Commit Graph

161 Commits

Author SHA1 Message Date
f5898b0283 Add workload ACL management for mysql and postgres access
Allows required jobs to access shared secrets and auto generates psks
for stunnel.

Currently supporting MySQL, Postgres, and LDAP.
2023-08-29 12:48:48 -07:00
2efc7f8c2f Add ability to set job meta for services 2023-08-24 15:41:18 -07:00
7aa5b800ba Clean up finally rendered templates for services 2023-08-24 15:37:42 -07:00
013dd8248b Make base_hostname more configurable 2023-08-24 15:03:36 -07:00
b4a6901687 Bump up sonarr memory a little more 2023-08-24 12:51:32 -07:00
d5078b24da Refactor use of wesher to be behind a variable toggle
Occasionally I run into issues with Wesher. This makes it easier to
disable use of Wesher by setting TF_VAR_use_wesher to false.
2023-08-24 12:51:32 -07:00
0cfd052a6e Move backup module to a module under root 2023-08-24 11:53:08 -07:00
1715b58ca9 Pin image versions for more critical services 2023-08-24 11:39:00 -07:00
440c0b0c4c Move redis commander 2023-08-24 11:37:13 -07:00
47da10febf Remove unused caddy module 2023-08-24 11:11:36 -07:00
0a8395e8fa Add bazarr configs 2023-08-21 10:54:57 -07:00
05c367e531 Try to format time zones from minitor 2023-08-18 12:15:34 -07:00
dcb9f7d26f Add log alert back to minitor 2023-08-11 07:08:00 -04:00
64d61d69a1 Fix Plex minitor check 2023-08-11 06:52:51 -04:00
92e42b5605 Update and add time format to minitor 2023-08-11 03:49:55 -07:00
b62029be0a Lower photoprism resources to make it easier to schedule 2023-08-10 15:56:12 -07:00
ddeb8fffbc Move services to their own tf files for easier locating 2023-08-07 11:37:19 -07:00
41c9d3d6f6 Adjust down default service stunnel sidecar resources
Keep photoprism and lidarr, database heavy tools, at the same level
2023-08-07 11:31:35 -07:00
02959c7673 Update minitor with new apps and global options 2023-08-03 14:39:50 -07:00
3e0533954f Add authelia backup job 2023-08-03 10:36:42 -07:00
df5ed00f05 Update backup job config to iterate over job files
This will prevent new ones from being added and not included
2023-08-03 10:33:11 -07:00
0a5480129e Remove nextcloud since it's not used 2023-08-03 10:32:34 -07:00
946873e5ad Make sure existing jobs are loaded 2023-08-03 10:21:34 -07:00
d8f8884cb8 Improve backup job configuration
Add lidarr, fix hosts to 'nomad' since host names change with containers and nodes
and don't make a difference, make most jobs daily, exclude sonarr and lidarr zip backups
from restic backups.
2023-08-03 10:11:57 -07:00
e63327428f Update backups to v0.2.0 to include postgres 2023-08-03 09:53:31 -07:00
a2d24e03cd Deploy adhoc backups to all hosts 2023-08-03 09:53:03 -07:00
f66bd95fbb Run backup batches on all hosts 2023-08-02 21:33:16 -07:00
2844493fa1 Increase pgsql and lidarr memory to prevent crashes on library 2023-07-31 10:43:51 -07:00
254ef01de9 Increase lidarr resources 2023-07-26 15:30:05 -07:00
70098930f8 Add lidarr 2023-07-25 16:57:33 -07:00
e7c985d276 Allow adminer to connect to postgres 2023-07-25 16:57:33 -07:00
0ea9da3a53 Update postgres bootstrap allowing multiple databases 2023-07-25 16:57:33 -07:00
ac29343d96 Add postgres stunnel and service bootstrap 2023-07-25 10:59:33 -07:00
f8478ae6c9 Service Template: Make sure stunnel is there for ldap 2023-07-25 10:30:28 -07:00
f0d31ff13c Move stunnel psks to a more restrictive path 2023-07-25 10:16:30 -07:00
c33f877af8 Allow specifying port from value for local host binding 2023-07-24 15:23:40 -07:00
b9fb2d4b07 Add ability to specify custom services for service module 2023-07-24 15:23:31 -07:00
2e7dc0315e Use shorthand for ingress middlware for photoprism 2023-07-07 16:35:07 -07:00
d0641f8edf Enable setting static ports for service template 2023-07-07 16:33:36 -07:00
b75f8fce7b Clean photoprism config 2023-07-07 15:56:24 -07:00
2b91b6dc8f Add instance count to service template 2023-07-07 15:51:19 -07:00
85db434c1f Minor cleanup to backups module 2023-07-07 15:50:58 -07:00
0a7ad7a9dc Enable redis for authelia
This also splits redis instances by service
2023-07-07 15:50:23 -07:00
88e91e5e5d Deploy authelia
Backed by lldap and mysql and deployed on whoami for now as a forward
proxy example

Would be good to add oidc for Nomad as well as make policies configurable
via Nomad variables.
2023-07-06 18:00:06 -07:00
a90b3bbdbe Make it easier to enable bootstrap now that key isn't included 2023-07-06 17:25:13 -07:00
cdbd6a9cb3 Add ability to set priority for service templates 2023-07-06 17:25:13 -07:00
8650ab973a Add stunnel for ldap as part of service template 2023-07-06 17:25:13 -07:00
acc80868f9 Switch lldap storage to mysql 2023-07-05 17:30:54 -07:00
5dc0e4bcaf Use pushgateway with restic scheduler batches
Batches can't run due to incorrectly scoped variables
2023-05-09 15:56:53 -07:00
f11fad30a5 Use stunnel for mysql
Doesn't remove wesher or normal mysql service
2023-05-09 13:20:36 -07:00
30766cce39 Bump up sonarr memory 2023-05-09 11:40:31 -07:00
27fd60d84d Add missing service to Wesher
Promtail, Backups, service module
2023-05-02 21:14:36 -07:00
1c14430c99 Preliminary hw transcode support for Photoprism on pi4 2023-04-20 16:48:04 -07:00
f75d149f32 Add constraints and docker devices to service template 2023-04-20 16:47:07 -07:00
42054d8fa6 More whoami instances 2023-04-14 14:24:33 -07:00
485bc22e78 Add TODO for using nomad api socket 2023-03-27 15:50:15 -07:00
28564b6130 Bind nzbget to static port
This allows it to be referenced in sonarr by nzbget.nomad:6789
2023-03-27 15:23:55 -07:00
8e3fbcedb9 Fix backup conditionals 2023-03-24 23:34:23 -07:00
08d0e93638 Clean up and remove some consul and vault stuff 2023-03-24 22:58:44 -07:00
98ea2a1ca0 A whole lot of incremental fixes for nomad variables and such
Also adds stunnel between redis and clients
2023-03-24 16:32:37 -07:00
d8307935f5 Refactor everything for nomad vars 2023-03-24 11:24:36 -07:00
ee68310e58 Add Nomad provider and sample using Wesher 2023-03-24 08:50:16 -07:00
bc354ba041 Increase sidecar resources for dvr 2023-03-14 22:43:51 -07:00
24461d4c6f Add envoy metrics to ipdvr 2023-03-02 11:05:36 -08:00
e0fe3327f0 Move media library service to service template 2023-03-02 11:01:44 -08:00
5228e7c7fb Export envoy metrics for services 2023-03-02 11:00:30 -08:00
882fe7e29c Some cleanup of service template whitespace 2023-03-02 10:42:33 -08:00
f41bdb7dd0 Increase photoprism resources 2023-03-02 10:39:42 -08:00
208f90e7bf Increase memory and max memory for connect proxy for services 2023-02-28 15:57:45 -08:00
20bb6ba7aa Increase memory max for photoprism 2023-02-28 15:57:16 -08:00
36d00300c3 Move nzbget and photoprism config to shared storage on NAS SSD 2023-02-28 12:16:49 -08:00
3a8cca53f3 Update photoprism and use new storage path 2023-02-27 11:54:33 -08:00
9fe63d03d9 Add image_pull_timeout to service template 2023-02-27 11:54:33 -08:00
5341cb1c8b Increase sonarr memory 2023-02-27 11:54:33 -08:00
f46cb72681 Add sabnzbd 2023-02-27 11:54:33 -08:00
2f9d0533e0 Move nzbget to proxmox nfs share 2023-02-27 11:54:33 -08:00
061c375652 Use new NAS paths 2023-02-27 11:54:32 -08:00
15ea178e8e Update Plex url 2023-02-15 19:55:35 -08:00
03fd68b4f7 Add diun for monitoring images 2023-01-12 12:11:16 -08:00
0a798aa5a7 Add meta tags to service template 2023-01-11 15:40:42 -08:00
19031834fb Quote monitor name to prevent shell issues 2023-01-07 14:10:42 -08:00
66db9fbd58 Update prune settings for backups 2023-01-06 16:08:19 -08:00
4f5f4e0fe6 Increase priority of backup tasks 2022-11-18 08:58:38 -08:00
080cea9637 Fix minitor
Healthcheck was failing due to wrong path and log alert was failing
due to the config file being templated by Nomad. Updated to use a
different delimiter.
2022-11-16 09:04:32 -08:00
b098a325f8 Add backups for photoprism 2022-11-15 09:19:55 -08:00
c5135be4a0 Pin photoprism version to avoid pulling every time 2022-11-15 09:19:32 -08:00
4a68894238 Add some minitor checks 2022-11-15 09:04:18 -08:00
17ab7f637f Add metrics support to service template 2022-11-15 09:04:18 -08:00
e104cbccc4 Use new Photos share for Photoprism 2022-11-15 09:04:18 -08:00
0d47a1f8c8 Tune PhotoPrism 2022-11-11 16:21:47 -08:00
da70aa74ca Add expose path for blocky /metrics
Not sure if it's needed
2022-11-11 13:47:27 -08:00
a30749f357 Switch services to module based Terraform template from levant
This ends up with a better experience in dealing with tfstate for some
services. Not sure why.
2022-11-11 13:47:26 -08:00
068dc73717 Add photoprism 2022-11-10 13:37:50 -08:00
e9f2fae609 Switch mysql to mariadb 2022-11-10 13:37:50 -08:00
1fad6b691c Update some metrics 2022-11-07 20:50:18 -08:00
f9d46faae9 Rename backup jobs to be lower case 2022-11-04 09:39:08 -07:00
931e2b6e00 Make sure grafana mysql dump happens after dir is created 2022-11-03 22:18:04 -07:00
9d56f6226c Try to reduce concurrent ftp 2022-11-03 22:17:48 -07:00
39bd8aafaf Move backup jobs to local dir
Makes debugging easier
2022-11-03 22:17:26 -07:00
5bbb6c494c Fix some formatting 2022-11-03 15:10:09 -07:00