systems/infrastructure

Author	SHA1	Message	Date
Jake Howard	3d281fffc2	Use modern versions of docker-compose on Debian All checks were successful / terraform (push) Successful in 36s Details / ansible (push) Successful in 1m25s Details Install the plugin and use switch, rather than downloading an arbitrary binary. This way, it keeps getting updated.	2024-07-14 23:16:36 +01:00
Jake Howard	393a947cb7	Remove f2b gateway bouncer All checks were successful / terraform (push) Successful in 36s Details / ansible (push) Successful in 1m22s Details To be replaced by something more sensible	2024-07-14 22:27:58 +01:00
Jake Howard	6d3180a332	Ensure coredns proxy restarts on boot All checks were successful / terraform (push) Successful in 59s Details / ansible (push) Successful in 1m46s Details	2024-07-10 20:16:45 +01:00
Jake Howard	545959d19c	Update nextcloud version in config All checks were successful / terraform (push) Successful in 48s Details / ansible (push) Successful in 2m4s Details	2024-07-07 16:11:11 +01:00
Renovate	fa8a55cc02	Update lscr.io/linuxserver/nextcloud Docker tag to v29.0.3 Some checks failed / terraform (push) Successful in 3m10s Details / ansible (push) Has been cancelled Details	2024-07-07 16:07:19 +01:00
Jake Howard	7b5cdfafc7	Reduce sidekiq concurrency Some checks failed / terraform (push) Has been cancelled Details / ansible (push) Has been cancelled Details	2024-07-07 16:06:14 +01:00
Jake Howard	fdb927cce7	Use default number of threads for mastodon	2024-07-07 16:03:25 +01:00
Jake Howard	34011ea0a0	Remove trusted proxy IP from mastodon It doesn't like it, and it's probably wrong anyway	2024-07-07 16:01:07 +01:00
Jake Howard	f717c1be78	Decommission dokku I don't use it, still. I have a better plan for doing this in future anyway...	2024-07-07 15:56:29 +01:00
Renovate	2e438137d6	Update lscr.io/linuxserver/mastodon Docker tag to v4.2.10 All checks were successful / terraform (push) Successful in 42s Details / ansible (push) Successful in 1m52s Details	2024-07-04 18:00:18 +01:00
Jake Howard	608c57a421	Disable body size checks for slides All checks were successful / ansible (push) Successful in 1m43s Details / terraform (push) Successful in 46s Details	2024-07-01 20:09:53 +01:00
Renovate	195c711d26	Update ghcr.io/goauthentik/server Docker tag to v2024.6 All checks were successful / ansible (push) Successful in 1m48s Details / terraform (push) Successful in 40s Details	2024-07-01 19:52:34 +01:00
Jake Howard	b75e5c00c5	Pin comentario All checks were successful / terraform (push) Successful in 47s Details / ansible (push) Successful in 2m2s Details	2024-06-26 18:18:28 +01:00
Jake Howard	483833a678	Remove Plausible domain hack All checks were successful / terraform (push) Successful in 1m22s Details / ansible (push) Successful in 2m37s Details	2024-06-25 08:36:55 +01:00
Jake Howard	6dd4e57591	Update Plausible to 2.1 All checks were successful / terraform (push) Successful in 59s Details / ansible (push) Successful in 1m40s Details	2024-06-24 19:54:40 +01:00
Jake Howard	659cccd15a	Configure secrets for comentario All checks were successful / terraform (push) Successful in 1m45s Details / ansible (push) Successful in 2m37s Details	2024-06-23 18:31:07 +01:00
Jake Howard	81782c5157	Deploy comentario All checks were successful / terraform (push) Successful in 1m12s Details / ansible (push) Successful in 2m48s Details	2024-06-22 21:20:54 +01:00
Jake Howard	a20ceab810	Remove remark42 Replacing with comentario	2024-06-22 18:22:31 +01:00
Jake Howard	6c2b96e151	Update nextcloud version in config.php All checks were successful / terraform (push) Successful in 2m16s Details / ansible (push) Successful in 3m52s Details	2024-06-17 09:35:51 +01:00
Renovate	f8e6ed0fa9	Update lscr.io/linuxserver/nextcloud Docker tag to v29.0.2 All checks were successful / terraform (push) Successful in 2m20s Details / ansible (push) Successful in 3m1s Details	2024-06-06 20:00:24 +01:00
Renovate	986fe1097d	Update lscr.io/linuxserver/mastodon Docker tag to v4.2.9 All checks were successful / terraform (push) Successful in 1m44s Details / ansible (push) Successful in 2m51s Details	2024-05-30 18:00:19 +01:00
Jake Howard	c1b8c5fcc7	Change default gitea theme All checks were successful / terraform (push) Successful in 41s Details / ansible (push) Successful in 1m55s Details	2024-05-28 12:14:50 +01:00
Renovate	15561a9741	Update gitea/gitea Docker tag to v1.22 All checks were successful / terraform (push) Successful in 1m15s Details / ansible (push) Successful in 2m46s Details	2024-05-27 10:00:20 +01:00
Jake Howard	253f2678fa	Update nextcloud to v29 All checks were successful / terraform (push) Successful in 42s Details / ansible (push) Successful in 2m3s Details	2024-05-09 18:08:04 +01:00
Jake Howard	23aa6dcfcb	Pin synapse to latest YOLO!	2024-05-09 17:46:18 +01:00
Renovate	04bc698b44	Update ghcr.io/goauthentik/server Docker tag to v2024.4 All checks were successful / terraform (push) Successful in 1m37s Details / ansible (push) Successful in 3m10s Details	2024-05-09 14:05:12 +01:00
Jake Howard	e50a8b032b	Increase website workers All checks were successful / terraform (push) Successful in 1m28s Details / ansible (push) Successful in 2m51s Details	2024-05-05 21:13:00 +01:00
Jake Howard	f90ae0b1b4	Use port 53053 for coredns docker proxy Otherwise it causes annoying issues with systemd-resolved and mdns	2024-05-04 12:19:00 +01:00
Jake Howard	c93c7b5c16	Use external DNS for uptime-kuma Some checks failed / terraform (push) Failing after 38s Details / ansible (push) Successful in 2m17s Details Keep the AGH logs cleaner	2024-04-29 18:42:17 +01:00
Jake Howard	2a799d6b03	Scrape Uptime Kuma with prometheus Some checks failed / terraform (push) Failing after 1m43s Details / ansible (push) Successful in 2m29s Details	2024-04-29 14:28:58 +01:00
Jake Howard	afa926c767	Remove blackbox monitoring Uptime-Kuma is great	2024-04-29 14:12:21 +01:00
Renovate	6c8cab3ce7	Update louislam/uptime-kuma Docker tag to v1.23.13 All checks were successful / terraform (push) Successful in 36s Details / ansible (push) Successful in 2m21s Details	2024-04-25 10:00:20 +01:00
Renovate	b0d950584d	Update lscr.io/linuxserver/nextcloud Docker tag to v29 All checks were successful / terraform (push) Successful in 40s Details / ansible (push) Successful in 2m6s Details	2024-04-24 16:00:25 +01:00
Jake Howard	670ad78d44	Add wireguard config for glinet router All checks were successful / terraform (push) Successful in 44s Details / ansible (push) Successful in 1m34s Details	2024-04-23 22:19:57 +01:00
Jake Howard	8929a22ce5	Use LSIO docker socket proxy All checks were successful / terraform (push) Successful in 53s Details / ansible (push) Successful in 1m31s Details	2024-04-23 19:52:48 +01:00
Jake Howard	ee96e6ab08	Rename forrest role to prometheus Some checks failed / ansible (push) Failing after 1m35s Details / terraform (push) Failing after 12m54s Details Makes organising much simpler	2024-04-21 19:47:02 +01:00
Jake Howard	ffbba254fb	Remove redundant quotes	2024-04-21 18:11:57 +01:00
Jake Howard	c472411801	Deploy uptime-kuma	2024-04-21 18:11:39 +01:00
Jake Howard	7564911da3	Add IPv6 to blackbox Some checks failed / terraform (push) Failing after 3s Details / ansible (push) Failing after 2s Details This is needed to monitor private services	2024-04-20 18:12:38 +01:00
Jake Howard	7ff44ee238	Add IPv6 to proxmox internal network	2024-04-20 18:00:08 +01:00
Jake Howard	7c8d224c4a	Add headscale ACLs Some checks failed / ansible (push) Failing after 39s Details / terraform (push) Failing after 46s Details Tags are managed entirely server side, so there's no priv esc issues. This lets my devices do what they want, and server style devices can't do anything.	2024-04-20 15:46:21 +01:00
Renovate	7bc0ebeb26	Update traefik Docker tag to v2.11 Some checks failed / terraform (push) Failing after 2s Details / ansible (push) Failing after 2s Details	2024-04-15 17:43:05 +01:00
Jake Howard	33f9c544fd	Remove /tt-rss/ path from URL Some checks failed / terraform (push) Failing after 3s Details / ansible (push) Failing after 2s Details	2024-04-15 17:33:36 +01:00
Jake Howard	b6583cc823	Update Nextcloud version in config Some checks failed / terraform (push) Failing after 2s Details / ansible (push) Failing after 2s Details	2024-04-15 15:28:16 +01:00
Jake Howard	9c02017fed	Unpin tandoor	2024-04-15 15:28:16 +01:00
Renovate	9d98d88089	Update lscr.io/linuxserver/nextcloud Docker tag to v28.0.4 Some checks failed / terraform (push) Failing after 2s Details / ansible (push) Failing after 2s Details	2024-04-15 15:02:53 +01:00
Renovate	5330fdc56f	Update ghcr.io/goauthentik/server Docker tag to v2024 Some checks failed / terraform (push) Failing after 2s Details / ansible (push) Failing after 2s Details	2024-04-15 14:11:11 +01:00
Renovate	2e0b562f5d	Update matrixdotorg/synapse Docker tag to v1.104.0 Some checks failed / terraform (push) Failing after 2s Details / ansible (push) Failing after 2s Details	2024-04-15 13:58:20 +01:00
Renovate	989a804bad	Update wallabag/wallabag Docker tag to v2.6.9 Some checks failed / terraform (push) Failing after 51s Details / ansible (push) Failing after 46s Details	2024-04-03 12:00:18 +01:00
Jake Howard	8424b3211b	Allow `ingress` to serve as tailscale exit node All checks were successful / terraform (push) Successful in 38s Details / ansible (push) Successful in 1m46s Details	2024-03-28 23:30:24 +00:00
Jake Howard	5157940f20	Stop exposing homeassistant All checks were successful / terraform (push) Successful in 58s Details / ansible (push) Successful in 1m52s Details	2024-03-23 11:54:26 +00:00
Jake Howard	eb6fe3a23b	Allow forrest to access internal services All checks were successful / terraform (push) Successful in 36s Details / ansible (push) Successful in 1m36s Details This is mostly for monitoring	2024-03-22 18:13:25 +00:00
Jake Howard	b2656bdf43	Make vaultwarden VPN only All checks were successful / terraform (push) Successful in 33s Details / ansible (push) Successful in 1m36s Details The first service to go dark...	2024-03-21 23:20:27 +00:00
Jake Howard	f88d224168	Allow only exposing services over Tailscale Some checks failed / terraform (push) Failing after 41s Details / ansible (push) Successful in 1m41s Details This works using public DNS, so doesn't need Tailscale's magic DNS to override my local.	2024-03-07 22:30:10 +00:00
Jake Howard	451a114262	Add IPv6 support for internal DNS overrides CoreDNS 1.11.2 finally shipped!	2024-03-07 20:02:39 +00:00
Jake Howard	119b3212a9	Remove robots.txt for gitea All checks were successful / terraform (push) Successful in 27s Details / ansible (push) Successful in 1m30s Details	2024-03-04 08:38:16 +00:00
Renovate	5aae711cb8	Update vaultwarden/server Docker tag to v1.30.5 All checks were successful / terraform (push) Successful in 46s Details / ansible (push) Successful in 1m45s Details	2024-03-04 08:33:59 +00:00
Renovate	f552332598	Update lscr.io/linuxserver/mastodon Docker tag to v4.2.8 Some checks failed / ansible (push) Has been cancelled Details / terraform (push) Has been cancelled Details	2024-03-04 08:33:51 +00:00
Jake Howard	82451784a8	Deploy slides hosting All checks were successful / terraform (push) Successful in 50s Details / ansible (push) Successful in 1m49s Details	2024-03-03 21:39:22 +00:00
Jake Howard	000f3d3348	Add HSTS to all nginx requests	2024-03-03 21:37:07 +00:00
Jake Howard	0dcc3f7c30	Use regular version of nginx on Arch All checks were successful / terraform (push) Successful in 30s Details / ansible (push) Successful in 1m30s Details `nginx-mainline` requires modules be recompiled each time, and isn't handled automatically. It's still a very new and maintained release.	2024-02-29 19:46:32 +00:00
Jake Howard	8a1e21c79d	Ensure headscale sees the correct IP All checks were successful / terraform (push) Successful in 49s Details / ansible (push) Successful in 1m48s Details	2024-02-29 17:41:29 +00:00
Jake Howard	998d798797	Set maintenance window for nextcloud All checks were successful / terraform (push) Successful in 26s Details / ansible (push) Successful in 1m37s Details	2024-02-21 21:57:03 +00:00
Jake Howard	11a93dac55	Update nextcloud version in config	2024-02-21 21:52:58 +00:00
Renovate	7d64518840	Update matrixdotorg/synapse Docker tag to v1.101.0 Some checks failed / ansible (push) Has been cancelled Details / terraform (push) Has been cancelled Details	2024-02-21 21:43:15 +00:00
Renovate	26bcf09fea	Update lscr.io/linuxserver/nextcloud Docker tag to v28.0.2 Some checks failed / terraform (push) Has been cancelled Details / ansible (push) Has been cancelled Details	2024-02-21 21:42:50 +00:00
Jake Howard	808e72553b	Add the basics of some edge caching Some checks failed / ansible (push) Has been cancelled Details / terraform (push) Has been cancelled Details	2024-02-21 21:42:16 +00:00
Renovate	b513c88774	Update vaultwarden/server Docker tag to v1.30.3 All checks were successful / ansible (push) Successful in 1m33s Details / terraform (push) Successful in 27s Details	2024-02-19 14:13:02 +00:00
Renovate	7741fbc163	Update vabene1111/recipes Docker tag to v1.5.13 All checks were successful / terraform (push) Successful in 25s Details / ansible (push) Successful in 1m34s Details	2024-02-19 14:07:32 +00:00
Renovate	45cf930d14	Update lscr.io/linuxserver/mastodon Docker tag to v4.2.7 All checks were successful / terraform (push) Successful in 49s Details / ansible (push) Successful in 1m54s Details	2024-02-17 08:00:21 +00:00
Jake Howard	58c48261e7	Consolidate vikunja container All checks were successful / terraform (push) Successful in 53s Details / ansible (push) Successful in 1m51s Details	2024-02-12 14:12:17 +00:00
Jake Howard	91a247868b	Add routes from forrest to tailscale network All checks were successful / terraform (push) Successful in 27s Details / ansible (push) Successful in 1m35s Details	2024-02-07 22:12:08 +00:00
Jake Howard	b6eca40ae0	Allow tailscale IP in more places	2024-02-07 18:21:16 +00:00
Renovate	6c1c245c23	Update matrixdotorg/synapse Docker tag to v1.100.0 All checks were successful / terraform (push) Successful in 25s Details / ansible (push) Successful in 1m38s Details	2024-02-02 13:38:12 +00:00
Renovate	379d4a26fa	Update vabene1111/recipes Docker tag to v1.5.12 Some checks failed / ansible (push) Has been cancelled Details / terraform (push) Has been cancelled Details	2024-02-02 13:38:00 +00:00
Renovate	f1a2694f1a	Update lscr.io/linuxserver/mastodon Docker tag to v4.2.5 Some checks failed / terraform (push) Successful in 29s Details / ansible (push) Has been cancelled Details	2024-02-02 13:37:05 +00:00
Jake Howard	02847355a7	Install tailscale All checks were successful / terraform (push) Successful in 29s Details / ansible (push) Successful in 1m34s Details Install, not configure	2024-02-01 19:41:47 +00:00
Jake Howard	29cac09b48	Remove explicit port for headscale	2024-02-01 18:32:53 +00:00
Jake Howard	dba0262801	Remove website tmpfs All checks were successful / terraform (push) Successful in 29s Details / ansible (push) Successful in 1m36s Details The server's disk is probably fast enough, and container restarts will nuke that storage anyway	2024-02-01 18:15:51 +00:00
Jake Howard	0c6528f9ca	Restrict access to headscale OIDC and API All checks were successful / terraform (push) Successful in 29s Details / ansible (push) Successful in 1m33s Details	2024-01-31 21:40:43 +00:00
Jake Howard	dfa8328e7b	Move gateway logs to separate file	2024-01-31 21:06:19 +00:00
Jake Howard	53c758a781	Monitor headscale with prometheus All checks were successful / terraform (push) Successful in 29s Details / ansible (push) Successful in 1m38s Details	2024-01-27 17:40:02 +00:00
Jake Howard	2ceeaf091d	Deploy headscale Some checks failed / terraform (push) Failing after 11m20s Details / ansible (push) Failing after 11m6s Details	2024-01-27 14:18:37 +00:00
Jake Howard	06784563a7	Don't resolve ipv6 All checks were successful / terraform (push) Successful in 30s Details / ansible (push) Successful in 1m36s Details Something about this setup doesn't like it, so I'll disable v6 for now	2024-01-26 21:43:04 +00:00
Renovate	4f6f4143ce	Update matrixdotorg/synapse Docker tag to v1.99.0 All checks were successful / terraform (push) Successful in 31s Details / ansible (push) Successful in 1m46s Details	2024-01-22 09:15:38 +00:00
Renovate	5292785cd9	Update wallabag/wallabag Docker tag to v2.6.8 Some checks are pending / terraform (push) Has started running Details / ansible (push) Successful in 1m38s Details	2024-01-22 09:11:27 +00:00
Renovate	d297674fb5	Update vabene1111/recipes Docker tag to v1.5.11 All checks were successful / terraform (push) Successful in 49s Details / ansible (push) Successful in 1m51s Details	2024-01-22 08:42:36 +00:00
Jake Howard	88f0828153	Use primary Quad9 servers All checks were successful / terraform (push) Successful in 47s Details / ansible (push) Successful in 1m39s Details DNSSEC and malware blocking is probably useful, just in case	2024-01-21 23:19:49 +00:00
Jake Howard	cfc3de61b4	Add fallback quad9 address This aids availability, along with a healthcheck	2024-01-21 23:05:25 +00:00
Jake Howard	c6bae0f797	Do simple `endsWith` matching for docker view All checks were successful / terraform (push) Successful in 33s Details / ansible (push) Successful in 1m42s Details This saves the need for a regex	2024-01-14 22:27:02 +00:00
Jake Howard	4c5936b2aa	Disable Grafana analytics All checks were successful / terraform (push) Successful in 32s Details / ansible (push) Successful in 1m41s Details	2024-01-14 15:30:12 +00:00
Jake Howard	9d685d85aa	Update website deployment to unify containers All checks were successful / terraform (push) Successful in 1m9s Details / ansible (push) Successful in 2m17s Details	2024-01-14 14:22:19 +00:00
Jake Howard	ac166c3874	Start resolved to support mDNS All checks were successful / terraform (push) Successful in 34s Details / ansible (push) Successful in 1m44s Details	2024-01-10 13:28:45 +00:00
Jake Howard	06b9197c5b	Sync terraform state to `restic` All checks were successful / terraform (push) Successful in 31s Details / ansible (push) Successful in 1m47s Details This allows it to be backed up easily	2024-01-09 19:56:06 +00:00
Jake Howard	4a69df1d6c	Ignore ansible-lint for nebula install block All checks were successful / terraform (push) Successful in 1m28s Details / ansible (push) Successful in 1m48s Details I'm smarter than it is	2024-01-08 21:49:38 +00:00
Jake Howard	f33d19e156	Move AdGuardHome configuration to Terraform https://git.theorangeone.net/systems/adguardhome	2024-01-08 21:45:28 +00:00
Jake Howard	616d20e23b	Tweak some AGH settings Some checks failed / terraform (push) Successful in 1m15s Details / ansible (push) Failing after 1m59s Details	2024-01-08 19:01:46 +00:00
Jake Howard	383a57d1f2	Use DoH endpoint fot quad9 Seems latency is much lower	2024-01-08 18:21:03 +00:00
Jake Howard	c8211d4756	Use Debian repo version of nginx Some checks failed / terraform (push) Successful in 1m3s Details / ansible (push) Failing after 1m53s Details It's older, and doesn't have `stream` compiled in, but the repo one can't link to any of the installed modules, which is a non-starter.	2024-01-04 14:17:36 +00:00
Jake Howard	57ad143268	Set password for homeassistant SMB mount Some checks failed / terraform (push) Successful in 38s Details / ansible (push) Failing after 1m40s Details It had an IP restriction, but still	2024-01-03 21:23:49 +00:00

1 2 3 4 5 ...

1332 commits