Commit Graph

1571 Commits

Author SHA1 Message Date
Renovate 8d819229bf Update mariadb Docker tag to v11
/ terraform (push) Successful in 44s Details
/ ansible (push) Successful in 1m58s Details
2024-02-21 08:00:33 +00:00
Renovate b513c88774 Update vaultwarden/server Docker tag to v1.30.3
/ ansible (push) Successful in 1m33s Details
/ terraform (push) Successful in 27s Details
2024-02-19 14:13:02 +00:00
Renovate 7741fbc163 Update vabene1111/recipes Docker tag to v1.5.13
/ terraform (push) Successful in 25s Details
/ ansible (push) Successful in 1m34s Details
2024-02-19 14:07:32 +00:00
Renovate 45cf930d14 Update lscr.io/linuxserver/mastodon Docker tag to v4.2.7
/ terraform (push) Successful in 49s Details
/ ansible (push) Successful in 1m54s Details
2024-02-17 08:00:21 +00:00
Jake Howard 58c48261e7
Consolidate vikunja container
/ terraform (push) Successful in 53s Details
/ ansible (push) Successful in 1m51s Details
2024-02-12 14:12:17 +00:00
Jake Howard 91a247868b
Add routes from forrest to tailscale network
/ terraform (push) Successful in 27s Details
/ ansible (push) Successful in 1m35s Details
2024-02-07 22:12:08 +00:00
Jake Howard df43be6f9b
Set `private_ip` for some other machines
/ terraform (push) Successful in 36s Details
/ ansible (push) Successful in 1m39s Details
2024-02-07 19:27:48 +00:00
Jake Howard b6eca40ae0
Allow tailscale IP in more places 2024-02-07 18:21:16 +00:00
Renovate 6c1c245c23 Update matrixdotorg/synapse Docker tag to v1.100.0
/ terraform (push) Successful in 25s Details
/ ansible (push) Successful in 1m38s Details
2024-02-02 13:38:12 +00:00
Renovate 379d4a26fa Update vabene1111/recipes Docker tag to v1.5.12
/ ansible (push) Has been cancelled Details
/ terraform (push) Has been cancelled Details
2024-02-02 13:38:00 +00:00
Renovate f1a2694f1a Update lscr.io/linuxserver/mastodon Docker tag to v4.2.5
/ terraform (push) Successful in 29s Details
/ ansible (push) Has been cancelled Details
2024-02-02 13:37:05 +00:00
Jake Howard 02847355a7
Install tailscale
/ terraform (push) Successful in 29s Details
/ ansible (push) Successful in 1m34s Details
Install, not configure
2024-02-01 19:41:47 +00:00
Jake Howard 29cac09b48
Remove explicit port for headscale 2024-02-01 18:32:53 +00:00
Jake Howard dba0262801
Remove website tmpfs
/ terraform (push) Successful in 29s Details
/ ansible (push) Successful in 1m36s Details
The server's disk is probably fast enough, and container restarts will nuke that storage anyway
2024-02-01 18:15:51 +00:00
Jake Howard 0c6528f9ca
Restrict access to headscale OIDC and API
/ terraform (push) Successful in 29s Details
/ ansible (push) Successful in 1m33s Details
2024-01-31 21:40:43 +00:00
Jake Howard dfa8328e7b
Move gateway logs to separate file 2024-01-31 21:06:19 +00:00
Jake Howard 53c758a781
Monitor headscale with prometheus
/ terraform (push) Successful in 29s Details
/ ansible (push) Successful in 1m38s Details
2024-01-27 17:40:02 +00:00
Jake Howard b51677b795
Back up headscale config
/ terraform (push) Successful in 48s Details
/ ansible (push) Successful in 1m51s Details
2024-01-27 15:04:53 +00:00
Jake Howard 2ceeaf091d
Deploy headscale
/ terraform (push) Failing after 11m20s Details
/ ansible (push) Failing after 11m6s Details
2024-01-27 14:18:37 +00:00
Jake Howard 06784563a7
Don't resolve ipv6
/ terraform (push) Successful in 30s Details
/ ansible (push) Successful in 1m36s Details
Something about this setup doesn't like it, so I'll disable v6 for now
2024-01-26 21:43:04 +00:00
Renovate 4f6f4143ce Update matrixdotorg/synapse Docker tag to v1.99.0
/ terraform (push) Successful in 31s Details
/ ansible (push) Successful in 1m46s Details
2024-01-22 09:15:38 +00:00
Renovate 5292785cd9 Update wallabag/wallabag Docker tag to v2.6.8
/ terraform (push) Has started running Details
/ ansible (push) Successful in 1m38s Details
2024-01-22 09:11:27 +00:00
Renovate d297674fb5 Update vabene1111/recipes Docker tag to v1.5.11
/ terraform (push) Successful in 49s Details
/ ansible (push) Successful in 1m51s Details
2024-01-22 08:42:36 +00:00
Jake Howard 88f0828153
Use primary Quad9 servers
/ terraform (push) Successful in 47s Details
/ ansible (push) Successful in 1m39s Details
DNSSEC and malware blocking is probably useful, just in case
2024-01-21 23:19:49 +00:00
Jake Howard cfc3de61b4
Add fallback quad9 address
This aids availability, along with a healthcheck
2024-01-21 23:05:25 +00:00
Jake Howard c6bae0f797
Do simple `endsWith` matching for docker view
/ terraform (push) Successful in 33s Details
/ ansible (push) Successful in 1m42s Details
This saves the need for a regex
2024-01-14 22:27:02 +00:00
Jake Howard 4c5936b2aa
Disable Grafana analytics
/ terraform (push) Successful in 32s Details
/ ansible (push) Successful in 1m41s Details
2024-01-14 15:30:12 +00:00
Jake Howard 9d685d85aa
Update website deployment to unify containers
/ terraform (push) Successful in 1m9s Details
/ ansible (push) Successful in 2m17s Details
2024-01-14 14:22:19 +00:00
Jake Howard ac166c3874
Start resolved to support mDNS
/ terraform (push) Successful in 34s Details
/ ansible (push) Successful in 1m44s Details
2024-01-10 13:28:45 +00:00
Jake Howard 06b9197c5b
Sync terraform state to `restic`
/ terraform (push) Successful in 31s Details
/ ansible (push) Successful in 1m47s Details
This allows it to be backed up easily
2024-01-09 19:56:06 +00:00
Jake Howard 4a69df1d6c
Ignore ansible-lint for nebula install block
/ terraform (push) Successful in 1m28s Details
/ ansible (push) Successful in 1m48s Details
I'm smarter than it is
2024-01-08 21:49:38 +00:00
Jake Howard f33d19e156
Move AdGuardHome configuration to Terraform
https://git.theorangeone.net/systems/adguardhome
2024-01-08 21:45:28 +00:00
Jake Howard ed59458f39
Add backups to tang
/ terraform (push) Successful in 1m21s Details
/ ansible (push) Failing after 1m37s Details
2024-01-08 19:20:55 +00:00
Jake Howard 616d20e23b
Tweak some AGH settings
/ terraform (push) Successful in 1m15s Details
/ ansible (push) Failing after 1m59s Details
2024-01-08 19:01:46 +00:00
Jake Howard 383a57d1f2
Use DoH endpoint fot quad9
Seems latency is much lower
2024-01-08 18:21:03 +00:00
Jake Howard 9f13ace88c
Use newer S3 configuration resources
/ terraform (push) Successful in 1m14s Details
/ ansible (push) Failing after 2m3s Details
2024-01-07 13:49:35 +00:00
Jake Howard 094091dd21
Add role for minio state management 2024-01-07 13:06:37 +00:00
Jake Howard 9ac9380387
Restructure state IAM to use separate role 2024-01-07 12:58:16 +00:00
Jake Howard 1555803d25
Move terraform state file
This lets me use the bucket for other states too
2024-01-06 21:28:57 +00:00
Jake Howard c8211d4756
Use Debian repo version of nginx
/ terraform (push) Successful in 1m3s Details
/ ansible (push) Failing after 1m53s Details
It's older, and doesn't have `stream` compiled in, but the repo one can't link to any of the installed modules, which is a non-starter.
2024-01-04 14:17:36 +00:00
Jake Howard 57ad143268
Set password for homeassistant SMB mount
/ terraform (push) Successful in 38s Details
/ ansible (push) Failing after 1m40s Details
It had an IP restriction, but still
2024-01-03 21:23:49 +00:00
Jake Howard 16e9952b2f
Replace custom restic logs with runitor 2024-01-03 21:09:07 +00:00
Jake Howard f5154d1683
Use CoreDNS to do recursive CNAME aliasing for AGH
/ terraform (push) Successful in 47s Details
/ ansible (push) Failing after 1m38s Details
2024-01-02 17:48:47 +00:00
Jake Howard 3ed7074af6
Rename coredns role 2024-01-02 17:02:34 +00:00
Jake Howard 5581bbc01a
Replace pihole with adguardhome
/ terraform (push) Successful in 1m13s Details
/ ansible (push) Successful in 2m19s Details
AGH is much simpler to install and manage, and does DoH natively.
2024-01-01 15:48:14 +00:00
Jake Howard 6a14679edf
Only add IPv4 address for PVE sys domain
/ terraform (push) Successful in 34s Details
/ ansible (push) Successful in 1m44s Details
For some reason, ipv6 doesn't really work with my current setup. It'll change at another time, so it's future me's problem
2023-12-31 23:01:53 +00:00
Jake Howard 56bfe544e4
nginx HTTPS redirect on ipv6 2023-12-31 22:49:11 +00:00
Jake Howard e03cc40bf3
Update DNS records to alias sys records
/ terraform (push) Successful in 32s Details
/ ansible (push) Successful in 1m41s Details
2023-12-31 21:10:55 +00:00
Jake Howard 6a23d8cab5
Use sys domain resource for reverse DNS 2023-12-31 18:22:21 +00:00
Jake Howard 8b21c7d64c
Add record for PVE 2023-12-31 16:46:45 +00:00