1276 commits

Author	SHA1	Message	Date
Jake Howard	94e4592db6	Update synapse to 1.35.1	2021-06-12 16:46:16 +01:00
Jake Howard	5d4817e840	Move some larger gitlab storage off tank ... Means they'll be backed up less, but they're less important anyway	2021-06-07 20:24:59 +01:00
Jake Howard	3c3f69a776	Remove unnecessary influxdb instance ... Never used it anyway	2021-06-03 20:50:54 +01:00
Jake Howard	d59e86a8e8	Remove unnecessary private_ip var from forrest ... It was redundant	2021-06-03 20:47:33 +01:00
Jake Howard	f1f2c620b0	Replace DHCP on PVE for static IPs ... So much easier to deal with!	2021-06-03 20:47:08 +01:00
Jake Howard	d751a023da	Promote GitLab to main git. domain	2021-06-02 19:49:28 +01:00
Jake Howard	6c23180591	Remove gitea ... I use GitLab now	2021-06-02 19:27:09 +01:00
Jake Howard	9c2ebd60e8	Remove duplicati ... We're a restic shop now!	2021-06-02 19:18:21 +01:00
Jake Howard	51b3ffd33a	Allow containers to be cached on CI ... There's an existing task to clean them up, and being out of date by a week isn't the end of the world	2021-06-01 21:51:18 +01:00
Jake Howard	a867df04a5	Add a GitLab runner ... Woo CI!	2021-06-01 19:29:21 +01:00
Jake Howard	64ebaa67d0	Setup email for gitlab ... Not super useful, but nice to enable it	2021-05-30 21:30:03 +01:00
Jake Howard	e6d029e22e	Fix typo ... D'oh!	2021-05-30 13:56:06 +01:00
Jake Howard	bf5c95fbe2	Stop running everything at midnight	2021-05-30 13:55:44 +01:00
Jake Howard	9a6eef0320	Use correct cidr for GitLab auth	2021-05-29 22:49:57 +01:00
Jake Howard	d922bf30ef	Allow git user to authenticate over SSH	2021-05-29 22:01:28 +01:00
Jake Howard	8610be3ac3	Rename host ... "gitlab" sounds more like the hosted service, not mine	2021-05-29 22:01:01 +01:00
Jake Howard	69abafd8c8	Put GitLab on a real domain	2021-05-29 16:21:47 +01:00
Jake Howard	9118938fea	Remove some GitLab constraints ... I don't need things that constrained. The defaults are probably fine, and better tested.	2021-05-29 15:44:01 +01:00
Jake Howard	f063af2478	Reconfigure gitlab on machine start	2021-05-29 11:21:20 +01:00
Jake Howard	c7bde8b3dd	Init a GitLab server ... Some day i'll make up my mind on which server to use, honest!	2021-05-28 22:49:48 +01:00
Jake Howard	5ac5e2f8ab	Stagger backup times	2021-05-23 20:37:41 +01:00
Jake Howard	7063e55ea9	Increase line length	2021-05-22 20:28:36 +01:00
Jake Howard	ee55100016	Update gitea	2021-05-21 21:57:16 +01:00
Jake Howard	e6dbe08ce0	Update nextcloud	2021-05-21 21:48:15 +01:00
Jake Howard	420ef3b95c	Update synapse	2021-05-21 21:47:32 +01:00
Jake Howard	830bd862d9	Update nebula	2021-05-21 21:34:13 +01:00
Jake Howard	48e07d2a7e	Rename more bitwarden things ... Serving on both domains currently, i'll migrate clients and fix that	2021-05-18 22:18:05 +01:00
Jake Howard	ae597a7359	Backup plain DB backups on walker	2021-05-16 15:36:56 +01:00
Jake Howard	a124bff473	Add scheduling for backup and forgetting ... Only forget on 1 machine	2021-05-16 15:34:37 +01:00
Jake Howard	91725d5876	Add forget and prune commands	2021-05-16 14:39:44 +01:00
Jake Howard	5f6dc6e177	Support backing up clickhouse to file ... It's janky, but it works	2021-05-16 12:25:32 +01:00
Jake Howard	b4936f5780	Revert "Store DB files compressed" ... This reverts commit f4a289ae98. Incremental backups work much better with plaintext	2021-05-16 11:16:25 +01:00
Jake Howard	1431f7a30a	Add restic to walker	2021-05-09 14:26:21 +01:00
Jake Howard	7fc67ca8d4	Put files in the root of the role	2021-05-08 16:47:25 +01:00
Jake Howard	f4a289ae98	Store DB files compressed ... Means external backups can still be compressed a bit	2021-05-08 16:45:08 +01:00
Jake Howard	26cd35785c	Fix DB backup location	2021-05-08 16:45:08 +01:00
Jake Howard	48c88347a9	Add some healthchecks integration to backup	2021-05-08 16:45:08 +01:00
Jake Howard	781aa93892	Add some restic wrapper things	2021-05-08 16:45:08 +01:00
Jake Howard	e7c2a7fb34	Provision a restic container	2021-05-07 19:38:11 +01:00
Jake Howard	407e59ec5a	Use variables in prometheus config ... Also replace grimes with walker	2021-05-05 18:12:42 +01:00
Jake Howard	9b31efbf43	Destroy grimes ... And the entire Linode integration	2021-05-05 18:11:14 +01:00
Jake Howard	52429e0bc2	walker isn't a PVE VM	2021-05-04 20:41:19 +01:00
Jake Howard	3da14e67dd	Replace minio with webdav for upload ... Also made sure it all ran as the correct user	2021-05-04 14:08:08 +01:00
Jake Howard	f62a1e8374	Replace minio with webdav ... Much simpler and easier, and lower resources	2021-05-04 11:25:52 +01:00
Jake Howard	ad415c2b53	Move website to walker	2021-05-02 17:24:10 +01:00
Jake Howard	86482246b3	Move plausible to walker	2021-05-02 16:07:25 +01:00
Jake Howard	fe748bfda7	Set permissions on media dir	2021-05-02 12:04:58 +01:00
Jake Howard	4a0f7b701b	Install jellyfin through Ansible	2021-05-02 12:04:48 +01:00
Jake Howard	a669e34f57	Update bitwarden_rs to vaultwarden ... I'll do the full rename of everything another time	2021-05-01 23:00:37 +01:00
Jake Howard	f2d3cb0835	Add a bash script to backup all database containers as text	2021-04-25 21:39:21 +01:00
Jake Howard	8ab0d7cd80	Add duplicati to walker	2021-04-24 22:25:40 +01:00
Jake Howard	1fcc63a5da	Move upload	2021-04-24 22:14:29 +01:00
Jake Howard	c048e6d20e	Provision walker	2021-04-24 21:59:53 +01:00
Jake Howard	03affd269f	FLoC Block ... https://paramdeo.com/blog/opting-your-website-out-of-googles-floc-network	2021-04-18 22:30:26 +01:00
Jake Howard	9ad64b444a	Update gotify	2021-04-16 22:19:27 +01:00
Jake Howard	cd31c5f8a5	Update gitea	2021-04-16 22:12:08 +01:00
Jake Howard	5d9ee7190d	Swap out deluge for qbittorrent ... Just run on arch instead of docker, too. Much simpler.	2021-04-16 21:49:00 +01:00
Jake Howard	943087b6ad	Fix the stupid postgres path for plausible ... A lay over from when it was at home	2021-04-15 18:28:24 +01:00
Jake Howard	5dc3db5dce	Remove need for geoip database ... Apparently partial functionality is built-in to the container now	2021-04-15 18:21:18 +01:00
Jake Howard	a25c0751fb	Update Plausible ... Also required updating Clickhouse, due to syntax errors in migrations. It's also nice it's alpine now, and newer	2021-04-15 18:11:44 +01:00
Jake Howard	4eec3292a6	Update wallabag	2021-04-11 12:54:59 +01:00
Jake Howard	b6f23b31a9	Stop unnecessarily restarting tt-rss	2021-04-11 12:52:48 +01:00
Jake Howard	3ce4626e29	Update synapse	2021-04-11 12:52:10 +01:00
Jake Howard	62373bf352	Update nextcloud to 21.0.1	2021-04-11 12:48:02 +01:00
Jake Howard	796375446e	Update gitea to 1.13.7	2021-04-11 12:42:15 +01:00
Jake Howard	1c424cb2ef	Update some IP addresses ... I really need to stop using these external addresses somewhen...	2021-04-07 22:11:24 +01:00
Jake Howard	22d43c16a7	Correctly redirect http traffic to https ... Bug caused by https://github.com/traefik/traefik/issues/8035	2021-04-06 11:56:05 +01:00
Jake Howard	f0193b5807	Scale up bitwarden slightly ... Should be able to handle a bit more, faster	2021-04-02 12:32:33 +01:00
Jake Howard	e0311111af	Update bitwarden ... Send functionality, woohoo!	2021-03-29 08:23:48 +01:00
Jake Howard	ad6bab108a	Keep backups for slightly longer ... This makes my occasional syncs less likely to do bad things	2021-03-28 19:47:34 +01:00
Jake Howard	a1307ff3a5	Remove obsolete port	2021-03-28 16:30:07 +01:00
Jake Howard	3c8d9fe940	Block all ports	2021-03-28 16:28:07 +01:00
Jake Howard	4d218248fa	Remotely connect to fail2ban to do ports ... Traefik can affect the edge, so blocks work there and prevent traffic hitting home network.	2021-03-28 16:06:36 +01:00
Jake Howard	ac186f42e0	Keep fewer fail2ban logs	2021-03-28 13:06:01 +01:00
Jake Howard	6973fb536f	Add fail2ban for traefik ... Remote action coming soon	2021-03-28 13:05:38 +01:00
Jake Howard	8398a2df21	Use endpoint middleware rather than hacky router	2021-03-27 23:34:34 +00:00
Jake Howard	a5af5bea6c	Force bitwarden to use public DNS ... It doesn't like creating icons for local IP spaces, so my overriden DNS doesn't play well	2021-03-27 18:45:06 +00:00
Jake Howard	1d997d3c33	Remove separate private and protected IP	2021-03-27 18:42:06 +00:00
Jake Howard	116e1adb50	Disable Traefik pilot on dashboard	2021-03-24 23:14:01 +00:00
Jake Howard	36f6bd62bb	Update gitea to 1.13.6	2021-03-24 22:57:45 +00:00
Jake Howard	5084bfecdf	Ignore PVE interface from f2b jails	2021-03-24 22:35:28 +00:00
Jake Howard	f436e4660b	Remove intersect host config ... is dead	2021-03-24 22:19:50 +00:00
Jake Howard	e67e4565d3	Remove expose_ssh and support SSH listening on nebula and PVE ... No more wireguard SSH for me	2021-03-24 22:19:29 +00:00
Jake Howard	3c06eb748d	Update gitea to 1.13.5	2021-03-23 17:22:13 +00:00
Jake Howard	ece0c841b2	Fix compose version ... Mostly fix quotes, but also standardize	2021-03-21 18:51:38 +00:00
Jake Howard	d4477c4bea	Add bitwarden_rs	2021-03-21 18:47:20 +00:00
Jake Howard	65f9206b95	Fix NTP updates ... Manually apply https://github.com/geerlingguy/ansible-role-ntp/pull/84, so machines actually update themselves via NTP	2021-03-13 18:46:45 +00:00
Jake Howard	f6559ff1bd	Remove collabora ... It doesn't seem to like being run inside LXC. I barely used it, anyway.	2021-03-12 23:35:39 +00:00
Jake Howard	ab1e2fbae2	Increase ZFS RAM usage ... If i've got a load of RAM free, it might as well be being used to cache ZFS!	2021-03-06 21:38:21 +00:00
Jake Howard	3eb286c9bd	Move envrironment variables to docker ... Using the `TTRSS_` prefix to follow upstream standard rather than container's https://github.com/lunik1/docker-tt-rss/issues/3	2021-03-06 12:11:08 +00:00
Jake Howard	8d136f0b55	Set default phone region for Nextcloud	2021-03-06 11:19:11 +00:00
Jake Howard	9d6ed88e13	Monitor proxmox stats	2021-03-05 22:14:21 +00:00
Jake Howard	d43d3433fa	Collect SMART metrics for disks	2021-03-05 20:50:08 +00:00
Jake Howard	6b95b75fc2	Move telegraf to host ... This makes metric collection for SMART much simpler. I'll still be using the prometheus node exporter for actual system metrics, though.	2021-03-05 20:39:11 +00:00
Jake Howard	aa3da3cf10	Upgrade gitea to 1.13.3	2021-03-05 20:05:51 +00:00
Jake Howard	89dbbc71e5	Move files into application directories	2021-03-05 14:40:17 +00:00
Jake Howard	8e977edba1	Ignore go metrics	2021-03-05 14:27:33 +00:00
Jake Howard	b264e5cbcc	Monitor traefik with prometheus rather than influxdb	2021-03-04 16:37:53 +00:00
Jake Howard	e8960ebf27	Connect forrest to nebula hosts	2021-03-04 16:08:53 +00:00
Jake Howard	2e05ed08fa	Use hostname rather than fqdn	2021-03-04 16:06:43 +00:00
Jake Howard	a4eb26b129	Use Nebula as the primary private interface rather than wireguard	2021-03-04 16:02:42 +00:00
Jake Howard	c6d9102e1e	Don't install NTP on LXC containers ... This can cause issues with containers trying to sync the system clock, and getting it wrong	2021-03-04 15:45:47 +00:00
Jake Howard	aba81f79bc	Add telegraf ... And input to ping and output via prometheus	2021-03-04 15:16:54 +00:00
Jake Howard	914676d209	Add prometheus for metrics	2021-03-04 14:53:03 +00:00
Jake Howard	fe2450d43b	Add grafana docker network and restrict port binds	2021-03-04 14:39:40 +00:00
Jake Howard	155bc837a8	Update synapse to 1.28	2021-03-02 12:31:07 +00:00
Jake Howard	9d5c7e56e8	Move nextcloud things back to tank	2021-03-02 12:26:23 +00:00
Jake Howard	21a2532f8a	Update nextcloud to 21	2021-03-02 12:03:13 +00:00
Jake Howard	63d156c0a0	Stop always restarting whoami ... whoami never sets `config_file`, so it's shadowed by whatever set it before	2021-02-27 22:09:24 +00:00
Jake Howard	1413efdd19	Copy feed icons and DB to tank	2021-02-27 22:08:01 +00:00
Jake Howard	a2fe3ca37a	Fix TT-RSS config ... It needs to be environment variables now, but there's a bug where it doesn't read docker ones for some reason	2021-02-27 21:29:24 +00:00
Jake Howard	b3a72eb8f1	Add influxdb server for metrics	2021-02-14 16:24:45 +00:00
Jake Howard	ec0c78e6d9	Read emails from secrets	2021-02-14 12:29:14 +00:00
Jake Howard	872471ef52	Setup email for grafana	2021-02-14 12:19:51 +00:00
Jake Howard	f7a0877e72	Exclude nebula from fail2ban	2021-02-14 11:39:01 +00:00
Jake Howard	d8f2a83dfe	Move grafana data back to pool	2021-02-14 11:33:46 +00:00
Jake Howard	385917ba4e	Decrease find time ... Hopefully reduce false-positive catches	2021-02-14 11:22:32 +00:00
Jake Howard	3014e5d052	Provision privatebin	2021-02-12 23:32:31 +00:00
Jake Howard	47df8164fa	Define timezone as variable	2021-02-10 09:12:42 +00:00
Jake Howard	635f55d7bf	Update gitea to 1.13.2	2021-02-09 17:36:06 +00:00
Jake Howard	149d01165f	Restore dockerized grafana setup ... It's stil on a separate machine, but in docker to allow more applications to be run easier and tied together.	2021-02-09 09:16:52 +00:00
Jake Howard	b940d22373	Install docker on forrest ... I'll be migrating it to docker, so I can run more things simply under Docker	2021-02-08 21:56:06 +00:00
Jake Howard	44a3fd4bc5	Only chown when the repos change ... This keeps claiming it's changing things, even when nothing should have changed	2021-02-07 16:14:56 +00:00
Jake Howard	870ac50c58	Update compose path to not be absolute ... This relies on `which` to find the correct binary instead	2021-02-07 15:59:18 +00:00
Jake Howard	a95ceb348f	Install docker from binary on debian distros ... This is because the repos are usually super out of date, or at least can stray quite a bit	2021-02-07 15:56:25 +00:00
Jake Howard	c4999d7b25	Use ansible collections for things	2021-02-07 13:02:14 +00:00
Jake Howard	e8496ddced	Deploy deluge in docker ... Makes version managing so much easier!	2021-02-01 17:24:36 +00:00
Jake Howard	ac68b36841	Initially provision deluge machine ... Based on Docker, so deluge itself is easier to install and keep updated. Until such time it's in the repos	2021-02-01 15:40:06 +00:00
Jake Howard	54eee03524	Fix YAML linting and service name	2021-01-31 17:27:44 +00:00
Jake Howard	7b9bab14fa	Remove stray variables file	2021-01-31 16:56:25 +00:00
Jake Howard	c7fba8107a	Move grafana to forrest	2021-01-31 16:52:24 +00:00
Jake Howard	a79e54d45a	Add forrest instance	2021-01-31 15:18:20 +00:00
Jake Howard	058290b321	Keep track of IPs for PVE hosts ... Yea they're all random, I'll deal with that later	2021-01-31 12:46:43 +00:00
Jake Howard	9023b269eb	Allow PVE VMs to access nebula hosts via ingress	2021-01-31 12:19:33 +00:00
Jake Howard	643d843bfb	Enable unsafe routing to PVE network over nebula	2021-01-30 22:59:56 +00:00
Jake Howard	da301eb7dd	Provision remaining nebula instances	2021-01-30 20:47:11 +00:00
Jake Howard	08ff5dcf94	Provision nebula certs using Ansible	2021-01-30 20:06:31 +00:00
Jake Howard	92815a6f76	Add platform-agnostic installation of nebula	2021-01-30 19:10:52 +00:00
Jake Howard	723372dd09	Name keys after hostname	2021-01-30 18:16:28 +00:00
Jake Howard	703b3b194f	Make index read-only so it's not always reowned	2021-01-29 21:52:22 +00:00
Jake Howard	062742bc5e	Update synapse	2021-01-29 21:44:34 +00:00
Jake Howard	e1f3572a7c	Set pages install directory correctly	2021-01-29 21:35:01 +00:00
Jake Howard	c5050381fc	Update plausible to v1.2	2021-01-29 21:34:44 +00:00
Jake Howard	698804ff38	Remove gitlab	2021-01-28 19:54:03 +00:00
Jake Howard	89a6c7680c	Decommission walker ... Kimsufi is just too annoying of a host. Everything has either been moved off, killed, or has further plans.	2021-01-28 18:56:39 +00:00
Jake Howard	b339cb0e2d	Move upload to grimes	2021-01-28 14:04:55 +00:00
Jake Howard	909f693cba	Fix location of zpool command ... TIL lookups are executed on the host	2021-01-26 22:02:58 +00:00
Jake Howard	3de14efd9e	Remove heimdall ... I've literally not used it since setting it up	2021-01-26 21:53:52 +00:00
Jake Howard	a44a79031a	Init some skeleton nebula stuff	2021-01-25 21:53:04 +00:00
Jake Howard	0ecd884a9a	Deploy yourls	2021-01-22 21:29:27 +00:00
Jake Howard	2a8f715eca	Add redis cache for gitea	2021-01-22 18:59:52 +00:00
Jake Howard	cc847a069c	Resolve zpool location ... Hopefully this means they actually run	2021-01-22 15:29:41 +00:00
Jake Howard	a2c6d7c276	Swap out alpine for debian on ingress ... Mostly for future nebula deployment	2021-01-22 14:53:02 +00:00
Jake Howard	0f9802a46c	Install duplicati on PVE docker machine ... Requires some changes to how private IPs are specified, which I really need to clean up at some point!	2021-01-20 21:38:01 +00:00
Jake Howard	f6c176d2f0	Ensure duplicati base is always updated	2021-01-20 21:30:25 +00:00
Jake Howard	fce8cf3768	Update nextcloud	2021-01-20 20:58:28 +00:00
Jake Howard	76eeeec260	Update wallabag	2021-01-20 20:39:27 +00:00
Jake Howard	3321b852a5	Update traefik to v2.4	2021-01-20 20:33:57 +00:00
Jake Howard	700360eb96	Update synapse	2021-01-20 20:20:09 +00:00
Jake Howard	3e8a3b2c6b	Update gotify	2021-01-20 20:02:01 +00:00
Jake Howard	48c507e0c3	Up page sizes for gitea stuff ... Screw paginating!	2021-01-19 21:20:00 +00:00
Jake Howard	26905e245b	Hide heatmap on gitea ... It's kinda useless at this scale	2021-01-19 17:42:10 +00:00
Jake Howard	41915ec69c	Replace gitlab with gitea ... Leave gitlab in place for a bit in case I need to get at data	2021-01-18 20:14:38 +00:00
Jake Howard	f9187109c7	Correct router name for pages	2021-01-17 20:03:02 +00:00
Jake Howard	ac4a93e0ed	Setup DNS for pages	2021-01-17 12:49:23 +00:00
Jake Howard	b992df0313	Fix variable name for traefik conditional provider	2021-01-16 23:30:09 +00:00
Jake Howard	604202fdce	Add traefik pages ... Add it ready for the migration in future	2021-01-16 23:29:55 +00:00
Jake Howard	e1ea938d59	Add file providers for jellyfin and HA	2021-01-13 22:12:58 +00:00
Jake Howard	969674772c	Snapshot PVE root pool too	2021-01-10 13:23:36 +00:00
Jake Howard	7672d99aa8	Remove homeassistant configuration ... It's now in its own VM, and i'll deal with version control using the git integration there directly I suspect.	2021-01-10 13:12:19 +00:00
Jake Howard	b40266b276	Add roles to handle PVE nag and repos	2021-01-09 23:21:35 +00:00
Jake Howard	6dd86ea870	Limit ZFS ARC size on PVE	2021-01-09 22:32:55 +00:00
Jake Howard	d87ec89887	Persist arc size ... Modprobe only loads the module, it doesn't ensure the ARC value persists correctly.	2021-01-09 22:25:29 +00:00
Jake Howard	0c6e9969bc	Give myself passwordless sudo access to zfs stuff ... This is needed for syncoid pulls	2021-01-09 21:36:09 +00:00
Jake Howard	c3053e9378	Fix location for sanoid install ... This makes it sync up with where the systemd services expect them to be	2021-01-09 21:28:16 +00:00
Jake Howard	7d235e67e0	Add ZFS configuration for PVE	2021-01-09 21:27:52 +00:00
Jake Howard	decf5176f7	Use systemd rather than cron for sanoid ... It's more reliable and easier to get logs	2021-01-09 20:57:47 +00:00
Jake Howard	57d9c9d288	Allow configuring of pools to scrub	2021-01-09 20:52:51 +00:00
Jake Howard	721bdf60b3	Fix quotes	2021-01-09 18:32:16 +00:00
Jake Howard	1b72afdd29	Remove scrutiny role ... SMART checks are handeld by PVE / something else in future	2021-01-09 18:30:28 +00:00
Jake Howard	0506a78d02	Listen on public port ... Makes connection so much easier	2021-01-09 18:25:08 +00:00
Jake Howard	8fe8788458	Move ARC size to defaults so it can be easily changed	2021-01-09 18:24:52 +00:00
Jake Howard	5b495688cd	Remove intersect wireguard keys	2021-01-09 18:23:10 +00:00
Jake Howard	c38ecfebd7	Update gateway to point to ingress instance	2021-01-09 18:17:54 +00:00
Jake Howard	fef7f2c2b4	Move docker containers to new PVE container	2021-01-09 18:02:17 +00:00
Jake Howard	a35f2f91ff	Default to using python3 over "legacy python"	2021-01-09 17:55:29 +00:00
Jake Howard	0355b6b214	Remove jellyfin docker config ... It'll be replaced by something else later, don't worry.	2021-01-09 17:17:12 +00:00
Jake Howard	2300426f0f	Move default variables into role defaults rather than group vars	2020-12-28 16:23:12 +00:00
Jake Howard	422062ae63	Fix lint warning around missing mode ... This only applies to directories https://stackoverflow.com/a/29793833	2020-12-28 16:16:35 +00:00
Jake Howard	3338a1f898	Add jellyfin host ... Role TBC	2020-12-28 16:08:15 +00:00
Jake Howard	6267363ab0	Provision docker VM	2020-12-28 15:57:44 +00:00
Jake Howard	bdfd38c9fe	Allow traefik to run on non-wireguard host	2020-12-28 15:55:45 +00:00
Jake Howard	4f1e54baab	Actually enable timer	2020-12-28 15:14:50 +00:00
Jake Howard	58879d2e1d	Ensure fail2ban and logrotate are available on all machines	2020-12-27 22:39:33 +00:00
Jake Howard	b11dbfc829	Move traefik file provider to use directory rather than single file ... This makes future composition possible	2020-12-22 15:53:03 +00:00
Jake Howard	0353887590	Add override to ensure ZFS starts before docker ... Stolen with love from 7dda0bc7cb	2020-12-21 21:37:46 +00:00
Jake Howard	30cb9e52e7	Install and provision wireguard client on ingress server	2020-12-21 18:24:35 +00:00
Jake Howard	3197953796	Provision PVE and ingress VM	2020-12-21 17:11:38 +00:00
Jake Howard	44fb8f5380	Set some image resizing preferences ... This stops the thumbnailing being quite as intensive	2020-12-11 17:39:58 +00:00
Jake Howard	2bfad84071	Pin wallabag to newer version ... 2.4.0 came out *finally*	2020-12-11 17:39:35 +00:00
Jake Howard	5a808e90e0	Update synapse	2020-12-11 17:36:06 +00:00
Jake Howard	af1b7f754c	Update nextcloud to 20.0.3	2020-12-11 17:35:50 +00:00
Jake Howard	8e6a3324a1	Install duplicati on grimes ... Makes backing up website things a bit easier	2020-12-07 18:09:29 +00:00
Jake Howard	6d75272d34	Move plausible to new server	2020-12-05 12:33:50 +00:00
Jake Howard	e1dd6c4c05	Init new web server on Linode ... I'll terraform it later, honest!	2020-12-04 23:02:19 +00:00
Jake Howard	08bb8f22ca	Add feediron plugin for tt-rss	2020-11-25 13:16:13 +00:00
Jake Howard	b5d676b6fe	Install fever plugin for tt-rss ... Had to chown the directory afterwards, as git wouldn't play nice with `become_user`	2020-11-25 13:00:06 +00:00
Jake Howard	48762bcfcd	Remove redundant quoting	2020-11-25 11:41:26 +00:00
Jake Howard	a35ee7c824	Change base URL to default so the tracker script still uses disguised domain	2020-11-25 11:40:54 +00:00
Jake Howard	2b291548f9	Just do plain path replacement	2020-11-25 11:38:47 +00:00
Jake Howard	a81e2793f8	Add a secondary domain for plausible less likely to match blockers ... Might change things, might not. But it's a fun experiment to try anyway. Using a custom middleware to override the path due to https://github.com/plausible/analytics/pull/340	2020-11-25 11:11:29 +00:00
Jake Howard	e8d3a72ea8	Update nextcloud to 20.0.2	2020-11-22 15:40:23 +00:00
Jake Howard	1d8f54c778	Update synapse	2020-11-22 15:32:17 +00:00
Jake Howard	3ddfd77bdf	Stop running synapse as root	2020-11-22 15:08:08 +00:00
Jake Howard	310feaf332	Use correct args to build synapse DB	2020-11-22 15:07:34 +00:00
Jake Howard	367de37fab	Actually disable unnecessary logging rather than change level ... Also disable even more of them	2020-11-12 23:01:32 +00:00
Jake Howard	2a4b3ec3e6	Increase timeout for SSH sessions ... Stll check relatively often the client is still there, but check many times so the connection stays open a decent amount of time. Especially useful for long-running commands.	2020-11-08 22:04:30 +00:00
Jake Howard	f5c7c094d3	Fix gotify container name ... Gotify != duplicati	2020-11-08 11:07:57 +00:00
Jake Howard	5c1f17e2aa	Update synapse	2020-10-28 18:22:30 +00:00
Jake Howard	0fc57049e4	Update nextcloud to 20.0.1	2020-10-28 15:22:49 +00:00
Jake Howard	f450d4a8f2	Pin jellyfin version	2020-10-27 17:38:10 +00:00
Jake Howard	f414781182	Use new whoami container	2020-10-27 16:13:14 +00:00
Jake Howard	c63506d2bc	Pin traefik to patch version	2020-10-27 16:13:14 +00:00
Jake Howard	6ae8d0febe	Pin plausible versions	2020-10-27 16:13:14 +00:00
Jake Howard	f665b87965	Allow NTP role to manage config ... Hopefully this closes the port	2020-10-24 17:36:39 +01:00
Jake Howard	ff72f5a25e	Move nextcloud data dir to ZFS	2020-10-24 14:26:30 +01:00
Jake Howard	5eb3870fbe	Set mode on fail2ban filter and jail	2020-10-24 12:10:54 +01:00
Jake Howard	8932ac828f	Add geoip database for plausible	2020-10-24 12:10:37 +01:00
Jake Howard	47ad40bb52	Remove watchtower, and do updates manually from now on ... Keeps @IronicBadger happy!	2020-10-22 18:07:48 +01:00
Jake Howard	efd22010b7	Use new LSIO mod which does more	2020-10-19 17:29:28 +01:00
Jake Howard	a46525aa80	Move configuration for custom port to Traefik config rather than custom container expose ... Still a work-around for https://github.com/plausible/analytics/pull/237	2020-10-18 22:31:23 +01:00
Jake Howard	0ca3f36f7a	Move some more nextcloud components to ZFS	2020-10-18 18:02:48 +01:00
Jake Howard	58605c1c24	Don't snapshot tank root ... This makes syncoid unhappy, and is generally unnecessary	2020-10-18 17:45:49 +01:00
Jake Howard	bedbb0f5f4	Fix service to restart	2020-10-16 19:16:42 +01:00
Jake Howard	1930cc83e8	Use generic package module	2020-10-16 19:16:42 +01:00
Jake Howard	b2e91d7d6d	Update haproxy fail2ban jail to use systemd for logs	2020-10-16 19:16:42 +01:00
Jake Howard	4890c3d3e5	Revert "Remove fail2ban" ... This reverts commit 1f0e33acc8.	2020-10-16 19:16:42 +01:00
Jake Howard	30baed441e	Mount external files into nextcloud ... Means some bits can live outside the nextcloud dir	2020-10-10 18:01:27 +01:00
Jake Howard	b8ea056455	Remove netdata ... Don't use it anyway	2020-10-09 23:39:55 +01:00
Jake Howard	6852b84406	Change watchtower to run daily ... A holdover until less of the containers are using `:latest`	2020-10-09 23:20:07 +01:00
Jake Howard	5496744428	Remove web-rng	2020-10-09 23:11:53 +01:00
Jake Howard	f7afaacbdc	Move website to be hosted on GitLab pages	2020-10-09 21:35:57 +01:00
Jake Howard	7f09db5d20	Add heimdall	2020-10-07 14:09:23 +01:00
Jake Howard	e9f61070f8	Update nextcloud to version 20 ... Using the new LSIO tags for version specific pins! 🎉	2020-10-07 09:18:32 +01:00
Jake Howard	0a9deb3d9e	Update plausible environment so it's compatible with v1 ... Read the changelog, folks!	2020-10-06 21:48:34 +01:00
Jake Howard	93ccb686e7	Drive watchtower config from environment	2020-10-06 09:10:26 +01:00
Jake Howard	413ff4dad9	Add script to update containers ... This is an attended update, which is better. Eventually replace watchtower	2020-10-06 08:44:01 +01:00
Jake Howard	2c4e1e0414	Pin Plausible to major version	2020-10-05 18:43:12 +01:00
Jake Howard	29c9e14f62	Remove haproxy chroot ... This is technically _slightly_ less secure, but means it logs to journald properly, so can be picked up by fail2ban in future	2020-10-05 11:10:29 +01:00
Jake Howard	4c40faf21d	Move clickhouse off ZFS ... For some reason, they really don't play well together!	2020-10-03 17:18:11 +01:00
Jake Howard	68bda30cb2	Add nginx container for getting access to files via rclone	2020-10-03 11:41:38 +01:00
Jake Howard	64788eb602	Move transcodes to tempfs ... Means I can remove the scratch disk	2020-10-02 18:12:15 +01:00
Jake Howard	1f398b25c3	Store fewer snapshots for downloads directory	2020-10-02 18:11:53 +01:00
Jake Howard	191374b812	Move deluge onto walker ... Stop torrent traffic being limitted by home broadband	2020-10-02 18:11:34 +01:00
Jake Howard	6cfaa3a03a	Update traefik	2020-10-02 09:20:33 +01:00
Jake Howard	aee9507ec0	Update synapse	2020-10-02 09:13:41 +01:00
Jake Howard	addd4f351c	Update nextcloud base	2020-10-02 09:13:34 +01:00
Jake Howard	285f7b8a31	Update Gotify	2020-10-02 09:13:13 +01:00
Jake Howard	a799ad9657	Scale gitlab up a tiny bit	2020-10-01 19:46:04 +01:00
Jake Howard	4742552839	Add notes site	2020-09-30 18:49:36 +01:00
Jake Howard	4e7c5ffd67	Add docker mod to scale worker processes to a sane value	2020-09-28 20:14:41 +01:00
Jake Howard	07b0650618	Remove statping ... It's buggy as all hell, super slow, and doesn't really get used for monitoring	2020-09-27 14:17:46 +01:00
Jake Howard	5079599b9d	Require TLS 1.2	2020-09-27 12:36:49 +01:00
Jake Howard	d93920c2b6	Move home-assistant stuff to ZFS	2020-09-27 11:31:05 +01:00
Jake Howard	a303bed27f	Define app data dir in variable	2020-09-26 21:15:44 +01:00
Jake Howard	361a78e8e0	Update yamllint	2020-09-26 17:54:14 +01:00
Jake Howard	24d11deeae	Update ansible-lint ... Required a lot of renaming :(	2020-09-26 17:53:47 +01:00
Jake Howard	cc43910be6	Fix scrutiny so it picks up which task to run correctly	2020-09-26 17:10:07 +01:00
Jake Howard	3c21c5670c	Replace postgres with mariadb ... Its' recommended, and might hopefully fix my annoying auth issues!	2020-09-26 14:49:38 +01:00
Jake Howard	40488f62b7	Also set user id for collector container ... Else it chowns the DB, and doesn't run correctly	2020-09-24 22:18:34 +01:00
Jake Howard	fd83820faa	Install scrutiny	2020-09-21 21:16:00 +01:00
Jake Howard	a67361b9b5	Explicitly define bed lights	2020-09-19 16:16:24 +01:00
Jake Howard	2bbc7c715f	Add GZIP compression to projects which don't natively support it	2020-09-18 12:42:36 +01:00
Jake Howard	092f12459e	Fix XML formatting ... This caused clickhouse to crash hard!	2020-09-18 12:21:15 +01:00
Jake Howard	782b008cd3	Fix name of config so they're not constantly changed with each run of ansible ... derp!	2020-09-18 12:11:44 +01:00
Jake Howard	62e629187b	Clean up indent	2020-09-18 12:10:53 +01:00
Jake Howard	4ad2bdc77a	Change clickhouse connection to unified variable	2020-09-17 15:18:01 +01:00
Jake Howard	a8438c4c2a	Add grafana image renderer	2020-09-13 10:47:59 +01:00
Jake Howard	809a977c63	Also update nextcloud config file	2020-09-12 23:15:08 +01:00
Jake Howard	9cea8743e9	Update gotify	2020-09-12 22:54:49 +01:00
Jake Howard	4c92fba2b9	Change gitlab trusted proxies to be docker IP space ... Else it becomes `127.0.0.1`, which is obviously not right	2020-09-12 20:03:22 +01:00
Jake Howard	6ad9fa070f	Update nextcloud	2020-09-11 21:30:20 +01:00
Jake Howard	9ca2546766	Decommission grimes ... Most of the function has moved to `walker`	2020-09-10 20:39:54 +01:00
Jake Howard	1ecfc5b7fa	Update traefik	2020-09-10 20:16:23 +01:00
Jake Howard	59a447023b	Update nextcloud base	2020-09-09 20:43:52 +01:00
Jake Howard	c220f19545	Move scratch disk under /mnt ... Mounting disks is hard!	2020-09-08 21:17:51 +01:00
Jake Howard	2db72623ad	Remove DB backups for containers on ZFS ... Snapshots are a better backup	2020-09-08 20:41:47 +01:00
Jake Howard	b47de7e70b	Disable healthchecks for GitLab pages ... Because of everything we have disabled, Docker considers the container unhealthy	2020-09-05 23:08:58 +01:00
Jake Howard	8c4397d39a	Set rails trusted proxies	2020-09-05 22:29:16 +01:00
Jake Howard	2af3241bd2	GZIP compress gitlab pages	2020-09-05 20:52:18 +01:00
Jake Howard	19b2330832	Disable logrotate for pages ... Logs are in a tempfs anyway, and it's just another process to be running	2020-09-05 20:36:45 +01:00
Jake Howard	ea54d1be69	Expose pages sites	2020-09-05 20:33:57 +01:00
Jake Howard	0a1b541974	Remove compression middleware for gitlab ... This is already handled by the application	2020-09-05 18:27:56 +01:00
Jake Howard	e9aeed26ee	Use cloudflare DNS challenge for Traefik	2020-09-05 18:27:04 +01:00
Jake Howard	0289342e2c	Remove goaccess container	2020-09-05 17:29:40 +01:00
Jake Howard	4c1ccfc4e4	Only clear containers weekly ... This will be more helpful now, as repeat CI jobs won't need to re-download containers as often	2020-09-05 17:01:54 +01:00
Jake Howard	af9c66785e	Decrease watchtower polling rate to 10 minutes ... Doesn't need to be that intensive	2020-09-05 17:01:30 +01:00
Jake Howard	77113246b0	Remove remaining gitea configuration ... Goodbye old friend	2020-09-05 16:56:27 +01:00
Jake Howard	c1dc26ce35	Install gitlab pages daemon ... I'll deal with traefik domains later	2020-09-05 16:50:56 +01:00
Jake Howard	e579edc758	Use lsyncd to push files to gitlab pages server ... Server itself in future commit	2020-09-05 16:24:47 +01:00
Jake Howard	1487915bbc	Also disable thread log	2020-09-02 20:12:31 +01:00
Jake Howard	c47ff494e0	Revert "Disable docker healthchecks" ... Turns out it really just takes that long to start up! This reverts commit 61ed3db887.	2020-09-01 21:50:03 +01:00
Jake Howard	61ed3db887	Disable docker healthchecks ... Makes traefik take *ages* to detect the container is actually running. Let it 502 if it has to	2020-09-01 20:12:52 +01:00
Jake Howard	3bc1d75d9e	Ensure the correct IP is detected	2020-09-01 20:12:16 +01:00
Jake Howard	acef6246d0	Replace gitea with gitlab ... Leave gitea in place for a bit in case I need to change back suddenly	2020-09-01 19:47:39 +01:00
Jake Howard	84d529be2f	Update synapse	2020-08-31 18:47:37 +01:00
Jake Howard	3b7493ae8f	Set default theme to dark and assign default proxy	2020-08-30 21:11:29 +01:00
Jake Howard	1ed078ef23	Fix SSH port for gitlab	2020-08-30 21:08:04 +01:00
Jake Howard	4610d5ced2	Update nextcloud to 19.0.2	2020-08-30 20:28:49 +01:00
Jake Howard	3d76c48bbf	Use postgres on homeassistant	2020-08-30 16:58:27 +01:00
Jake Howard	ec751ffa1a	Add influxdb to monitor traefik	2020-08-30 15:58:03 +01:00
Jake Howard	17f0e22962	Migrate grafana to postgres	2020-08-30 14:53:08 +01:00
Jake Howard	8efb3e0d69	Expose gitlab SSH	2020-08-30 11:22:15 +01:00
Jake Howard	796c694170	Run duplicati as root ... This ensures it has all the right permissions to access all the right files. Host is mounted read-only, so there's no real security risk.	2020-08-30 11:15:08 +01:00
Jake Howard	5940b6970a	Move gitlab to ZFS pool	2020-08-30 10:19:57 +01:00
Jake Howard	0ce15cb4d8	Add gitlab	2020-08-29 23:56:14 +01:00
Jake Howard	da90b12643	Modify clickhouse settings so it's not a resource whore ... This means it can be moved back to ZFS!	2020-08-28 14:20:13 +01:00
Jake Howard	c6791e4098	Remove stray vault file from removing todoist-github	2020-08-28 14:17:45 +01:00
Jake Howard	8a7cc5e57e	Move clickhouse back to old disk ... It does a stupid number of writes, and the snapshots are massive! Until i've worked out why it writes so much, move it to a less critical disk	2020-08-27 14:16:12 +01:00
Jake Howard	9a8995f1f8	Use single cron job for pruning and taking snapshots ... Less to manage, and less lock contention	2020-08-26 13:02:50 +01:00
Jake Howard	77262cd206	Reduce number of sanoid snapshots ... It should be pretty quick for me to realise something went wrong. Can recycle through space much quicker this way!	2020-08-26 09:08:26 +01:00
Jake Howard	1f70a46c35	Add custom clickhouse config ... This changes the default log level to warning, to ensure the log file isn't being hammered	2020-08-26 08:54:37 +01:00
Jake Howard	3edc34759d	Mount clickhouse logs on tmpfs ... WHO LOGS TRACE BY DEFAULT?!	2020-08-25 22:05:10 +01:00
Jake Howard	742412259c	Mount transcodes on scratch disk ... Don't want them getting caught by sanoid!	2020-08-25 14:30:26 +01:00
Jake Howard	4feff3d247	Move jellyfin to ZFS	2020-08-25 14:17:57 +01:00
Jake Howard	6808e86a6d	Update nextcloud base	2020-08-24 14:30:11 +01:00
Jake Howard	922b688615	Bump ZFS usage to 50% RAM ... It's a lot, but should be dealable on most machines	2020-08-23 14:15:09 +01:00
Jake Howard	f531d4f915	Move plausible onto ZFS	2020-08-22 12:19:47 +01:00
Jake Howard	9ffdd4d711	Move grafana to ZFS ... Don't need to create the directory anymore really	2020-08-22 12:07:44 +01:00
Jake Howard	f517831435	Install synapse config to right place	2020-08-22 12:03:04 +01:00
Jake Howard	67dfe6a8a0	Remove todoist-github ... It's got some pretty big bugs, and isn't running anyway	2020-08-22 12:01:24 +01:00
Jake Howard	07d5c4fa72	Move quassel to ZFS	2020-08-22 11:59:10 +01:00
Jake Howard	3dc8ee16b5	Move wallabag to ZFS	2020-08-22 11:51:51 +01:00
Jake Howard	ff7ec46e77	Move synapse to ZFS	2020-08-22 11:42:03 +01:00
Jake Howard	037d719906	Migrate deluge data to ZFS pool	2020-08-22 11:20:38 +01:00
Jake Howard	8d2c6dfb68	Move gitea to ZFS	2020-08-21 16:02:56 +01:00
Jake Howard	bc5d6d512b	Move calibre to ZFS pool	2020-08-21 15:34:04 +01:00
Jake Howard	2866cd0602	Move TT-RSS into ZFS pool	2020-08-21 15:33:46 +01:00
Jake Howard	35266e975d	Drive sanoid changes from YAML	2020-08-20 21:47:12 +01:00
Jake Howard	1bcb8f22b1	Fully resolve path to sanoid ... Apparently cron didn't like just `sanoid`	2020-08-20 21:24:33 +01:00
Jake Howard	a2e021ac43	Install ZFS on home server 🎉	2020-08-19 21:34:23 +01:00
Jake Howard	a5aa21429c	Conditionally run reflector role rather than manually defining which machines run arch	2020-08-19 18:58:58 +01:00
Jake Howard	63ec7c671a	Manually install sanoid ... Makes the foundation for a future external role	2020-08-19 18:40:17 +01:00
Jake Howard	fcd4dbf657	Fix casing ... Turns out it's a lower case "l"	2020-08-19 17:59:56 +01:00
Jake Howard	2ef836b2e9	Remove synapse helper scripts ... They're not maintained, and actually highly advised against	2020-08-18 20:39:23 +01:00
Jake Howard	efc7a5d7fb	Allow arc to be 20% RAM usage	2020-08-18 13:47:48 +01:00
Jake Howard	cbbd7bf83d	Update synapse	2020-08-18 13:13:25 +01:00
Jake Howard	6716b418d7	Ensure cron tasks are run as the right user ... Looks like by default they're installed as the current user, not root. Bad ansible documentation!	2020-08-17 22:29:02 +01:00
Jake Howard	af22e89a73	Update nextcloud base	2020-08-17 13:57:53 +01:00
Jake Howard	bf4e90d053	Update synapse	2020-08-17 13:57:44 +01:00
Jake Howard	150a34be2f	Provide cron flag to sanoid	2020-08-17 13:49:07 +01:00
Jake Howard	0902dd001e	Expose grafana	2020-08-07 12:03:45 +01:00
Jake Howard	9d014cfa1c	Install grafana and link it to HA	2020-08-07 11:52:15 +01:00
Jake Howard	301ac37868	Remove legacy integrations	2020-08-06 17:05:19 +01:00
Jake Howard	55f79b4a51	Remove socks proxy	2020-08-05 20:56:12 +01:00
Jake Howard	c888fc5e72	Pull new images before taking application down	2020-08-05 17:43:04 +01:00
Jake Howard	1195a5001e	Add reflector to keep mirror lists updated	2020-08-05 12:15:28 +01:00
Jake Howard	384a07b513	Run plausible migrations on startup	2020-08-04 22:07:45 +01:00
Jake Howard	19c134564a	Add duplicati to walker ... Gotta backup them backups	2020-08-04 21:09:45 +01:00
Jake Howard	7d3f6a8121	Remove duplicati from grimes	2020-08-04 20:58:10 +01:00
Jake Howard	e184c7fba1	Move website over to walker	2020-08-04 20:54:53 +01:00
Jake Howard	6ceea80ee7	Fix website restart	2020-08-04 20:54:34 +01:00
Jake Howard	4b7830567b	Add postgres backups for plausible	2020-08-04 19:49:21 +01:00
Jake Howard	7c0d78ee9d	Remove folding-at-home ... New server location isn't especially ventilated, so heat is an issue. I'm sorry.	2020-08-04 19:41:01 +01:00
Jake Howard	c435ad1ba8	Ensure plausible is restarted on error	2020-08-04 19:38:01 +01:00
Jake Howard	969b0bd8d9	Update traefik ... Fixes GHSA-6qq8-5wq3-86rp	2020-07-30 21:46:44 +01:00
Jake Howard	ed00a0d40e	Update gitea	2020-07-29 18:26:13 +01:00
Jake Howard	a6047da465	Use default port	2020-07-28 20:31:32 +01:00
Jake Howard	91effbcac5	Add ZFS scrub cron job	2020-07-26 22:17:28 +01:00
Jake Howard	6e58b07519	Remove unnecessary quotes	2020-07-26 18:22:43 +01:00
Jake Howard	ebbd2a4015	Install zfs and sanoid	2020-07-26 18:03:09 +01:00
Jake Howard	5cb1a470ab	Bump plausible pool size	2020-07-26 15:40:03 +01:00
Jake Howard	f77cd1216f	Move upload server to walker	2020-07-24 17:14:39 +01:00
Jake Howard	3c7c0ec3fa	GZIP plausible traffic ... Plausible doesn't gzip for itself. Funnily enough the tracker is actually too small to be compressed by Traefik!	2020-07-22 12:18:49 +01:00
Jake Howard	9ee4e1c14b	Add plausible analytics	2020-07-21 20:55:44 +01:00
Jake Howard	74d40ac915	Update traefik	2020-07-18 13:29:20 +01:00
Jake Howard	005cc528b6	Update nextcloud to 19.0.1	2020-07-17 14:48:50 +01:00
Jake Howard	7a38207ef0	Update traefik	2020-07-15 14:53:36 +01:00
Jake Howard	b7aebfaabd	Move statping to new machine ... Also update it to the latest version. It's probably still buggy AF, but it'll do for what I need it to rigth now.	2020-07-14 19:35:55 +01:00
Jake Howard	52e8f34198	Pin jellyfin to latest ... It can update itself just fine	2020-07-13 18:09:33 +01:00
Jake Howard	9d962c324b	Update synapse	2020-07-13 18:04:20 +01:00
Jake Howard	bb5a5b61bd	Update traefik	2020-07-13 18:04:11 +01:00
Jake Howard	dd8523ebdd	Update gitea	2020-07-13 18:02:51 +01:00
Jake Howard	eed13e3727	Setup offsite storage service ... My own lil' S3	2020-07-12 21:01:06 +01:00
Jake Howard	3c49c80ff1	Ensure traefik only listens on wireguard network	2020-07-12 19:29:18 +01:00
Jake Howard	0314908eac	Install docker on new server	2020-07-12 19:21:27 +01:00
Jake Howard	9c0682ef9b	Restrict SSH connections to wireguard cidr ... Except on home server, still handy to connect on same network.	2020-07-12 17:53:02 +01:00
Jake Howard	a6a3982cc8	Provision keys for walker	2020-07-12 17:19:51 +01:00
Jake Howard	693c3fc0ab	Remove legacy vars file	2020-07-12 17:12:47 +01:00
Jake Howard	63eecf7a56	Provision new dedicated server	2020-07-12 17:06:02 +01:00
Jake Howard	e5e308fafa	Remove firewall role ... firewalld does not play nice with docker!	2020-07-12 17:04:13 +01:00
Jake Howard	f2d7d63e2d	Update nextcloud base	2020-07-10 16:15:13 +01:00
Jake Howard	dc2b51db6b	Update synapse	2020-07-10 16:02:06 +01:00
Jake Howard	ba486a26e4	Update duplicati	2020-07-09 19:27:53 +01:00
Jake Howard	13a70b27a4	Add RGB LED controller	2020-07-06 20:48:57 +01:00
Jake Howard	82bffc3538	Setup firewalld	2020-07-03 21:53:31 +01:00
Jake Howard	fba284f9a9	Change primary gitea domain to the one I actually use	2020-07-02 19:42:51 +01:00
Jake Howard	1c99477ce9	Move nextcloud config into root	2020-07-02 18:44:27 +01:00
Jake Howard	c80d4b7e04	Move tt-rss config out of config directory	2020-07-02 18:24:26 +01:00
Jake Howard	689c0cecd9	Set permissions on nextcloud data dir	2020-07-02 17:52:53 +01:00
Jake Howard	452118e2a9	Update synapse	2020-07-02 17:41:22 +01:00
Jake Howard	86a398d6b4	Replace docker-compose restart hack with shell handler hack ... The docker-compose integration would start 2 of the same container, which does bad things to things like databases!	2020-06-28 20:13:12 +01:00
Jake Howard	71086ca291	Do HA person management through web UI	2020-06-28 19:35:39 +01:00
Jake Howard	e2ca9ad4a9	Don't use host hack to connect to influx ... Just bind to internal port like a sane person	2020-06-28 19:16:22 +01:00
Jake Howard	9f09554053	Set some sysctl settings so zeroconf works for HA ... https://stackoverflow.com/a/46890741	2020-06-28 17:35:49 +01:00
Jake Howard	bf2a5e9320	Add Tado and Arlo integrations	2020-06-27 21:00:18 +01:00
Jake Howard	e4aba817cc	Fix influxdb comms ... Stupid host network mode and DNS	2020-06-27 21:00:07 +01:00
Jake Howard	cfd46ea752	I'm probably where my phone is	2020-06-27 19:53:21 +01:00
Jake Howard	fe5a5984c3	Remove container names from containers ... They're not needed for anything, and caused annoying weird issues when cycling containers	2020-06-27 17:45:28 +01:00
Jake Howard	681d591176	Add ESPHome	2020-06-27 16:45:00 +01:00
Jake Howard	c89715c52b	Add influxdb for homeassistant storage	2020-06-27 16:34:41 +01:00
Jake Howard	93b4bef05d	Add home-assistant	2020-06-27 16:16:52 +01:00
Jake Howard	e5cbae81f4	Switch from Emby to Jellyfin ... Merge remote-tracking branch 'origin/jellyfin'	2020-06-25 21:39:19 +01:00
Jake Howard	e051db5e71	Remove obsolete middleware	2020-06-24 18:48:39 +01:00
Jake Howard	7119d5877f	Only expose deluge to internal network ... And VPN	2020-06-24 18:48:30 +01:00
Jake Howard	dd12b795b5	Remove pihole ... Internal VPN server is working just perfectly instead	2020-06-24 18:46:13 +01:00
Jake Howard	7d61282d19	Set depends_on where needed	2020-06-24 18:35:20 +01:00
Jake Howard	7a3643f3c2	Persist mirror caches outside container	2020-06-24 18:21:14 +01:00
Jake Howard	c771e425fb	Replace ansible with system installed version ... Similar to a572868b8f	2020-06-24 17:14:25 +01:00
Jake Howard	df54decc99	Mirror dotfiles repo	2020-06-24 16:47:31 +01:00
Jake Howard	82a3c85263	Install git-mirror container ... This also moves the canonical home of this repo to my gitea instance!	2020-06-24 16:27:13 +01:00
Jake Howard	5f9b337c7a	Update gitea	2020-06-24 14:26:12 +01:00
Jake Howard	2ab8928985	Update nextcloud base	2020-06-24 14:26:05 +01:00
Jake Howard	319c96512e	Change default theme to original ... Black and green looks odd	2020-06-22 21:03:08 +01:00
Jake Howard	913ee4759f	Quote value to silence errors	2020-06-18 21:18:47 +01:00
Jake Howard	9ba9593127	Remove debug log level for deluge	2020-06-18 20:50:04 +01:00
Jake Howard	f878866f10	Update yamllint	2020-06-18 20:49:12 +01:00
Jake Howard	9f59b30f1e	Update synapse	2020-06-18 20:34:23 +01:00
Jake Howard	7f62ed43d4	Update gitea to 1.12	2020-06-18 20:33:09 +01:00
Jake Howard	c09b46aac0	Stop moving into ansible/ before running things ... Makes life easier	2020-06-15 13:21:52 +01:00
Jake Howard	4d13e3c78f	Move requirements files into ansible dir	2020-06-15 13:11:44 +01:00
Jake Howard	624d1b5425	Set HSTS header for nextcloud	2020-06-13 21:14:23 +01:00
Jake Howard	ca188ab1b4	Rename middleware ... It's not actually applying a HSTS header	2020-06-13 21:09:48 +01:00
Jake Howard	d7b6abaf58	Update to nextcloud 19	2020-06-13 21:06:33 +01:00
Jake Howard	a22f555878	Unpin the versions of things I don't care about too much ... If they update and break, it's not the end of the world, however unlikely it may be	2020-06-13 19:38:42 +01:00
Jake Howard	a3d19eba94	Update synapse	2020-06-13 19:27:53 +01:00
Jake Howard	cfee50159a	Remove netdata from grimes ... `htop` works just fine for that machine	2020-06-11 19:30:48 +01:00
Jake Howard	3969b23cd0	Keep using fancy index ... Repairs breaking change from 0f036dd6d7	2020-06-11 19:24:53 +01:00
Jake Howard	e1ae11e388	Update quassel base	2020-06-10 13:54:18 +01:00
Jake Howard	26aba92483	DIal back emby update ... Apparently that was a pre-release	2020-06-10 13:53:47 +01:00
Jake Howard	e54ec1312c	Replace onlyoffice with collabora	2020-06-07 21:09:02 +01:00
Jake Howard	0724ae9238	Update redis	2020-06-07 15:09:20 +01:00
Jake Howard	61a50435c9	Update emby	2020-06-05 19:11:49 +01:00
Jake Howard	fa41b09d83	Update deluge base	2020-06-05 17:36:09 +01:00
Jake Howard	15720fded8	Update quassel base	2020-06-05 17:35:56 +01:00
Jake Howard	1f9ea561df	Update calibre	2020-06-05 17:35:37 +01:00
Jake Howard	0a13b8e34d	Update nextcloud base	2020-05-31 13:30:37 +01:00
Jake Howard	d41d1b0d6c	Update gitea	2020-05-31 13:26:47 +01:00
Jake Howard	605ae4f8b8	Make sure media is owned correctly	2020-05-30 15:35:55 +01:00
Jake Howard	e5d77f23fd	Update deluge base	2020-05-29 15:37:49 +01:00
Jake Howard	249045e4cd	Update synapse	2020-05-29 15:37:39 +01:00
Jake Howard	cd076b871c	Update duplicati base	2020-05-29 15:36:40 +01:00
Jake Howard	f59c625058	Move nextcloud DB to SSD ... Speeeeeeeeed	2020-05-28 20:20:33 +01:00
Jake Howard	28cdaefb05	Update nextcloud base	2020-05-27 16:17:32 +01:00
Jake Howard	adc7611242	Only bind duplicati to wireguard interface	2020-05-25 17:38:26 +01:00
Jake Howard	986fc50fde	Set hostname for duplicati so it's picked up correctly in the UI ... This shouldn't have any negative impact. Hopefully...	2020-05-25 17:32:44 +01:00
Jake Howard	851f750948	Move duplicati to its own role so it can be installed on grimes	2020-05-25 17:25:58 +01:00
Jake Howard	b45d399734	Mount entire host inside duplicati	2020-05-25 17:01:29 +01:00
Jake Howard	7dd31c0556	Allow nextcloud to be reached over internal SSL ... This removes the need for a custom config, and means traefik is proxying HTTP2, which is nice	2020-05-24 19:21:17 +01:00
Jake Howard	eac381a90a	Decrease resource limit on FaH ... It's getting hot	2020-05-24 18:37:57 +01:00
Jake Howard	d2269de4ad	Claenup docker util scripts	2020-05-23 18:25:00 +01:00
Jake Howard	ceca641e2f	Remove deprecated options	2020-05-23 11:47:31 +01:00
Jake Howard	c92f924faa	Harden host key	2020-05-23 11:45:53 +01:00
Jake Howard	2fe6cf7c93	Install mobile key	2020-05-23 11:23:45 +01:00
Jake Howard	20d5020f6b	Manually use file lookup so the terminal output looks nicer	2020-05-23 11:18:48 +01:00
Jake Howard	09418cffb0	Provision SSH keys with ansible now	2020-05-23 11:04:50 +01:00
Jake Howard	7e534e52e1	Merge SSH into base role	2020-05-23 10:58:09 +01:00
Jake Howard	991535ca85	Add phone to VPN network	2020-05-23 10:49:18 +01:00
Jake Howard	16881048e2	Update duplicati	2020-05-23 10:35:59 +01:00
Jake Howard	892ac4e950	Update synapse	2020-05-22 22:34:37 +01:00
Jake Howard	cd255f7ca2	Remove docker-rclone-mount ... Seems there's some issues where having this attached which makes the duplicati container delete all its RO mounts.	2020-05-22 21:09:40 +01:00
Jake Howard	7fbfbbb699	Ansiblize rclone mounts configs	2020-05-22 12:04:43 +01:00
Jake Howard	251d52f1de	Add rclone mounts	2020-05-22 11:47:45 +01:00
Jake Howard	9b9af7e90d	Set nextcloud trusted proxy to docker host IP	2020-05-21 18:11:51 +01:00
Jake Howard	fc7b57eab9	Modify some things and cleanup gitea config	2020-05-21 17:58:38 +01:00
Jake Howard	1c8d80e12d	Revert "Add a redis cache to gitea" ... This reverts commit c0c396f008. Causes weird stability issues as the process received sig 15 and restarts, which is strange!	2020-05-21 12:03:45 +01:00
Jake Howard	6d51b570a1	Revert "Revert "Remove ansible_host definition"" ... This reverts commit 2a39292b85. Reverted the wrong commit. Derp!	2020-05-21 12:03:22 +01:00
Jake Howard	2a39292b85	Revert "Remove ansible_host definition" ... This reverts commit e93dbf2ecf. Causes weird stability issues as the process received sig 15 and restarts, which is strange!	2020-05-19 22:06:04 +01:00
Jake Howard	c0c396f008	Add a redis cache to gitea	2020-05-19 21:49:09 +01:00
Jake Howard	e93dbf2ecf	Remove ansible_host definition ... No idea why it was there, too much noise!	2020-05-18 17:12:21 +01:00
Jake Howard	85e7714f2e	Rename galaxy requirements	2020-05-18 16:46:18 +01:00
Jake Howard	b9e6e8801e	Mount a directory for restore testing ... And for actual restores, should the time come...	2020-05-18 12:08:10 +01:00
Jake Howard	9850f73a17	Deploy web-rng ... https://github.com/RealOrangeOne/web-rng	2020-05-17 18:04:44 +01:00
Jake Howard	323a3db478	Auto detect python executable ... Causes weird issues with the compose integration	2020-05-17 18:03:57 +01:00
Jake Howard	1d56db2109	Ensure python3 is always used	2020-05-16 16:16:23 +01:00
Jake Howard	600bc4bb58	Ensure sysctl change is persisted ... See note in https://wiki.archlinux.org/index.php/Sysctl#Configuration	2020-05-16 16:15:58 +01:00
Jake Howard	f207b2eedd	Update quassel base	2020-05-14 14:16:19 +01:00
Jake Howard	1a51624f5f	Update nextcloud base	2020-05-14 14:16:11 +01:00
Jake Howard	98f478a1ca	Update pihole to v5	2020-05-14 14:15:36 +01:00
Jake Howard	825b7926af	Update duplicati base	2020-05-14 14:15:28 +01:00
Jake Howard	851c6b167c	Remove yourls ... Mariadb update broke it, but I never use it anyway.	2020-05-14 13:54:59 +01:00
Jake Howard	6f7f7aae94	Remove TOR proxy ... Wasn't actually using it, proxying through `grimes`	2020-05-12 20:43:19 +01:00
Jake Howard	112e8ce985	Install some wireguard tools	2020-05-11 11:59:46 +01:00
Jake Howard	93e5ce5bac	Reduce polling interval slightly so things update quicker	2020-05-10 22:20:03 +01:00
Jake Howard	eb65e8808d	Update gitea	2020-05-10 19:38:00 +01:00
Jake Howard	40cf931f14	Update deluge base	2020-05-10 19:37:48 +01:00
Jake Howard	8f32d74095	Update gotify	2020-05-10 19:29:36 +01:00
Jake Howard	2d655a3da0	Remove unnecessary strings	2020-05-10 19:23:41 +01:00
Jake Howard	d693240eb4	Just hardcode to bash ... I'm not resetting my login shell again!	2020-05-10 19:19:42 +01:00
Jake Howard	f156bd6860	Use which to get path to bash	2020-05-09 21:06:03 +01:00
Jake Howard	59868fc331	Install git on all hosts	2020-05-09 21:03:43 +01:00
Jake Howard	52ae01d29f	Add user to docker group	2020-05-09 20:48:46 +01:00
Jake Howard	59a721b243	Create user	2020-05-09 20:47:41 +01:00
Jake Howard	5289206f14	Remove unnecessary quotes	2020-05-09 20:11:08 +01:00
Jake Howard	1f0e33acc8	Remove fail2ban ... Keeps getting hit by stats. I should fix that at some point	2020-05-09 20:09:36 +01:00
Jake Howard	f3126e34b9	Update haproxy config for use on arch	2020-05-09 20:08:27 +01:00
Jake Howard	059cb585db	Use OS-agnostic package install for haproxy	2020-05-09 20:08:14 +01:00
Jake Howard	095c8c4562	Use sysctl to enable p2p comms	2020-05-09 20:07:19 +01:00
Jake Howard	f6214f1495	Replace nginx with static server	2020-05-09 17:14:16 +01:00
Jake Howard	bb5e489f8c	Remove the explicit enable of TLS in Traefik ... Much cleaner config!	2020-05-08 22:16:24 +01:00
Jake Howard	19fc0c0957	Add shorter URLs for upload	2020-05-08 21:45:27 +01:00
Jake Howard	2f523075ae	Add upload server	2020-05-08 21:27:32 +01:00
Jake Howard	2618f38c52	Update nextcloud base	2020-05-06 16:28:19 +01:00
Jake Howard	f511f0d604	Alllow librespeed to be accessed over home network	2020-05-06 16:18:47 +01:00
Jake Howard	56ebe2ad01	Use basic-auth to protect librespeed rather than whitelist	2020-05-06 16:11:29 +01:00
Jake Howard	aad14a4ceb	Update calibre	2020-05-05 22:30:03 +01:00
Jake Howard	5db68b7658	Update quassel base	2020-05-05 22:29:57 +01:00
Jake Howard	54ec7f2332	Add a basic SOCKS proxy	2020-05-05 21:55:14 +01:00
Jake Howard	bc545b742a	Redirect 0rng.one to website	2020-05-01 21:26:48 +01:00
Jake Howard	ae7ee2dd81	Update deluge base	2020-04-30 21:57:10 +01:00
Jake Howard	59e5a13cd0	Update nextcloud base	2020-04-30 21:53:34 +01:00
Jake Howard	0256570f1c	Update traefik	2020-04-30 21:50:18 +01:00
Jake Howard	ceeba55a83	Migrate from emby to jellyfin	2020-04-30 21:45:03 +01:00
Jake Howard	974e0e8467	Enable services ... Not just during reload	2020-04-28 20:48:15 +01:00
Jake Howard	61136f69af	Update quassel base	2020-04-28 20:45:10 +01:00
Jake Howard	bd8e41a1aa	Update gotify	2020-04-28 20:45:02 +01:00
Jake Howard	68a684c7f6	Set gitea SSH domain to alias	2020-04-28 20:31:29 +01:00
Jake Howard	957d4d7b69	Only use a single domain for YOURLS	2020-04-26 16:33:05 +01:00
Jake Howard	bfce9e1cbf	Host statping outside home	2020-04-26 15:37:28 +01:00
Jake Howard	7c6abc33fe	Host website outside home	2020-04-26 14:26:48 +01:00
Jake Howard	36ed622a26	Make the docker host role block more exhaustive	2020-04-26 14:00:17 +01:00
Jake Howard	92c85904bd	Rename role for intersect docker applications	2020-04-26 13:56:26 +01:00
Jake Howard	05c7690b83	Make grimes a docker host	2020-04-26 13:44:06 +01:00
Jake Howard	50cb5a56fc	OpenSSH is called something different on Arch	2020-04-26 12:16:18 +01:00
Jake Howard	0bd4b5f5fd	Provision a new VPS	2020-04-26 12:15:52 +01:00
Jake Howard	ea45f6833c	Always provision SSH	2020-04-26 12:06:11 +01:00
Jake Howard	051ec43769	wg-quick can't be reloaed ... This might break things!	2020-04-26 12:05:45 +01:00
Jake Howard	4aa5a7d5a8	Use package so it's OS agnostic	2020-04-26 11:25:01 +01:00
Jake Howard	3e523bd04b	Remove traefik subdomain	2020-04-25 12:15:28 +01:00
Jake Howard	6695e60f8e	Update nextcloud	2020-04-24 22:12:49 +01:00
Jake Howard	6a862f9fb3	Always restart watchtower	2020-04-24 21:38:00 +01:00
Jake Howard	2ddde6c129	Fix task names of new roles	2020-04-23 21:54:04 +01:00
Jake Howard	5585fb0b12	Convert watchtower into its own role	2020-04-23 21:51:01 +01:00
Jake Howard	81ef4ad67a	Rename base role to common	2020-04-23 21:38:16 +01:00
Jake Howard	b11ca7fe21	Convert netdata into its own role	2020-04-23 21:32:18 +01:00
Jake Howard	975ba9a2ed	Remove netdata domain	2020-04-23 21:16:48 +01:00
Jake Howard	89ba23719c	Move traefik into its own role	2020-04-23 20:49:43 +01:00
Jake Howard	9962d9103f	Extract docker cleanup stuff into its own role	2020-04-23 20:17:54 +01:00
Jake Howard	7a296c63a2	Update YOURLS	2020-04-23 17:31:43 +01:00
Jake Howard	eba4b8226f	Update synapse	2020-04-23 17:31:21 +01:00
Jake Howard	221bdf62ef	update quassel base	2020-04-23 17:31:11 +01:00
Jake Howard	7113802df7	Update nextcloud base	2020-04-23 17:31:03 +01:00
Jake Howard	303283f73e	Remove portainer	2020-04-19 21:42:57 +01:00
Jake Howard	d87b91d5aa	Update some LSIO container bases	2020-04-18 22:53:15 +01:00
Jake Howard	ff8beea3c4	Massively increase timeouts to prevent websocket issues	2020-04-17 23:04:20 +01:00
Jake Howard	d2ca5a51be	Revert "Update statping and move to new container" ... This reverts commit 880054eb2d. Statping 0.90 is buggy AF, see https://github.com/statping/statping/issues/456	2020-04-17 22:10:40 +01:00
Jake Howard	1da3ca95e7	Stop using unstable repos to install wireguard ... It's in backports now, which is much easier to install from!	2020-04-17 09:08:10 +01:00
Jake Howard	880054eb2d	Update statping and move to new container	2020-04-15 21:17:01 +01:00
Jake Howard	853dfbf9a1	Update nextcloud base	2020-04-15 18:26:06 +01:00
Jake Howard	be15714cca	Update quassel base	2020-04-13 19:37:16 +01:00
Jake Howard	4f5a99263f	Remove cgit landing pages ... I can use an org to make the URLs in gitea slightly nicer, which will do for now	2020-04-11 17:37:05 +01:00
Jake Howard	17f5aa921b	Sort items in main.yml	2020-04-11 17:23:28 +01:00
Jake Howard	df017b3ee6	Add a server-side analytics page	2020-04-10 12:33:51 +01:00
Jake Howard	8185ad979d	Update deluge base	2020-04-10 11:35:54 +01:00
Jake Howard	d0c36adba8	Self host my website 🎉	2020-04-10 11:31:01 +01:00
Jake Howard	92d33a0fa7	Update emby	2020-04-09 08:45:09 +01:00
Jake Howard	30e47836fa	Update nextcloud	2020-04-09 08:43:42 +01:00
Jake Howard	c634b87991	Expose MC server ... It's just a local temp config for now, i'll do something proper later	2020-04-07 18:43:40 +01:00
Jake Howard	9de6c4a515	Update quassel base	2020-04-06 19:44:39 +01:00
Jake Howard	091fd9045b	Update emby base	2020-04-04 22:35:39 +01:00
Jake Howard	0e79f4a7ba	Fuck isolation!	2020-04-04 11:41:41 +01:00
Jake Howard	0ef3901ee6	Update emby	2020-04-04 11:16:57 +01:00
Jake Howard	7b0cc0893d	Add shorter domain for whoami container	2020-04-03 23:59:07 +01:00
Jake Howard	7322adc52a	Remove py3 suffix ... It's all python3	2020-04-03 11:29:42 +01:00
Jake Howard	94a62ba724	Update synapse	2020-04-03 11:26:56 +01:00
Jake Howard	be068a774a	Add my user to dockeruser group ... Makes debugging things so much easier!	2020-04-02 09:05:32 +01:00
Jake Howard	f7f417b780	Update gitea	2020-04-01 19:54:25 +01:00
Jake Howard	d91746ebeb	Update nextcloud base	2020-04-01 19:46:00 +01:00
Jake Howard	f32e0bfe59	Only add timeout for core HTTP ports	2020-03-31 19:27:47 +01:00
Jake Howard	335992c9e9	Restore custom middleware implementation. ... This redirect doesn't work correctly, let's revert to our custom one for now. It does exactly the same thing, anyway	2020-03-31 14:53:00 +01:00
Jake Howard	079e58e67b	Add some automated postgres backups	2020-03-30 21:40:04 +01:00
Jake Howard	10991def1e	Run the prune without prompt, and hard remove images	2020-03-30 18:23:11 +01:00
Jake Howard	d1e814f097	Prune the system daily rather than weekly	2020-03-30 18:19:24 +01:00
Jake Howard	2f17d2a9ff	Update quassel base	2020-03-30 18:07:22 +01:00
Jake Howard	0e330066ba	Update emby base	2020-03-30 18:07:13 +01:00
Jake Howard	8fe288549f	Update traefik to 2.2.0 ... This removes my custom hack for redirecting users to HTTPS	2020-03-30 17:59:02 +01:00
Jake Howard	7c5968c39a	Update emby	2020-03-28 15:39:42 +00:00
Jake Howard	4199423815	Update deluge base	2020-03-28 11:31:14 +00:00
Jake Howard	ca3ed14973	Add automated DB backups for nextcloud ... Will roll this out to everything else someday too!	2020-03-27 17:50:47 +00:00
Jake Howard	55eca663a9	Replace f@h container with lsio one ... Also move configuration into web UI, just because it's easier	2020-03-27 17:23:07 +00:00
Jake Howard	1afc28ec17	Standardize string quotes in yaml	2020-03-25 21:27:15 +00:00
Jake Howard	35bd63d12b	Add pv to handy tools	2020-03-25 20:52:41 +00:00
Jake Howard	65e15c9f6c	Run watchtower more frequently ... This makes autodeployment like tasks much easier	2020-03-25 20:41:15 +00:00
Jake Howard	fdaf037b96	Update nextcloud base	2020-03-25 16:27:20 +00:00
Jake Howard	5eb7e2feb8	Update nextcloud to 18.0.3	2020-03-25 08:50:03 +00:00
Jake Howard	d15c27d109	Bump quassel base	2020-03-23 20:19:10 +00:00
Jake Howard	3cb2542982	Update synapse	2020-03-23 18:29:24 +00:00
Jake Howard	95c3e46783	Setup shorter yourls domain	2020-03-20 22:29:43 +00:00
Jake Howard	ef083badc1	Use shiney new domain for git hosting	2020-03-20 22:21:02 +00:00
Jake Howard	5938f7fca6	Remove statping from internal DNS ... This *hammers* pihole and massively inflates the metrics. Remove for now until there's a sane way to fix it	2020-03-19 19:16:04 +00:00