systems/infrastructure

Author	SHA1	Message	Date
Jake Howard	290d8b4273	Add fixed IPs to DERP advertisement Some checks failed / terraform (push) Failing after 1m1s Details / ansible (push) Successful in 1m56s Details	2024-12-06 22:37:21 +00:00
Jake Howard	6e5ad66bd2	Advertise embedded DERP	2024-12-06 22:24:23 +00:00
Jake Howard	2618ab6b24	Revert "Use Tailscale's DERP servers" This reverts commit `94b229abd0`.	2024-12-06 18:19:32 +00:00
Jake Howard	77415c6c6e	Add tag for access to private services All checks were successful / terraform (push) Successful in 1m0s Details / ansible (push) Successful in 1m33s Details	2024-11-03 14:14:32 +00:00
Jake Howard	df43e412f3	Update headscale config to support 0.23.0 All checks were successful / terraform (push) Successful in 1m3s Details / ansible (push) Successful in 1m29s Details	2024-09-23 09:08:32 +01:00
Jake Howard	94b229abd0	Use Tailscale's DERP servers All checks were successful / terraform (push) Successful in 41s Details / ansible (push) Successful in 1m30s Details Close another port, and hopefully get a little more reliability in weird network configurations	2024-09-22 16:21:21 +01:00
Jake Howard	47efe411da	Disable headscale OIDC All checks were successful / terraform (push) Successful in 39s Details / ansible (push) Successful in 1m32s Details For now, I'm fine using the terminal. Might bring this back later, hence only commented out.	2024-08-25 16:48:21 +01:00
Jake Howard	ffbba254fb	Remove redundant quotes	2024-04-21 18:11:57 +01:00
Jake Howard	7c8d224c4a	Add headscale ACLs Some checks failed / ansible (push) Failing after 39s Details / terraform (push) Failing after 46s Details Tags are managed entirely server side, so there's no priv esc issues. This lets my devices do what they want, and server style devices can't do anything.	2024-04-20 15:46:21 +01:00
Jake Howard	0dcc3f7c30	Use regular version of nginx on Arch All checks were successful / terraform (push) Successful in 30s Details / ansible (push) Successful in 1m30s Details `nginx-mainline` requires modules be recompiled each time, and isn't handled automatically. It's still a very new and maintained release.	2024-02-29 19:46:32 +00:00
Jake Howard	8a1e21c79d	Ensure headscale sees the correct IP All checks were successful / terraform (push) Successful in 49s Details / ansible (push) Successful in 1m48s Details	2024-02-29 17:41:29 +00:00
Jake Howard	29cac09b48	Remove explicit port for headscale	2024-02-01 18:32:53 +00:00
Jake Howard	0c6528f9ca	Restrict access to headscale OIDC and API All checks were successful / terraform (push) Successful in 29s Details / ansible (push) Successful in 1m33s Details	2024-01-31 21:40:43 +00:00
Jake Howard	53c758a781	Monitor headscale with prometheus All checks were successful / terraform (push) Successful in 29s Details / ansible (push) Successful in 1m38s Details	2024-01-27 17:40:02 +00:00
Jake Howard	2ceeaf091d	Deploy headscale Some checks failed / terraform (push) Failing after 11m20s Details / ansible (push) Failing after 11m6s Details	2024-01-27 14:18:37 +00:00

15 commits