Commit Graph

231 Commits

Author SHA1 Message Date
Jake Howard 311ca53db1
Only send DMARC failures
/ ansible (push) Successful in 1m51s Details
/ terraform (push) Successful in 38s Details
2023-04-28 20:55:46 +01:00
Jake Howard 297e2e0dba
Configure Backblaze with terraform
/ terraform (push) Successful in 40s Details
/ ansible (push) Successful in 1m40s Details
2023-04-28 17:57:58 +01:00
Jake Howard ca9927e1f9
Remove Dallas probe
/ ansible (push) Successful in 1m36s Details
/ terraform (push) Successful in 32s Details
The Dallas probe seems quite flakey at the moment, and I have enough US coverage with the east and west coasts
2023-04-27 10:08:33 +01:00
Jake Howard b68cb9cd96
Move 0rng.one DNS to Gandi 2023-04-23 20:26:11 +01:00
Jake Howard 8f9e89d4f6
Use sys hostname for walker domains
/ terraform (push) Successful in 1m4s Details
/ ansible (push) Successful in 3m1s Details
2023-04-23 18:08:38 +01:00
Jake Howard dc75f0942a
Use sys hostname for grimes domains 2023-04-23 17:48:15 +01:00
Jake Howard 955db140b1
Monitor servers over V6 2023-04-23 17:42:34 +01:00
Jake Howard 0b65498330
Add v6 for reverse domains
/ terraform (push) Successful in 1m15s Details
/ ansible (push) Successful in 3m14s Details
2023-04-23 13:56:44 +01:00
Jake Howard d52f0bc8b2
Remove gitlab configuration 2023-03-30 22:56:35 +01:00
Jake Howard f5a066f050
Lowercase my gitlab username
ansible Details
terraform Details
2023-03-29 23:04:12 +01:00
Jake Howard 98b013be2a
Update gitlab pages verification token for notes 2023-03-29 23:03:41 +01:00
Jake Howard a78c4680c4
Move notes to GitLab
ansible Details
terraform Details
2023-03-29 22:36:03 +01:00
Renovate 99454389f7 Update Terraform aws to v4.60.0 2023-03-24 08:02:12 +00:00
Jake Howard b9c2390907 Merge branch 'renovate/aws-4.x' into 'master'
Update Terraform aws to v4

See merge request sys/infrastructure!114
2023-03-19 17:30:56 +00:00
Jake Howard 4eb77274f8 Merge branch 'renovate/cloudflare-2.x' into 'master'
Update Terraform cloudflare to v2.27.0

See merge request sys/infrastructure!73
2023-03-19 17:29:20 +00:00
Renovate 8dedfde4b0 Update Terraform aws to v4 2023-03-16 22:01:34 +00:00
Renovate 086ce2cc77 Update Terraform grafana to v1.36.1 2023-03-10 16:00:53 +00:00
Jake Howard 92012a42e1
Remove authentik
It's a bigger application than I need, and I wasn't actually using it for anything anyway
2023-02-23 19:50:44 +00:00
Jake Howard a6d0a36dac
Update terraform lock 2023-02-21 20:12:56 +00:00
Jake Howard c00eb69fee Merge branch 'renovate/linode-1.x' into 'master'
Update Terraform linode to v1.30.0

See merge request sys/infrastructure!74
2023-02-21 19:45:49 +00:00
Jake Howard 9888c806eb Merge branch 'renovate/aws-3.x' into 'master'
Update Terraform aws to v3.76.1

See merge request sys/infrastructure!72
2023-02-21 19:36:21 +00:00
Jake Howard c6dc6514a8 Merge branch 'renovate/vultr-2.x' into 'master'
Update Terraform vultr to v2.12.1

See merge request sys/infrastructure!75
2023-02-21 18:08:31 +00:00
Jake Howard 537bdcd1f9
Lock vultr provider version
No idea how this wasn't already
2023-02-21 08:47:32 +00:00
Jake Howard 7230c765cc
Upgrade walker VM
More RAM is needed here for clickhouse and website
2023-02-21 08:47:21 +00:00
Jake Howard 65f14d8930
Fix terraform linting 2023-02-20 08:35:24 +00:00
Jake Howard 6282c13db6
Make sure grafana alerts actually notify 2023-02-15 13:53:20 +00:00
Renovate e52ba22332 Update Terraform linode to v1.30.0 2023-02-13 10:03:15 +00:00
Renovate 78d12da8c8 Update Terraform cloudflare to v2.27.0 2023-02-13 10:02:55 +00:00
Renovate bf7e7d56c1 Update Terraform aws to v3.76.1 2023-02-13 10:02:28 +00:00
Renovate 24cde27c6b Update Terraform vultr to v2.12.1 2023-02-12 20:02:12 +00:00
Jake Howard aba209f46d
Replace uptimerobot with grafana cloud 2023-02-12 16:35:12 +00:00
Jake Howard 543b8a1356
Mark variables as sensitive 2023-02-08 20:57:20 +00:00
Jake Howard 5210e66921
Init Gandi terraform provider 2023-02-08 20:55:23 +00:00
Jake Howard a443d56a1c
Add a gitea deployment
Yep, it's that time of year _again_
2023-01-27 17:28:45 +00:00
Jake Howard 120b7d97c4
Explicitly allow cross-domain DMARC reports 2023-01-26 12:11:01 +00:00
Jake Howard d08268baba
Remove pct tag from DMARC
This is the default
2023-01-26 12:02:12 +00:00
Jake Howard 7a89e7f3bc
Define alert contacts for uptimerobot monitors 2022-12-09 19:05:35 +00:00
Jake Howard e86ed81102
Decommission `decker` server
It's been replaced by prometheus running internally, and uptimerobot checking.
2022-12-09 19:04:54 +00:00
Jake Howard 413400cbc6
Terraform uptimerobot 2022-12-08 21:55:03 +00:00
Jake Howard e89f13b8a9
Add collabora 2022-12-02 22:37:42 +00:00
Jake Howard 3ec359ed0e
Deploy me a mastodon 2022-11-18 09:12:28 +00:00
Jake Howard c91b1ba871
Allow website to handle traffic to second domain 2022-11-16 14:56:17 +00:00
Jake Howard 77e83fec6d
Fix synapse-admin URL
It no longer supports being run on a subdirectory with the stock container
2022-11-07 13:57:14 +00:00
Jake Howard d81ed290d7
Put the new website live 2022-10-30 12:04:15 +00:00
Jake Howard 58730fcbeb
Move pages hosting to GitLab pages 2022-10-09 18:26:49 +01:00
Jake Howard 6d890a6991
Setup slides domain 2022-10-08 17:37:28 +01:00
Jake Howard 41582f50db
Set up GitLab pages 2022-10-08 15:51:37 +01:00
Jake Howard 1eaa33e664
Add DMARC to mailgun 2022-09-22 21:29:21 +01:00
Jake Howard 8c1f088b19
Harden DMARC and SPF rules
Hopefully people still get my emails...
2022-09-22 21:26:26 +01:00
Jake Howard 6268c0f451
Add DNS records for mailgun 2022-09-22 21:22:05 +01:00
Jake Howard 72795591ac
Add DMARC 2022-09-22 21:12:41 +01:00
Jake Howard f49b26c6f0
Deploy authentik
Not integrated into other services quite yet. But it's there
2022-09-18 18:49:17 +01:00
Jake Howard cc3f980d34
Deploy tandoor 2022-08-24 22:17:29 +01:00
Jake Howard b62f8001bb
Deploy commento++ 2022-06-05 15:44:49 +01:00
Jake Howard da450c08dd
Decommission k8s environment
Need a little more time in the playground before I have use of a production-grade environment. Especially when it's costing $20/mo
2022-05-02 21:44:33 +01:00
Jake Howard b8736e1c65
Create VPN for port 53 2022-03-18 19:44:06 +00:00
Jake Howard 812e828862
Allow unprivileged ports to access cluster
This is needed for ingress-nginx
2022-03-07 20:32:14 +00:00
Jake Howard 3ad719a4e7
Init a k8s
May god have mercy on my ~soul~.

The firewall config may not be valid, due to node recycling, but here's hoping!
2022-03-03 21:50:24 +00:00
Jake Howard 2715161929
Make sure SSH port is exposed on `grimes`
This is needed for dokku deployments
2022-03-03 20:29:53 +00:00
Jake Howard 293aed0fd3
Enable GitLab registry 2022-02-25 21:48:13 +00:00
Jake Howard 6b63c2685b
Add an additional domain for matrix
I'll migrate over to this eventually. But doing a hard migration has just wasted my entire evening...
2022-02-13 20:54:46 +00:00
Jake Howard 722b964bc9
Add Google Search Console integration to Plausible 2022-02-13 16:43:09 +00:00
Jake Howard 151c5bc1d9
Decommission casey instance in vultr
The end of an era, my oldest server.
2022-01-30 21:00:38 +00:00
Jake Howard af396a21cb
Provision a new `casey`on Linode 2022-01-21 21:52:21 +00:00
Jake Howard 619d5bfa7b
Give every cloud machine its own cname 2022-01-19 08:44:21 +00:00
Jake Howard af07840de7
Harden SPF 2022-01-19 08:19:51 +00:00
Jake Howard db68c107d0
Decommission decker on Vultr 2022-01-11 19:25:04 +00:00
Jake Howard ceb62cc0c8
Open the right ports so web traffic will flow 2022-01-11 09:08:23 +00:00
Jake Howard cf0e718bfb
Migrate decker services to linode
Mostly just uptime-kuma
2022-01-11 09:07:48 +00:00
Jake Howard 50398eac07
Commit the terraform lock file
It tells you to
2022-01-08 22:12:44 +00:00
Jake Howard e50a1f9a72
Privision a decker on linode 2022-01-08 22:12:28 +00:00
Jake Howard 0a13f78d29
Add linode to terraform setup
Let the migration, begin!
2022-01-08 22:11:34 +00:00
Jake Howard 66c48c4a69
Remove old domain for vaultwarden
It's been long enough
2021-12-22 15:41:14 +00:00
Jake Howard ccaff503da
Move decker from AMS to Paris
The AMS DC has a bit of a flaky network connection, which isn't what you want for monitoring.
2021-11-06 16:45:09 +00:00
Jake Howard 4db474034e
Ignore my VMs from a fail2ban 2021-09-27 14:49:56 +01:00
Jake Howard 7e2d01c612
Change domain
Now there's a status page, we can consider it public
2021-09-25 21:34:18 +01:00
Jake Howard 8a37a9d41b
Move uptime-kuma to decker 2021-09-25 21:03:56 +01:00
Jake Howard bf73cfa846
Close some ports which don't need to be open 2021-09-25 17:04:28 +01:00
Jake Howard a135aae5f3
Provision new VM
This will be used for monitoring
2021-09-25 16:59:23 +01:00
Jake Howard f3bc72d2ba
Provision uptime-kuma 2021-07-31 16:43:12 +01:00
Jake Howard 7f597dbf87
Serve `notes` from dokku 2021-06-26 21:30:04 +01:00
Jake Howard e3502ae1e0
Provision dokku server 2021-06-20 12:12:34 +01:00
Jake Howard b20ffb27c4
Remove gotify
Never used it
2021-06-12 19:00:39 +01:00
Jake Howard d751a023da
Promote GitLab to main `git.` domain 2021-06-02 19:49:28 +01:00
Jake Howard 69abafd8c8
Put GitLab on a real domain 2021-05-29 16:21:47 +01:00
Jake Howard 48e07d2a7e
Rename more bitwarden things
Serving on both domains currently, i'll migrate clients and fix that
2021-05-18 22:18:05 +01:00
Jake Howard 71a30c8815
Reduce history for TF state 2021-05-18 19:33:38 +01:00
Jake Howard 9b31efbf43
Destroy `grimes`
And the entire Linode integration
2021-05-05 18:11:14 +01:00
Jake Howard 6f18178233
Remove stray extra domain 2021-05-02 17:32:39 +01:00
Jake Howard b6696e87f2
Make 0rng DNS alias primary domain
CNAME's are good for this
2021-05-02 17:32:27 +01:00
Jake Howard ad415c2b53
Move website to walker 2021-05-02 17:24:10 +01:00
Jake Howard 86482246b3
Move plausible to walker 2021-05-02 16:07:25 +01:00
Jake Howard 1fcc63a5da
Move `upload` 2021-04-24 22:14:29 +01:00
Jake Howard c048e6d20e
Provision `walker` 2021-04-24 21:59:53 +01:00
Jake Howard 3976dd607d
Provision `walker` VPS 2021-04-19 21:26:22 +01:00
Jake Howard 7580c0fd59
Remove `walker` for now
Tried to use alpine, Nebula doesn't like it. Will use Debian, and recreate the machine when I have more time
2021-03-26 21:58:24 +00:00
Jake Howard e80bcb5a8b
Move generic vultr firewall stuff into module
Modules are pretty nice!
2021-03-23 22:33:10 +00:00
Jake Howard 95e97ef757
Iterate over firewall ports
I'll convert this to a module some day, honest!
2021-03-23 22:09:48 +00:00
Jake Howard 70829dc617
Provision `walker` server
This will eventually replace `grimes`
2021-03-23 21:31:31 +00:00
Jake Howard ba8220cff2
Remove minecraft port forward 2021-03-23 21:23:45 +00:00