00:00 |
|
Jake Howard
|
119b3212a9
|
Remove robots.txt for gitea
|
2024-03-04 08:38:16 +00:00 |
|
Renovate
|
5aae711cb8
|
Update vaultwarden/server Docker tag to v1.30.5
|
2024-03-04 08:33:59 +00:00 |
|
Renovate
|
f552332598
|
Update lscr.io/linuxserver/mastodon Docker tag to v4.2.8
|
2024-03-04 08:33:51 +00:00 |
|
Jake Howard
|
82451784a8
|
Deploy slides hosting
|
2024-03-03 21:39:22 +00:00 |
|
Jake Howard
|
000f3d3348
|
Add HSTS to all nginx requests
|
2024-03-03 21:37:07 +00:00 |
|
Jake Howard
|
0dcc3f7c30
|
Use regular version of nginx on Arch
`nginx-mainline` requires modules be recompiled each time, and isn't handled automatically. It's still a very new and maintained release.
|
2024-02-29 19:46:32 +00:00 |
|
Jake Howard
|
8a1e21c79d
|
Ensure headscale sees the correct IP
|
2024-02-29 17:41:29 +00:00 |
|
Jake Howard
|
998d798797
|
Set maintenance window for nextcloud
|
2024-02-21 21:57:03 +00:00 |
|
Jake Howard
|
11a93dac55
|
Update nextcloud version in config
|
2024-02-21 21:52:58 +00:00 |
|
Renovate
|
97da6edc13
|
Update dependency ansible-lint to v24
|
2024-02-21 21:47:29 +00:00 |
|
Renovate
|
d66708b10b
|
Update dependency artis3n.tailscale to v4.4.2
|
2024-02-21 21:43:33 +00:00 |
|
Renovate
|
7d64518840
|
Update matrixdotorg/synapse Docker tag to v1.101.0
|
2024-02-21 21:43:15 +00:00 |
|
Renovate
|
26bcf09fea
|
Update lscr.io/linuxserver/nextcloud Docker tag to v28.0.2
|
2024-02-21 21:42:50 +00:00 |
|
Jake Howard
|
808e72553b
|
Add the basics of some edge caching
|
2024-02-21 21:42:16 +00:00 |
|
Renovate
|
b513c88774
|
Update vaultwarden/server Docker tag to v1.30.3
|
2024-02-19 14:13:02 +00:00 |
|
Renovate
|
7741fbc163
|
Update vabene1111/recipes Docker tag to v1.5.13
|
2024-02-19 14:07:32 +00:00 |
|
Renovate
|
45cf930d14
|
Update lscr.io/linuxserver/mastodon Docker tag to v4.2.7
|
2024-02-17 08:00:21 +00:00 |
|
Jake Howard
|
58c48261e7
|
Consolidate vikunja container
|
2024-02-12 14:12:17 +00:00 |
|
Jake Howard
|
91a247868b
|
Add routes from forrest to tailscale network
|
2024-02-07 22:12:08 +00:00 |
|
Jake Howard
|
df43be6f9b
|
Set private_ip for some other machines
|
2024-02-07 19:27:48 +00:00 |
|
Jake Howard
|
b6eca40ae0
|
Allow tailscale IP in more places
|
2024-02-07 18:21:16 +00:00 |
|
Renovate
|
6c1c245c23
|
Update matrixdotorg/synapse Docker tag to v1.100.0
|
2024-02-02 13:38:12 +00:00 |
|
Renovate
|
379d4a26fa
|
Update vabene1111/recipes Docker tag to v1.5.12
|
2024-02-02 13:38:00 +00:00 |
|
Renovate
|
f1a2694f1a
|
Update lscr.io/linuxserver/mastodon Docker tag to v4.2.5
|
2024-02-02 13:37:05 +00:00 |
|
Jake Howard
|
02847355a7
|
Install tailscale
Install, not configure
|
2024-02-01 19:41:47 +00:00 |
|
Jake Howard
|
29cac09b48
|
Remove explicit port for headscale
|
2024-02-01 18:32:53 +00:00 |
|
Jake Howard
|
dba0262801
|
Remove website tmpfs
The server's disk is probably fast enough, and container restarts will nuke that storage anyway
|
2024-02-01 18:15:51 +00:00 |
|
Jake Howard
|
0c6528f9ca
|
Restrict access to headscale OIDC and API
|
2024-01-31 21:40:43 +00:00 |
|
Jake Howard
|
dfa8328e7b
|
Move gateway logs to separate file
|
2024-01-31 21:06:19 +00:00 |
|
Jake Howard
|
53c758a781
|
Monitor headscale with prometheus
|
2024-01-27 17:40:02 +00:00 |
|
Jake Howard
|
b51677b795
|
Back up headscale config
|
2024-01-27 15:04:53 +00:00 |
|
Jake Howard
|
2ceeaf091d
|
Deploy headscale
|
2024-01-27 14:18:37 +00:00 |
|
Jake Howard
|
06784563a7
|
Don't resolve ipv6
Something about this setup doesn't like it, so I'll disable v6 for now
|
2024-01-26 21:43:04 +00:00 |
|
Renovate
|
4f6f4143ce
|
Update matrixdotorg/synapse Docker tag to v1.99.0
|
2024-01-22 09:15:38 +00:00 |
|
Renovate
|
5292785cd9
|
Update wallabag/wallabag Docker tag to v2.6.8
|
2024-01-22 09:11:27 +00:00 |
|
Renovate
|
d297674fb5
|
Update vabene1111/recipes Docker tag to v1.5.11
|
2024-01-22 08:42:36 +00:00 |
|
Jake Howard
|
88f0828153
|
Use primary Quad9 servers
DNSSEC and malware blocking is probably useful, just in case
|
2024-01-21 23:19:49 +00:00 |
|
Jake Howard
|
cfc3de61b4
|
Add fallback quad9 address
This aids availability, along with a healthcheck
|
2024-01-21 23:05:25 +00:00 |
|
Jake Howard
|
c6bae0f797
|
Do simple endsWith matching for docker view
This saves the need for a regex
|
2024-01-14 22:27:02 +00:00 |
|
Jake Howard
|
4c5936b2aa
|
Disable Grafana analytics
|
2024-01-14 15:30:12 +00:00 |
|
Jake Howard
|
9d685d85aa
|
Update website deployment to unify containers
|
2024-01-14 14:22:19 +00:00 |
|
Jake Howard
|
ac166c3874
|
Start resolved to support mDNS
|
2024-01-10 13:28:45 +00:00 |
|
Jake Howard
|
06b9197c5b
|
Sync terraform state to restic
This allows it to be backed up easily
|
2024-01-09 19:56:06 +00:00 |
|
Jake Howard
|
4a69df1d6c
|
Ignore ansible-lint for nebula install block
I'm smarter than it is
|
2024-01-08 21:49:38 +00:00 |
|
Jake Howard
|
f33d19e156
|
Move AdGuardHome configuration to Terraform
https://git.theorangeone.net/systems/adguardhome
|
2024-01-08 21:45:28 +00:00 |
|
Jake Howard
|
ed59458f39
|
Add backups to tang
|
2024-01-08 19:20:55 +00:00 |
|
Jake Howard
|
616d20e23b
|
Tweak some AGH settings
|
2024-01-08 19:01:46 +00:00 |
|
Jake Howard
|
383a57d1f2
|
Use DoH endpoint fot quad9
Seems latency is much lower
|
2024-01-08 18:21:03 +00:00 |
|