f5898b0283
Add workload ACL management for mysql and postgres access
...
Allows required jobs to access shared secrets and auto generates psks
for stunnel.
Currently supporting MySQL, Postgres, and LDAP.
2023-08-29 12:48:48 -07:00
013dd8248b
Make base_hostname more configurable
2023-08-24 15:03:36 -07:00
f6dd3f4284
Clean up root module and move lldap to databases
2023-08-24 13:52:03 -07:00
4a7bff7611
Move metrics out of a module and into core
2023-08-24 13:00:36 -07:00
d5078b24da
Refactor use of wesher to be behind a variable toggle
...
Occasionally I run into issues with Wesher. This makes it easier to
disable use of Wesher by setting TF_VAR_use_wesher to false.
2023-08-24 12:51:32 -07:00
e2c35a82a9
Fix grafana config loading
...
For some reason, the env variable method stoped working.
2023-08-24 11:59:10 -07:00
1715b58ca9
Pin image versions for more critical services
2023-08-24 11:39:00 -07:00
ddeb8fffbc
Move services to their own tf files for easier locating
2023-08-07 11:37:19 -07:00
fa0da05343
Change authelia port to avoid conflict with prometheus
2023-08-02 21:31:08 -07:00
4b94f66786
Increase Traefik memory
2023-07-31 10:43:03 -07:00
f333031c25
bootstrap blocky with stunnel
2023-07-26 23:23:23 -07:00
744466bf07
Use static port for Authelia so that nomad middleware config is the same for each service
2023-07-07 16:34:50 -07:00
df062000e7
Run two authelia instances now that it's stateless
2023-07-07 15:56:23 -07:00
0a7ad7a9dc
Enable redis for authelia
...
This also splits redis instances by service
2023-07-07 15:50:23 -07:00
b0c1aca497
Increase token time for Nomad OIDC
2023-07-07 15:47:08 -07:00
60a4051988
Enable Authelia OIDC for Nomad
2023-07-07 00:41:44 -07:00
0ceb513216
Switch Grafana to OIDC from proxy auth
2023-07-07 00:40:19 -07:00
9d5aeeec96
Enable Authelia OIDC provider
2023-07-07 00:39:44 -07:00
eae5b201b6
Add two factor for external IPs
2023-07-06 21:25:31 -07:00
532d7f9a4c
Use Authelia for Grafana login
2023-07-06 18:00:06 -07:00
88e91e5e5d
Deploy authelia
...
Backed by lldap and mysql and deployed on whoami for now as a forward
proxy example
Would be good to add oidc for Nomad as well as make policies configurable
via Nomad variables.
2023-07-06 18:00:06 -07:00
8650ab973a
Add stunnel for ldap as part of service template
2023-07-06 17:25:13 -07:00
acc80868f9
Switch lldap storage to mysql
2023-07-05 17:30:54 -07:00
f606e0a17e
Remove blocky client groups because fallback server masks them
2023-07-05 15:45:55 -07:00
2df43584cf
Grafana config reloading: Use explicit path and echo
...
Was running into some issues with this not running. Using an explicit
path seems to help, so I'll try it for now. Also added some echo statements
to make it easier to discern when run.
2023-06-20 09:44:04 -07:00
2c128b25f3
Add additional blocking for wemo
2023-06-20 09:42:33 -07:00
1df5545835
Promtail: use local task dir rather than bind mount
2023-05-12 10:11:30 -07:00
d4cb91d58d
Rename metrics job to exporters
2023-05-12 10:11:11 -07:00
48322d9a78
Document what the nomad stalker is for
2023-05-12 10:10:31 -07:00
5169aecc6d
Add pushgateway to prometheus
2023-05-09 15:56:20 -07:00
f11fad30a5
Use stunnel for mysql
...
Doesn't remove wesher or normal mysql service
2023-05-09 13:20:36 -07:00
27fd60d84d
Add missing service to Wesher
...
Promtail, Backups, service module
2023-05-02 21:14:36 -07:00
0a84fd04bc
Automatically re-provision grafana when data source addresses change
2023-05-02 21:13:59 -07:00
7d8bc45090
Move blocky custom mappings above catchall
2023-04-04 13:12:34 -07:00
485bc22e78
Add TODO for using nomad api socket
2023-03-27 15:50:15 -07:00
c38ba8589a
Clean blocky config for latest version
2023-03-27 15:21:35 -07:00
c7f85bd985
Fix blocky redis stunnel lookup
2023-03-27 15:21:19 -07:00
f17dec7b57
Add nomad services to nomad zone using hosts in blocky
2023-03-27 15:20:50 -07:00
a748adbab0
Store blocky config in local task dir
2023-03-27 15:19:53 -07:00
747d5ef0e7
Remove vault stanza from Grafana
2023-03-27 14:10:10 -07:00
08d0e93638
Clean up and remove some consul and vault stuff
2023-03-24 22:58:44 -07:00
74ce30c3c1
Get nomad client scraping working
2023-03-24 22:22:11 -07:00
98ea2a1ca0
A whole lot of incremental fixes for nomad variables and such
...
Also adds stunnel between redis and clients
2023-03-24 16:32:37 -07:00
d8307935f5
Refactor everything for nomad vars
2023-03-24 11:24:36 -07:00
5fb0e0841e
Blocky do not create read only user to reduce password exposure
2023-03-24 09:56:56 -07:00
00697ebb02
Blocky use wgoverlay for api
2023-03-24 09:56:29 -07:00
f31569ad56
Update cloudflare variable names
2023-03-24 09:56:03 -07:00
46dc44aca4
Simplify mysql for blocky
2023-03-24 08:55:27 -07:00
4430b3570e
Fix blocky template
2023-03-24 08:55:27 -07:00
65cb6afaf9
WIP: Moving vars and service discovery to Nomad
...
Starting with core
2023-03-24 08:55:23 -07:00
