04adb5db04
Go back to hard coded node names for for_each
...
For some reason this worked until it didn't
2022-10-31 15:24:14 -07:00
fafe8f0103
Rename backup service fixing mysql access
2022-10-31 15:23:42 -07:00
ca299db949
Fix sonarr dl folder
2022-10-31 11:32:09 -07:00
e7edef528b
Refactor external service definitions
2022-10-28 12:42:28 -07:00
2a733aff96
Increase sonarr memory
...
Wow, this uses a lot of mem
2022-10-28 12:34:44 -07:00
7493fb27ec
Big refactor to split core and services for better ordering
2022-10-27 14:28:34 -07:00
c230e05aa8
Better first run bootstrap
2022-09-27 21:59:37 -07:00
7647832434
Fix typo
2022-09-27 21:29:00 -07:00
0a6a9be872
New playbook to reset server data
2022-09-27 21:28:37 -07:00
3e89a101bf
Improve first run cluster setup
2022-09-27 21:28:02 -07:00
bfa8633fcf
Remove some hosts
2022-09-27 21:27:34 -07:00
7d25cd3098
Add local loopback as dns in resolv.conf
2022-09-26 16:52:59 -07:00
165a8b3a40
Increase priority of stateful jobs
2022-09-26 16:40:25 -07:00
e3ad6c4ff0
Add playbook to recover consul using peers
2022-09-16 16:46:37 -07:00
1654fd7aef
Add another pi
2022-09-16 16:46:10 -07:00
ff49e039da
Enable preemption on nomad scheduler
2022-09-16 16:45:26 -07:00
845ea4d391
Make Nomad media-read volume point to rw nfs
2022-09-16 16:44:40 -07:00
b9ea8eb0a2
Remove bootstrapping values from setup playbook
...
This will be done in another playbook
2022-09-16 16:43:45 -07:00
fbacdb2699
Bootstrap with 3 servers
2022-09-16 16:42:54 -07:00
04c76bd5f8
Get ddclient working again
...
It was failing due to oom and using cloudflare api tokens which aren't yet supported
2022-09-07 12:20:58 -07:00
50bdb61575
Wait until Nomad is running before bootstrapping ACLs
2022-09-07 11:11:10 -07:00
bd1280b970
Clean up comments in setup cluster playbook
2022-09-07 11:09:33 -07:00
ecbd9626e8
Explicitly set envoy version
...
The default v1.23.0 does not work on arm64
2022-09-07 11:06:26 -07:00
a9bbc3705a
Update vault and nomad versions
2022-09-07 11:05:54 -07:00
c8d77e553d
Add playbook to unseal Vault
2022-09-07 11:05:27 -07:00
24c04f4217
Make vault load balancer sticky
...
Assets like css and js were not proxying correctly. I think it may be
because they were proxying to a different instance and that the paths
are dynamic. This should route subsequent requests for the session to
a single backend.
2022-09-06 17:17:14 -07:00
8aed3a877e
Add homeassistant external
2022-09-06 17:15:43 -07:00
47f8b18b46
add nomad login
2022-09-06 14:47:06 -07:00
cfc0a45440
Update security todos and reference node IP for consul queries
2022-09-06 14:46:49 -07:00
a57b1ddee5
Move redis data to ephemeral disk
2022-09-06 11:31:15 -07:00
0e5181fcf0
Move prometheus tsdb data to emphemeral disk
2022-09-06 11:15:14 -07:00
fa5f9e28e6
Move acme certs to /local so they will persit between allocs
2022-09-06 09:45:04 -07:00
722b63260c
Add splay to blocky template render
...
Avoid all instances going down at once when the template canges
2022-09-05 12:57:13 -07:00
67df912755
Fix syslog proxy
...
Apparently traefik only supports http proxy over connect.
https://github.com/traefik/traefik/issues/7803
2022-09-04 20:21:02 -07:00
d62c96fe34
Use nomad as sole metrics exporter
...
Drops cadvisor and node_exporter since Nomad seems to export what I need.
2022-09-04 14:32:24 -07:00
d5cbe7174e
Remove default volume read_only
...
It was always setting to true
2022-09-04 14:27:28 -07:00
c2c3d1abc7
Update nfs volumes to try and fix permissions
2022-09-04 14:27:27 -07:00
8ce4e3ff14
Try to use default netowrk source for proxing syslogng
2022-09-04 14:27:27 -07:00
a36f411c1b
Add Traefik proxy for Syslogng
2022-09-04 14:27:07 -07:00
444782a0a6
Use default arch maps where possible
2022-08-30 16:15:12 -07:00
92a60cbe3b
Update services template to support env and host volumes
...
Also adds sonarr as an example
2022-08-30 15:16:08 -07:00
9c07141dd1
Use nomad token to look up policies
2022-08-30 15:15:29 -07:00
1c57d9f7f6
Have nomad talk to vault over loopback
2022-08-30 15:15:10 -07:00
0ef488b06a
Add new nfs volumes
2022-08-30 15:14:55 -07:00
6fe1d472d0
Multiarch install tweaks for arm64
2022-08-30 15:14:39 -07:00
c073f78ed2
Fix unsealing of single vault instance
...
Checking status of only one node meant that if that node was sealed
we would not try to unseal other nodes
2022-08-30 15:14:00 -07:00
5214d8275a
Enable consul autopilot
2022-08-30 15:12:52 -07:00
89598ffb7c
Update nomad, consul, vault versions
2022-08-30 15:12:35 -07:00
89e14dbf56
Use newer cadvisor
2022-08-30 15:11:52 -07:00
2a54b5454d
Use updated ansible-nomad role
...
Has better support for multi-arch installs and fixes cni
2022-08-30 15:10:16 -07:00
