systems/infrastructure

Author	SHA1	Message	Date
Jake Howard	dfa8328e7b	Move gateway logs to separate file	2024-01-31 21:06:19 +00:00
Jake Howard	53c758a781	Monitor headscale with prometheus All checks were successful / terraform (push) Successful in 29s Details / ansible (push) Successful in 1m38s Details	2024-01-27 17:40:02 +00:00
Jake Howard	2ceeaf091d	Deploy headscale Some checks failed / terraform (push) Failing after 11m20s Details / ansible (push) Failing after 11m6s Details	2024-01-27 14:18:37 +00:00
Jake Howard	06784563a7	Don't resolve ipv6 All checks were successful / terraform (push) Successful in 30s Details / ansible (push) Successful in 1m36s Details Something about this setup doesn't like it, so I'll disable v6 for now	2024-01-26 21:43:04 +00:00
Renovate	4f6f4143ce	Update matrixdotorg/synapse Docker tag to v1.99.0 All checks were successful / terraform (push) Successful in 31s Details / ansible (push) Successful in 1m46s Details	2024-01-22 09:15:38 +00:00
Renovate	5292785cd9	Update wallabag/wallabag Docker tag to v2.6.8 Some checks are pending / terraform (push) Has started running Details / ansible (push) Successful in 1m38s Details	2024-01-22 09:11:27 +00:00
Renovate	d297674fb5	Update vabene1111/recipes Docker tag to v1.5.11 All checks were successful / terraform (push) Successful in 49s Details / ansible (push) Successful in 1m51s Details	2024-01-22 08:42:36 +00:00
Jake Howard	88f0828153	Use primary Quad9 servers All checks were successful / terraform (push) Successful in 47s Details / ansible (push) Successful in 1m39s Details DNSSEC and malware blocking is probably useful, just in case	2024-01-21 23:19:49 +00:00
Jake Howard	cfc3de61b4	Add fallback quad9 address This aids availability, along with a healthcheck	2024-01-21 23:05:25 +00:00
Jake Howard	c6bae0f797	Do simple `endsWith` matching for docker view All checks were successful / terraform (push) Successful in 33s Details / ansible (push) Successful in 1m42s Details This saves the need for a regex	2024-01-14 22:27:02 +00:00
Jake Howard	4c5936b2aa	Disable Grafana analytics All checks were successful / terraform (push) Successful in 32s Details / ansible (push) Successful in 1m41s Details	2024-01-14 15:30:12 +00:00
Jake Howard	9d685d85aa	Update website deployment to unify containers All checks were successful / terraform (push) Successful in 1m9s Details / ansible (push) Successful in 2m17s Details	2024-01-14 14:22:19 +00:00
Jake Howard	ac166c3874	Start resolved to support mDNS All checks were successful / terraform (push) Successful in 34s Details / ansible (push) Successful in 1m44s Details	2024-01-10 13:28:45 +00:00
Jake Howard	06b9197c5b	Sync terraform state to `restic` All checks were successful / terraform (push) Successful in 31s Details / ansible (push) Successful in 1m47s Details This allows it to be backed up easily	2024-01-09 19:56:06 +00:00
Jake Howard	4a69df1d6c	Ignore ansible-lint for nebula install block All checks were successful / terraform (push) Successful in 1m28s Details / ansible (push) Successful in 1m48s Details I'm smarter than it is	2024-01-08 21:49:38 +00:00
Jake Howard	f33d19e156	Move AdGuardHome configuration to Terraform https://git.theorangeone.net/systems/adguardhome	2024-01-08 21:45:28 +00:00
Jake Howard	616d20e23b	Tweak some AGH settings Some checks failed / terraform (push) Successful in 1m15s Details / ansible (push) Failing after 1m59s Details	2024-01-08 19:01:46 +00:00
Jake Howard	383a57d1f2	Use DoH endpoint fot quad9 Seems latency is much lower	2024-01-08 18:21:03 +00:00
Jake Howard	c8211d4756	Use Debian repo version of nginx Some checks failed / terraform (push) Successful in 1m3s Details / ansible (push) Failing after 1m53s Details It's older, and doesn't have `stream` compiled in, but the repo one can't link to any of the installed modules, which is a non-starter.	2024-01-04 14:17:36 +00:00
Jake Howard	57ad143268	Set password for homeassistant SMB mount Some checks failed / terraform (push) Successful in 38s Details / ansible (push) Failing after 1m40s Details It had an IP restriction, but still	2024-01-03 21:23:49 +00:00
Jake Howard	16e9952b2f	Replace custom restic logs with runitor	2024-01-03 21:09:07 +00:00
Jake Howard	f5154d1683	Use CoreDNS to do recursive CNAME aliasing for AGH Some checks failed / terraform (push) Successful in 47s Details / ansible (push) Failing after 1m38s Details	2024-01-02 17:48:47 +00:00
Jake Howard	3ed7074af6	Rename coredns role	2024-01-02 17:02:34 +00:00
Jake Howard	5581bbc01a	Replace pihole with adguardhome All checks were successful / terraform (push) Successful in 1m13s Details / ansible (push) Successful in 2m19s Details AGH is much simpler to install and manage, and does DoH natively.	2024-01-01 15:48:14 +00:00
Jake Howard	56bfe544e4	nginx HTTPS redirect on ipv6	2023-12-31 22:49:11 +00:00
Renovate	83543fe081	Update lscr.io/linuxserver/nextcloud Docker tag to v28.0.1 All checks were successful / terraform (push) Successful in 33s Details / ansible (push) Successful in 1m49s Details	2023-12-28 21:39:28 +00:00
Jake Howard	0e0d0c9b82	`walker` doesn't have a `traefik` anymore All checks were successful / terraform (push) Successful in 1m8s Details / ansible (push) Successful in 2m15s Details	2023-12-26 22:31:12 +00:00
Jake Howard	026d8db13e	Be root when generating dhparams All checks were successful / terraform (push) Successful in 37s Details / ansible (push) Successful in 1m50s Details This is needed to write to the destination	2023-12-24 19:44:30 +00:00
Jake Howard	593a945c5c	Install nginx from package manager if available	2023-12-24 19:44:30 +00:00
Jake Howard	bd15946f3b	Update Nebula	2023-12-24 19:44:30 +00:00
Jake Howard	f4b96afcfa	Deploy ntfy All checks were successful / terraform (push) Successful in 1m15s Details / ansible (push) Successful in 2m22s Details	2023-12-23 16:40:53 +00:00
Jake Howard	c0c7f393e3	Only pin to minor versions of gitea All checks were successful / terraform (push) Successful in 32s Details / ansible (push) Successful in 1m48s Details	2023-12-21 16:43:18 +00:00
Jake Howard	5fd952be4c	Only pin to minor version of Authentik	2023-12-21 16:42:02 +00:00
Jake Howard	39899cd1e0	Use certbot to issue certificates	2023-12-21 16:38:07 +00:00
Jake Howard	8e1a203df2	Add helper map for better websocket support	2023-12-21 16:38:07 +00:00
Jake Howard	a3baf8be1e	Use nginx as reverse proxy on walker, removing traefik SSL coming soon	2023-12-21 16:38:07 +00:00
Jake Howard	a7eb372899	Fix HTTPS redirect hostname	2023-12-21 14:58:19 +00:00
Jake Howard	80a770f399	Add include files before main nginx config	2023-12-21 14:58:04 +00:00
Jake Howard	ef432642dd	Unify nginx module tasks Some checks failed / terraform (push) Successful in 1m8s Details / ansible (push) Failing after 2m0s Details	2023-12-20 22:35:11 +00:00
Jake Howard	b32a63bd72	Add helpful includes Along with ensuring there are dhparams	2023-12-20 22:29:42 +00:00
Jake Howard	2336e4dd5b	Add brotli All checks were successful / terraform (push) Successful in 1m5s Details / ansible (push) Successful in 2m19s Details	2023-12-17 18:12:33 +00:00
Jake Howard	46eda36515	Fully block Server header All checks were successful / terraform (push) Successful in 31s Details / ansible (push) Successful in 1m46s Details	2023-12-16 21:57:19 +00:00
Jake Howard	cfb498d7c6	Only add HTTPS redirect when it's needed All checks were successful / terraform (push) Successful in 1m3s Details / ansible (push) Successful in 2m7s Details	2023-12-16 18:13:49 +00:00
Jake Howard	48efcf4d91	Use mainline nginx release on Arch	2023-12-16 18:03:01 +00:00
Jake Howard	930cf87084	gzip as much as makes sense	2023-12-16 17:58:15 +00:00
Jake Howard	92052a3d0a	Unify nginx configuration This creates a simple base configuration skeleton, that other configuration can be easily loaded into.	2023-12-16 17:47:04 +00:00
Jake Howard	943c141d59	Ensure ingress proxy doesn't terminate connections All checks were successful / terraform (push) Successful in 1m6s Details / ansible (push) Successful in 2m16s Details This mostly works around a weird issues with Jellyfin	2023-12-14 22:08:02 +00:00
Jake Howard	2ff2128330	Set pihole temp unit	2023-12-14 22:04:14 +00:00
Jake Howard	b33e19e152	Remove unnecessary extra variable definitions The world could do with a bit less YAML!	2023-12-14 22:03:23 +00:00
Jake Howard	7ad5d6e51e	Deploy coredns as a proxy to Docker's internal DNS	2023-12-14 21:04:26 +00:00
Jake Howard	7381c1f10a	Update nextcloud version in config.php All checks were successful / terraform (push) Successful in 27s Details / ansible (push) Successful in 1m41s Details	2023-12-13 17:48:46 +00:00
Renovate	18fd0631e1	Update lscr.io/linuxserver/nextcloud Docker tag to v28 All checks were successful / terraform (push) Successful in 29s Details / ansible (push) Successful in 1m37s Details	2023-12-13 17:38:40 +00:00
Renovate	05eee3f4de	Update gitea/gitea Docker tag to v1.21.2 Some checks failed / terraform (push) Successful in 31s Details / ansible (push) Has been cancelled Details	2023-12-13 17:37:11 +00:00
Renovate	e0f7b47961	Update lscr.io/linuxserver/mastodon Docker tag to v4.2.3 All checks were successful / terraform (push) Successful in 1m4s Details / ansible (push) Successful in 2m6s Details	2023-12-05 18:00:28 +00:00
Jake Howard	c0df505f70	Disable browser updates for nextcloud All checks were successful / terraform (push) Successful in 27s Details / ansible (push) Successful in 1m36s Details	2023-12-04 09:39:14 +00:00
Jake Howard	aecd7c0a18	Upgrade nextcloud version in config	2023-12-04 09:38:43 +00:00
Renovate	b9c5c7ce01	Update lscr.io/linuxserver/nextcloud Docker tag to v27.1.4 All checks were successful / terraform (push) Successful in 26s Details / ansible (push) Successful in 1m34s Details	2023-12-04 09:35:32 +00:00
Jake Howard	e815fcb2be	Pin all redis versions to 7 All checks were successful / terraform (push) Successful in 28s Details / ansible (push) Successful in 1m34s Details Keeps them all in sync	2023-12-04 09:22:51 +00:00
Renovate	85352014ab	Update matrixdotorg/synapse Docker tag to v1.97.0 Some checks failed / terraform (push) Successful in 27s Details / ansible (push) Has been cancelled Details	2023-12-04 09:09:07 +00:00
Renovate	01eb469ac8	Update vabene1111/recipes Docker tag to v1.5.10 Some checks failed / terraform (push) Successful in 26s Details / ansible (push) Has been cancelled Details	2023-12-03 14:00:28 +00:00
Jake Howard	461ec71b12	Update gitea branding path All checks were successful / terraform (push) Successful in 32s Details / ansible (push) Successful in 1m46s Details	2023-11-27 19:19:58 +00:00
Renovate	2fe093668d	Update ghcr.io/goauthentik/server Docker tag to v2023.10.4 All checks were successful / terraform (push) Successful in 26s Details / ansible (push) Successful in 1m36s Details	2023-11-27 08:37:21 +00:00
Renovate	58c14c7f94	Update vaultwarden/server Docker tag to v1.30.1 All checks were successful / terraform (push) Successful in 26s Details / ansible (push) Successful in 1m36s Details	2023-11-27 08:35:50 +00:00
Renovate	d0a994198c	Update gitea/gitea Docker tag to v1.21.1 All checks were successful / terraform (push) Successful in 1m4s Details / ansible (push) Successful in 2m7s Details	2023-11-26 18:00:27 +00:00
Renovate	5e8918221f	Update gitea/gitea Docker tag to v1.21.0 All checks were successful / terraform (push) Successful in 31s Details / ansible (push) Successful in 1m38s Details	2023-11-19 18:04:14 +00:00
Renovate	0d970d276d	Update matrixdotorg/synapse Docker tag to v1.96.1 All checks were successful / terraform (push) Successful in 31s Details / ansible (push) Successful in 1m37s Details	2023-11-19 17:59:53 +00:00
Jake Howard	8666933bfb	Revert "Use OIDC to log in to tt-rss" All checks were successful / terraform (push) Successful in 1m5s Details / ansible (push) Successful in 2m11s Details OIDC breaks any kind of API integration, which is very annoying This reverts commit `66ddef96e2`.	2023-11-18 21:57:16 +00:00
Jake Howard	3df1e1d46b	Update Nextcloud version in config.php All checks were successful / terraform (push) Successful in 24s Details / ansible (push) Successful in 1m41s Details	2023-11-13 18:22:42 +00:00
Renovate	e3da2710a7	Update lscr.io/linuxserver/nextcloud Docker tag to v27.1.3 All checks were successful / terraform (push) Successful in 28s Details / ansible (push) Successful in 1m39s Details	2023-11-13 18:22:06 +00:00
Renovate	19febd9c35	Update matrixdotorg/synapse Docker tag to v1.95.1 All checks were successful / terraform (push) Successful in 29s Details / ansible (push) Successful in 1m41s Details	2023-11-13 18:19:38 +00:00
Renovate	f0c0b6d4b4	Update vaultwarden/server Docker tag to v1.30.0 All checks were successful / terraform (push) Successful in 28s Details / ansible (push) Successful in 1m41s Details	2023-11-13 18:17:52 +00:00
Renovate	a4958e619a	Update ghcr.io/goauthentik/server Docker tag to v2023.10.3 All checks were successful / terraform (push) Successful in 28s Details / ansible (push) Successful in 1m45s Details	2023-11-13 18:15:28 +00:00
Jake Howard	e4b2318c82	Monitor authentik All checks were successful / terraform (push) Successful in 37s Details / ansible (push) Successful in 1m42s Details	2023-11-12 21:25:02 +00:00
Jake Howard	dfef31cbfa	Deploy minio My own S3, for various things	2023-11-12 21:23:54 +00:00
Jake Howard	38840402b9	Disable repo units I don't use by default All checks were successful / terraform (push) Successful in 31s Details / ansible (push) Successful in 1m41s Details	2023-11-12 18:28:01 +00:00
Jake Howard	5f31a39804	Ensure Nextcloud can talk to local servers All checks were successful / terraform (push) Successful in 30s Details / ansible (push) Successful in 1m40s Details Needed for Authentik	2023-11-08 19:51:16 +00:00
Jake Howard	66ddef96e2	Use OIDC to log in to tt-rss	2023-11-08 19:46:16 +00:00
Jake Howard	935b099c4f	Decommission `upload` All checks were successful / terraform (push) Successful in 30s Details / ansible (push) Successful in 1m38s Details It was never really used for anything, and I want to replace it with something better eventually	2023-11-07 21:17:21 +00:00
Jake Howard	dbbfe55975	Deploy authentik _again_.	2023-11-07 21:17:21 +00:00
Jake Howard	48dbaeed99	Deploy remark42 All checks were successful / terraform (push) Successful in 29s Details / ansible (push) Successful in 1m43s Details To soon replace Commento	2023-11-06 21:29:28 +00:00
Jake Howard	5fb605231d	Allow pings to ingress All checks were successful / terraform (push) Successful in 33s Details / ansible (push) Successful in 1m50s Details This makes testing connections much simpler	2023-11-05 21:48:25 +00:00
Jake Howard	dd1558bafa	Set sensible permissions on nftables config	2023-11-05 21:43:16 +00:00
Jake Howard	b0347fc037	Remove redundant quotes	2023-11-05 21:43:02 +00:00
Jake Howard	f1ac40f432	Reduce pihole cache size Some checks failed / terraform (push) Successful in 1m9s Details / ansible (push) Failing after 2m11s Details This is still a lot of records, and pihole complains with values any larger	2023-11-05 13:22:05 +00:00
Jake Howard	850278ab19	Allow nebula through firewall Some checks failed / terraform (push) Successful in 1m6s Details / ansible (push) Failing after 2m8s Details	2023-11-03 18:06:36 +00:00
Jake Howard	b1284877a3	Update blackbox configuration for not following redirects Some checks failed / terraform (push) Successful in 30s Details / ansible (push) Failing after 1m23s Details	2023-11-01 22:14:35 +00:00
Jake Howard	6b4285a264	Let alertmanager run as its own user It's already not-root, and can't access the filesystem anyway	2023-11-01 22:13:37 +00:00
Jake Howard	3ed786336e	Remove wireguard_53 Some checks failed / terraform (push) Successful in 34s Details / ansible (push) Failing after 1m25s Details I never used it - no reason to maintain it	2023-10-26 21:50:22 +01:00
Jake Howard	9f83efa53b	Use nftables for firewall on ingress See ya never, iptables!	2023-10-26 21:34:06 +01:00
Jake Howard	54e2205e48	Don't bother renaming speedtest metrics Some checks failed / terraform (push) Successful in 32s Details / ansible (push) Failing after 1m20s Details	2023-10-23 22:09:25 +01:00
Jake Howard	c29dfb5ad2	Add hostname label for blackbox Some checks failed / terraform (push) Successful in 37s Details / ansible (push) Failing after 1m22s Details	2023-10-23 21:06:43 +01:00
Renovate	2bd22cb2f6	Update lscr.io/linuxserver/nextcloud Docker tag to v27.1.2 All checks were successful / terraform (push) Successful in 35s Details / ansible (push) Successful in 1m51s Details	2023-10-15 21:36:02 +01:00
Renovate	a1d92ef080	Update lscr.io/linuxserver/mastodon Docker tag to v4.2.1 All checks were successful / ansible (push) Successful in 2m4s Details / terraform (push) Successful in 34s Details	2023-10-15 21:35:23 +01:00
Renovate	70ad33189c	Update gitea/gitea Docker tag to v1.20.5 All checks were successful / ansible (push) Successful in 2m13s Details / terraform (push) Successful in 28s Details	2023-10-15 21:34:29 +01:00
Renovate	92914303ad	Update matrixdotorg/synapse Docker tag to v1.94.0 All checks were successful / terraform (push) Successful in 46s Details / ansible (push) Successful in 2m21s Details	2023-10-15 21:33:22 +01:00
Renovate	a1a61f1069	Update wallabag/wallabag Docker tag to v2.6.7 All checks were successful / terraform (push) Successful in 30s Details / ansible (push) Successful in 2m6s Details	2023-10-15 21:32:01 +01:00
Jake Howard	4950082c28	Remove deprecated gitea config settings All checks were successful / terraform (push) Successful in 1m13s Details / ansible (push) Successful in 2m20s Details	2023-10-15 21:27:23 +01:00
Jake Howard	ad867f9654	Add JWT secret for gitea This appeared in my config - it's probably important	2023-10-15 18:55:24 +01:00
Jake Howard	ad3b5bc42d	Move repo archive to "files" subvolume It's better suited for this kind of file storage	2023-10-15 18:53:30 +01:00
Jake Howard	37b8c48a77	Remove legacy short domains All checks were successful / terraform (push) Successful in 1m24s Details / ansible (push) Successful in 2m47s Details I never used them, and the certificate renewal didn't work anyway.	2023-10-02 09:37:05 +01:00

1 2 3 4 5 ...

1252 commits