systems/infrastructure

Author	SHA1	Message	Date
Jake Howard	6c2b96e151	Update nextcloud version in config.php All checks were successful / terraform (push) Successful in 2m16s Details / ansible (push) Successful in 3m52s Details	2024-06-17 09:35:51 +01:00
Renovate	f8e6ed0fa9	Update lscr.io/linuxserver/nextcloud Docker tag to v29.0.2 All checks were successful / terraform (push) Successful in 2m20s Details / ansible (push) Successful in 3m1s Details	2024-06-06 20:00:24 +01:00
Renovate	e0fb972946	Update dependency ansible-lint to v24.5.0 All checks were successful / terraform (push) Successful in 39s Details / ansible (push) Successful in 1m48s Details	2024-06-02 22:40:38 +01:00
Renovate	986fe1097d	Update lscr.io/linuxserver/mastodon Docker tag to v4.2.9 All checks were successful / terraform (push) Successful in 1m44s Details / ansible (push) Successful in 2m51s Details	2024-05-30 18:00:19 +01:00
Jake Howard	c1b8c5fcc7	Change default gitea theme All checks were successful / terraform (push) Successful in 41s Details / ansible (push) Successful in 1m55s Details	2024-05-28 12:14:50 +01:00
Renovate	15561a9741	Update gitea/gitea Docker tag to v1.22 All checks were successful / terraform (push) Successful in 1m15s Details / ansible (push) Successful in 2m46s Details	2024-05-27 10:00:20 +01:00
Jake Howard	253f2678fa	Update nextcloud to v29 All checks were successful / terraform (push) Successful in 42s Details / ansible (push) Successful in 2m3s Details	2024-05-09 18:08:04 +01:00
Jake Howard	23aa6dcfcb	Pin synapse to latest YOLO!	2024-05-09 17:46:18 +01:00
Renovate	04bc698b44	Update ghcr.io/goauthentik/server Docker tag to v2024.4 All checks were successful / terraform (push) Successful in 1m37s Details / ansible (push) Successful in 3m10s Details	2024-05-09 14:05:12 +01:00
Renovate	ccc24c74e4	Update dependency geerlingguy.ntp to v2.5.0 All checks were successful / terraform (push) Successful in 1m31s Details / ansible (push) Successful in 3m1s Details	2024-05-07 13:45:06 +01:00
Renovate	ccf2089312	Update dependency artis3n.tailscale to v4.5.0 Some checks failed / ansible (push) Has been cancelled Details / terraform (push) Has been cancelled Details	2024-05-07 13:44:56 +01:00
Jake Howard	e50a8b032b	Increase website workers All checks were successful / terraform (push) Successful in 1m28s Details / ansible (push) Successful in 2m51s Details	2024-05-05 21:13:00 +01:00
Jake Howard	9fee5c01ef	Create new `walker` on Hetzner All checks were successful / terraform (push) Successful in 1m30s Details / ansible (push) Successful in 2m48s Details	2024-05-04 13:20:15 +01:00
Jake Howard	ac36a6b323	Ensure nginx is in place before certbot tries to issue certs	2024-05-04 12:52:33 +01:00
Jake Howard	f90ae0b1b4	Use port 53053 for coredns docker proxy Otherwise it causes annoying issues with systemd-resolved and mdns	2024-05-04 12:19:00 +01:00
Jake Howard	c93c7b5c16	Use external DNS for uptime-kuma Some checks failed / terraform (push) Failing after 38s Details / ansible (push) Successful in 2m17s Details Keep the AGH logs cleaner	2024-04-29 18:42:17 +01:00
Jake Howard	2a799d6b03	Scrape Uptime Kuma with prometheus Some checks failed / terraform (push) Failing after 1m43s Details / ansible (push) Successful in 2m29s Details	2024-04-29 14:28:58 +01:00
Jake Howard	afa926c767	Remove blackbox monitoring Uptime-Kuma is great	2024-04-29 14:12:21 +01:00
Jake Howard	5481554e15	Only install compose on debian Some checks failed / ansible (push) Successful in 2m11s Details / terraform (push) Failing after 11m55s Details The rest will get it through the system package manager	2024-04-27 17:42:24 +01:00
Renovate	6c8cab3ce7	Update louislam/uptime-kuma Docker tag to v1.23.13 All checks were successful / terraform (push) Successful in 36s Details / ansible (push) Successful in 2m21s Details	2024-04-25 10:00:20 +01:00
Renovate	b0d950584d	Update lscr.io/linuxserver/nextcloud Docker tag to v29 All checks were successful / terraform (push) Successful in 40s Details / ansible (push) Successful in 2m6s Details	2024-04-24 16:00:25 +01:00
Jake Howard	670ad78d44	Add wireguard config for glinet router All checks were successful / terraform (push) Successful in 44s Details / ansible (push) Successful in 1m34s Details	2024-04-23 22:19:57 +01:00
Jake Howard	8929a22ce5	Use LSIO docker socket proxy All checks were successful / terraform (push) Successful in 53s Details / ansible (push) Successful in 1m31s Details	2024-04-23 19:52:48 +01:00
Jake Howard	ee96e6ab08	Rename forrest role to prometheus Some checks failed / ansible (push) Failing after 1m35s Details / terraform (push) Failing after 12m54s Details Makes organising much simpler	2024-04-21 19:47:02 +01:00
Jake Howard	ffbba254fb	Remove redundant quotes	2024-04-21 18:11:57 +01:00
Jake Howard	c472411801	Deploy uptime-kuma	2024-04-21 18:11:39 +01:00
Jake Howard	7564911da3	Add IPv6 to blackbox Some checks failed / terraform (push) Failing after 3s Details / ansible (push) Failing after 2s Details This is needed to monitor private services	2024-04-20 18:12:38 +01:00
Jake Howard	7ff44ee238	Add IPv6 to proxmox internal network	2024-04-20 18:00:08 +01:00
Jake Howard	7c8d224c4a	Add headscale ACLs Some checks failed / ansible (push) Failing after 39s Details / terraform (push) Failing after 46s Details Tags are managed entirely server side, so there's no priv esc issues. This lets my devices do what they want, and server style devices can't do anything.	2024-04-20 15:46:21 +01:00
Renovate	7bc0ebeb26	Update traefik Docker tag to v2.11 Some checks failed / terraform (push) Failing after 2s Details / ansible (push) Failing after 2s Details	2024-04-15 17:43:05 +01:00
Jake Howard	33f9c544fd	Remove /tt-rss/ path from URL Some checks failed / terraform (push) Failing after 3s Details / ansible (push) Failing after 2s Details	2024-04-15 17:33:36 +01:00
Jake Howard	b6583cc823	Update Nextcloud version in config Some checks failed / terraform (push) Failing after 2s Details / ansible (push) Failing after 2s Details	2024-04-15 15:28:16 +01:00
Jake Howard	9c02017fed	Unpin tandoor	2024-04-15 15:28:16 +01:00
Renovate	91ec56717f	Update dependency artis3n.tailscale to v4.4.4 Some checks failed / terraform (push) Failing after 16s Details / ansible (push) Failing after 13s Details	2024-04-15 15:07:14 +01:00
Renovate	3318656730	Update dependency geerlingguy.ntp to v2.4.0 Some checks failed / ansible (push) Failing after 24s Details / terraform (push) Failing after 31s Details	2024-04-15 15:06:23 +01:00
Renovate	9d98d88089	Update lscr.io/linuxserver/nextcloud Docker tag to v28.0.4 Some checks failed / terraform (push) Failing after 2s Details / ansible (push) Failing after 2s Details	2024-04-15 15:02:53 +01:00
Renovate	67af033fcd	Update dependency dokku_bot.ansible_dokku to v2024 Some checks failed / terraform (push) Failing after 2s Details / ansible (push) Failing after 2s Details	2024-04-15 14:36:50 +01:00
Renovate	5330fdc56f	Update ghcr.io/goauthentik/server Docker tag to v2024 Some checks failed / terraform (push) Failing after 2s Details / ansible (push) Failing after 2s Details	2024-04-15 14:11:11 +01:00
Renovate	2e0b562f5d	Update matrixdotorg/synapse Docker tag to v1.104.0 Some checks failed / terraform (push) Failing after 2s Details / ansible (push) Failing after 2s Details	2024-04-15 13:58:20 +01:00
Renovate	989a804bad	Update wallabag/wallabag Docker tag to v2.6.9 Some checks failed / terraform (push) Failing after 51s Details / ansible (push) Failing after 46s Details	2024-04-03 12:00:18 +01:00
Jake Howard	8424b3211b	Allow `ingress` to serve as tailscale exit node All checks were successful / terraform (push) Successful in 38s Details / ansible (push) Successful in 1m46s Details	2024-03-28 23:30:24 +00:00
Jake Howard	5157940f20	Stop exposing homeassistant All checks were successful / terraform (push) Successful in 58s Details / ansible (push) Successful in 1m52s Details	2024-03-23 11:54:26 +00:00
Jake Howard	eb6fe3a23b	Allow forrest to access internal services All checks were successful / terraform (push) Successful in 36s Details / ansible (push) Successful in 1m36s Details This is mostly for monitoring	2024-03-22 18:13:25 +00:00
Jake Howard	b2656bdf43	Make vaultwarden VPN only All checks were successful / terraform (push) Successful in 33s Details / ansible (push) Successful in 1m36s Details The first service to go dark...	2024-03-21 23:20:27 +00:00
Jake Howard	0295507d0b	Increase frequency of snapshots Some checks failed / terraform (push) Failing after 34s Details / ansible (push) Successful in 1m34s Details	2024-03-19 21:31:27 +00:00
Jake Howard	f88d224168	Allow only exposing services over Tailscale Some checks failed / terraform (push) Failing after 41s Details / ansible (push) Successful in 1m41s Details This works using public DNS, so doesn't need Tailscale's magic DNS to override my local.	2024-03-07 22:30:10 +00:00
Jake Howard	451a114262	Add IPv6 support for internal DNS overrides CoreDNS 1.11.2 finally shipped!	2024-03-07 20:02:39 +00:00
Jake Howard	119b3212a9	Remove robots.txt for gitea All checks were successful / terraform (push) Successful in 27s Details / ansible (push) Successful in 1m30s Details	2024-03-04 08:38:16 +00:00
Renovate	5aae711cb8	Update vaultwarden/server Docker tag to v1.30.5 All checks were successful / terraform (push) Successful in 46s Details / ansible (push) Successful in 1m45s Details	2024-03-04 08:33:59 +00:00
Renovate	f552332598	Update lscr.io/linuxserver/mastodon Docker tag to v4.2.8 Some checks failed / ansible (push) Has been cancelled Details / terraform (push) Has been cancelled Details	2024-03-04 08:33:51 +00:00
Jake Howard	82451784a8	Deploy slides hosting All checks were successful / terraform (push) Successful in 50s Details / ansible (push) Successful in 1m49s Details	2024-03-03 21:39:22 +00:00
Jake Howard	000f3d3348	Add HSTS to all nginx requests	2024-03-03 21:37:07 +00:00
Jake Howard	0dcc3f7c30	Use regular version of nginx on Arch All checks were successful / terraform (push) Successful in 30s Details / ansible (push) Successful in 1m30s Details `nginx-mainline` requires modules be recompiled each time, and isn't handled automatically. It's still a very new and maintained release.	2024-02-29 19:46:32 +00:00
Jake Howard	8a1e21c79d	Ensure headscale sees the correct IP All checks were successful / terraform (push) Successful in 49s Details / ansible (push) Successful in 1m48s Details	2024-02-29 17:41:29 +00:00
Jake Howard	998d798797	Set maintenance window for nextcloud All checks were successful / terraform (push) Successful in 26s Details / ansible (push) Successful in 1m37s Details	2024-02-21 21:57:03 +00:00
Jake Howard	11a93dac55	Update nextcloud version in config	2024-02-21 21:52:58 +00:00
Renovate	97da6edc13	Update dependency ansible-lint to v24 All checks were successful / terraform (push) Successful in 27s Details / ansible (push) Successful in 1m36s Details	2024-02-21 21:47:29 +00:00
Renovate	d66708b10b	Update dependency artis3n.tailscale to v4.4.2 All checks were successful / terraform (push) Successful in 24s Details / ansible (push) Successful in 1m34s Details	2024-02-21 21:43:33 +00:00
Renovate	7d64518840	Update matrixdotorg/synapse Docker tag to v1.101.0 Some checks failed / ansible (push) Has been cancelled Details / terraform (push) Has been cancelled Details	2024-02-21 21:43:15 +00:00
Renovate	26bcf09fea	Update lscr.io/linuxserver/nextcloud Docker tag to v28.0.2 Some checks failed / terraform (push) Has been cancelled Details / ansible (push) Has been cancelled Details	2024-02-21 21:42:50 +00:00
Jake Howard	808e72553b	Add the basics of some edge caching Some checks failed / ansible (push) Has been cancelled Details / terraform (push) Has been cancelled Details	2024-02-21 21:42:16 +00:00
Renovate	b513c88774	Update vaultwarden/server Docker tag to v1.30.3 All checks were successful / ansible (push) Successful in 1m33s Details / terraform (push) Successful in 27s Details	2024-02-19 14:13:02 +00:00
Renovate	7741fbc163	Update vabene1111/recipes Docker tag to v1.5.13 All checks were successful / terraform (push) Successful in 25s Details / ansible (push) Successful in 1m34s Details	2024-02-19 14:07:32 +00:00
Renovate	45cf930d14	Update lscr.io/linuxserver/mastodon Docker tag to v4.2.7 All checks were successful / terraform (push) Successful in 49s Details / ansible (push) Successful in 1m54s Details	2024-02-17 08:00:21 +00:00
Jake Howard	58c48261e7	Consolidate vikunja container All checks were successful / terraform (push) Successful in 53s Details / ansible (push) Successful in 1m51s Details	2024-02-12 14:12:17 +00:00
Jake Howard	91a247868b	Add routes from forrest to tailscale network All checks were successful / terraform (push) Successful in 27s Details / ansible (push) Successful in 1m35s Details	2024-02-07 22:12:08 +00:00
Jake Howard	df43be6f9b	Set `private_ip` for some other machines All checks were successful / terraform (push) Successful in 36s Details / ansible (push) Successful in 1m39s Details	2024-02-07 19:27:48 +00:00
Jake Howard	b6eca40ae0	Allow tailscale IP in more places	2024-02-07 18:21:16 +00:00
Renovate	6c1c245c23	Update matrixdotorg/synapse Docker tag to v1.100.0 All checks were successful / terraform (push) Successful in 25s Details / ansible (push) Successful in 1m38s Details	2024-02-02 13:38:12 +00:00
Renovate	379d4a26fa	Update vabene1111/recipes Docker tag to v1.5.12 Some checks failed / ansible (push) Has been cancelled Details / terraform (push) Has been cancelled Details	2024-02-02 13:38:00 +00:00
Renovate	f1a2694f1a	Update lscr.io/linuxserver/mastodon Docker tag to v4.2.5 Some checks failed / terraform (push) Successful in 29s Details / ansible (push) Has been cancelled Details	2024-02-02 13:37:05 +00:00
Jake Howard	02847355a7	Install tailscale All checks were successful / terraform (push) Successful in 29s Details / ansible (push) Successful in 1m34s Details Install, not configure	2024-02-01 19:41:47 +00:00
Jake Howard	29cac09b48	Remove explicit port for headscale	2024-02-01 18:32:53 +00:00
Jake Howard	dba0262801	Remove website tmpfs All checks were successful / terraform (push) Successful in 29s Details / ansible (push) Successful in 1m36s Details The server's disk is probably fast enough, and container restarts will nuke that storage anyway	2024-02-01 18:15:51 +00:00
Jake Howard	0c6528f9ca	Restrict access to headscale OIDC and API All checks were successful / terraform (push) Successful in 29s Details / ansible (push) Successful in 1m33s Details	2024-01-31 21:40:43 +00:00
Jake Howard	dfa8328e7b	Move gateway logs to separate file	2024-01-31 21:06:19 +00:00
Jake Howard	53c758a781	Monitor headscale with prometheus All checks were successful / terraform (push) Successful in 29s Details / ansible (push) Successful in 1m38s Details	2024-01-27 17:40:02 +00:00
Jake Howard	b51677b795	Back up headscale config All checks were successful / terraform (push) Successful in 48s Details / ansible (push) Successful in 1m51s Details	2024-01-27 15:04:53 +00:00
Jake Howard	2ceeaf091d	Deploy headscale Some checks failed / terraform (push) Failing after 11m20s Details / ansible (push) Failing after 11m6s Details	2024-01-27 14:18:37 +00:00
Jake Howard	06784563a7	Don't resolve ipv6 All checks were successful / terraform (push) Successful in 30s Details / ansible (push) Successful in 1m36s Details Something about this setup doesn't like it, so I'll disable v6 for now	2024-01-26 21:43:04 +00:00
Renovate	4f6f4143ce	Update matrixdotorg/synapse Docker tag to v1.99.0 All checks were successful / terraform (push) Successful in 31s Details / ansible (push) Successful in 1m46s Details	2024-01-22 09:15:38 +00:00
Renovate	5292785cd9	Update wallabag/wallabag Docker tag to v2.6.8 Some checks are pending / terraform (push) Has started running Details / ansible (push) Successful in 1m38s Details	2024-01-22 09:11:27 +00:00
Renovate	d297674fb5	Update vabene1111/recipes Docker tag to v1.5.11 All checks were successful / terraform (push) Successful in 49s Details / ansible (push) Successful in 1m51s Details	2024-01-22 08:42:36 +00:00
Jake Howard	88f0828153	Use primary Quad9 servers All checks were successful / terraform (push) Successful in 47s Details / ansible (push) Successful in 1m39s Details DNSSEC and malware blocking is probably useful, just in case	2024-01-21 23:19:49 +00:00
Jake Howard	cfc3de61b4	Add fallback quad9 address This aids availability, along with a healthcheck	2024-01-21 23:05:25 +00:00
Jake Howard	c6bae0f797	Do simple `endsWith` matching for docker view All checks were successful / terraform (push) Successful in 33s Details / ansible (push) Successful in 1m42s Details This saves the need for a regex	2024-01-14 22:27:02 +00:00
Jake Howard	4c5936b2aa	Disable Grafana analytics All checks were successful / terraform (push) Successful in 32s Details / ansible (push) Successful in 1m41s Details	2024-01-14 15:30:12 +00:00
Jake Howard	9d685d85aa	Update website deployment to unify containers All checks were successful / terraform (push) Successful in 1m9s Details / ansible (push) Successful in 2m17s Details	2024-01-14 14:22:19 +00:00
Jake Howard	ac166c3874	Start resolved to support mDNS All checks were successful / terraform (push) Successful in 34s Details / ansible (push) Successful in 1m44s Details	2024-01-10 13:28:45 +00:00
Jake Howard	06b9197c5b	Sync terraform state to `restic` All checks were successful / terraform (push) Successful in 31s Details / ansible (push) Successful in 1m47s Details This allows it to be backed up easily	2024-01-09 19:56:06 +00:00
Jake Howard	4a69df1d6c	Ignore ansible-lint for nebula install block All checks were successful / terraform (push) Successful in 1m28s Details / ansible (push) Successful in 1m48s Details I'm smarter than it is	2024-01-08 21:49:38 +00:00
Jake Howard	f33d19e156	Move AdGuardHome configuration to Terraform https://git.theorangeone.net/systems/adguardhome	2024-01-08 21:45:28 +00:00
Jake Howard	ed59458f39	Add backups to tang Some checks failed / terraform (push) Successful in 1m21s Details / ansible (push) Failing after 1m37s Details	2024-01-08 19:20:55 +00:00
Jake Howard	616d20e23b	Tweak some AGH settings Some checks failed / terraform (push) Successful in 1m15s Details / ansible (push) Failing after 1m59s Details	2024-01-08 19:01:46 +00:00
Jake Howard	383a57d1f2	Use DoH endpoint fot quad9 Seems latency is much lower	2024-01-08 18:21:03 +00:00
Jake Howard	c8211d4756	Use Debian repo version of nginx Some checks failed / terraform (push) Successful in 1m3s Details / ansible (push) Failing after 1m53s Details It's older, and doesn't have `stream` compiled in, but the repo one can't link to any of the installed modules, which is a non-starter.	2024-01-04 14:17:36 +00:00
Jake Howard	57ad143268	Set password for homeassistant SMB mount Some checks failed / terraform (push) Successful in 38s Details / ansible (push) Failing after 1m40s Details It had an IP restriction, but still	2024-01-03 21:23:49 +00:00
Jake Howard	16e9952b2f	Replace custom restic logs with runitor	2024-01-03 21:09:07 +00:00
Jake Howard	f5154d1683	Use CoreDNS to do recursive CNAME aliasing for AGH Some checks failed / terraform (push) Successful in 47s Details / ansible (push) Failing after 1m38s Details	2024-01-02 17:48:47 +00:00
Jake Howard	3ed7074af6	Rename coredns role	2024-01-02 17:02:34 +00:00

1 2 3 4 5 ...

1473 commits