|
|
35dfeb3093
|
Add service healthchecks
|
2024-01-23 12:08:47 -08:00 |
|
|
|
6fe1b200f2
|
Update loki
|
2024-01-23 12:06:25 -08:00 |
|
|
|
4fe3d46d5f
|
Add external service acls for authelia
|
2024-01-16 14:15:56 -08:00 |
|
|
|
cf8bde7920
|
Add external traefik routes to nomad vars
|
2024-01-16 14:15:18 -08:00 |
|
|
|
bc87688f1a
|
Move ldap secrets
|
2024-01-16 14:14:39 -08:00 |
|
|
|
7b019e0787
|
Add auth to sonarr
|
2024-01-08 14:57:06 -08:00 |
|
|
|
c01d45c7a2
|
Upgrade grafana to version 10
|
2024-01-08 10:11:42 -08:00 |
|
|
|
9be16fef1f
|
Upgrade traefik to 2.10
|
2024-01-04 13:25:10 -08:00 |
|
|
|
c26da678b3
|
Small traefik cleanup
Remove fallback DNS since we only care about internal DNS
Use loopback address for accessing Nomad UI
|
2024-01-04 13:24:49 -08:00 |
|
|
|
6b9533ef71
|
Run traefik on multiple hosts
|
2024-01-04 13:24:15 -08:00 |
|
|
|
0bd995ec2b
|
Traefik: Use nomad vars for dynamic certs
Rather than having Traefik handle cert fetching, instead
it is delegated to a separate job so that multiple Traefik
instances can share certs
|
2024-01-04 10:55:49 -08:00 |
|
|
|
0d340f3349
|
Periodic job to renew lego certs and store them in Nomad Variables
This will allow multiple instance of Traefik to serve certs.
|
2024-01-04 10:53:25 -08:00 |
|
|
|
cda2842f8f
|
Switch to image containing stunnel
Rather than installing on container startup, using an image with
stunnel pre-installed. This avoids issues with DNS breaking
the container on startup.
|
2024-01-03 13:50:49 -08:00 |
|
|
|
ca55209316
|
Fix blocky redis
|
2023-12-10 20:37:43 -08:00 |
|
|
|
1b49f015c5
|
Update blocky config to v0.22 schema
|
2023-11-30 14:00:27 -08:00 |
|
|
|
eb25138675
|
Remove defunct lists
|
2023-11-30 13:39:22 -08:00 |
|
|
|
69a0f760b4
|
Remove defunct lists
|
2023-11-30 13:39:01 -08:00 |
|
|
|
3fcedaddb7
|
Remove todo from traefik
|
2023-11-30 13:26:15 -08:00 |
|
|
|
bb34b434b8
|
Add custom blocklists hosted on my gitea server
|
2023-11-30 13:23:54 -08:00 |
|
|
|
36cdb8f41b
|
Add Gitea
Currently it won't auto bootstrap auth. A command has to be executed one
time to get it to be added to the database.
|
2023-11-30 13:22:54 -08:00 |
|
|
|
e21ec11eb5
|
Fix grafana
Broken template
|
2023-11-20 10:35:49 -08:00 |
|
|
|
891cfa7b2d
|
Update blocky dashboard to not use consul tags
|
2023-11-16 12:21:59 -08:00 |
|
|
|
c11b8e157b
|
Fix grafana dashboard provisioning
A path mismatch existed after migrating to alloc storage
|
2023-11-16 12:21:40 -08:00 |
|
|
|
a2d33ac309
|
Add proxmox influxdb to Grafana
|
2023-10-23 13:10:01 -07:00 |
|
|
|
0c3f98d5c3
|
Pin Grafana to amd64 since renderer requires it.
This could be mitigated by moving the renderer to another task group.
|
2023-10-19 12:06:47 -07:00 |
|
|
|
ad439d48f3
|
Add waiting for loki and prom dependencies in core
|
2023-09-27 21:30:22 -07:00 |
|
|
|
b29f405090
|
Bump prometheus versiosn and pin blocky
|
2023-09-18 21:58:43 -07:00 |
|
|
|
8dd00c1249
|
authelia and grafana to shared smtp secrets
|
2023-08-29 15:11:40 -07:00 |
|
|
|
2bd939e651
|
Remove deprecated hcl2 enabled
|
2023-08-29 13:02:04 -07:00 |
|
|
|
ea8ca478c6
|
Fix blocky acl
|
2023-08-29 12:59:14 -07:00 |
|
|
|
f5898b0283
|
Add workload ACL management for mysql and postgres access
Allows required jobs to access shared secrets and auto generates psks
for stunnel.
Currently supporting MySQL, Postgres, and LDAP.
|
2023-08-29 12:48:48 -07:00 |
|
|
|
013dd8248b
|
Make base_hostname more configurable
|
2023-08-24 15:03:36 -07:00 |
|
|
|
f6dd3f4284
|
Clean up root module and move lldap to databases
|
2023-08-24 13:52:03 -07:00 |
|
|
|
4a7bff7611
|
Move metrics out of a module and into core
|
2023-08-24 13:00:36 -07:00 |
|
|
|
d5078b24da
|
Refactor use of wesher to be behind a variable toggle
Occasionally I run into issues with Wesher. This makes it easier to
disable use of Wesher by setting TF_VAR_use_wesher to false.
|
2023-08-24 12:51:32 -07:00 |
|
|
|
e2c35a82a9
|
Fix grafana config loading
For some reason, the env variable method stoped working.
|
2023-08-24 11:59:10 -07:00 |
|
|
|
1715b58ca9
|
Pin image versions for more critical services
|
2023-08-24 11:39:00 -07:00 |
|
|
|
ddeb8fffbc
|
Move services to their own tf files for easier locating
|
2023-08-07 11:37:19 -07:00 |
|
|
|
fa0da05343
|
Change authelia port to avoid conflict with prometheus
|
2023-08-02 21:31:08 -07:00 |
|
|
|
4b94f66786
|
Increase Traefik memory
|
2023-07-31 10:43:03 -07:00 |
|
|
|
f333031c25
|
bootstrap blocky with stunnel
|
2023-07-26 23:23:23 -07:00 |
|
|
|
744466bf07
|
Use static port for Authelia so that nomad middleware config is the same for each service
|
2023-07-07 16:34:50 -07:00 |
|
|
|
df062000e7
|
Run two authelia instances now that it's stateless
|
2023-07-07 15:56:23 -07:00 |
|
|
|
0a7ad7a9dc
|
Enable redis for authelia
This also splits redis instances by service
|
2023-07-07 15:50:23 -07:00 |
|
|
|
b0c1aca497
|
Increase token time for Nomad OIDC
|
2023-07-07 15:47:08 -07:00 |
|
|
|
60a4051988
|
Enable Authelia OIDC for Nomad
|
2023-07-07 00:41:44 -07:00 |
|
|
|
0ceb513216
|
Switch Grafana to OIDC from proxy auth
|
2023-07-07 00:40:19 -07:00 |
|
|
|
9d5aeeec96
|
Enable Authelia OIDC provider
|
2023-07-07 00:39:44 -07:00 |
|
|
|
eae5b201b6
|
Add two factor for external IPs
|
2023-07-06 21:25:31 -07:00 |
|
|
|
532d7f9a4c
|
Use Authelia for Grafana login
|
2023-07-06 18:00:06 -07:00 |
|
