IamTheFij
af05a96501
Add playbook for recovering nomad cluster with peers.json
2022-11-01 15:03:08 -07:00
IamTheFij
754c4393f3
Remove query for nomad-clients on backup task
...
Not used anymore
2022-10-31 15:27:29 -07:00
IamTheFij
04adb5db04
Go back to hard coded node names for `for_each`
...
For some reason this worked until it didn't
2022-10-31 15:24:14 -07:00
IamTheFij
fafe8f0103
Rename backup service fixing mysql access
2022-10-31 15:23:42 -07:00
IamTheFij
ca299db949
Fix sonarr dl folder
2022-10-31 11:32:09 -07:00
IamTheFij
e7edef528b
Refactor external service definitions
2022-10-28 12:42:28 -07:00
IamTheFij
2a733aff96
Increase sonarr memory
...
Wow, this uses a lot of mem
2022-10-28 12:34:44 -07:00
IamTheFij
7493fb27ec
Big refactor to split core and services for better ordering
2022-10-27 14:28:34 -07:00
IamTheFij
c230e05aa8
Better first run bootstrap
2022-09-27 21:59:37 -07:00
IamTheFij
7647832434
Fix typo
2022-09-27 21:29:00 -07:00
IamTheFij
0a6a9be872
New playbook to reset server data
2022-09-27 21:28:37 -07:00
IamTheFij
3e89a101bf
Improve first run cluster setup
2022-09-27 21:28:02 -07:00
IamTheFij
bfa8633fcf
Remove some hosts
2022-09-27 21:27:34 -07:00
IamTheFij
7d25cd3098
Add local loopback as dns in resolv.conf
2022-09-26 16:52:59 -07:00
IamTheFij
165a8b3a40
Increase priority of stateful jobs
2022-09-26 16:40:25 -07:00
IamTheFij
e3ad6c4ff0
Add playbook to recover consul using peers
2022-09-16 16:46:37 -07:00
IamTheFij
1654fd7aef
Add another pi
2022-09-16 16:46:10 -07:00
IamTheFij
ff49e039da
Enable preemption on nomad scheduler
2022-09-16 16:45:26 -07:00
IamTheFij
845ea4d391
Make Nomad media-read volume point to rw nfs
2022-09-16 16:44:40 -07:00
IamTheFij
b9ea8eb0a2
Remove bootstrapping values from setup playbook
...
This will be done in another playbook
2022-09-16 16:43:45 -07:00
IamTheFij
fbacdb2699
Bootstrap with 3 servers
2022-09-16 16:42:54 -07:00
IamTheFij
04c76bd5f8
Get ddclient working again
...
It was failing due to oom and using cloudflare api tokens which aren't yet supported
2022-09-07 12:20:58 -07:00
IamTheFij
50bdb61575
Wait until Nomad is running before bootstrapping ACLs
2022-09-07 11:11:10 -07:00
IamTheFij
bd1280b970
Clean up comments in setup cluster playbook
2022-09-07 11:09:33 -07:00
IamTheFij
ecbd9626e8
Explicitly set envoy version
...
The default v1.23.0 does not work on arm64
2022-09-07 11:06:26 -07:00
IamTheFij
a9bbc3705a
Update vault and nomad versions
2022-09-07 11:05:54 -07:00
IamTheFij
c8d77e553d
Add playbook to unseal Vault
2022-09-07 11:05:27 -07:00
IamTheFij
24c04f4217
Make vault load balancer sticky
...
Assets like css and js were not proxying correctly. I think it may be
because they were proxying to a different instance and that the paths
are dynamic. This should route subsequent requests for the session to
a single backend.
2022-09-06 17:17:14 -07:00
IamTheFij
8aed3a877e
Add homeassistant external
2022-09-06 17:15:43 -07:00
IamTheFij
47f8b18b46
add nomad login
2022-09-06 14:47:06 -07:00
IamTheFij
cfc0a45440
Update security todos and reference node IP for consul queries
2022-09-06 14:46:49 -07:00
IamTheFij
a57b1ddee5
Move redis data to ephemeral disk
2022-09-06 11:31:15 -07:00
IamTheFij
0e5181fcf0
Move prometheus tsdb data to emphemeral disk
2022-09-06 11:15:14 -07:00
IamTheFij
fa5f9e28e6
Move acme certs to /local so they will persit between allocs
2022-09-06 09:45:04 -07:00
IamTheFij
722b63260c
Add splay to blocky template render
...
Avoid all instances going down at once when the template canges
2022-09-05 12:57:13 -07:00
IamTheFij
67df912755
Fix syslog proxy
...
Apparently traefik only supports http proxy over connect.
https://github.com/traefik/traefik/issues/7803
2022-09-04 20:21:02 -07:00
IamTheFij
d62c96fe34
Use nomad as sole metrics exporter
...
Drops cadvisor and node_exporter since Nomad seems to export what I need.
2022-09-04 14:32:24 -07:00
IamTheFij
d5cbe7174e
Remove default volume read_only
...
It was always setting to true
2022-09-04 14:27:28 -07:00
IamTheFij
c2c3d1abc7
Update nfs volumes to try and fix permissions
2022-09-04 14:27:27 -07:00
IamTheFij
8ce4e3ff14
Try to use default netowrk source for proxing syslogng
2022-09-04 14:27:27 -07:00
IamTheFij
a36f411c1b
Add Traefik proxy for Syslogng
2022-09-04 14:27:07 -07:00
IamTheFij
444782a0a6
Use default arch maps where possible
2022-08-30 16:15:12 -07:00
IamTheFij
92a60cbe3b
Update services template to support env and host volumes
...
Also adds sonarr as an example
2022-08-30 15:16:08 -07:00
IamTheFij
9c07141dd1
Use nomad token to look up policies
2022-08-30 15:15:29 -07:00
IamTheFij
1c57d9f7f6
Have nomad talk to vault over loopback
2022-08-30 15:15:10 -07:00
IamTheFij
0ef488b06a
Add new nfs volumes
2022-08-30 15:14:55 -07:00
IamTheFij
6fe1d472d0
Multiarch install tweaks for arm64
2022-08-30 15:14:39 -07:00
IamTheFij
c073f78ed2
Fix unsealing of single vault instance
...
Checking status of only one node meant that if that node was sealed
we would not try to unseal other nodes
2022-08-30 15:14:00 -07:00
IamTheFij
5214d8275a
Enable consul autopilot
2022-08-30 15:12:52 -07:00
IamTheFij
89598ffb7c
Update nomad, consul, vault versions
2022-08-30 15:12:35 -07:00
IamTheFij