systems/infrastructure

Author	SHA1	Message	Date
Jake Howard	f90ae0b1b4	Use port 53053 for coredns docker proxy Otherwise it causes annoying issues with systemd-resolved and mdns	2024-05-04 12:19:00 +01:00
Jake Howard	c93c7b5c16	Use external DNS for uptime-kuma Some checks failed / terraform (push) Failing after 38s Details / ansible (push) Successful in 2m17s Details Keep the AGH logs cleaner	2024-04-29 18:42:17 +01:00
Jake Howard	2a799d6b03	Scrape Uptime Kuma with prometheus Some checks failed / terraform (push) Failing after 1m43s Details / ansible (push) Successful in 2m29s Details	2024-04-29 14:28:58 +01:00
Jake Howard	afa926c767	Remove blackbox monitoring Uptime-Kuma is great	2024-04-29 14:12:21 +01:00
Renovate	6c8cab3ce7	Update louislam/uptime-kuma Docker tag to v1.23.13 All checks were successful / terraform (push) Successful in 36s Details / ansible (push) Successful in 2m21s Details	2024-04-25 10:00:20 +01:00
Renovate	b0d950584d	Update lscr.io/linuxserver/nextcloud Docker tag to v29 All checks were successful / terraform (push) Successful in 40s Details / ansible (push) Successful in 2m6s Details	2024-04-24 16:00:25 +01:00
Jake Howard	670ad78d44	Add wireguard config for glinet router All checks were successful / terraform (push) Successful in 44s Details / ansible (push) Successful in 1m34s Details	2024-04-23 22:19:57 +01:00
Jake Howard	8929a22ce5	Use LSIO docker socket proxy All checks were successful / terraform (push) Successful in 53s Details / ansible (push) Successful in 1m31s Details	2024-04-23 19:52:48 +01:00
Jake Howard	ee96e6ab08	Rename forrest role to prometheus Some checks failed / ansible (push) Failing after 1m35s Details / terraform (push) Failing after 12m54s Details Makes organising much simpler	2024-04-21 19:47:02 +01:00
Jake Howard	ffbba254fb	Remove redundant quotes	2024-04-21 18:11:57 +01:00
Jake Howard	c472411801	Deploy uptime-kuma	2024-04-21 18:11:39 +01:00
Jake Howard	7564911da3	Add IPv6 to blackbox Some checks failed / terraform (push) Failing after 3s Details / ansible (push) Failing after 2s Details This is needed to monitor private services	2024-04-20 18:12:38 +01:00
Jake Howard	7ff44ee238	Add IPv6 to proxmox internal network	2024-04-20 18:00:08 +01:00
Jake Howard	7c8d224c4a	Add headscale ACLs Some checks failed / ansible (push) Failing after 39s Details / terraform (push) Failing after 46s Details Tags are managed entirely server side, so there's no priv esc issues. This lets my devices do what they want, and server style devices can't do anything.	2024-04-20 15:46:21 +01:00
Renovate	7bc0ebeb26	Update traefik Docker tag to v2.11 Some checks failed / terraform (push) Failing after 2s Details / ansible (push) Failing after 2s Details	2024-04-15 17:43:05 +01:00
Jake Howard	33f9c544fd	Remove /tt-rss/ path from URL Some checks failed / terraform (push) Failing after 3s Details / ansible (push) Failing after 2s Details	2024-04-15 17:33:36 +01:00
Jake Howard	b6583cc823	Update Nextcloud version in config Some checks failed / terraform (push) Failing after 2s Details / ansible (push) Failing after 2s Details	2024-04-15 15:28:16 +01:00
Jake Howard	9c02017fed	Unpin tandoor	2024-04-15 15:28:16 +01:00
Renovate	9d98d88089	Update lscr.io/linuxserver/nextcloud Docker tag to v28.0.4 Some checks failed / terraform (push) Failing after 2s Details / ansible (push) Failing after 2s Details	2024-04-15 15:02:53 +01:00
Renovate	5330fdc56f	Update ghcr.io/goauthentik/server Docker tag to v2024 Some checks failed / terraform (push) Failing after 2s Details / ansible (push) Failing after 2s Details	2024-04-15 14:11:11 +01:00
Renovate	2e0b562f5d	Update matrixdotorg/synapse Docker tag to v1.104.0 Some checks failed / terraform (push) Failing after 2s Details / ansible (push) Failing after 2s Details	2024-04-15 13:58:20 +01:00
Renovate	989a804bad	Update wallabag/wallabag Docker tag to v2.6.9 Some checks failed / terraform (push) Failing after 51s Details / ansible (push) Failing after 46s Details	2024-04-03 12:00:18 +01:00
Jake Howard	8424b3211b	Allow `ingress` to serve as tailscale exit node All checks were successful / terraform (push) Successful in 38s Details / ansible (push) Successful in 1m46s Details	2024-03-28 23:30:24 +00:00
Jake Howard	5157940f20	Stop exposing homeassistant All checks were successful / terraform (push) Successful in 58s Details / ansible (push) Successful in 1m52s Details	2024-03-23 11:54:26 +00:00
Jake Howard	eb6fe3a23b	Allow forrest to access internal services All checks were successful / terraform (push) Successful in 36s Details / ansible (push) Successful in 1m36s Details This is mostly for monitoring	2024-03-22 18:13:25 +00:00
Jake Howard	b2656bdf43	Make vaultwarden VPN only All checks were successful / terraform (push) Successful in 33s Details / ansible (push) Successful in 1m36s Details The first service to go dark...	2024-03-21 23:20:27 +00:00
Jake Howard	f88d224168	Allow only exposing services over Tailscale Some checks failed / terraform (push) Failing after 41s Details / ansible (push) Successful in 1m41s Details This works using public DNS, so doesn't need Tailscale's magic DNS to override my local.	2024-03-07 22:30:10 +00:00
Jake Howard	451a114262	Add IPv6 support for internal DNS overrides CoreDNS 1.11.2 finally shipped!	2024-03-07 20:02:39 +00:00
Jake Howard	119b3212a9	Remove robots.txt for gitea All checks were successful / terraform (push) Successful in 27s Details / ansible (push) Successful in 1m30s Details	2024-03-04 08:38:16 +00:00
Renovate	5aae711cb8	Update vaultwarden/server Docker tag to v1.30.5 All checks were successful / terraform (push) Successful in 46s Details / ansible (push) Successful in 1m45s Details	2024-03-04 08:33:59 +00:00
Renovate	f552332598	Update lscr.io/linuxserver/mastodon Docker tag to v4.2.8 Some checks failed / ansible (push) Has been cancelled Details / terraform (push) Has been cancelled Details	2024-03-04 08:33:51 +00:00
Jake Howard	82451784a8	Deploy slides hosting All checks were successful / terraform (push) Successful in 50s Details / ansible (push) Successful in 1m49s Details	2024-03-03 21:39:22 +00:00
Jake Howard	000f3d3348	Add HSTS to all nginx requests	2024-03-03 21:37:07 +00:00
Jake Howard	0dcc3f7c30	Use regular version of nginx on Arch All checks were successful / terraform (push) Successful in 30s Details / ansible (push) Successful in 1m30s Details `nginx-mainline` requires modules be recompiled each time, and isn't handled automatically. It's still a very new and maintained release.	2024-02-29 19:46:32 +00:00
Jake Howard	8a1e21c79d	Ensure headscale sees the correct IP All checks were successful / terraform (push) Successful in 49s Details / ansible (push) Successful in 1m48s Details	2024-02-29 17:41:29 +00:00
Jake Howard	998d798797	Set maintenance window for nextcloud All checks were successful / terraform (push) Successful in 26s Details / ansible (push) Successful in 1m37s Details	2024-02-21 21:57:03 +00:00
Jake Howard	11a93dac55	Update nextcloud version in config	2024-02-21 21:52:58 +00:00
Renovate	7d64518840	Update matrixdotorg/synapse Docker tag to v1.101.0 Some checks failed / ansible (push) Has been cancelled Details / terraform (push) Has been cancelled Details	2024-02-21 21:43:15 +00:00
Renovate	26bcf09fea	Update lscr.io/linuxserver/nextcloud Docker tag to v28.0.2 Some checks failed / terraform (push) Has been cancelled Details / ansible (push) Has been cancelled Details	2024-02-21 21:42:50 +00:00
Jake Howard	808e72553b	Add the basics of some edge caching Some checks failed / ansible (push) Has been cancelled Details / terraform (push) Has been cancelled Details	2024-02-21 21:42:16 +00:00
Renovate	b513c88774	Update vaultwarden/server Docker tag to v1.30.3 All checks were successful / ansible (push) Successful in 1m33s Details / terraform (push) Successful in 27s Details	2024-02-19 14:13:02 +00:00
Renovate	7741fbc163	Update vabene1111/recipes Docker tag to v1.5.13 All checks were successful / terraform (push) Successful in 25s Details / ansible (push) Successful in 1m34s Details	2024-02-19 14:07:32 +00:00
Renovate	45cf930d14	Update lscr.io/linuxserver/mastodon Docker tag to v4.2.7 All checks were successful / terraform (push) Successful in 49s Details / ansible (push) Successful in 1m54s Details	2024-02-17 08:00:21 +00:00
Jake Howard	58c48261e7	Consolidate vikunja container All checks were successful / terraform (push) Successful in 53s Details / ansible (push) Successful in 1m51s Details	2024-02-12 14:12:17 +00:00
Jake Howard	91a247868b	Add routes from forrest to tailscale network All checks were successful / terraform (push) Successful in 27s Details / ansible (push) Successful in 1m35s Details	2024-02-07 22:12:08 +00:00
Jake Howard	b6eca40ae0	Allow tailscale IP in more places	2024-02-07 18:21:16 +00:00
Renovate	6c1c245c23	Update matrixdotorg/synapse Docker tag to v1.100.0 All checks were successful / terraform (push) Successful in 25s Details / ansible (push) Successful in 1m38s Details	2024-02-02 13:38:12 +00:00
Renovate	379d4a26fa	Update vabene1111/recipes Docker tag to v1.5.12 Some checks failed / ansible (push) Has been cancelled Details / terraform (push) Has been cancelled Details	2024-02-02 13:38:00 +00:00
Renovate	f1a2694f1a	Update lscr.io/linuxserver/mastodon Docker tag to v4.2.5 Some checks failed / terraform (push) Successful in 29s Details / ansible (push) Has been cancelled Details	2024-02-02 13:37:05 +00:00
Jake Howard	02847355a7	Install tailscale All checks were successful / terraform (push) Successful in 29s Details / ansible (push) Successful in 1m34s Details Install, not configure	2024-02-01 19:41:47 +00:00
Jake Howard	29cac09b48	Remove explicit port for headscale	2024-02-01 18:32:53 +00:00
Jake Howard	dba0262801	Remove website tmpfs All checks were successful / terraform (push) Successful in 29s Details / ansible (push) Successful in 1m36s Details The server's disk is probably fast enough, and container restarts will nuke that storage anyway	2024-02-01 18:15:51 +00:00
Jake Howard	0c6528f9ca	Restrict access to headscale OIDC and API All checks were successful / terraform (push) Successful in 29s Details / ansible (push) Successful in 1m33s Details	2024-01-31 21:40:43 +00:00
Jake Howard	dfa8328e7b	Move gateway logs to separate file	2024-01-31 21:06:19 +00:00
Jake Howard	53c758a781	Monitor headscale with prometheus All checks were successful / terraform (push) Successful in 29s Details / ansible (push) Successful in 1m38s Details	2024-01-27 17:40:02 +00:00
Jake Howard	2ceeaf091d	Deploy headscale Some checks failed / terraform (push) Failing after 11m20s Details / ansible (push) Failing after 11m6s Details	2024-01-27 14:18:37 +00:00
Jake Howard	06784563a7	Don't resolve ipv6 All checks were successful / terraform (push) Successful in 30s Details / ansible (push) Successful in 1m36s Details Something about this setup doesn't like it, so I'll disable v6 for now	2024-01-26 21:43:04 +00:00
Renovate	4f6f4143ce	Update matrixdotorg/synapse Docker tag to v1.99.0 All checks were successful / terraform (push) Successful in 31s Details / ansible (push) Successful in 1m46s Details	2024-01-22 09:15:38 +00:00
Renovate	5292785cd9	Update wallabag/wallabag Docker tag to v2.6.8 Some checks are pending / terraform (push) Has started running Details / ansible (push) Successful in 1m38s Details	2024-01-22 09:11:27 +00:00
Renovate	d297674fb5	Update vabene1111/recipes Docker tag to v1.5.11 All checks were successful / terraform (push) Successful in 49s Details / ansible (push) Successful in 1m51s Details	2024-01-22 08:42:36 +00:00
Jake Howard	88f0828153	Use primary Quad9 servers All checks were successful / terraform (push) Successful in 47s Details / ansible (push) Successful in 1m39s Details DNSSEC and malware blocking is probably useful, just in case	2024-01-21 23:19:49 +00:00
Jake Howard	cfc3de61b4	Add fallback quad9 address This aids availability, along with a healthcheck	2024-01-21 23:05:25 +00:00
Jake Howard	c6bae0f797	Do simple `endsWith` matching for docker view All checks were successful / terraform (push) Successful in 33s Details / ansible (push) Successful in 1m42s Details This saves the need for a regex	2024-01-14 22:27:02 +00:00
Jake Howard	4c5936b2aa	Disable Grafana analytics All checks were successful / terraform (push) Successful in 32s Details / ansible (push) Successful in 1m41s Details	2024-01-14 15:30:12 +00:00
Jake Howard	9d685d85aa	Update website deployment to unify containers All checks were successful / terraform (push) Successful in 1m9s Details / ansible (push) Successful in 2m17s Details	2024-01-14 14:22:19 +00:00
Jake Howard	ac166c3874	Start resolved to support mDNS All checks were successful / terraform (push) Successful in 34s Details / ansible (push) Successful in 1m44s Details	2024-01-10 13:28:45 +00:00
Jake Howard	06b9197c5b	Sync terraform state to `restic` All checks were successful / terraform (push) Successful in 31s Details / ansible (push) Successful in 1m47s Details This allows it to be backed up easily	2024-01-09 19:56:06 +00:00
Jake Howard	4a69df1d6c	Ignore ansible-lint for nebula install block All checks were successful / terraform (push) Successful in 1m28s Details / ansible (push) Successful in 1m48s Details I'm smarter than it is	2024-01-08 21:49:38 +00:00
Jake Howard	f33d19e156	Move AdGuardHome configuration to Terraform https://git.theorangeone.net/systems/adguardhome	2024-01-08 21:45:28 +00:00
Jake Howard	616d20e23b	Tweak some AGH settings Some checks failed / terraform (push) Successful in 1m15s Details / ansible (push) Failing after 1m59s Details	2024-01-08 19:01:46 +00:00
Jake Howard	383a57d1f2	Use DoH endpoint fot quad9 Seems latency is much lower	2024-01-08 18:21:03 +00:00
Jake Howard	c8211d4756	Use Debian repo version of nginx Some checks failed / terraform (push) Successful in 1m3s Details / ansible (push) Failing after 1m53s Details It's older, and doesn't have `stream` compiled in, but the repo one can't link to any of the installed modules, which is a non-starter.	2024-01-04 14:17:36 +00:00
Jake Howard	57ad143268	Set password for homeassistant SMB mount Some checks failed / terraform (push) Successful in 38s Details / ansible (push) Failing after 1m40s Details It had an IP restriction, but still	2024-01-03 21:23:49 +00:00
Jake Howard	16e9952b2f	Replace custom restic logs with runitor	2024-01-03 21:09:07 +00:00
Jake Howard	f5154d1683	Use CoreDNS to do recursive CNAME aliasing for AGH Some checks failed / terraform (push) Successful in 47s Details / ansible (push) Failing after 1m38s Details	2024-01-02 17:48:47 +00:00
Jake Howard	3ed7074af6	Rename coredns role	2024-01-02 17:02:34 +00:00
Jake Howard	5581bbc01a	Replace pihole with adguardhome All checks were successful / terraform (push) Successful in 1m13s Details / ansible (push) Successful in 2m19s Details AGH is much simpler to install and manage, and does DoH natively.	2024-01-01 15:48:14 +00:00
Jake Howard	56bfe544e4	nginx HTTPS redirect on ipv6	2023-12-31 22:49:11 +00:00
Renovate	83543fe081	Update lscr.io/linuxserver/nextcloud Docker tag to v28.0.1 All checks were successful / terraform (push) Successful in 33s Details / ansible (push) Successful in 1m49s Details	2023-12-28 21:39:28 +00:00
Jake Howard	0e0d0c9b82	`walker` doesn't have a `traefik` anymore All checks were successful / terraform (push) Successful in 1m8s Details / ansible (push) Successful in 2m15s Details	2023-12-26 22:31:12 +00:00
Jake Howard	026d8db13e	Be root when generating dhparams All checks were successful / terraform (push) Successful in 37s Details / ansible (push) Successful in 1m50s Details This is needed to write to the destination	2023-12-24 19:44:30 +00:00
Jake Howard	593a945c5c	Install nginx from package manager if available	2023-12-24 19:44:30 +00:00
Jake Howard	bd15946f3b	Update Nebula	2023-12-24 19:44:30 +00:00
Jake Howard	f4b96afcfa	Deploy ntfy All checks were successful / terraform (push) Successful in 1m15s Details / ansible (push) Successful in 2m22s Details	2023-12-23 16:40:53 +00:00
Jake Howard	c0c7f393e3	Only pin to minor versions of gitea All checks were successful / terraform (push) Successful in 32s Details / ansible (push) Successful in 1m48s Details	2023-12-21 16:43:18 +00:00
Jake Howard	5fd952be4c	Only pin to minor version of Authentik	2023-12-21 16:42:02 +00:00
Jake Howard	39899cd1e0	Use certbot to issue certificates	2023-12-21 16:38:07 +00:00
Jake Howard	8e1a203df2	Add helper map for better websocket support	2023-12-21 16:38:07 +00:00
Jake Howard	a3baf8be1e	Use nginx as reverse proxy on walker, removing traefik SSL coming soon	2023-12-21 16:38:07 +00:00
Jake Howard	a7eb372899	Fix HTTPS redirect hostname	2023-12-21 14:58:19 +00:00
Jake Howard	80a770f399	Add include files before main nginx config	2023-12-21 14:58:04 +00:00
Jake Howard	ef432642dd	Unify nginx module tasks Some checks failed / terraform (push) Successful in 1m8s Details / ansible (push) Failing after 2m0s Details	2023-12-20 22:35:11 +00:00
Jake Howard	b32a63bd72	Add helpful includes Along with ensuring there are dhparams	2023-12-20 22:29:42 +00:00
Jake Howard	2336e4dd5b	Add brotli All checks were successful / terraform (push) Successful in 1m5s Details / ansible (push) Successful in 2m19s Details	2023-12-17 18:12:33 +00:00
Jake Howard	46eda36515	Fully block Server header All checks were successful / terraform (push) Successful in 31s Details / ansible (push) Successful in 1m46s Details	2023-12-16 21:57:19 +00:00
Jake Howard	cfb498d7c6	Only add HTTPS redirect when it's needed All checks were successful / terraform (push) Successful in 1m3s Details / ansible (push) Successful in 2m7s Details	2023-12-16 18:13:49 +00:00
Jake Howard	48efcf4d91	Use mainline nginx release on Arch	2023-12-16 18:03:01 +00:00
Jake Howard	930cf87084	gzip as much as makes sense	2023-12-16 17:58:15 +00:00
Jake Howard	92052a3d0a	Unify nginx configuration This creates a simple base configuration skeleton, that other configuration can be easily loaded into.	2023-12-16 17:47:04 +00:00
Jake Howard	943c141d59	Ensure ingress proxy doesn't terminate connections All checks were successful / terraform (push) Successful in 1m6s Details / ansible (push) Successful in 2m16s Details This mostly works around a weird issues with Jellyfin	2023-12-14 22:08:02 +00:00

1 2 3 4 5 ...

1305 commits