|
|
02847355a7
|
Install tailscale
/ terraform (push) Successful in 29s
/ ansible (push) Successful in 1m34s
Install, not configure
|
2024-02-01 19:41:47 +00:00 |
|
|
|
29cac09b48
|
Remove explicit port for headscale
|
2024-02-01 18:32:53 +00:00 |
|
|
|
dba0262801
|
Remove website tmpfs
/ terraform (push) Successful in 29s
/ ansible (push) Successful in 1m36s
The server's disk is probably fast enough, and container restarts will nuke that storage anyway
|
2024-02-01 18:15:51 +00:00 |
|
|
|
0c6528f9ca
|
Restrict access to headscale OIDC and API
/ terraform (push) Successful in 29s
/ ansible (push) Successful in 1m33s
|
2024-01-31 21:40:43 +00:00 |
|
|
|
dfa8328e7b
|
Move gateway logs to separate file
|
2024-01-31 21:06:19 +00:00 |
|
|
|
53c758a781
|
Monitor headscale with prometheus
/ terraform (push) Successful in 29s
/ ansible (push) Successful in 1m38s
|
2024-01-27 17:40:02 +00:00 |
|
|
|
b51677b795
|
Back up headscale config
/ terraform (push) Successful in 48s
/ ansible (push) Successful in 1m51s
|
2024-01-27 15:04:53 +00:00 |
|
|
|
2ceeaf091d
|
Deploy headscale
/ terraform (push) Failing after 11m20s
/ ansible (push) Failing after 11m6s
|
2024-01-27 14:18:37 +00:00 |
|
|
|
06784563a7
|
Don't resolve ipv6
/ terraform (push) Successful in 30s
/ ansible (push) Successful in 1m36s
Something about this setup doesn't like it, so I'll disable v6 for now
|
2024-01-26 21:43:04 +00:00 |
|
|
|
4f6f4143ce
|
Update matrixdotorg/synapse Docker tag to v1.99.0
/ terraform (push) Successful in 31s
/ ansible (push) Successful in 1m46s
|
2024-01-22 09:15:38 +00:00 |
|
|
|
5292785cd9
|
Update wallabag/wallabag Docker tag to v2.6.8
/ terraform (push) Has started running
/ ansible (push) Successful in 1m38s
|
2024-01-22 09:11:27 +00:00 |
|
|
|
d297674fb5
|
Update vabene1111/recipes Docker tag to v1.5.11
/ terraform (push) Successful in 49s
/ ansible (push) Successful in 1m51s
|
2024-01-22 08:42:36 +00:00 |
|
|
|
88f0828153
|
Use primary Quad9 servers
/ terraform (push) Successful in 47s
/ ansible (push) Successful in 1m39s
DNSSEC and malware blocking is probably useful, just in case
|
2024-01-21 23:19:49 +00:00 |
|
|
|
cfc3de61b4
|
Add fallback quad9 address
This aids availability, along with a healthcheck
|
2024-01-21 23:05:25 +00:00 |
|
|
|
c6bae0f797
|
Do simple endsWith matching for docker view
/ terraform (push) Successful in 33s
/ ansible (push) Successful in 1m42s
This saves the need for a regex
|
2024-01-14 22:27:02 +00:00 |
|
|
|
4c5936b2aa
|
Disable Grafana analytics
/ terraform (push) Successful in 32s
/ ansible (push) Successful in 1m41s
|
2024-01-14 15:30:12 +00:00 |
|
|
|
9d685d85aa
|
Update website deployment to unify containers
/ terraform (push) Successful in 1m9s
/ ansible (push) Successful in 2m17s
|
2024-01-14 14:22:19 +00:00 |
|
|
|
ac166c3874
|
Start resolved to support mDNS
/ terraform (push) Successful in 34s
/ ansible (push) Successful in 1m44s
|
2024-01-10 13:28:45 +00:00 |
|
|
|
06b9197c5b
|
Sync terraform state to restic
/ terraform (push) Successful in 31s
/ ansible (push) Successful in 1m47s
This allows it to be backed up easily
|
2024-01-09 19:56:06 +00:00 |
|
|
|
4a69df1d6c
|
Ignore ansible-lint for nebula install block
/ terraform (push) Successful in 1m28s
/ ansible (push) Successful in 1m48s
I'm smarter than it is
|
2024-01-08 21:49:38 +00:00 |
|
|
|
f33d19e156
|
Move AdGuardHome configuration to Terraform
https://git.theorangeone.net/systems/adguardhome
|
2024-01-08 21:45:28 +00:00 |
|
|
|
ed59458f39
|
Add backups to tang
/ terraform (push) Successful in 1m21s
/ ansible (push) Failing after 1m37s
|
2024-01-08 19:20:55 +00:00 |
|
|
|
616d20e23b
|
Tweak some AGH settings
/ terraform (push) Successful in 1m15s
/ ansible (push) Failing after 1m59s
|
2024-01-08 19:01:46 +00:00 |
|
|
|
383a57d1f2
|
Use DoH endpoint fot quad9
Seems latency is much lower
|
2024-01-08 18:21:03 +00:00 |
|
|
|
9f13ace88c
|
Use newer S3 configuration resources
/ terraform (push) Successful in 1m14s
/ ansible (push) Failing after 2m3s
|
2024-01-07 13:49:35 +00:00 |
|
|
|
094091dd21
|
Add role for minio state management
|
2024-01-07 13:06:37 +00:00 |
|
|
|
9ac9380387
|
Restructure state IAM to use separate role
|
2024-01-07 12:58:16 +00:00 |
|
|
|
1555803d25
|
Move terraform state file
This lets me use the bucket for other states too
|
2024-01-06 21:28:57 +00:00 |
|
|
|
c8211d4756
|
Use Debian repo version of nginx
/ terraform (push) Successful in 1m3s
/ ansible (push) Failing after 1m53s
It's older, and doesn't have `stream` compiled in, but the repo one can't link to any of the installed modules, which is a non-starter.
|
2024-01-04 14:17:36 +00:00 |
|
|
|
57ad143268
|
Set password for homeassistant SMB mount
/ terraform (push) Successful in 38s
/ ansible (push) Failing after 1m40s
It had an IP restriction, but still
|
2024-01-03 21:23:49 +00:00 |
|
|
|
16e9952b2f
|
Replace custom restic logs with runitor
|
2024-01-03 21:09:07 +00:00 |
|
|
|
f5154d1683
|
Use CoreDNS to do recursive CNAME aliasing for AGH
/ terraform (push) Successful in 47s
/ ansible (push) Failing after 1m38s
|
2024-01-02 17:48:47 +00:00 |
|
|
|
3ed7074af6
|
Rename coredns role
|
2024-01-02 17:02:34 +00:00 |
|
|
|
5581bbc01a
|
Replace pihole with adguardhome
/ terraform (push) Successful in 1m13s
/ ansible (push) Successful in 2m19s
AGH is much simpler to install and manage, and does DoH natively.
|
2024-01-01 15:48:14 +00:00 |
|
|
|
6a14679edf
|
Only add IPv4 address for PVE sys domain
/ terraform (push) Successful in 34s
/ ansible (push) Successful in 1m44s
For some reason, ipv6 doesn't really work with my current setup. It'll change at another time, so it's future me's problem
|
2023-12-31 23:01:53 +00:00 |
|
|
|
56bfe544e4
|
nginx HTTPS redirect on ipv6
|
2023-12-31 22:49:11 +00:00 |
|
|
|
e03cc40bf3
|
Update DNS records to alias sys records
/ terraform (push) Successful in 32s
/ ansible (push) Successful in 1m41s
|
2023-12-31 21:10:55 +00:00 |
|
|
|
6a23d8cab5
|
Use sys domain resource for reverse DNS
|
2023-12-31 18:22:21 +00:00 |
|
|
|
8b21c7d64c
|
Add record for PVE
|
2023-12-31 16:46:45 +00:00 |
|
|
|
8df1806faa
|
Update Terraform b2 to v0.8.7
/ terraform (push) Successful in 32s
/ ansible (push) Successful in 1m41s
|
2023-12-31 16:44:33 +00:00 |
|
|
|
83543fe081
|
Update lscr.io/linuxserver/nextcloud Docker tag to v28.0.1
/ terraform (push) Successful in 33s
/ ansible (push) Successful in 1m49s
|
2023-12-28 21:39:28 +00:00 |
|
|
|
0e0d0c9b82
|
walker doesn't have a traefik anymore
/ terraform (push) Successful in 1m8s
/ ansible (push) Successful in 2m15s
|
2023-12-26 22:31:12 +00:00 |
|
|
|
026d8db13e
|
Be root when generating dhparams
/ terraform (push) Successful in 37s
/ ansible (push) Successful in 1m50s
This is needed to write to the destination
|
2023-12-24 19:44:30 +00:00 |
|
|
|
593a945c5c
|
Install nginx from package manager if available
|
2023-12-24 19:44:30 +00:00 |
|
|
|
bd15946f3b
|
Update Nebula
|
2023-12-24 19:44:30 +00:00 |
|
|
|
f4b96afcfa
|
Deploy ntfy
/ terraform (push) Successful in 1m15s
/ ansible (push) Successful in 2m22s
|
2023-12-23 16:40:53 +00:00 |
|
|
|
c0c7f393e3
|
Only pin to minor versions of gitea
/ terraform (push) Successful in 32s
/ ansible (push) Successful in 1m48s
|
2023-12-21 16:43:18 +00:00 |
|
|
|
5fd952be4c
|
Only pin to minor version of Authentik
|
2023-12-21 16:42:02 +00:00 |
|
|
|
1e798ac5ce
|
Don't require role variables to be prefixed
|
2023-12-21 16:38:24 +00:00 |
|
|
|
39899cd1e0
|
Use certbot to issue certificates
|
2023-12-21 16:38:07 +00:00 |
|
