Commit Graph

200 Commits

Author SHA1 Message Date
IamTheFij 0996cfbf67 Update hooks 2022-11-02 12:59:32 -07:00
IamTheFij a203067400 Migrate pre-commits from parent repo up to this one 2022-11-02 11:26:52 -07:00
IamTheFij 1a1f243354 Remove query for nomad-clients on backup task
Not used anymore
2022-10-31 15:27:29 -07:00
IamTheFij 73b99f80f5 Go back to hard coded node names for `for_each`
For some reason this worked until it didn't
2022-10-31 15:24:14 -07:00
IamTheFij 25e1dc6566 Rename backup service fixing mysql access 2022-10-31 15:23:42 -07:00
IamTheFij dcfe0510a7 Fix sonarr dl folder 2022-10-31 11:32:09 -07:00
IamTheFij 9f241109c5 Refactor external service definitions 2022-10-28 12:42:28 -07:00
IamTheFij eae80ece7a Increase sonarr memory
Wow, this uses a lot of mem
2022-10-28 12:34:44 -07:00
IamTheFij 45c597b040 Big refactor to split core and services for better ordering 2022-10-27 14:28:34 -07:00
IamTheFij 253069439d Better first run bootstrap 2022-09-27 21:59:37 -07:00
IamTheFij 75bce82b0f Fix typo 2022-09-27 21:29:00 -07:00
IamTheFij b8cfc361fa New playbook to reset server data 2022-09-27 21:28:37 -07:00
IamTheFij 91e64f23eb Improve first run cluster setup 2022-09-27 21:28:02 -07:00
IamTheFij 16f7eaa844 Remove some hosts 2022-09-27 21:27:34 -07:00
IamTheFij 109113048f Add local loopback as dns in resolv.conf 2022-09-26 16:52:59 -07:00
IamTheFij 66bd276626 Increase priority of stateful jobs 2022-09-26 16:40:25 -07:00
IamTheFij 8ab6c2c3e0 Add playbook to recover consul using peers 2022-09-16 16:46:37 -07:00
IamTheFij 567e2d88e4 Add another pi 2022-09-16 16:46:10 -07:00
IamTheFij a80927e5b0 Enable preemption on nomad scheduler 2022-09-16 16:45:26 -07:00
IamTheFij 9d739eef7e Make Nomad media-read volume point to rw nfs 2022-09-16 16:44:40 -07:00
IamTheFij 12c273f440 Remove bootstrapping values from setup playbook
This will be done in another playbook
2022-09-16 16:43:45 -07:00
IamTheFij 5bd4e3716d Bootstrap with 3 servers 2022-09-16 16:42:54 -07:00
IamTheFij cb46743043 Get ddclient working again
It was failing due to oom and using cloudflare api tokens which aren't yet supported
2022-09-07 12:20:58 -07:00
IamTheFij a9073aafd4 Wait until Nomad is running before bootstrapping ACLs 2022-09-07 11:11:10 -07:00
IamTheFij 912ad58ff0 Clean up comments in setup cluster playbook 2022-09-07 11:09:33 -07:00
IamTheFij d742234a36 Explicitly set envoy version
The default v1.23.0 does not work on arm64
2022-09-07 11:06:26 -07:00
IamTheFij ad22ce6e2a Update vault and nomad versions 2022-09-07 11:05:54 -07:00
IamTheFij 141b53b809 Add playbook to unseal Vault 2022-09-07 11:05:27 -07:00
IamTheFij cc8e6faf36 Make vault load balancer sticky
Assets like css and js were not proxying correctly. I think it may be
because they were proxying to a different instance and that the paths
are dynamic. This should route subsequent requests for the session to
a single backend.
2022-09-06 17:17:14 -07:00
IamTheFij c8b9063b3e Add homeassistant external 2022-09-06 17:15:43 -07:00
IamTheFij f44e62fd1c add nomad login 2022-09-06 14:47:06 -07:00
IamTheFij 478f9c4c8f Update security todos and reference node IP for consul queries 2022-09-06 14:46:49 -07:00
IamTheFij ab1c9b41cd Move redis data to ephemeral disk 2022-09-06 11:31:15 -07:00
IamTheFij 712fd3958d Move prometheus tsdb data to emphemeral disk 2022-09-06 11:15:14 -07:00
IamTheFij 7296494141 Move acme certs to /local so they will persit between allocs 2022-09-06 09:45:04 -07:00
IamTheFij 8e827ef4ad Add splay to blocky template render
Avoid all instances going down at once when the template canges
2022-09-05 12:57:13 -07:00
IamTheFij 1be855e571 Fix syslog proxy
Apparently traefik only supports http proxy over connect.

https://github.com/traefik/traefik/issues/7803
2022-09-04 20:21:02 -07:00
IamTheFij 34a5ce8141 Use nomad as sole metrics exporter
Drops cadvisor and node_exporter since Nomad seems to export what I need.
2022-09-04 14:32:24 -07:00
IamTheFij bc4657463e Remove default volume read_only
It was always setting to true
2022-09-04 14:27:28 -07:00
IamTheFij aaae5d087e Update nfs volumes to try and fix permissions 2022-09-04 14:27:27 -07:00
IamTheFij 5c3b60329d Try to use default netowrk source for proxing syslogng 2022-09-04 14:27:27 -07:00
IamTheFij 9fe5393a40 Add Traefik proxy for Syslogng 2022-09-04 14:27:07 -07:00
IamTheFij 7f4995817b Use default arch maps where possible 2022-08-30 16:15:12 -07:00
IamTheFij 3bab881118 Update services template to support env and host volumes
Also adds sonarr as an example
2022-08-30 15:16:08 -07:00
IamTheFij 9ce1350b5f Use nomad token to look up policies 2022-08-30 15:15:29 -07:00
IamTheFij 226eb6cb05 Have nomad talk to vault over loopback 2022-08-30 15:15:10 -07:00
IamTheFij 3d3cc25951 Add new nfs volumes 2022-08-30 15:14:55 -07:00
IamTheFij 0ea02c2034 Multiarch install tweaks for arm64 2022-08-30 15:14:39 -07:00
IamTheFij 0ad777c76f Fix unsealing of single vault instance
Checking status of only one node meant that if that node was sealed
we would not try to unseal other nodes
2022-08-30 15:14:00 -07:00
IamTheFij 929501b72c Enable consul autopilot 2022-08-30 15:12:52 -07:00