Commit graph

1257 commits

Author SHA1 Message Date
f1a2694f1a Update lscr.io/linuxserver/mastodon Docker tag to v4.2.5 2024-02-02 13:37:05 +00:00
02847355a7
Install tailscale
Install, not configure
2024-02-01 19:41:47 +00:00
29cac09b48
Remove explicit port for headscale 2024-02-01 18:32:53 +00:00
dba0262801
Remove website tmpfs
The server's disk is probably fast enough, and container restarts will nuke that storage anyway
2024-02-01 18:15:51 +00:00
0c6528f9ca
Restrict access to headscale OIDC and API 2024-01-31 21:40:43 +00:00
dfa8328e7b
Move gateway logs to separate file 2024-01-31 21:06:19 +00:00
53c758a781
Monitor headscale with prometheus 2024-01-27 17:40:02 +00:00
2ceeaf091d
Deploy headscale 2024-01-27 14:18:37 +00:00
06784563a7
Don't resolve ipv6
Something about this setup doesn't like it, so I'll disable v6 for now
2024-01-26 21:43:04 +00:00
4f6f4143ce Update matrixdotorg/synapse Docker tag to v1.99.0 2024-01-22 09:15:38 +00:00
5292785cd9 Update wallabag/wallabag Docker tag to v2.6.8 2024-01-22 09:11:27 +00:00
d297674fb5 Update vabene1111/recipes Docker tag to v1.5.11 2024-01-22 08:42:36 +00:00
88f0828153
Use primary Quad9 servers
DNSSEC and malware blocking is probably useful, just in case
2024-01-21 23:19:49 +00:00
cfc3de61b4
Add fallback quad9 address
This aids availability, along with a healthcheck
2024-01-21 23:05:25 +00:00
c6bae0f797
Do simple endsWith matching for docker view
This saves the need for a regex
2024-01-14 22:27:02 +00:00
4c5936b2aa
Disable Grafana analytics 2024-01-14 15:30:12 +00:00
9d685d85aa
Update website deployment to unify containers 2024-01-14 14:22:19 +00:00
ac166c3874
Start resolved to support mDNS 2024-01-10 13:28:45 +00:00
06b9197c5b
Sync terraform state to restic
This allows it to be backed up easily
2024-01-09 19:56:06 +00:00
4a69df1d6c
Ignore ansible-lint for nebula install block
I'm smarter than it is
2024-01-08 21:49:38 +00:00
f33d19e156
Move AdGuardHome configuration to Terraform
https://git.theorangeone.net/systems/adguardhome
2024-01-08 21:45:28 +00:00
616d20e23b
Tweak some AGH settings 2024-01-08 19:01:46 +00:00
383a57d1f2
Use DoH endpoint fot quad9
Seems latency is much lower
2024-01-08 18:21:03 +00:00
c8211d4756
Use Debian repo version of nginx
It's older, and doesn't have `stream` compiled in, but the repo one can't link to any of the installed modules, which is a non-starter.
2024-01-04 14:17:36 +00:00
57ad143268
Set password for homeassistant SMB mount
It had an IP restriction, but still
2024-01-03 21:23:49 +00:00
16e9952b2f
Replace custom restic logs with runitor 2024-01-03 21:09:07 +00:00
f5154d1683
Use CoreDNS to do recursive CNAME aliasing for AGH 2024-01-02 17:48:47 +00:00
3ed7074af6
Rename coredns role 2024-01-02 17:02:34 +00:00
5581bbc01a
Replace pihole with adguardhome
AGH is much simpler to install and manage, and does DoH natively.
2024-01-01 15:48:14 +00:00
56bfe544e4
nginx HTTPS redirect on ipv6 2023-12-31 22:49:11 +00:00
83543fe081
Update lscr.io/linuxserver/nextcloud Docker tag to v28.0.1 2023-12-28 21:39:28 +00:00
0e0d0c9b82
walker doesn't have a traefik anymore 2023-12-26 22:31:12 +00:00
026d8db13e
Be root when generating dhparams
This is needed to write to the destination
2023-12-24 19:44:30 +00:00
593a945c5c
Install nginx from package manager if available 2023-12-24 19:44:30 +00:00
bd15946f3b
Update Nebula 2023-12-24 19:44:30 +00:00
f4b96afcfa
Deploy ntfy 2023-12-23 16:40:53 +00:00
c0c7f393e3
Only pin to minor versions of gitea 2023-12-21 16:43:18 +00:00
5fd952be4c
Only pin to minor version of Authentik 2023-12-21 16:42:02 +00:00
39899cd1e0
Use certbot to issue certificates 2023-12-21 16:38:07 +00:00
8e1a203df2
Add helper map for better websocket support 2023-12-21 16:38:07 +00:00
a3baf8be1e
Use nginx as reverse proxy on walker, removing traefik
SSL coming soon
2023-12-21 16:38:07 +00:00
a7eb372899
Fix HTTPS redirect hostname 2023-12-21 14:58:19 +00:00
80a770f399
Add include files before main nginx config 2023-12-21 14:58:04 +00:00
ef432642dd
Unify nginx module tasks 2023-12-20 22:35:11 +00:00
b32a63bd72
Add helpful includes
Along with ensuring there are dhparams
2023-12-20 22:29:42 +00:00
2336e4dd5b
Add brotli 2023-12-17 18:12:33 +00:00
46eda36515
Fully block Server header 2023-12-16 21:57:19 +00:00
cfb498d7c6
Only add HTTPS redirect when it's needed 2023-12-16 18:13:49 +00:00
48efcf4d91
Use mainline nginx release on Arch 2023-12-16 18:03:01 +00:00
930cf87084
gzip as much as makes sense 2023-12-16 17:58:15 +00:00
92052a3d0a
Unify nginx configuration
This creates a simple base configuration skeleton, that other configuration can be easily loaded into.
2023-12-16 17:47:04 +00:00
943c141d59
Ensure ingress proxy doesn't terminate connections
This mostly works around a weird issues with Jellyfin
2023-12-14 22:08:02 +00:00
2ff2128330
Set pihole temp unit 2023-12-14 22:04:14 +00:00
b33e19e152
Remove unnecessary extra variable definitions
The world could do with a bit less YAML!
2023-12-14 22:03:23 +00:00
7ad5d6e51e
Deploy coredns as a proxy to Docker's internal DNS 2023-12-14 21:04:26 +00:00
7381c1f10a
Update nextcloud version in config.php 2023-12-13 17:48:46 +00:00
18fd0631e1 Update lscr.io/linuxserver/nextcloud Docker tag to v28 2023-12-13 17:38:40 +00:00
05eee3f4de Update gitea/gitea Docker tag to v1.21.2 2023-12-13 17:37:11 +00:00
e0f7b47961 Update lscr.io/linuxserver/mastodon Docker tag to v4.2.3 2023-12-05 18:00:28 +00:00
c0df505f70
Disable browser updates for nextcloud 2023-12-04 09:39:14 +00:00
aecd7c0a18
Upgrade nextcloud version in config 2023-12-04 09:38:43 +00:00
b9c5c7ce01 Update lscr.io/linuxserver/nextcloud Docker tag to v27.1.4 2023-12-04 09:35:32 +00:00
e815fcb2be
Pin all redis versions to 7
Keeps them all in sync
2023-12-04 09:22:51 +00:00
85352014ab Update matrixdotorg/synapse Docker tag to v1.97.0 2023-12-04 09:09:07 +00:00
01eb469ac8 Update vabene1111/recipes Docker tag to v1.5.10 2023-12-03 14:00:28 +00:00
461ec71b12
Update gitea branding path 2023-11-27 19:19:58 +00:00
2fe093668d Update ghcr.io/goauthentik/server Docker tag to v2023.10.4 2023-11-27 08:37:21 +00:00
58c14c7f94 Update vaultwarden/server Docker tag to v1.30.1 2023-11-27 08:35:50 +00:00
d0a994198c Update gitea/gitea Docker tag to v1.21.1 2023-11-26 18:00:27 +00:00
5e8918221f Update gitea/gitea Docker tag to v1.21.0 2023-11-19 18:04:14 +00:00
0d970d276d Update matrixdotorg/synapse Docker tag to v1.96.1 2023-11-19 17:59:53 +00:00
8666933bfb
Revert "Use OIDC to log in to tt-rss"
OIDC breaks any kind of API integration, which is very annoying

This reverts commit 66ddef96e2.
2023-11-18 21:57:16 +00:00
3df1e1d46b
Update Nextcloud version in config.php 2023-11-13 18:22:42 +00:00
e3da2710a7 Update lscr.io/linuxserver/nextcloud Docker tag to v27.1.3 2023-11-13 18:22:06 +00:00
19febd9c35 Update matrixdotorg/synapse Docker tag to v1.95.1 2023-11-13 18:19:38 +00:00
f0c0b6d4b4 Update vaultwarden/server Docker tag to v1.30.0 2023-11-13 18:17:52 +00:00
a4958e619a Update ghcr.io/goauthentik/server Docker tag to v2023.10.3 2023-11-13 18:15:28 +00:00
e4b2318c82
Monitor authentik 2023-11-12 21:25:02 +00:00
dfef31cbfa
Deploy minio
My own S3, for various things
2023-11-12 21:23:54 +00:00
38840402b9
Disable repo units I don't use by default 2023-11-12 18:28:01 +00:00
5f31a39804
Ensure Nextcloud can talk to local servers
Needed for Authentik
2023-11-08 19:51:16 +00:00
66ddef96e2
Use OIDC to log in to tt-rss 2023-11-08 19:46:16 +00:00
935b099c4f
Decommission upload
It was never really used for anything, and I want to replace it with something better eventually
2023-11-07 21:17:21 +00:00
dbbfe55975
Deploy authentik
_again_.
2023-11-07 21:17:21 +00:00
48dbaeed99
Deploy remark42
To soon replace Commento
2023-11-06 21:29:28 +00:00
5fb605231d
Allow pings to ingress
This makes testing connections much simpler
2023-11-05 21:48:25 +00:00
dd1558bafa
Set sensible permissions on nftables config 2023-11-05 21:43:16 +00:00
b0347fc037
Remove redundant quotes 2023-11-05 21:43:02 +00:00
f1ac40f432
Reduce pihole cache size
This is still a lot of records, and pihole complains with values any larger
2023-11-05 13:22:05 +00:00
850278ab19
Allow nebula through firewall 2023-11-03 18:06:36 +00:00
b1284877a3
Update blackbox configuration for not following redirects 2023-11-01 22:14:35 +00:00
6b4285a264
Let alertmanager run as its own user
It's already not-root, and can't access the filesystem anyway
2023-11-01 22:13:37 +00:00
3ed786336e
Remove wireguard_53
I never used it - no reason to maintain it
2023-10-26 21:50:22 +01:00
9f83efa53b
Use nftables for firewall on ingress
See ya never, iptables!
2023-10-26 21:34:06 +01:00
54e2205e48
Don't bother renaming speedtest metrics 2023-10-23 22:09:25 +01:00
c29dfb5ad2
Add hostname label for blackbox 2023-10-23 21:06:43 +01:00
2bd22cb2f6 Update lscr.io/linuxserver/nextcloud Docker tag to v27.1.2 2023-10-15 21:36:02 +01:00
a1d92ef080 Update lscr.io/linuxserver/mastodon Docker tag to v4.2.1 2023-10-15 21:35:23 +01:00
70ad33189c Update gitea/gitea Docker tag to v1.20.5 2023-10-15 21:34:29 +01:00
92914303ad Update matrixdotorg/synapse Docker tag to v1.94.0 2023-10-15 21:33:22 +01:00