46 commits

Author	SHA1	Message	Date
Jake Howard	3c8d9fe940	Block all ports	2021-03-28 16:28:07 +01:00
Jake Howard	4d218248fa	Remotely connect to fail2ban to do ports ... Traefik can affect the edge, so blocks work there and prevent traffic hitting home network.	2021-03-28 16:06:36 +01:00
Jake Howard	5084bfecdf	Ignore PVE interface from f2b jails	2021-03-24 22:35:28 +00:00
Jake Howard	f7a0877e72	Exclude nebula from fail2ban	2021-02-14 11:39:01 +00:00
Jake Howard	385917ba4e	Decrease find time ... Hopefully reduce false-positive catches	2021-02-14 11:22:32 +00:00
Jake Howard	c38ecfebd7	Update gateway to point to ingress instance	2021-01-09 18:17:54 +00:00
Jake Howard	58879d2e1d	Ensure fail2ban and logrotate are available on all machines	2020-12-27 22:39:33 +00:00
Jake Howard	5eb3870fbe	Set mode on fail2ban filter and jail	2020-10-24 12:10:54 +01:00
Jake Howard	bedbb0f5f4	Fix service to restart	2020-10-16 19:16:42 +01:00
Jake Howard	1930cc83e8	Use generic package module	2020-10-16 19:16:42 +01:00
Jake Howard	b2e91d7d6d	Update haproxy fail2ban jail to use systemd for logs	2020-10-16 19:16:42 +01:00
Jake Howard	4890c3d3e5	Revert "Remove fail2ban" ... This reverts commit 1f0e33acc8.	2020-10-16 19:16:42 +01:00
Jake Howard	29c9e14f62	Remove haproxy chroot ... This is technically _slightly_ less secure, but means it logs to journald properly, so can be picked up by fail2ban in future	2020-10-05 11:10:29 +01:00
Jake Howard	24d11deeae	Update ansible-lint ... Required a lot of renaming :(	2020-09-26 17:53:47 +01:00
Jake Howard	dd12b795b5	Remove pihole ... Internal VPN server is working just perfectly instead	2020-06-24 18:46:13 +01:00
Jake Howard	913ee4759f	Quote value to silence errors	2020-06-18 21:18:47 +01:00
Jake Howard	600bc4bb58	Ensure sysctl change is persisted ... See note in https://wiki.archlinux.org/index.php/Sysctl#Configuration	2020-05-16 16:15:58 +01:00
Jake Howard	112e8ce985	Install some wireguard tools	2020-05-11 11:59:46 +01:00
Jake Howard	5289206f14	Remove unnecessary quotes	2020-05-09 20:11:08 +01:00
Jake Howard	1f0e33acc8	Remove fail2ban ... Keeps getting hit by stats. I should fix that at some point	2020-05-09 20:09:36 +01:00
Jake Howard	f3126e34b9	Update haproxy config for use on arch	2020-05-09 20:08:27 +01:00
Jake Howard	059cb585db	Use OS-agnostic package install for haproxy	2020-05-09 20:08:14 +01:00
Jake Howard	095c8c4562	Use sysctl to enable p2p comms	2020-05-09 20:07:19 +01:00
Jake Howard	974e0e8467	Enable services ... Not just during reload	2020-04-28 20:48:15 +01:00
Jake Howard	051ec43769	wg-quick can't be reloaed ... This might break things!	2020-04-26 12:05:45 +01:00
Jake Howard	ff8beea3c4	Massively increase timeouts to prevent websocket issues	2020-04-17 23:04:20 +01:00
Jake Howard	1da3ca95e7	Stop using unstable repos to install wireguard ... It's in backports now, which is much easier to install from!	2020-04-17 09:08:10 +01:00
Jake Howard	f32e0bfe59	Only add timeout for core HTTP ports	2020-03-31 19:27:47 +01:00
Jake Howard	1afc28ec17	Standardize string quotes in yaml	2020-03-25 21:27:15 +00:00
Jake Howard	7eda50239c	Remove reference to become_user: root ... This was the default anyway	2020-03-17 21:11:02 +00:00
Jake Howard	cdcfcf3c66	Increase fail2ban threshold	2020-03-15 15:02:57 +00:00
Jake Howard	708250005a	Install fail2ban	2020-03-13 23:08:26 +00:00
Jake Howard	92af315e69	Change haproxy timeouts	2020-03-13 22:26:30 +00:00
Jake Howard	253453ba16	Reload wireguard rather than restarting ... Hopefully this stops it dropping connections	2020-02-07 21:09:41 +00:00
Jake Howard	b4bb3f01f2	Convert haproxy config to use spaces	2020-01-26 18:17:55 +00:00
Jake Howard	ac5a9aa0f0	Remove SSL block from haproxy config	2020-01-26 18:15:19 +00:00
Jake Howard	af936990e2	Add custom DNS server	2020-01-23 20:06:45 +00:00
Jake Howard	ec478c3cf5	Fix client config	2020-01-19 17:59:36 +00:00
Jake Howard	7eaf608e3c	Revoke exposed wireguard keys ... Derp derp derp	2020-01-19 17:41:34 +00:00
Jake Howard	35605ce0a6	Move wireguard clients configuration to home dir ... Makes it easier to provision machines	2020-01-19 17:33:14 +00:00
Jake Howard	251fe11113	Output wireguard client config files	2020-01-19 16:43:51 +00:00
Jake Howard	f6ffb1ceef	Template haproxy better	2020-01-17 22:56:45 +00:00
Jake Howard	78fa36f20a	Move variables to 1 place ... Much easier to manage	2020-01-17 22:31:50 +00:00
Jake Howard	23a472f764	Add wireguard server config	2019-12-08 21:05:20 +00:00
Jake Howard	730246e67f	Install wireguard server	2019-12-08 20:16:42 +00:00
Jake Howard	58a3683355	Define haproxy config	2019-12-08 16:47:28 +00:00