Commit Graph

1198 Commits

Author SHA1 Message Date
Jake Howard 52d543d758
Mark vault files as generated
They kinda are, and kinda aren't.
2023-01-27 17:33:04 +00:00
Jake Howard a443d56a1c
Add a gitea deployment
Yep, it's that time of year _again_
2023-01-27 17:28:45 +00:00
Jake Howard 120b7d97c4
Explicitly allow cross-domain DMARC reports 2023-01-26 12:11:01 +00:00
Jake Howard d08268baba
Remove pct tag from DMARC
This is the default
2023-01-26 12:02:12 +00:00
Jake Howard 5e9c5f7683
Version pihole settings 2023-01-24 20:15:21 +00:00
Jake Howard 7edf6899f3
Update nextcloud to 25.0.3 2023-01-19 22:43:09 +00:00
Jake Howard 37af66e944 Merge branch 'renovate/matrixdotorg-synapse-1.x' into 'master'
Update matrixdotorg/synapse Docker tag to v1.75.0

See merge request sys/infrastructure!98
2023-01-19 22:28:59 +00:00
Jake Howard ec22c45c54 Merge branch 'renovate/ghcr.io-goauthentik-server-2023.x' into 'master'
Update ghcr.io/goauthentik/server Docker tag to v2023

See merge request sys/infrastructure!99
2023-01-19 22:24:20 +00:00
Renovate 81d2194d5a Update ghcr.io/goauthentik/server Docker tag to v2023 2023-01-18 16:01:52 +00:00
Renovate 23eccb6d73 Update matrixdotorg/synapse Docker tag to v1.75.0 2023-01-17 14:02:10 +00:00
Jake Howard d7ae77247b
Setup NTP on tang 2023-01-16 09:11:15 +00:00
Jake Howard ad50176ee9
Add internal alias to pihole 2023-01-08 18:36:03 +00:00
Jake Howard 5753cd2cf1
Provision my pi with ansible now
It's insanely slow, but works
2023-01-08 17:59:22 +00:00
Jake Howard e8ac8b304e Merge branch 'renovate/matrixdotorg-synapse-1.x' into 'master'
Update matrixdotorg/synapse Docker tag to v1.74.0

See merge request sys/infrastructure!94
2023-01-06 09:00:01 +00:00
Jake Howard 413422cc87 Merge branch 'renovate/ghcr.io-goauthentik-server-2022.x' into 'master'
Update ghcr.io/goauthentik/server Docker tag to v2022.12.2

See merge request sys/infrastructure!95
2023-01-06 08:59:17 +00:00
Renovate bd929f28e5 Update ghcr.io/goauthentik/server Docker tag to v2022.12.2 2023-01-05 10:01:45 +00:00
Jake Howard cf04738eed Merge branch 'renovate/vaultwarden-server-1.x' into 'master'
Update vaultwarden/server Docker tag to v1.27.0

See merge request sys/infrastructure!96
2023-01-03 08:39:31 +00:00
Renovate 905f0f2b08 Update vaultwarden/server Docker tag to v1.27.0 2022-12-24 18:01:58 +00:00
Renovate 49372f7c8e Update matrixdotorg/synapse Docker tag to v1.74.0 2022-12-20 18:02:55 +00:00
Jake Howard 6d5570b0f2
Update YOURLS' mariadb to 10.10 2022-12-13 09:14:06 +00:00
Jake Howard b6705788e6
Update nextcloud's mariadb to 10.6
This is the latest it supports
2022-12-13 09:14:06 +00:00
Jake Howard 167b8bd140
Keep GitLab backups for 2 weeks 2022-12-13 09:14:06 +00:00
Jake Howard 7c168fd28c
Update plausible to 1.5
Update Clickhouse at the same time
2022-12-13 09:14:06 +00:00
Jake Howard 6fc6366c33
Update nextcloud to 25.0.2 2022-12-13 09:14:06 +00:00
Jake Howard 345f047902 Merge branch 'renovate/python-3.x' into 'master'
Update python Docker tag to v3.11

See merge request sys/infrastructure!80
2022-12-13 09:13:46 +00:00
Jake Howard 6c2c87e43e Merge branch 'renovate/ghcr.io-goauthentik-server-2022.x' into 'master'
Update ghcr.io/goauthentik/server Docker tag to v2022.11.3

See merge request sys/infrastructure!77
2022-12-13 08:55:08 +00:00
Jake Howard 55764ada6c Merge branch 'renovate/matrixdotorg-synapse-1.x' into 'master'
Update matrixdotorg/synapse Docker tag to v1.73.0

See merge request sys/infrastructure!79
2022-12-13 08:54:50 +00:00
Jake Howard 7a89e7f3bc
Define alert contacts for uptimerobot monitors 2022-12-09 19:05:35 +00:00
Jake Howard e86ed81102
Decommission `decker` server
It's been replaced by prometheus running internally, and uptimerobot checking.
2022-12-09 19:04:54 +00:00
Jake Howard 413400cbc6
Terraform uptimerobot 2022-12-08 21:55:03 +00:00
Jake Howard f1c9e10d9a
Use IPv4 on blackbox
The docker networks they're running on are v4 only at the moment, so the DNS resolution passes by the connection fails.
2022-12-06 20:46:43 +00:00
Renovate 2fb21223aa Update matrixdotorg/synapse Docker tag to v1.73.0 2022-12-06 14:01:43 +00:00
Jake Howard bb4361e25f
Use a blackbox with custom DNS rather than proxy
This makes timing information more relevant and should improve reliability
2022-12-06 10:04:23 +00:00
Jake Howard 772cf7536a
Run prometheus stack as docker user 2022-12-05 21:17:23 +00:00
Jake Howard 53c969f2b8
Make prometheus config files read only 2022-12-05 21:12:55 +00:00
Jake Howard 3e5b00d176
Add alertmanager 2022-12-05 21:10:41 +00:00
Jake Howard 60514d191a
Exclude python stats for HA 2022-12-05 20:36:57 +00:00
Jake Howard ed7faf4678
Scrape healthchecks.io with prometheus and use it for outbound monitoring of prometheus scrapes 2022-12-05 14:41:48 +00:00
Jake Howard 8e3b381b8d
Remove unused prometheus network 2022-12-04 22:12:55 +00:00
Jake Howard 75862dbaf9
Setup blackbox for some HTTP monitoring 2022-12-04 22:11:49 +00:00
Renovate 9d4eceab29 Update ghcr.io/goauthentik/server Docker tag to v2022.11.3 2022-12-03 14:02:05 +00:00
Jake Howard e89f13b8a9
Add collabora 2022-12-02 22:37:42 +00:00
Jake Howard ebfe057658
Add support for public dashboards in Grafana 2022-12-01 13:48:36 +00:00
Jake Howard 41a853db55
Define tmpfs for website /tmp
This is needed for imagemagick to function correctly without consuming all disk space on the system
2022-11-30 14:08:10 +00:00
Jake Howard d09afef4cc Merge branch 'renovate/redis-7.x' into 'master'
Update redis Docker tag to v7

See merge request sys/infrastructure!87
2022-11-23 20:40:48 +00:00
Renovate d5c08bd493 Update redis Docker tag to v7 2022-11-21 16:02:19 +00:00
Jake Howard 8f78f24ea8
Unpin redis minor version on website 2022-11-21 15:21:33 +00:00
Jake Howard 8076c62198 Merge branch 'renovate/vabene1111-recipes-1.x' into 'master'
Update vabene1111/recipes Docker tag to v1.4.5

See merge request sys/infrastructure!90
2022-11-21 14:51:06 +00:00
Jake Howard c388e6bbe1
Add more nginx processes for mastodon 2022-11-20 23:21:09 +00:00
Jake Howard 406d9dbf09
Reduce mastodon streaming threads and run 1 thread per core 2022-11-20 23:00:58 +00:00