Commit graph

1553 commits

Author SHA1 Message Date
81b302459e Update vabene1111/recipes Docker tag to v1.4.4 2022-09-30 16:01:02 +01:00
d4830ae9c2 Update dependency ansible-lint to v5.4.0 2022-09-29 10:01:27 +01:00
b32b7ca629 Update matrixdotorg/synapse Docker tag to v1.68.0 2022-09-27 14:01:34 +01:00
02d5b2d8d3
Upgrade sanoid 2022-09-26 19:32:55 +01:00
67b890d639 Merge branch 'renovate/vabene1111-recipes-1.x' into 'master'
Update vabene1111/recipes Docker tag to v1.4.2

See merge request sys/infrastructure!37
2022-09-26 13:56:40 +01:00
d9e8b91672 Merge branch 'renovate/ghcr.io-goauthentik-server-2022.x' into 'master'
Update ghcr.io/goauthentik/server Docker tag to v2022.9.0

See merge request sys/infrastructure!36
2022-09-26 13:56:38 +01:00
5be1078639 Update vabene1111/recipes Docker tag to v1.4.2 2022-09-23 18:01:17 +01:00
bcc2bfd417 Update ghcr.io/goauthentik/server Docker tag to v2022.9.0 2022-09-23 12:01:29 +01:00
1eaa33e664
Add DMARC to mailgun 2022-09-22 21:29:21 +01:00
8c1f088b19
Harden DMARC and SPF rules
Hopefully people still get my emails...
2022-09-22 21:26:26 +01:00
6268c0f451
Add DNS records for mailgun 2022-09-22 21:22:05 +01:00
72795591ac
Add DMARC 2022-09-22 21:12:41 +01:00
cf6cc7de7a
Add email to tandoor 2022-09-22 09:13:28 +01:00
356e04c005
Fewer workers / threads for authentik 2022-09-22 08:52:41 +01:00
92fdfd252a
Add email to authentik 2022-09-22 08:47:01 +01:00
98f2eea59b
Add email to plausible 2022-09-22 08:37:00 +01:00
9098fec232
Disable erlang multi-node distribution 2022-09-22 08:23:30 +01:00
f8abc9fc7e Merge branch 'renovate/vabene1111-recipes-1.x' into 'master'
Update vabene1111/recipes Docker tag to v1.4.1

See merge request sys/infrastructure!35
2022-09-22 08:16:10 +01:00
2b590a55c9 Update vabene1111/recipes Docker tag to v1.4.1 2022-09-21 20:01:33 +01:00
71732b7b7c
Don't keep quite so many backups
This results in a huge index which some smaller VMs can't handle
2022-09-21 08:48:05 +01:00
eccefcd7e0
Replace Cloudflare's DNS with Quad9 where it makes sense 2022-09-18 19:55:35 +01:00
60e9454efe
Disable authentik startup analytics 2022-09-18 18:55:24 +01:00
f49b26c6f0
Deploy authentik
Not integrated into other services quite yet. But it's there
2022-09-18 18:49:17 +01:00
4f0ee78b7e
Update grafana to use mailgun 2022-09-18 15:27:58 +01:00
8300d6dbf3
Update commento to use mailgun 2022-09-18 15:01:16 +01:00
63c1bc29db
Update nextcloud to 24.0.5 2022-09-18 14:35:39 +01:00
259ab3aae8 Merge branch 'renovate/matrixdotorg-synapse-1.x' into 'master'
Update matrixdotorg/synapse Docker tag to v1.67.0

See merge request sys/infrastructure!32
2022-09-18 14:22:13 +01:00
128689aed3 Merge branch 'renovate/louislam-uptime-kuma-1.x' into 'master'
Update louislam/uptime-kuma Docker tag to v1.18.0

See merge request sys/infrastructure!33
2022-09-18 14:20:38 +01:00
218d6a48cf
Use mailgun for GitLab emails 2022-09-16 17:43:01 +01:00
5f8a4d7b78
Use supercronic to schedule renovate
This makes it easier to restart, and makes more creative scheduling possible
2022-09-13 20:01:37 +01:00
7575a57e6b Update matrixdotorg/synapse Docker tag to v1.67.0 2022-09-13 11:14:16 +01:00
c7d5056f2a
Scrape homeassistant metrics into prometheus 2022-09-06 21:29:11 +01:00
aa1cef4739 Update louislam/uptime-kuma Docker tag to v1.18.0 2022-09-05 11:03:55 +01:00
0b69388f2c
Remove tmpfs mounts for tt-rss
These don't get created with the correct user permissions, and so breaks
2022-08-29 10:37:13 +01:00
cc3f980d34
Deploy tandoor 2022-08-24 22:17:29 +01:00
10f43bc38d
Prioritise OS-drive's snapraid content file over ZFS
Reads are much faster as it's SSD based, and it avoids unnecessary reads on the pool
2022-08-24 15:24:36 +01:00
dcc3055e93
Use official distribution of tt-rss
The previous one hasn't been updated in about a year. This one requires a couple extra containers, but is officially supported and maintained.
2022-08-24 15:23:21 +01:00
475215f33a
Run as many CI jobs as there are cores 2022-08-17 20:03:37 +01:00
73f165c521
Revert "Update traefik to 2.8"
This reverts commit a695818355.

This causes problems with traefik-pages
2022-08-16 10:17:53 +01:00
4eab0d4f01
Don't mount docker socket to traefik
It was already configured to use the proxy, and was running as non-root
anyway, so likely didn't have access to it in the first place.
2022-08-16 09:38:27 +01:00
8b21b9e6f2
Monitor decker Traefik with prometheus 2022-08-14 15:04:55 +01:00
461cd8fe3c
Update config version of nextcloud 2022-08-14 14:50:14 +01:00
4ccde9cfaf Merge branch 'renovate/lscr.io-linuxserver-nextcloud-24.x' into 'master'
Update dependency lscr.io/linuxserver/nextcloud to v24.0.4

See merge request sys/infrastructure!29
2022-08-14 14:37:13 +01:00
305f881d96 Merge branch 'renovate/matrixdotorg-synapse-1.x' into 'master'
Update dependency matrixdotorg/synapse to v1.64.0

See merge request sys/infrastructure!30
2022-08-14 14:22:40 +01:00
b8953745a6 Update dependency lscr.io/linuxserver/nextcloud to v24.0.4 2022-08-12 09:47:44 +00:00
7577b35755 Update dependency matrixdotorg/synapse to v1.64.0 2022-08-02 10:42:13 +00:00
a695818355
Update traefik to 2.8 2022-08-01 15:02:09 +01:00
9a89dddda3 Merge branch 'renovate/matrixdotorg-synapse-1.x' into 'master'
Update dependency matrixdotorg/synapse to v1.63.1

See merge request sys/infrastructure!27
2022-08-01 14:36:14 +01:00
84e27c9d61 Merge branch 'renovate/vaultwarden-server-1.x' into 'master'
Update dependency vaultwarden/server to v1.25.2

See merge request sys/infrastructure!28
2022-08-01 14:35:33 +01:00
6d7a147b74
Don't bind docker socket in CI
Use dind instead, as it's more secure and isolated

https://docs.gitlab.com/ee/ci/docker/using_docker_build.html#use-docker-in-docker
2022-07-28 17:47:02 +01:00