Commit graph

219 commits

Author SHA1 Message Date
99454389f7 Update Terraform aws to v4.60.0 2023-03-24 08:02:12 +00:00
b9c2390907 Merge branch 'renovate/aws-4.x' into 'master'
Update Terraform aws to v4

See merge request sys/infrastructure!114
2023-03-19 17:30:56 +00:00
4eb77274f8 Merge branch 'renovate/cloudflare-2.x' into 'master'
Update Terraform cloudflare to v2.27.0

See merge request sys/infrastructure!73
2023-03-19 17:29:20 +00:00
8dedfde4b0 Update Terraform aws to v4 2023-03-16 22:01:34 +00:00
086ce2cc77 Update Terraform grafana to v1.36.1 2023-03-10 16:00:53 +00:00
92012a42e1
Remove authentik
It's a bigger application than I need, and I wasn't actually using it for anything anyway
2023-02-23 19:50:44 +00:00
a6d0a36dac
Update terraform lock 2023-02-21 20:12:56 +00:00
c00eb69fee Merge branch 'renovate/linode-1.x' into 'master'
Update Terraform linode to v1.30.0

See merge request sys/infrastructure!74
2023-02-21 19:45:49 +00:00
9888c806eb Merge branch 'renovate/aws-3.x' into 'master'
Update Terraform aws to v3.76.1

See merge request sys/infrastructure!72
2023-02-21 19:36:21 +00:00
c6dc6514a8 Merge branch 'renovate/vultr-2.x' into 'master'
Update Terraform vultr to v2.12.1

See merge request sys/infrastructure!75
2023-02-21 18:08:31 +00:00
537bdcd1f9
Lock vultr provider version
No idea how this wasn't already
2023-02-21 08:47:32 +00:00
7230c765cc
Upgrade walker VM
More RAM is needed here for clickhouse and website
2023-02-21 08:47:21 +00:00
65f14d8930
Fix terraform linting 2023-02-20 08:35:24 +00:00
6282c13db6
Make sure grafana alerts actually notify 2023-02-15 13:53:20 +00:00
e52ba22332 Update Terraform linode to v1.30.0 2023-02-13 10:03:15 +00:00
78d12da8c8 Update Terraform cloudflare to v2.27.0 2023-02-13 10:02:55 +00:00
bf7e7d56c1 Update Terraform aws to v3.76.1 2023-02-13 10:02:28 +00:00
24cde27c6b Update Terraform vultr to v2.12.1 2023-02-12 20:02:12 +00:00
aba209f46d
Replace uptimerobot with grafana cloud 2023-02-12 16:35:12 +00:00
543b8a1356
Mark variables as sensitive 2023-02-08 20:57:20 +00:00
5210e66921
Init Gandi terraform provider 2023-02-08 20:55:23 +00:00
a443d56a1c
Add a gitea deployment
Yep, it's that time of year _again_
2023-01-27 17:28:45 +00:00
120b7d97c4
Explicitly allow cross-domain DMARC reports 2023-01-26 12:11:01 +00:00
d08268baba
Remove pct tag from DMARC
This is the default
2023-01-26 12:02:12 +00:00
7a89e7f3bc
Define alert contacts for uptimerobot monitors 2022-12-09 19:05:35 +00:00
e86ed81102
Decommission decker server
It's been replaced by prometheus running internally, and uptimerobot checking.
2022-12-09 19:04:54 +00:00
413400cbc6
Terraform uptimerobot 2022-12-08 21:55:03 +00:00
e89f13b8a9
Add collabora 2022-12-02 22:37:42 +00:00
3ec359ed0e
Deploy me a mastodon 2022-11-18 09:12:28 +00:00
c91b1ba871
Allow website to handle traffic to second domain 2022-11-16 14:56:17 +00:00
77e83fec6d
Fix synapse-admin URL
It no longer supports being run on a subdirectory with the stock container
2022-11-07 13:57:14 +00:00
d81ed290d7
Put the new website live 2022-10-30 12:04:15 +00:00
58730fcbeb
Move pages hosting to GitLab pages 2022-10-09 18:26:49 +01:00
6d890a6991
Setup slides domain 2022-10-08 17:37:28 +01:00
41582f50db
Set up GitLab pages 2022-10-08 15:51:37 +01:00
1eaa33e664
Add DMARC to mailgun 2022-09-22 21:29:21 +01:00
8c1f088b19
Harden DMARC and SPF rules
Hopefully people still get my emails...
2022-09-22 21:26:26 +01:00
6268c0f451
Add DNS records for mailgun 2022-09-22 21:22:05 +01:00
72795591ac
Add DMARC 2022-09-22 21:12:41 +01:00
f49b26c6f0
Deploy authentik
Not integrated into other services quite yet. But it's there
2022-09-18 18:49:17 +01:00
cc3f980d34
Deploy tandoor 2022-08-24 22:17:29 +01:00
b62f8001bb
Deploy commento++ 2022-06-05 15:44:49 +01:00
da450c08dd
Decommission k8s environment
Need a little more time in the playground before I have use of a production-grade environment. Especially when it's costing $20/mo
2022-05-02 21:44:33 +01:00
b8736e1c65
Create VPN for port 53 2022-03-18 19:44:06 +00:00
812e828862
Allow unprivileged ports to access cluster
This is needed for ingress-nginx
2022-03-07 20:32:14 +00:00
3ad719a4e7
Init a k8s
May god have mercy on my ~soul~.

The firewall config may not be valid, due to node recycling, but here's hoping!
2022-03-03 21:50:24 +00:00
2715161929
Make sure SSH port is exposed on grimes
This is needed for dokku deployments
2022-03-03 20:29:53 +00:00
293aed0fd3
Enable GitLab registry 2022-02-25 21:48:13 +00:00
6b63c2685b
Add an additional domain for matrix
I'll migrate over to this eventually. But doing a hard migration has just wasted my entire evening...
2022-02-13 20:54:46 +00:00
722b964bc9
Add Google Search Console integration to Plausible 2022-02-13 16:43:09 +00:00
151c5bc1d9
Decommission casey instance in vultr
The end of an era, my oldest server.
2022-01-30 21:00:38 +00:00
af396a21cb
Provision a new caseyon Linode 2022-01-21 21:52:21 +00:00
619d5bfa7b
Give every cloud machine its own cname 2022-01-19 08:44:21 +00:00
af07840de7
Harden SPF 2022-01-19 08:19:51 +00:00
db68c107d0
Decommission decker on Vultr 2022-01-11 19:25:04 +00:00
ceb62cc0c8
Open the right ports so web traffic will flow 2022-01-11 09:08:23 +00:00
cf0e718bfb
Migrate decker services to linode
Mostly just uptime-kuma
2022-01-11 09:07:48 +00:00
50398eac07
Commit the terraform lock file
It tells you to
2022-01-08 22:12:44 +00:00
e50a1f9a72
Privision a decker on linode 2022-01-08 22:12:28 +00:00
0a13f78d29
Add linode to terraform setup
Let the migration, begin!
2022-01-08 22:11:34 +00:00
66c48c4a69
Remove old domain for vaultwarden
It's been long enough
2021-12-22 15:41:14 +00:00
ccaff503da
Move decker from AMS to Paris
The AMS DC has a bit of a flaky network connection, which isn't what you want for monitoring.
2021-11-06 16:45:09 +00:00
4db474034e
Ignore my VMs from a fail2ban 2021-09-27 14:49:56 +01:00
7e2d01c612
Change domain
Now there's a status page, we can consider it public
2021-09-25 21:34:18 +01:00
8a37a9d41b
Move uptime-kuma to decker 2021-09-25 21:03:56 +01:00
bf73cfa846
Close some ports which don't need to be open 2021-09-25 17:04:28 +01:00
a135aae5f3
Provision new VM
This will be used for monitoring
2021-09-25 16:59:23 +01:00
f3bc72d2ba
Provision uptime-kuma 2021-07-31 16:43:12 +01:00
7f597dbf87
Serve notes from dokku 2021-06-26 21:30:04 +01:00
e3502ae1e0
Provision dokku server 2021-06-20 12:12:34 +01:00
b20ffb27c4
Remove gotify
Never used it
2021-06-12 19:00:39 +01:00
d751a023da
Promote GitLab to main git. domain 2021-06-02 19:49:28 +01:00
69abafd8c8
Put GitLab on a real domain 2021-05-29 16:21:47 +01:00
48e07d2a7e
Rename more bitwarden things
Serving on both domains currently, i'll migrate clients and fix that
2021-05-18 22:18:05 +01:00
71a30c8815
Reduce history for TF state 2021-05-18 19:33:38 +01:00
9b31efbf43
Destroy grimes
And the entire Linode integration
2021-05-05 18:11:14 +01:00
6f18178233
Remove stray extra domain 2021-05-02 17:32:39 +01:00
b6696e87f2
Make 0rng DNS alias primary domain
CNAME's are good for this
2021-05-02 17:32:27 +01:00
ad415c2b53
Move website to walker 2021-05-02 17:24:10 +01:00
86482246b3
Move plausible to walker 2021-05-02 16:07:25 +01:00
1fcc63a5da
Move upload 2021-04-24 22:14:29 +01:00
c048e6d20e
Provision walker 2021-04-24 21:59:53 +01:00
3976dd607d
Provision walker VPS 2021-04-19 21:26:22 +01:00
7580c0fd59
Remove walker for now
Tried to use alpine, Nebula doesn't like it. Will use Debian, and recreate the machine when I have more time
2021-03-26 21:58:24 +00:00
e80bcb5a8b
Move generic vultr firewall stuff into module
Modules are pretty nice!
2021-03-23 22:33:10 +00:00
95e97ef757
Iterate over firewall ports
I'll convert this to a module some day, honest!
2021-03-23 22:09:48 +00:00
70829dc617
Provision walker server
This will eventually replace `grimes`
2021-03-23 21:31:31 +00:00
ba8220cff2
Remove minecraft port forward 2021-03-23 21:23:45 +00:00
bbfe85b2c8
Update vultr provider
This was a pretty breaking change which required re-importing most of its state
2021-03-23 21:22:31 +00:00
a43dac3a80
Actually add bitwarden DNS 2021-03-21 21:03:47 +00:00
f6559ff1bd
Remove collabora
It doesn't seem to like being run inside LXC. I barely used it, anyway.
2021-03-12 23:35:39 +00:00
ec0c78e6d9
Read emails from secrets 2021-02-14 12:29:14 +00:00
3014e5d052
Provision privatebin 2021-02-12 23:32:31 +00:00
1ddb68224e
Nebula actually runs over UDP
derp
2021-01-30 18:16:10 +00:00
89a6c7680c
Decommission walker
Kimsufi is just too annoying of a host. Everything has either been moved off, killed, or has further plans.
2021-01-28 18:56:39 +00:00
b339cb0e2d
Move upload to grimes 2021-01-28 14:04:55 +00:00
3de14efd9e
Remove heimdall
I've literally not used it since setting it up
2021-01-26 21:53:52 +00:00
a44a79031a
Init some skeleton nebula stuff 2021-01-25 21:53:04 +00:00
0ecd884a9a
Deploy yourls 2021-01-22 21:29:27 +00:00
f519b18d38
Move website over to traefik-pages
Woo rust!
2021-01-17 21:41:32 +00:00