27 commits

Author	SHA1	Message	Date
Jake Howard	4d218248fa	Remotely connect to fail2ban to do ports ... Traefik can affect the edge, so blocks work there and prevent traffic hitting home network.	2021-03-28 16:06:36 +01:00
Jake Howard	5084bfecdf	Ignore PVE interface from f2b jails	2021-03-24 22:35:28 +00:00
Jake Howard	f7a0877e72	Exclude nebula from fail2ban	2021-02-14 11:39:01 +00:00
Jake Howard	385917ba4e	Decrease find time ... Hopefully reduce false-positive catches	2021-02-14 11:22:32 +00:00
Jake Howard	c38ecfebd7	Update gateway to point to ingress instance	2021-01-09 18:17:54 +00:00
Jake Howard	b2e91d7d6d	Update haproxy fail2ban jail to use systemd for logs	2020-10-16 19:16:42 +01:00
Jake Howard	4890c3d3e5	Revert "Remove fail2ban" ... This reverts commit 1f0e33acc8.	2020-10-16 19:16:42 +01:00
Jake Howard	29c9e14f62	Remove haproxy chroot ... This is technically _slightly_ less secure, but means it logs to journald properly, so can be picked up by fail2ban in future	2020-10-05 11:10:29 +01:00
Jake Howard	dd12b795b5	Remove pihole ... Internal VPN server is working just perfectly instead	2020-06-24 18:46:13 +01:00
Jake Howard	1f0e33acc8	Remove fail2ban ... Keeps getting hit by stats. I should fix that at some point	2020-05-09 20:09:36 +01:00
Jake Howard	f3126e34b9	Update haproxy config for use on arch	2020-05-09 20:08:27 +01:00
Jake Howard	ff8beea3c4	Massively increase timeouts to prevent websocket issues	2020-04-17 23:04:20 +01:00
Jake Howard	1da3ca95e7	Stop using unstable repos to install wireguard ... It's in backports now, which is much easier to install from!	2020-04-17 09:08:10 +01:00
Jake Howard	f32e0bfe59	Only add timeout for core HTTP ports	2020-03-31 19:27:47 +01:00
Jake Howard	cdcfcf3c66	Increase fail2ban threshold	2020-03-15 15:02:57 +00:00
Jake Howard	708250005a	Install fail2ban	2020-03-13 23:08:26 +00:00
Jake Howard	92af315e69	Change haproxy timeouts	2020-03-13 22:26:30 +00:00
Jake Howard	b4bb3f01f2	Convert haproxy config to use spaces	2020-01-26 18:17:55 +00:00
Jake Howard	ac5a9aa0f0	Remove SSL block from haproxy config	2020-01-26 18:15:19 +00:00
Jake Howard	af936990e2	Add custom DNS server	2020-01-23 20:06:45 +00:00
Jake Howard	ec478c3cf5	Fix client config	2020-01-19 17:59:36 +00:00
Jake Howard	251fe11113	Output wireguard client config files	2020-01-19 16:43:51 +00:00
Jake Howard	f6ffb1ceef	Template haproxy better	2020-01-17 22:56:45 +00:00
Jake Howard	78fa36f20a	Move variables to 1 place ... Much easier to manage	2020-01-17 22:31:50 +00:00
Jake Howard	23a472f764	Add wireguard server config	2019-12-08 21:05:20 +00:00
Jake Howard	730246e67f	Install wireguard server	2019-12-08 20:16:42 +00:00
Jake Howard	58a3683355	Define haproxy config	2019-12-08 16:47:28 +00:00