563 commits

Author	SHA1	Message	Date
Jake Howard	796c694170	Run duplicati as root ... This ensures it has all the right permissions to access all the right files. Host is mounted read-only, so there's no real security risk.	2020-08-30 11:15:08 +01:00
Jake Howard	5940b6970a	Move gitlab to ZFS pool	2020-08-30 10:19:57 +01:00
Jake Howard	0ce15cb4d8	Add gitlab	2020-08-29 23:56:14 +01:00
Jake Howard	da90b12643	Modify clickhouse settings so it's not a resource whore ... This means it can be moved back to ZFS!	2020-08-28 14:20:13 +01:00
Jake Howard	c6791e4098	Remove stray vault file from removing todoist-github	2020-08-28 14:17:45 +01:00
Jake Howard	8a7cc5e57e	Move clickhouse back to old disk ... It does a stupid number of writes, and the snapshots are massive! Until i've worked out why it writes so much, move it to a less critical disk	2020-08-27 14:16:12 +01:00
Jake Howard	9a8995f1f8	Use single cron job for pruning and taking snapshots ... Less to manage, and less lock contention	2020-08-26 13:02:50 +01:00
Jake Howard	77262cd206	Reduce number of sanoid snapshots ... It should be pretty quick for me to realise something went wrong. Can recycle through space much quicker this way!	2020-08-26 09:08:26 +01:00
Jake Howard	1f70a46c35	Add custom clickhouse config ... This changes the default log level to warning, to ensure the log file isn't being hammered	2020-08-26 08:54:37 +01:00
Jake Howard	3edc34759d	Mount clickhouse logs on tmpfs ... WHO LOGS TRACE BY DEFAULT?!	2020-08-25 22:05:10 +01:00
Jake Howard	742412259c	Mount transcodes on scratch disk ... Don't want them getting caught by sanoid!	2020-08-25 14:30:26 +01:00
Jake Howard	4feff3d247	Move jellyfin to ZFS	2020-08-25 14:17:57 +01:00
Jake Howard	6808e86a6d	Update nextcloud base	2020-08-24 14:30:11 +01:00
Jake Howard	922b688615	Bump ZFS usage to 50% RAM ... It's a lot, but should be dealable on most machines	2020-08-23 14:15:09 +01:00
Jake Howard	f531d4f915	Move plausible onto ZFS	2020-08-22 12:19:47 +01:00
Jake Howard	9ffdd4d711	Move grafana to ZFS ... Don't need to create the directory anymore really	2020-08-22 12:07:44 +01:00
Jake Howard	f517831435	Install synapse config to right place	2020-08-22 12:03:04 +01:00
Jake Howard	67dfe6a8a0	Remove todoist-github ... It's got some pretty big bugs, and isn't running anyway	2020-08-22 12:01:24 +01:00
Jake Howard	07d5c4fa72	Move quassel to ZFS	2020-08-22 11:59:10 +01:00
Jake Howard	3dc8ee16b5	Move wallabag to ZFS	2020-08-22 11:51:51 +01:00
Jake Howard	ff7ec46e77	Move synapse to ZFS	2020-08-22 11:42:03 +01:00
Jake Howard	037d719906	Migrate deluge data to ZFS pool	2020-08-22 11:20:38 +01:00
Jake Howard	8d2c6dfb68	Move gitea to ZFS	2020-08-21 16:02:56 +01:00
Jake Howard	bc5d6d512b	Move calibre to ZFS pool	2020-08-21 15:34:04 +01:00
Jake Howard	2866cd0602	Move TT-RSS into ZFS pool	2020-08-21 15:33:46 +01:00
Jake Howard	35266e975d	Drive sanoid changes from YAML	2020-08-20 21:47:12 +01:00
Jake Howard	1bcb8f22b1	Fully resolve path to sanoid ... Apparently cron didn't like just `sanoid`	2020-08-20 21:24:33 +01:00
Jake Howard	a2e021ac43	Install ZFS on home server 🎉	2020-08-19 21:34:23 +01:00
Jake Howard	a5aa21429c	Conditionally run reflector role rather than manually defining which machines run arch	2020-08-19 18:58:58 +01:00
Jake Howard	63ec7c671a	Manually install sanoid ... Makes the foundation for a future external role	2020-08-19 18:40:17 +01:00
Jake Howard	fcd4dbf657	Fix casing ... Turns out it's a lower case "l"	2020-08-19 17:59:56 +01:00
Jake Howard	2ef836b2e9	Remove synapse helper scripts ... They're not maintained, and actually highly advised against	2020-08-18 20:39:23 +01:00
Jake Howard	efc7a5d7fb	Allow arc to be 20% RAM usage	2020-08-18 13:47:48 +01:00
Jake Howard	cbbd7bf83d	Update synapse	2020-08-18 13:13:25 +01:00
Jake Howard	6716b418d7	Ensure cron tasks are run as the right user ... Looks like by default they're installed as the current user, not root. Bad ansible documentation!	2020-08-17 22:29:02 +01:00
Jake Howard	af22e89a73	Update nextcloud base	2020-08-17 13:57:53 +01:00
Jake Howard	bf4e90d053	Update synapse	2020-08-17 13:57:44 +01:00
Jake Howard	150a34be2f	Provide cron flag to sanoid	2020-08-17 13:49:07 +01:00
Jake Howard	0902dd001e	Expose grafana	2020-08-07 12:03:45 +01:00
Jake Howard	9d014cfa1c	Install grafana and link it to HA	2020-08-07 11:52:15 +01:00
Jake Howard	301ac37868	Remove legacy integrations	2020-08-06 17:05:19 +01:00
Jake Howard	55f79b4a51	Remove socks proxy	2020-08-05 20:56:12 +01:00
Jake Howard	c888fc5e72	Pull new images before taking application down	2020-08-05 17:43:04 +01:00
Jake Howard	1195a5001e	Add reflector to keep mirror lists updated	2020-08-05 12:15:28 +01:00
Jake Howard	384a07b513	Run plausible migrations on startup	2020-08-04 22:07:45 +01:00
Jake Howard	19c134564a	Add duplicati to walker ... Gotta backup them backups	2020-08-04 21:09:45 +01:00
Jake Howard	7d3f6a8121	Remove duplicati from grimes	2020-08-04 20:58:10 +01:00
Jake Howard	e184c7fba1	Move website over to walker	2020-08-04 20:54:53 +01:00
Jake Howard	6ceea80ee7	Fix website restart	2020-08-04 20:54:34 +01:00
Jake Howard	4b7830567b	Add postgres backups for plausible	2020-08-04 19:49:21 +01:00
Jake Howard	7c0d78ee9d	Remove folding-at-home ... New server location isn't especially ventilated, so heat is an issue. I'm sorry.	2020-08-04 19:41:01 +01:00
Jake Howard	c435ad1ba8	Ensure plausible is restarted on error	2020-08-04 19:38:01 +01:00
Jake Howard	969b0bd8d9	Update traefik ... Fixes GHSA-6qq8-5wq3-86rp	2020-07-30 21:46:44 +01:00
Jake Howard	ed00a0d40e	Update gitea	2020-07-29 18:26:13 +01:00
Jake Howard	a6047da465	Use default port	2020-07-28 20:31:32 +01:00
Jake Howard	91effbcac5	Add ZFS scrub cron job	2020-07-26 22:17:28 +01:00
Jake Howard	6e58b07519	Remove unnecessary quotes	2020-07-26 18:22:43 +01:00
Jake Howard	ebbd2a4015	Install zfs and sanoid	2020-07-26 18:03:09 +01:00
Jake Howard	5cb1a470ab	Bump plausible pool size	2020-07-26 15:40:03 +01:00
Jake Howard	f77cd1216f	Move upload server to walker	2020-07-24 17:14:39 +01:00
Jake Howard	3c7c0ec3fa	GZIP plausible traffic ... Plausible doesn't gzip for itself. Funnily enough the tracker is actually too small to be compressed by Traefik!	2020-07-22 12:18:49 +01:00
Jake Howard	9ee4e1c14b	Add plausible analytics	2020-07-21 20:55:44 +01:00
Jake Howard	74d40ac915	Update traefik	2020-07-18 13:29:20 +01:00
Jake Howard	005cc528b6	Update nextcloud to 19.0.1	2020-07-17 14:48:50 +01:00
Jake Howard	7a38207ef0	Update traefik	2020-07-15 14:53:36 +01:00
Jake Howard	b7aebfaabd	Move statping to new machine ... Also update it to the latest version. It's probably still buggy AF, but it'll do for what I need it to rigth now.	2020-07-14 19:35:55 +01:00
Jake Howard	52e8f34198	Pin jellyfin to latest ... It can update itself just fine	2020-07-13 18:09:33 +01:00
Jake Howard	9d962c324b	Update synapse	2020-07-13 18:04:20 +01:00
Jake Howard	bb5a5b61bd	Update traefik	2020-07-13 18:04:11 +01:00
Jake Howard	dd8523ebdd	Update gitea	2020-07-13 18:02:51 +01:00
Jake Howard	eed13e3727	Setup offsite storage service ... My own lil' S3	2020-07-12 21:01:06 +01:00
Jake Howard	3c49c80ff1	Ensure traefik only listens on wireguard network	2020-07-12 19:29:18 +01:00
Jake Howard	0314908eac	Install docker on new server	2020-07-12 19:21:27 +01:00
Jake Howard	9c0682ef9b	Restrict SSH connections to wireguard cidr ... Except on home server, still handy to connect on same network.	2020-07-12 17:53:02 +01:00
Jake Howard	a6a3982cc8	Provision keys for walker	2020-07-12 17:19:51 +01:00
Jake Howard	693c3fc0ab	Remove legacy vars file	2020-07-12 17:12:47 +01:00
Jake Howard	63eecf7a56	Provision new dedicated server	2020-07-12 17:06:02 +01:00
Jake Howard	e5e308fafa	Remove firewall role ... firewalld does not play nice with docker!	2020-07-12 17:04:13 +01:00
Jake Howard	f2d7d63e2d	Update nextcloud base	2020-07-10 16:15:13 +01:00
Jake Howard	dc2b51db6b	Update synapse	2020-07-10 16:02:06 +01:00
Jake Howard	ba486a26e4	Update duplicati	2020-07-09 19:27:53 +01:00
Jake Howard	13a70b27a4	Add RGB LED controller	2020-07-06 20:48:57 +01:00
Jake Howard	82bffc3538	Setup firewalld	2020-07-03 21:53:31 +01:00
Jake Howard	fba284f9a9	Change primary gitea domain to the one I actually use	2020-07-02 19:42:51 +01:00
Jake Howard	1c99477ce9	Move nextcloud config into root	2020-07-02 18:44:27 +01:00
Jake Howard	c80d4b7e04	Move tt-rss config out of config directory	2020-07-02 18:24:26 +01:00
Jake Howard	689c0cecd9	Set permissions on nextcloud data dir	2020-07-02 17:52:53 +01:00
Jake Howard	452118e2a9	Update synapse	2020-07-02 17:41:22 +01:00
Jake Howard	86a398d6b4	Replace docker-compose restart hack with shell handler hack ... The docker-compose integration would start 2 of the same container, which does bad things to things like databases!	2020-06-28 20:13:12 +01:00
Jake Howard	71086ca291	Do HA person management through web UI	2020-06-28 19:35:39 +01:00
Jake Howard	e2ca9ad4a9	Don't use host hack to connect to influx ... Just bind to internal port like a sane person	2020-06-28 19:16:22 +01:00
Jake Howard	9f09554053	Set some sysctl settings so zeroconf works for HA ... https://stackoverflow.com/a/46890741	2020-06-28 17:35:49 +01:00
Jake Howard	bf2a5e9320	Add Tado and Arlo integrations	2020-06-27 21:00:18 +01:00
Jake Howard	e4aba817cc	Fix influxdb comms ... Stupid host network mode and DNS	2020-06-27 21:00:07 +01:00
Jake Howard	cfd46ea752	I'm probably where my phone is	2020-06-27 19:53:21 +01:00
Jake Howard	fe5a5984c3	Remove container names from containers ... They're not needed for anything, and caused annoying weird issues when cycling containers	2020-06-27 17:45:28 +01:00
Jake Howard	681d591176	Add ESPHome	2020-06-27 16:45:00 +01:00
Jake Howard	c89715c52b	Add influxdb for homeassistant storage	2020-06-27 16:34:41 +01:00
Jake Howard	93b4bef05d	Add home-assistant	2020-06-27 16:16:52 +01:00
Jake Howard	e5cbae81f4	Switch from Emby to Jellyfin ... Merge remote-tracking branch 'origin/jellyfin'	2020-06-25 21:39:19 +01:00
Jake Howard	e051db5e71	Remove obsolete middleware	2020-06-24 18:48:39 +01:00
Jake Howard	7119d5877f	Only expose deluge to internal network ... And VPN	2020-06-24 18:48:30 +01:00
Jake Howard	dd12b795b5	Remove pihole ... Internal VPN server is working just perfectly instead	2020-06-24 18:46:13 +01:00
Jake Howard	7d61282d19	Set depends_on where needed	2020-06-24 18:35:20 +01:00
Jake Howard	7a3643f3c2	Persist mirror caches outside container	2020-06-24 18:21:14 +01:00
Jake Howard	c771e425fb	Replace ansible with system installed version ... Similar to a572868b8f	2020-06-24 17:14:25 +01:00
Jake Howard	df54decc99	Mirror dotfiles repo	2020-06-24 16:47:31 +01:00
Jake Howard	82a3c85263	Install git-mirror container ... This also moves the canonical home of this repo to my gitea instance!	2020-06-24 16:27:13 +01:00
Jake Howard	5f9b337c7a	Update gitea	2020-06-24 14:26:12 +01:00
Jake Howard	2ab8928985	Update nextcloud base	2020-06-24 14:26:05 +01:00
Jake Howard	319c96512e	Change default theme to original ... Black and green looks odd	2020-06-22 21:03:08 +01:00
Jake Howard	913ee4759f	Quote value to silence errors	2020-06-18 21:18:47 +01:00
Jake Howard	9ba9593127	Remove debug log level for deluge	2020-06-18 20:50:04 +01:00
Jake Howard	f878866f10	Update yamllint	2020-06-18 20:49:12 +01:00
Jake Howard	9f59b30f1e	Update synapse	2020-06-18 20:34:23 +01:00
Jake Howard	7f62ed43d4	Update gitea to 1.12	2020-06-18 20:33:09 +01:00
Jake Howard	c09b46aac0	Stop moving into ansible/ before running things ... Makes life easier	2020-06-15 13:21:52 +01:00
Jake Howard	4d13e3c78f	Move requirements files into ansible dir	2020-06-15 13:11:44 +01:00
Jake Howard	624d1b5425	Set HSTS header for nextcloud	2020-06-13 21:14:23 +01:00
Jake Howard	ca188ab1b4	Rename middleware ... It's not actually applying a HSTS header	2020-06-13 21:09:48 +01:00
Jake Howard	d7b6abaf58	Update to nextcloud 19	2020-06-13 21:06:33 +01:00
Jake Howard	a22f555878	Unpin the versions of things I don't care about too much ... If they update and break, it's not the end of the world, however unlikely it may be	2020-06-13 19:38:42 +01:00
Jake Howard	a3d19eba94	Update synapse	2020-06-13 19:27:53 +01:00
Jake Howard	cfee50159a	Remove netdata from grimes ... `htop` works just fine for that machine	2020-06-11 19:30:48 +01:00
Jake Howard	3969b23cd0	Keep using fancy index ... Repairs breaking change from 0f036dd6d7	2020-06-11 19:24:53 +01:00
Jake Howard	e1ae11e388	Update quassel base	2020-06-10 13:54:18 +01:00
Jake Howard	26aba92483	DIal back emby update ... Apparently that was a pre-release	2020-06-10 13:53:47 +01:00
Jake Howard	e54ec1312c	Replace onlyoffice with collabora	2020-06-07 21:09:02 +01:00
Jake Howard	0724ae9238	Update redis	2020-06-07 15:09:20 +01:00
Jake Howard	61a50435c9	Update emby	2020-06-05 19:11:49 +01:00
Jake Howard	fa41b09d83	Update deluge base	2020-06-05 17:36:09 +01:00
Jake Howard	15720fded8	Update quassel base	2020-06-05 17:35:56 +01:00
Jake Howard	1f9ea561df	Update calibre	2020-06-05 17:35:37 +01:00
Jake Howard	0a13b8e34d	Update nextcloud base	2020-05-31 13:30:37 +01:00
Jake Howard	d41d1b0d6c	Update gitea	2020-05-31 13:26:47 +01:00
Jake Howard	605ae4f8b8	Make sure media is owned correctly	2020-05-30 15:35:55 +01:00
Jake Howard	e5d77f23fd	Update deluge base	2020-05-29 15:37:49 +01:00
Jake Howard	249045e4cd	Update synapse	2020-05-29 15:37:39 +01:00
Jake Howard	cd076b871c	Update duplicati base	2020-05-29 15:36:40 +01:00
Jake Howard	f59c625058	Move nextcloud DB to SSD ... Speeeeeeeeed	2020-05-28 20:20:33 +01:00
Jake Howard	28cdaefb05	Update nextcloud base	2020-05-27 16:17:32 +01:00
Jake Howard	adc7611242	Only bind duplicati to wireguard interface	2020-05-25 17:38:26 +01:00
Jake Howard	986fc50fde	Set hostname for duplicati so it's picked up correctly in the UI ... This shouldn't have any negative impact. Hopefully...	2020-05-25 17:32:44 +01:00
Jake Howard	851f750948	Move duplicati to its own role so it can be installed on grimes	2020-05-25 17:25:58 +01:00
Jake Howard	b45d399734	Mount entire host inside duplicati	2020-05-25 17:01:29 +01:00
Jake Howard	7dd31c0556	Allow nextcloud to be reached over internal SSL ... This removes the need for a custom config, and means traefik is proxying HTTP2, which is nice	2020-05-24 19:21:17 +01:00
Jake Howard	eac381a90a	Decrease resource limit on FaH ... It's getting hot	2020-05-24 18:37:57 +01:00
Jake Howard	d2269de4ad	Claenup docker util scripts	2020-05-23 18:25:00 +01:00
Jake Howard	ceca641e2f	Remove deprecated options	2020-05-23 11:47:31 +01:00
Jake Howard	c92f924faa	Harden host key	2020-05-23 11:45:53 +01:00
Jake Howard	2fe6cf7c93	Install mobile key	2020-05-23 11:23:45 +01:00
Jake Howard	20d5020f6b	Manually use file lookup so the terminal output looks nicer	2020-05-23 11:18:48 +01:00
Jake Howard	09418cffb0	Provision SSH keys with ansible now	2020-05-23 11:04:50 +01:00
Jake Howard	7e534e52e1	Merge SSH into base role	2020-05-23 10:58:09 +01:00
Jake Howard	991535ca85	Add phone to VPN network	2020-05-23 10:49:18 +01:00
Jake Howard	16881048e2	Update duplicati	2020-05-23 10:35:59 +01:00
Jake Howard	892ac4e950	Update synapse	2020-05-22 22:34:37 +01:00
Jake Howard	cd255f7ca2	Remove docker-rclone-mount ... Seems there's some issues where having this attached which makes the duplicati container delete all its RO mounts.	2020-05-22 21:09:40 +01:00
Jake Howard	7fbfbbb699	Ansiblize rclone mounts configs	2020-05-22 12:04:43 +01:00
Jake Howard	251d52f1de	Add rclone mounts	2020-05-22 11:47:45 +01:00
Jake Howard	9b9af7e90d	Set nextcloud trusted proxy to docker host IP	2020-05-21 18:11:51 +01:00
Jake Howard	fc7b57eab9	Modify some things and cleanup gitea config	2020-05-21 17:58:38 +01:00
Jake Howard	1c8d80e12d	Revert "Add a redis cache to gitea" ... This reverts commit c0c396f008. Causes weird stability issues as the process received sig 15 and restarts, which is strange!	2020-05-21 12:03:45 +01:00
Jake Howard	6d51b570a1	Revert "Revert "Remove ansible_host definition"" ... This reverts commit 2a39292b85. Reverted the wrong commit. Derp!	2020-05-21 12:03:22 +01:00
Jake Howard	2a39292b85	Revert "Remove ansible_host definition" ... This reverts commit e93dbf2ecf. Causes weird stability issues as the process received sig 15 and restarts, which is strange!	2020-05-19 22:06:04 +01:00
Jake Howard	c0c396f008	Add a redis cache to gitea	2020-05-19 21:49:09 +01:00
Jake Howard	e93dbf2ecf	Remove ansible_host definition ... No idea why it was there, too much noise!	2020-05-18 17:12:21 +01:00
Jake Howard	85e7714f2e	Rename galaxy requirements	2020-05-18 16:46:18 +01:00
Jake Howard	b9e6e8801e	Mount a directory for restore testing ... And for actual restores, should the time come...	2020-05-18 12:08:10 +01:00
Jake Howard	9850f73a17	Deploy web-rng ... https://github.com/RealOrangeOne/web-rng	2020-05-17 18:04:44 +01:00
Jake Howard	323a3db478	Auto detect python executable ... Causes weird issues with the compose integration	2020-05-17 18:03:57 +01:00
Jake Howard	1d56db2109	Ensure python3 is always used	2020-05-16 16:16:23 +01:00
Jake Howard	600bc4bb58	Ensure sysctl change is persisted ... See note in https://wiki.archlinux.org/index.php/Sysctl#Configuration	2020-05-16 16:15:58 +01:00
Jake Howard	f207b2eedd	Update quassel base	2020-05-14 14:16:19 +01:00
Jake Howard	1a51624f5f	Update nextcloud base	2020-05-14 14:16:11 +01:00
Jake Howard	98f478a1ca	Update pihole to v5	2020-05-14 14:15:36 +01:00
Jake Howard	825b7926af	Update duplicati base	2020-05-14 14:15:28 +01:00
Jake Howard	851c6b167c	Remove yourls ... Mariadb update broke it, but I never use it anyway.	2020-05-14 13:54:59 +01:00
Jake Howard	6f7f7aae94	Remove TOR proxy ... Wasn't actually using it, proxying through `grimes`	2020-05-12 20:43:19 +01:00
Jake Howard	112e8ce985	Install some wireguard tools	2020-05-11 11:59:46 +01:00
Jake Howard	93e5ce5bac	Reduce polling interval slightly so things update quicker	2020-05-10 22:20:03 +01:00
Jake Howard	eb65e8808d	Update gitea	2020-05-10 19:38:00 +01:00
Jake Howard	40cf931f14	Update deluge base	2020-05-10 19:37:48 +01:00
Jake Howard	8f32d74095	Update gotify	2020-05-10 19:29:36 +01:00
Jake Howard	2d655a3da0	Remove unnecessary strings	2020-05-10 19:23:41 +01:00
Jake Howard	d693240eb4	Just hardcode to bash ... I'm not resetting my login shell again!	2020-05-10 19:19:42 +01:00
Jake Howard	f156bd6860	Use which to get path to bash	2020-05-09 21:06:03 +01:00
Jake Howard	59868fc331	Install git on all hosts	2020-05-09 21:03:43 +01:00
Jake Howard	52ae01d29f	Add user to docker group	2020-05-09 20:48:46 +01:00
Jake Howard	59a721b243	Create user	2020-05-09 20:47:41 +01:00
Jake Howard	5289206f14	Remove unnecessary quotes	2020-05-09 20:11:08 +01:00
Jake Howard	1f0e33acc8	Remove fail2ban ... Keeps getting hit by stats. I should fix that at some point	2020-05-09 20:09:36 +01:00
Jake Howard	f3126e34b9	Update haproxy config for use on arch	2020-05-09 20:08:27 +01:00
Jake Howard	059cb585db	Use OS-agnostic package install for haproxy	2020-05-09 20:08:14 +01:00
Jake Howard	095c8c4562	Use sysctl to enable p2p comms	2020-05-09 20:07:19 +01:00
Jake Howard	f6214f1495	Replace nginx with static server	2020-05-09 17:14:16 +01:00
Jake Howard	bb5e489f8c	Remove the explicit enable of TLS in Traefik ... Much cleaner config!	2020-05-08 22:16:24 +01:00
Jake Howard	19fc0c0957	Add shorter URLs for upload	2020-05-08 21:45:27 +01:00
Jake Howard	2f523075ae	Add upload server	2020-05-08 21:27:32 +01:00
Jake Howard	2618f38c52	Update nextcloud base	2020-05-06 16:28:19 +01:00