646 commits

Author	SHA1	Message	Date
Jake Howard	c7fba8107a	Move grafana to forrest	2021-01-31 16:52:24 +00:00
Jake Howard	a79e54d45a	Add forrest instance	2021-01-31 15:18:20 +00:00
Jake Howard	058290b321	Keep track of IPs for PVE hosts ... Yea they're all random, I'll deal with that later	2021-01-31 12:46:43 +00:00
Jake Howard	9023b269eb	Allow PVE VMs to access nebula hosts via ingress	2021-01-31 12:19:33 +00:00
Jake Howard	643d843bfb	Enable unsafe routing to PVE network over nebula	2021-01-30 22:59:56 +00:00
Jake Howard	da301eb7dd	Provision remaining nebula instances	2021-01-30 20:47:11 +00:00
Jake Howard	08ff5dcf94	Provision nebula certs using Ansible	2021-01-30 20:06:31 +00:00
Jake Howard	92815a6f76	Add platform-agnostic installation of nebula	2021-01-30 19:10:52 +00:00
Jake Howard	723372dd09	Name keys after hostname	2021-01-30 18:16:28 +00:00
Jake Howard	703b3b194f	Make index read-only so it's not always reowned	2021-01-29 21:52:22 +00:00
Jake Howard	062742bc5e	Update synapse	2021-01-29 21:44:34 +00:00
Jake Howard	e1f3572a7c	Set pages install directory correctly	2021-01-29 21:35:01 +00:00
Jake Howard	c5050381fc	Update plausible to v1.2	2021-01-29 21:34:44 +00:00
Jake Howard	698804ff38	Remove gitlab	2021-01-28 19:54:03 +00:00
Jake Howard	89a6c7680c	Decommission walker ... Kimsufi is just too annoying of a host. Everything has either been moved off, killed, or has further plans.	2021-01-28 18:56:39 +00:00
Jake Howard	b339cb0e2d	Move upload to grimes	2021-01-28 14:04:55 +00:00
Jake Howard	909f693cba	Fix location of zpool command ... TIL lookups are executed on the host	2021-01-26 22:02:58 +00:00
Jake Howard	3de14efd9e	Remove heimdall ... I've literally not used it since setting it up	2021-01-26 21:53:52 +00:00
Jake Howard	a44a79031a	Init some skeleton nebula stuff	2021-01-25 21:53:04 +00:00
Jake Howard	0ecd884a9a	Deploy yourls	2021-01-22 21:29:27 +00:00
Jake Howard	2a8f715eca	Add redis cache for gitea	2021-01-22 18:59:52 +00:00
Jake Howard	cc847a069c	Resolve zpool location ... Hopefully this means they actually run	2021-01-22 15:29:41 +00:00
Jake Howard	a2c6d7c276	Swap out alpine for debian on ingress ... Mostly for future nebula deployment	2021-01-22 14:53:02 +00:00
Jake Howard	0f9802a46c	Install duplicati on PVE docker machine ... Requires some changes to how private IPs are specified, which I really need to clean up at some point!	2021-01-20 21:38:01 +00:00
Jake Howard	f6c176d2f0	Ensure duplicati base is always updated	2021-01-20 21:30:25 +00:00
Jake Howard	fce8cf3768	Update nextcloud	2021-01-20 20:58:28 +00:00
Jake Howard	76eeeec260	Update wallabag	2021-01-20 20:39:27 +00:00
Jake Howard	3321b852a5	Update traefik to v2.4	2021-01-20 20:33:57 +00:00
Jake Howard	700360eb96	Update synapse	2021-01-20 20:20:09 +00:00
Jake Howard	3e8a3b2c6b	Update gotify	2021-01-20 20:02:01 +00:00
Jake Howard	48c507e0c3	Up page sizes for gitea stuff ... Screw paginating!	2021-01-19 21:20:00 +00:00
Jake Howard	26905e245b	Hide heatmap on gitea ... It's kinda useless at this scale	2021-01-19 17:42:10 +00:00
Jake Howard	41915ec69c	Replace gitlab with gitea ... Leave gitlab in place for a bit in case I need to get at data	2021-01-18 20:14:38 +00:00
Jake Howard	f9187109c7	Correct router name for pages	2021-01-17 20:03:02 +00:00
Jake Howard	ac4a93e0ed	Setup DNS for pages	2021-01-17 12:49:23 +00:00
Jake Howard	b992df0313	Fix variable name for traefik conditional provider	2021-01-16 23:30:09 +00:00
Jake Howard	604202fdce	Add traefik pages ... Add it ready for the migration in future	2021-01-16 23:29:55 +00:00
Jake Howard	e1ea938d59	Add file providers for jellyfin and HA	2021-01-13 22:12:58 +00:00
Jake Howard	969674772c	Snapshot PVE root pool too	2021-01-10 13:23:36 +00:00
Jake Howard	7672d99aa8	Remove homeassistant configuration ... It's now in its own VM, and i'll deal with version control using the git integration there directly I suspect.	2021-01-10 13:12:19 +00:00
Jake Howard	b40266b276	Add roles to handle PVE nag and repos	2021-01-09 23:21:35 +00:00
Jake Howard	6dd86ea870	Limit ZFS ARC size on PVE	2021-01-09 22:32:55 +00:00
Jake Howard	d87ec89887	Persist arc size ... Modprobe only loads the module, it doesn't ensure the ARC value persists correctly.	2021-01-09 22:25:29 +00:00
Jake Howard	0c6e9969bc	Give myself passwordless sudo access to zfs stuff ... This is needed for syncoid pulls	2021-01-09 21:36:09 +00:00
Jake Howard	c3053e9378	Fix location for sanoid install ... This makes it sync up with where the systemd services expect them to be	2021-01-09 21:28:16 +00:00
Jake Howard	7d235e67e0	Add ZFS configuration for PVE	2021-01-09 21:27:52 +00:00
Jake Howard	decf5176f7	Use systemd rather than cron for sanoid ... It's more reliable and easier to get logs	2021-01-09 20:57:47 +00:00
Jake Howard	57d9c9d288	Allow configuring of pools to scrub	2021-01-09 20:52:51 +00:00
Jake Howard	721bdf60b3	Fix quotes	2021-01-09 18:32:16 +00:00
Jake Howard	1b72afdd29	Remove scrutiny role ... SMART checks are handeld by PVE / something else in future	2021-01-09 18:30:28 +00:00
Jake Howard	0506a78d02	Listen on public port ... Makes connection so much easier	2021-01-09 18:25:08 +00:00
Jake Howard	8fe8788458	Move ARC size to defaults so it can be easily changed	2021-01-09 18:24:52 +00:00
Jake Howard	5b495688cd	Remove intersect wireguard keys	2021-01-09 18:23:10 +00:00
Jake Howard	c38ecfebd7	Update gateway to point to ingress instance	2021-01-09 18:17:54 +00:00
Jake Howard	fef7f2c2b4	Move docker containers to new PVE container	2021-01-09 18:02:17 +00:00
Jake Howard	a35f2f91ff	Default to using python3 over "legacy python"	2021-01-09 17:55:29 +00:00
Jake Howard	0355b6b214	Remove jellyfin docker config ... It'll be replaced by something else later, don't worry.	2021-01-09 17:17:12 +00:00
Jake Howard	2300426f0f	Move default variables into role defaults rather than group vars	2020-12-28 16:23:12 +00:00
Jake Howard	422062ae63	Fix lint warning around missing mode ... This only applies to directories https://stackoverflow.com/a/29793833	2020-12-28 16:16:35 +00:00
Jake Howard	3338a1f898	Add jellyfin host ... Role TBC	2020-12-28 16:08:15 +00:00
Jake Howard	6267363ab0	Provision docker VM	2020-12-28 15:57:44 +00:00
Jake Howard	bdfd38c9fe	Allow traefik to run on non-wireguard host	2020-12-28 15:55:45 +00:00
Jake Howard	4f1e54baab	Actually enable timer	2020-12-28 15:14:50 +00:00
Jake Howard	58879d2e1d	Ensure fail2ban and logrotate are available on all machines	2020-12-27 22:39:33 +00:00
Jake Howard	b11dbfc829	Move traefik file provider to use directory rather than single file ... This makes future composition possible	2020-12-22 15:53:03 +00:00
Jake Howard	0353887590	Add override to ensure ZFS starts before docker ... Stolen with love from 7dda0bc7cb	2020-12-21 21:37:46 +00:00
Jake Howard	30cb9e52e7	Install and provision wireguard client on ingress server	2020-12-21 18:24:35 +00:00
Jake Howard	3197953796	Provision PVE and ingress VM	2020-12-21 17:11:38 +00:00
Jake Howard	44fb8f5380	Set some image resizing preferences ... This stops the thumbnailing being quite as intensive	2020-12-11 17:39:58 +00:00
Jake Howard	2bfad84071	Pin wallabag to newer version ... 2.4.0 came out *finally*	2020-12-11 17:39:35 +00:00
Jake Howard	5a808e90e0	Update synapse	2020-12-11 17:36:06 +00:00
Jake Howard	af1b7f754c	Update nextcloud to 20.0.3	2020-12-11 17:35:50 +00:00
Jake Howard	8e6a3324a1	Install duplicati on grimes ... Makes backing up website things a bit easier	2020-12-07 18:09:29 +00:00
Jake Howard	6d75272d34	Move plausible to new server	2020-12-05 12:33:50 +00:00
Jake Howard	e1dd6c4c05	Init new web server on Linode ... I'll terraform it later, honest!	2020-12-04 23:02:19 +00:00
Jake Howard	08bb8f22ca	Add feediron plugin for tt-rss	2020-11-25 13:16:13 +00:00
Jake Howard	b5d676b6fe	Install fever plugin for tt-rss ... Had to chown the directory afterwards, as git wouldn't play nice with `become_user`	2020-11-25 13:00:06 +00:00
Jake Howard	48762bcfcd	Remove redundant quoting	2020-11-25 11:41:26 +00:00
Jake Howard	a35ee7c824	Change base URL to default so the tracker script still uses disguised domain	2020-11-25 11:40:54 +00:00
Jake Howard	2b291548f9	Just do plain path replacement	2020-11-25 11:38:47 +00:00
Jake Howard	a81e2793f8	Add a secondary domain for plausible less likely to match blockers ... Might change things, might not. But it's a fun experiment to try anyway. Using a custom middleware to override the path due to https://github.com/plausible/analytics/pull/340	2020-11-25 11:11:29 +00:00
Jake Howard	e8d3a72ea8	Update nextcloud to 20.0.2	2020-11-22 15:40:23 +00:00
Jake Howard	1d8f54c778	Update synapse	2020-11-22 15:32:17 +00:00
Jake Howard	3ddfd77bdf	Stop running synapse as root	2020-11-22 15:08:08 +00:00
Jake Howard	310feaf332	Use correct args to build synapse DB	2020-11-22 15:07:34 +00:00
Jake Howard	367de37fab	Actually disable unnecessary logging rather than change level ... Also disable even more of them	2020-11-12 23:01:32 +00:00
Jake Howard	2a4b3ec3e6	Increase timeout for SSH sessions ... Stll check relatively often the client is still there, but check many times so the connection stays open a decent amount of time. Especially useful for long-running commands.	2020-11-08 22:04:30 +00:00
Jake Howard	f5c7c094d3	Fix gotify container name ... Gotify != duplicati	2020-11-08 11:07:57 +00:00
Jake Howard	5c1f17e2aa	Update synapse	2020-10-28 18:22:30 +00:00
Jake Howard	0fc57049e4	Update nextcloud to 20.0.1	2020-10-28 15:22:49 +00:00
Jake Howard	f450d4a8f2	Pin jellyfin version	2020-10-27 17:38:10 +00:00
Jake Howard	f414781182	Use new whoami container	2020-10-27 16:13:14 +00:00
Jake Howard	c63506d2bc	Pin traefik to patch version	2020-10-27 16:13:14 +00:00
Jake Howard	6ae8d0febe	Pin plausible versions	2020-10-27 16:13:14 +00:00
Jake Howard	f665b87965	Allow NTP role to manage config ... Hopefully this closes the port	2020-10-24 17:36:39 +01:00
Jake Howard	ff72f5a25e	Move nextcloud data dir to ZFS	2020-10-24 14:26:30 +01:00
Jake Howard	5eb3870fbe	Set mode on fail2ban filter and jail	2020-10-24 12:10:54 +01:00
Jake Howard	8932ac828f	Add geoip database for plausible	2020-10-24 12:10:37 +01:00
Jake Howard	47ad40bb52	Remove watchtower, and do updates manually from now on ... Keeps @IronicBadger happy!	2020-10-22 18:07:48 +01:00
Jake Howard	efd22010b7	Use new LSIO mod which does more	2020-10-19 17:29:28 +01:00