604 commits

Author	SHA1	Message	Date
Jake Howard	c63506d2bc	Pin traefik to patch version	2020-10-27 16:13:14 +00:00
Jake Howard	6ae8d0febe	Pin plausible versions	2020-10-27 16:13:14 +00:00
Jake Howard	f665b87965	Allow NTP role to manage config ... Hopefully this closes the port	2020-10-24 17:36:39 +01:00
Jake Howard	ff72f5a25e	Move nextcloud data dir to ZFS	2020-10-24 14:26:30 +01:00
Jake Howard	5eb3870fbe	Set mode on fail2ban filter and jail	2020-10-24 12:10:54 +01:00
Jake Howard	8932ac828f	Add geoip database for plausible	2020-10-24 12:10:37 +01:00
Jake Howard	47ad40bb52	Remove watchtower, and do updates manually from now on ... Keeps @IronicBadger happy!	2020-10-22 18:07:48 +01:00
Jake Howard	efd22010b7	Use new LSIO mod which does more	2020-10-19 17:29:28 +01:00
Jake Howard	a46525aa80	Move configuration for custom port to Traefik config rather than custom container expose ... Still a work-around for https://github.com/plausible/analytics/pull/237	2020-10-18 22:31:23 +01:00
Jake Howard	0ca3f36f7a	Move some more nextcloud components to ZFS	2020-10-18 18:02:48 +01:00
Jake Howard	58605c1c24	Don't snapshot tank root ... This makes syncoid unhappy, and is generally unnecessary	2020-10-18 17:45:49 +01:00
Jake Howard	bedbb0f5f4	Fix service to restart	2020-10-16 19:16:42 +01:00
Jake Howard	1930cc83e8	Use generic package module	2020-10-16 19:16:42 +01:00
Jake Howard	b2e91d7d6d	Update haproxy fail2ban jail to use systemd for logs	2020-10-16 19:16:42 +01:00
Jake Howard	4890c3d3e5	Revert "Remove fail2ban" ... This reverts commit 1f0e33acc8.	2020-10-16 19:16:42 +01:00
Jake Howard	30baed441e	Mount external files into nextcloud ... Means some bits can live outside the nextcloud dir	2020-10-10 18:01:27 +01:00
Jake Howard	b8ea056455	Remove netdata ... Don't use it anyway	2020-10-09 23:39:55 +01:00
Jake Howard	6852b84406	Change watchtower to run daily ... A holdover until less of the containers are using `:latest`	2020-10-09 23:20:07 +01:00
Jake Howard	5496744428	Remove web-rng	2020-10-09 23:11:53 +01:00
Jake Howard	f7afaacbdc	Move website to be hosted on GitLab pages	2020-10-09 21:35:57 +01:00
Jake Howard	7f09db5d20	Add heimdall	2020-10-07 14:09:23 +01:00
Jake Howard	e9f61070f8	Update nextcloud to version 20 ... Using the new LSIO tags for version specific pins! 🎉	2020-10-07 09:18:32 +01:00
Jake Howard	0a9deb3d9e	Update plausible environment so it's compatible with v1 ... Read the changelog, folks!	2020-10-06 21:48:34 +01:00
Jake Howard	93ccb686e7	Drive watchtower config from environment	2020-10-06 09:10:26 +01:00
Jake Howard	413ff4dad9	Add script to update containers ... This is an attended update, which is better. Eventually replace watchtower	2020-10-06 08:44:01 +01:00
Jake Howard	2c4e1e0414	Pin Plausible to major version	2020-10-05 18:43:12 +01:00
Jake Howard	29c9e14f62	Remove haproxy chroot ... This is technically _slightly_ less secure, but means it logs to journald properly, so can be picked up by fail2ban in future	2020-10-05 11:10:29 +01:00
Jake Howard	4c40faf21d	Move clickhouse off ZFS ... For some reason, they really don't play well together!	2020-10-03 17:18:11 +01:00
Jake Howard	68bda30cb2	Add nginx container for getting access to files via rclone	2020-10-03 11:41:38 +01:00
Jake Howard	64788eb602	Move transcodes to tempfs ... Means I can remove the scratch disk	2020-10-02 18:12:15 +01:00
Jake Howard	1f398b25c3	Store fewer snapshots for downloads directory	2020-10-02 18:11:53 +01:00
Jake Howard	191374b812	Move deluge onto walker ... Stop torrent traffic being limitted by home broadband	2020-10-02 18:11:34 +01:00
Jake Howard	6cfaa3a03a	Update traefik	2020-10-02 09:20:33 +01:00
Jake Howard	aee9507ec0	Update synapse	2020-10-02 09:13:41 +01:00
Jake Howard	addd4f351c	Update nextcloud base	2020-10-02 09:13:34 +01:00
Jake Howard	285f7b8a31	Update Gotify	2020-10-02 09:13:13 +01:00
Jake Howard	a799ad9657	Scale gitlab up a tiny bit	2020-10-01 19:46:04 +01:00
Jake Howard	4742552839	Add notes site	2020-09-30 18:49:36 +01:00
Jake Howard	4e7c5ffd67	Add docker mod to scale worker processes to a sane value	2020-09-28 20:14:41 +01:00
Jake Howard	07b0650618	Remove statping ... It's buggy as all hell, super slow, and doesn't really get used for monitoring	2020-09-27 14:17:46 +01:00
Jake Howard	5079599b9d	Require TLS 1.2	2020-09-27 12:36:49 +01:00
Jake Howard	d93920c2b6	Move home-assistant stuff to ZFS	2020-09-27 11:31:05 +01:00
Jake Howard	a303bed27f	Define app data dir in variable	2020-09-26 21:15:44 +01:00
Jake Howard	361a78e8e0	Update yamllint	2020-09-26 17:54:14 +01:00
Jake Howard	24d11deeae	Update ansible-lint ... Required a lot of renaming :(	2020-09-26 17:53:47 +01:00
Jake Howard	cc43910be6	Fix scrutiny so it picks up which task to run correctly	2020-09-26 17:10:07 +01:00
Jake Howard	3c21c5670c	Replace postgres with mariadb ... Its' recommended, and might hopefully fix my annoying auth issues!	2020-09-26 14:49:38 +01:00
Jake Howard	40488f62b7	Also set user id for collector container ... Else it chowns the DB, and doesn't run correctly	2020-09-24 22:18:34 +01:00
Jake Howard	fd83820faa	Install scrutiny	2020-09-21 21:16:00 +01:00
Jake Howard	a67361b9b5	Explicitly define bed lights	2020-09-19 16:16:24 +01:00
Jake Howard	2bbc7c715f	Add GZIP compression to projects which don't natively support it	2020-09-18 12:42:36 +01:00
Jake Howard	092f12459e	Fix XML formatting ... This caused clickhouse to crash hard!	2020-09-18 12:21:15 +01:00
Jake Howard	782b008cd3	Fix name of config so they're not constantly changed with each run of ansible ... derp!	2020-09-18 12:11:44 +01:00
Jake Howard	62e629187b	Clean up indent	2020-09-18 12:10:53 +01:00
Jake Howard	4ad2bdc77a	Change clickhouse connection to unified variable	2020-09-17 15:18:01 +01:00
Jake Howard	a8438c4c2a	Add grafana image renderer	2020-09-13 10:47:59 +01:00
Jake Howard	809a977c63	Also update nextcloud config file	2020-09-12 23:15:08 +01:00
Jake Howard	9cea8743e9	Update gotify	2020-09-12 22:54:49 +01:00
Jake Howard	4c92fba2b9	Change gitlab trusted proxies to be docker IP space ... Else it becomes `127.0.0.1`, which is obviously not right	2020-09-12 20:03:22 +01:00
Jake Howard	6ad9fa070f	Update nextcloud	2020-09-11 21:30:20 +01:00
Jake Howard	9ca2546766	Decommission grimes ... Most of the function has moved to `walker`	2020-09-10 20:39:54 +01:00
Jake Howard	1ecfc5b7fa	Update traefik	2020-09-10 20:16:23 +01:00
Jake Howard	59a447023b	Update nextcloud base	2020-09-09 20:43:52 +01:00
Jake Howard	c220f19545	Move scratch disk under /mnt ... Mounting disks is hard!	2020-09-08 21:17:51 +01:00
Jake Howard	2db72623ad	Remove DB backups for containers on ZFS ... Snapshots are a better backup	2020-09-08 20:41:47 +01:00
Jake Howard	b47de7e70b	Disable healthchecks for GitLab pages ... Because of everything we have disabled, Docker considers the container unhealthy	2020-09-05 23:08:58 +01:00
Jake Howard	8c4397d39a	Set rails trusted proxies	2020-09-05 22:29:16 +01:00
Jake Howard	2af3241bd2	GZIP compress gitlab pages	2020-09-05 20:52:18 +01:00
Jake Howard	19b2330832	Disable logrotate for pages ... Logs are in a tempfs anyway, and it's just another process to be running	2020-09-05 20:36:45 +01:00
Jake Howard	ea54d1be69	Expose pages sites	2020-09-05 20:33:57 +01:00
Jake Howard	0a1b541974	Remove compression middleware for gitlab ... This is already handled by the application	2020-09-05 18:27:56 +01:00
Jake Howard	e9aeed26ee	Use cloudflare DNS challenge for Traefik	2020-09-05 18:27:04 +01:00
Jake Howard	0289342e2c	Remove goaccess container	2020-09-05 17:29:40 +01:00
Jake Howard	4c1ccfc4e4	Only clear containers weekly ... This will be more helpful now, as repeat CI jobs won't need to re-download containers as often	2020-09-05 17:01:54 +01:00
Jake Howard	af9c66785e	Decrease watchtower polling rate to 10 minutes ... Doesn't need to be that intensive	2020-09-05 17:01:30 +01:00
Jake Howard	77113246b0	Remove remaining gitea configuration ... Goodbye old friend	2020-09-05 16:56:27 +01:00
Jake Howard	c1dc26ce35	Install gitlab pages daemon ... I'll deal with traefik domains later	2020-09-05 16:50:56 +01:00
Jake Howard	e579edc758	Use lsyncd to push files to gitlab pages server ... Server itself in future commit	2020-09-05 16:24:47 +01:00
Jake Howard	1487915bbc	Also disable thread log	2020-09-02 20:12:31 +01:00
Jake Howard	c47ff494e0	Revert "Disable docker healthchecks" ... Turns out it really just takes that long to start up! This reverts commit 61ed3db887.	2020-09-01 21:50:03 +01:00
Jake Howard	61ed3db887	Disable docker healthchecks ... Makes traefik take *ages* to detect the container is actually running. Let it 502 if it has to	2020-09-01 20:12:52 +01:00
Jake Howard	3bc1d75d9e	Ensure the correct IP is detected	2020-09-01 20:12:16 +01:00
Jake Howard	acef6246d0	Replace gitea with gitlab ... Leave gitea in place for a bit in case I need to change back suddenly	2020-09-01 19:47:39 +01:00
Jake Howard	84d529be2f	Update synapse	2020-08-31 18:47:37 +01:00
Jake Howard	3b7493ae8f	Set default theme to dark and assign default proxy	2020-08-30 21:11:29 +01:00
Jake Howard	1ed078ef23	Fix SSH port for gitlab	2020-08-30 21:08:04 +01:00
Jake Howard	4610d5ced2	Update nextcloud to 19.0.2	2020-08-30 20:28:49 +01:00
Jake Howard	3d76c48bbf	Use postgres on homeassistant	2020-08-30 16:58:27 +01:00
Jake Howard	ec751ffa1a	Add influxdb to monitor traefik	2020-08-30 15:58:03 +01:00
Jake Howard	17f0e22962	Migrate grafana to postgres	2020-08-30 14:53:08 +01:00
Jake Howard	8efb3e0d69	Expose gitlab SSH	2020-08-30 11:22:15 +01:00
Jake Howard	796c694170	Run duplicati as root ... This ensures it has all the right permissions to access all the right files. Host is mounted read-only, so there's no real security risk.	2020-08-30 11:15:08 +01:00
Jake Howard	5940b6970a	Move gitlab to ZFS pool	2020-08-30 10:19:57 +01:00
Jake Howard	0ce15cb4d8	Add gitlab	2020-08-29 23:56:14 +01:00
Jake Howard	da90b12643	Modify clickhouse settings so it's not a resource whore ... This means it can be moved back to ZFS!	2020-08-28 14:20:13 +01:00
Jake Howard	c6791e4098	Remove stray vault file from removing todoist-github	2020-08-28 14:17:45 +01:00
Jake Howard	8a7cc5e57e	Move clickhouse back to old disk ... It does a stupid number of writes, and the snapshots are massive! Until i've worked out why it writes so much, move it to a less critical disk	2020-08-27 14:16:12 +01:00
Jake Howard	9a8995f1f8	Use single cron job for pruning and taking snapshots ... Less to manage, and less lock contention	2020-08-26 13:02:50 +01:00
Jake Howard	77262cd206	Reduce number of sanoid snapshots ... It should be pretty quick for me to realise something went wrong. Can recycle through space much quicker this way!	2020-08-26 09:08:26 +01:00
Jake Howard	1f70a46c35	Add custom clickhouse config ... This changes the default log level to warning, to ensure the log file isn't being hammered	2020-08-26 08:54:37 +01:00
Jake Howard	3edc34759d	Mount clickhouse logs on tmpfs ... WHO LOGS TRACE BY DEFAULT?!	2020-08-25 22:05:10 +01:00
Jake Howard	742412259c	Mount transcodes on scratch disk ... Don't want them getting caught by sanoid!	2020-08-25 14:30:26 +01:00
Jake Howard	4feff3d247	Move jellyfin to ZFS	2020-08-25 14:17:57 +01:00
Jake Howard	6808e86a6d	Update nextcloud base	2020-08-24 14:30:11 +01:00
Jake Howard	922b688615	Bump ZFS usage to 50% RAM ... It's a lot, but should be dealable on most machines	2020-08-23 14:15:09 +01:00
Jake Howard	f531d4f915	Move plausible onto ZFS	2020-08-22 12:19:47 +01:00
Jake Howard	9ffdd4d711	Move grafana to ZFS ... Don't need to create the directory anymore really	2020-08-22 12:07:44 +01:00
Jake Howard	f517831435	Install synapse config to right place	2020-08-22 12:03:04 +01:00
Jake Howard	67dfe6a8a0	Remove todoist-github ... It's got some pretty big bugs, and isn't running anyway	2020-08-22 12:01:24 +01:00
Jake Howard	07d5c4fa72	Move quassel to ZFS	2020-08-22 11:59:10 +01:00
Jake Howard	3dc8ee16b5	Move wallabag to ZFS	2020-08-22 11:51:51 +01:00
Jake Howard	ff7ec46e77	Move synapse to ZFS	2020-08-22 11:42:03 +01:00
Jake Howard	037d719906	Migrate deluge data to ZFS pool	2020-08-22 11:20:38 +01:00
Jake Howard	8d2c6dfb68	Move gitea to ZFS	2020-08-21 16:02:56 +01:00
Jake Howard	bc5d6d512b	Move calibre to ZFS pool	2020-08-21 15:34:04 +01:00
Jake Howard	2866cd0602	Move TT-RSS into ZFS pool	2020-08-21 15:33:46 +01:00
Jake Howard	35266e975d	Drive sanoid changes from YAML	2020-08-20 21:47:12 +01:00
Jake Howard	1bcb8f22b1	Fully resolve path to sanoid ... Apparently cron didn't like just `sanoid`	2020-08-20 21:24:33 +01:00
Jake Howard	a2e021ac43	Install ZFS on home server 🎉	2020-08-19 21:34:23 +01:00
Jake Howard	a5aa21429c	Conditionally run reflector role rather than manually defining which machines run arch	2020-08-19 18:58:58 +01:00
Jake Howard	63ec7c671a	Manually install sanoid ... Makes the foundation for a future external role	2020-08-19 18:40:17 +01:00
Jake Howard	fcd4dbf657	Fix casing ... Turns out it's a lower case "l"	2020-08-19 17:59:56 +01:00
Jake Howard	2ef836b2e9	Remove synapse helper scripts ... They're not maintained, and actually highly advised against	2020-08-18 20:39:23 +01:00
Jake Howard	efc7a5d7fb	Allow arc to be 20% RAM usage	2020-08-18 13:47:48 +01:00
Jake Howard	cbbd7bf83d	Update synapse	2020-08-18 13:13:25 +01:00
Jake Howard	6716b418d7	Ensure cron tasks are run as the right user ... Looks like by default they're installed as the current user, not root. Bad ansible documentation!	2020-08-17 22:29:02 +01:00
Jake Howard	af22e89a73	Update nextcloud base	2020-08-17 13:57:53 +01:00
Jake Howard	bf4e90d053	Update synapse	2020-08-17 13:57:44 +01:00
Jake Howard	150a34be2f	Provide cron flag to sanoid	2020-08-17 13:49:07 +01:00
Jake Howard	0902dd001e	Expose grafana	2020-08-07 12:03:45 +01:00
Jake Howard	9d014cfa1c	Install grafana and link it to HA	2020-08-07 11:52:15 +01:00
Jake Howard	301ac37868	Remove legacy integrations	2020-08-06 17:05:19 +01:00
Jake Howard	55f79b4a51	Remove socks proxy	2020-08-05 20:56:12 +01:00
Jake Howard	c888fc5e72	Pull new images before taking application down	2020-08-05 17:43:04 +01:00
Jake Howard	1195a5001e	Add reflector to keep mirror lists updated	2020-08-05 12:15:28 +01:00
Jake Howard	384a07b513	Run plausible migrations on startup	2020-08-04 22:07:45 +01:00
Jake Howard	19c134564a	Add duplicati to walker ... Gotta backup them backups	2020-08-04 21:09:45 +01:00
Jake Howard	7d3f6a8121	Remove duplicati from grimes	2020-08-04 20:58:10 +01:00
Jake Howard	e184c7fba1	Move website over to walker	2020-08-04 20:54:53 +01:00
Jake Howard	6ceea80ee7	Fix website restart	2020-08-04 20:54:34 +01:00
Jake Howard	4b7830567b	Add postgres backups for plausible	2020-08-04 19:49:21 +01:00
Jake Howard	7c0d78ee9d	Remove folding-at-home ... New server location isn't especially ventilated, so heat is an issue. I'm sorry.	2020-08-04 19:41:01 +01:00
Jake Howard	c435ad1ba8	Ensure plausible is restarted on error	2020-08-04 19:38:01 +01:00
Jake Howard	969b0bd8d9	Update traefik ... Fixes GHSA-6qq8-5wq3-86rp	2020-07-30 21:46:44 +01:00
Jake Howard	ed00a0d40e	Update gitea	2020-07-29 18:26:13 +01:00
Jake Howard	a6047da465	Use default port	2020-07-28 20:31:32 +01:00
Jake Howard	91effbcac5	Add ZFS scrub cron job	2020-07-26 22:17:28 +01:00
Jake Howard	6e58b07519	Remove unnecessary quotes	2020-07-26 18:22:43 +01:00
Jake Howard	ebbd2a4015	Install zfs and sanoid	2020-07-26 18:03:09 +01:00
Jake Howard	5cb1a470ab	Bump plausible pool size	2020-07-26 15:40:03 +01:00