systems/infrastructure

Author	SHA1	Message	Date
Jake Howard	cdaa626068	Only expose socket proxy on internal networks All checks were successful / terraform (push) Successful in 37s Details / ansible (push) Successful in 1m32s Details	2024-09-09 12:18:09 +01:00
Jake Howard	3a29c327b7	Remove version key from compose files All checks were successful / terraform (push) Successful in 1m0s Details / ansible (push) Successful in 1m47s Details	2024-07-15 18:08:14 +01:00
Jake Howard	393a947cb7	Remove f2b gateway bouncer All checks were successful / terraform (push) Successful in 36s Details / ansible (push) Successful in 1m22s Details To be replaced by something more sensible	2024-07-14 22:27:58 +01:00
Jake Howard	8929a22ce5	Use LSIO docker socket proxy All checks were successful / terraform (push) Successful in 53s Details / ansible (push) Successful in 1m31s Details	2024-04-23 19:52:48 +01:00
Renovate	7bc0ebeb26	Update traefik Docker tag to v2.11 Some checks failed / terraform (push) Failing after 2s Details / ansible (push) Failing after 2s Details	2024-04-15 17:43:05 +01:00
Jake Howard	b33e19e152	Remove unnecessary extra variable definitions The world could do with a bit less YAML!	2023-12-14 22:03:23 +00:00
Jake Howard	0e9e63d8b7	Use correct gandi API	2023-07-17 15:03:04 +01:00
Jake Howard	ddd6af21cf	Allow Traefik to use DNS-01 challenge to Gandi All checks were successful / ansible (push) Successful in 2m55s Details / terraform (push) Successful in 33s Details	2023-04-23 20:26:37 +01:00
Renovate	2c9ab7fd29	Update traefik Docker tag to v2.10 All checks were successful terraform Details ansible Details	2023-04-09 17:02:00 +01:00
Jake Howard	fc577f21b8	Update Traefik to 2.9	2022-11-01 20:50:30 +00:00
Jake Howard	491061d900	Remove shenanigans It's not enabled, and it's 1 less container to deal with	2022-10-09 17:40:22 +01:00
Jake Howard	73f165c521	Revert "Update traefik to 2.8" This reverts commit `a695818355`. This causes problems with traefik-pages	2022-08-16 10:17:53 +01:00
Jake Howard	4eab0d4f01	Don't mount docker socket to traefik It was already configured to use the proxy, and was running as non-root anyway, so likely didn't have access to it in the first place.	2022-08-16 09:38:27 +01:00
Jake Howard	a695818355	Update traefik to 2.8	2022-08-01 15:02:09 +01:00
Jake Howard	cf763d07f2	Stop capturing logs for containers I don't care about	2022-06-20 21:25:13 +01:00
Jake Howard	df28b56857	Update traefik to 2.7	2022-06-18 22:09:49 +01:00
Jake Howard	5b586f2608	Add container to extract TLS certs from traefik into standard format Disable its network access, just in case	2022-06-13 21:18:45 +01:00
Jake Howard	4562b60517	Update Traefik to 2.6	2022-02-08 08:55:50 +00:00
Jake Howard	5cc552d0eb	Add container to automatically backup DBs	2022-01-16 17:51:03 +00:00
Jake Howard	6c0314b758	Add an nginx container to do crazy things with traefik	2022-01-16 14:08:38 +00:00
Jake Howard	d5c7d94ac8	Run traefik as dockeruser, and without host networking This required port forwarding, a docker proxy, and a docker network, but the end result should be much more secure!	2022-01-15 23:44:06 +00:00
Jake Howard	0874158a91	Update traefik to 2.5	2021-08-22 11:16:37 +01:00
Jake Howard	6973fb536f	Add fail2ban for traefik Remote action coming soon	2021-03-28 13:05:38 +01:00
Jake Howard	b264e5cbcc	Monitor traefik with prometheus rather than influxdb	2021-03-04 16:37:53 +00:00
Jake Howard	0f9802a46c	Install duplicati on PVE docker machine Requires some changes to how private IPs are specified, which I really need to clean up at some point!	2021-01-20 21:38:01 +00:00
Jake Howard	3321b852a5	Update traefik to v2.4	2021-01-20 20:33:57 +00:00
Jake Howard	bdfd38c9fe	Allow traefik to run on non-wireguard host	2020-12-28 15:55:45 +00:00
Jake Howard	c63506d2bc	Pin traefik to patch version	2020-10-27 16:13:14 +00:00
Jake Howard	6cfaa3a03a	Update traefik	2020-10-02 09:20:33 +01:00
Jake Howard	1ecfc5b7fa	Update traefik	2020-09-10 20:16:23 +01:00
Jake Howard	e9aeed26ee	Use cloudflare DNS challenge for Traefik	2020-09-05 18:27:04 +01:00
Jake Howard	ec751ffa1a	Add influxdb to monitor traefik	2020-08-30 15:58:03 +01:00
Jake Howard	969b0bd8d9	Update traefik Fixes GHSA-6qq8-5wq3-86rp	2020-07-30 21:46:44 +01:00
Jake Howard	74d40ac915	Update traefik	2020-07-18 13:29:20 +01:00
Jake Howard	7a38207ef0	Update traefik	2020-07-15 14:53:36 +01:00
Jake Howard	bb5a5b61bd	Update traefik	2020-07-13 18:04:11 +01:00
Jake Howard	fe5a5984c3	Remove container names from containers They're not needed for anything, and caused annoying weird issues when cycling containers	2020-06-27 17:45:28 +01:00
Jake Howard	7dd31c0556	Allow nextcloud to be reached over internal SSL This removes the need for a custom config, and means traefik is proxying HTTP2, which is nice	2020-05-24 19:21:17 +01:00
Jake Howard	0256570f1c	Update traefik	2020-04-30 21:50:18 +01:00
Jake Howard	89ba23719c	Move traefik into its own role	2020-04-23 20:49:43 +01:00

40 commits