IamTheFij
37e80980bc
Refactor ansible to clean root dir
2022-11-02 14:20:09 -07:00
IamTheFij
0996cfbf67
Update hooks
2022-11-02 12:59:32 -07:00
IamTheFij
a203067400
Migrate pre-commits from parent repo up to this one
2022-11-02 11:26:52 -07:00
IamTheFij
1a1f243354
Remove query for nomad-clients on backup task
...
Not used anymore
2022-10-31 15:27:29 -07:00
IamTheFij
73b99f80f5
Go back to hard coded node names for `for_each`
...
For some reason this worked until it didn't
2022-10-31 15:24:14 -07:00
IamTheFij
25e1dc6566
Rename backup service fixing mysql access
2022-10-31 15:23:42 -07:00
IamTheFij
dcfe0510a7
Fix sonarr dl folder
2022-10-31 11:32:09 -07:00
IamTheFij
9f241109c5
Refactor external service definitions
2022-10-28 12:42:28 -07:00
IamTheFij
eae80ece7a
Increase sonarr memory
...
Wow, this uses a lot of mem
2022-10-28 12:34:44 -07:00
IamTheFij
45c597b040
Big refactor to split core and services for better ordering
2022-10-27 14:28:34 -07:00
IamTheFij
253069439d
Better first run bootstrap
2022-09-27 21:59:37 -07:00
IamTheFij
75bce82b0f
Fix typo
2022-09-27 21:29:00 -07:00
IamTheFij
b8cfc361fa
New playbook to reset server data
2022-09-27 21:28:37 -07:00
IamTheFij
91e64f23eb
Improve first run cluster setup
2022-09-27 21:28:02 -07:00
IamTheFij
16f7eaa844
Remove some hosts
2022-09-27 21:27:34 -07:00
IamTheFij
109113048f
Add local loopback as dns in resolv.conf
2022-09-26 16:52:59 -07:00
IamTheFij
66bd276626
Increase priority of stateful jobs
2022-09-26 16:40:25 -07:00
IamTheFij
8ab6c2c3e0
Add playbook to recover consul using peers
2022-09-16 16:46:37 -07:00
IamTheFij
567e2d88e4
Add another pi
2022-09-16 16:46:10 -07:00
IamTheFij
a80927e5b0
Enable preemption on nomad scheduler
2022-09-16 16:45:26 -07:00
IamTheFij
9d739eef7e
Make Nomad media-read volume point to rw nfs
2022-09-16 16:44:40 -07:00
IamTheFij
12c273f440
Remove bootstrapping values from setup playbook
...
This will be done in another playbook
2022-09-16 16:43:45 -07:00
IamTheFij
5bd4e3716d
Bootstrap with 3 servers
2022-09-16 16:42:54 -07:00
IamTheFij
cb46743043
Get ddclient working again
...
It was failing due to oom and using cloudflare api tokens which aren't yet supported
2022-09-07 12:20:58 -07:00
IamTheFij
a9073aafd4
Wait until Nomad is running before bootstrapping ACLs
2022-09-07 11:11:10 -07:00
IamTheFij
912ad58ff0
Clean up comments in setup cluster playbook
2022-09-07 11:09:33 -07:00
IamTheFij
d742234a36
Explicitly set envoy version
...
The default v1.23.0 does not work on arm64
2022-09-07 11:06:26 -07:00
IamTheFij
ad22ce6e2a
Update vault and nomad versions
2022-09-07 11:05:54 -07:00
IamTheFij
141b53b809
Add playbook to unseal Vault
2022-09-07 11:05:27 -07:00
IamTheFij
cc8e6faf36
Make vault load balancer sticky
...
Assets like css and js were not proxying correctly. I think it may be
because they were proxying to a different instance and that the paths
are dynamic. This should route subsequent requests for the session to
a single backend.
2022-09-06 17:17:14 -07:00
IamTheFij
c8b9063b3e
Add homeassistant external
2022-09-06 17:15:43 -07:00
IamTheFij
f44e62fd1c
add nomad login
2022-09-06 14:47:06 -07:00
IamTheFij
478f9c4c8f
Update security todos and reference node IP for consul queries
2022-09-06 14:46:49 -07:00
IamTheFij
ab1c9b41cd
Move redis data to ephemeral disk
2022-09-06 11:31:15 -07:00
IamTheFij
712fd3958d
Move prometheus tsdb data to emphemeral disk
2022-09-06 11:15:14 -07:00
IamTheFij
7296494141
Move acme certs to /local so they will persit between allocs
2022-09-06 09:45:04 -07:00
IamTheFij
8e827ef4ad
Add splay to blocky template render
...
Avoid all instances going down at once when the template canges
2022-09-05 12:57:13 -07:00
IamTheFij
1be855e571
Fix syslog proxy
...
Apparently traefik only supports http proxy over connect.
https://github.com/traefik/traefik/issues/7803
2022-09-04 20:21:02 -07:00
IamTheFij
34a5ce8141
Use nomad as sole metrics exporter
...
Drops cadvisor and node_exporter since Nomad seems to export what I need.
2022-09-04 14:32:24 -07:00
IamTheFij
bc4657463e
Remove default volume read_only
...
It was always setting to true
2022-09-04 14:27:28 -07:00
IamTheFij
aaae5d087e
Update nfs volumes to try and fix permissions
2022-09-04 14:27:27 -07:00
IamTheFij
5c3b60329d
Try to use default netowrk source for proxing syslogng
2022-09-04 14:27:27 -07:00
IamTheFij
9fe5393a40
Add Traefik proxy for Syslogng
2022-09-04 14:27:07 -07:00
IamTheFij
7f4995817b
Use default arch maps where possible
2022-08-30 16:15:12 -07:00
IamTheFij
3bab881118
Update services template to support env and host volumes
...
Also adds sonarr as an example
2022-08-30 15:16:08 -07:00
IamTheFij
9ce1350b5f
Use nomad token to look up policies
2022-08-30 15:15:29 -07:00
IamTheFij
226eb6cb05
Have nomad talk to vault over loopback
2022-08-30 15:15:10 -07:00
IamTheFij
3d3cc25951
Add new nfs volumes
2022-08-30 15:14:55 -07:00
IamTheFij
0ea02c2034
Multiarch install tweaks for arm64
2022-08-30 15:14:39 -07:00
IamTheFij
0ad777c76f
Fix unsealing of single vault instance
...
Checking status of only one node meant that if that node was sealed
we would not try to unseal other nodes
2022-08-30 15:14:00 -07:00