Commit Graph

191 Commits

Author SHA1 Message Date
165a8b3a40 Increase priority of stateful jobs 2022-09-26 16:40:25 -07:00
e3ad6c4ff0 Add playbook to recover consul using peers 2022-09-16 16:46:37 -07:00
1654fd7aef Add another pi 2022-09-16 16:46:10 -07:00
ff49e039da Enable preemption on nomad scheduler 2022-09-16 16:45:26 -07:00
845ea4d391 Make Nomad media-read volume point to rw nfs 2022-09-16 16:44:40 -07:00
b9ea8eb0a2 Remove bootstrapping values from setup playbook
This will be done in another playbook
2022-09-16 16:43:45 -07:00
fbacdb2699 Bootstrap with 3 servers 2022-09-16 16:42:54 -07:00
04c76bd5f8 Get ddclient working again
It was failing due to oom and using cloudflare api tokens which aren't yet supported
2022-09-07 12:20:58 -07:00
50bdb61575 Wait until Nomad is running before bootstrapping ACLs 2022-09-07 11:11:10 -07:00
bd1280b970 Clean up comments in setup cluster playbook 2022-09-07 11:09:33 -07:00
ecbd9626e8 Explicitly set envoy version
The default v1.23.0 does not work on arm64
2022-09-07 11:06:26 -07:00
a9bbc3705a Update vault and nomad versions 2022-09-07 11:05:54 -07:00
c8d77e553d Add playbook to unseal Vault 2022-09-07 11:05:27 -07:00
24c04f4217 Make vault load balancer sticky
Assets like css and js were not proxying correctly. I think it may be
because they were proxying to a different instance and that the paths
are dynamic. This should route subsequent requests for the session to
a single backend.
2022-09-06 17:17:14 -07:00
8aed3a877e Add homeassistant external 2022-09-06 17:15:43 -07:00
47f8b18b46 add nomad login 2022-09-06 14:47:06 -07:00
cfc0a45440 Update security todos and reference node IP for consul queries 2022-09-06 14:46:49 -07:00
a57b1ddee5 Move redis data to ephemeral disk 2022-09-06 11:31:15 -07:00
0e5181fcf0 Move prometheus tsdb data to emphemeral disk 2022-09-06 11:15:14 -07:00
fa5f9e28e6 Move acme certs to /local so they will persit between allocs 2022-09-06 09:45:04 -07:00
722b63260c Add splay to blocky template render
Avoid all instances going down at once when the template canges
2022-09-05 12:57:13 -07:00
67df912755 Fix syslog proxy
Apparently traefik only supports http proxy over connect.

https://github.com/traefik/traefik/issues/7803
2022-09-04 20:21:02 -07:00
d62c96fe34 Use nomad as sole metrics exporter
Drops cadvisor and node_exporter since Nomad seems to export what I need.
2022-09-04 14:32:24 -07:00
d5cbe7174e Remove default volume read_only
It was always setting to true
2022-09-04 14:27:28 -07:00
c2c3d1abc7 Update nfs volumes to try and fix permissions 2022-09-04 14:27:27 -07:00
8ce4e3ff14 Try to use default netowrk source for proxing syslogng 2022-09-04 14:27:27 -07:00
a36f411c1b Add Traefik proxy for Syslogng 2022-09-04 14:27:07 -07:00
444782a0a6 Use default arch maps where possible 2022-08-30 16:15:12 -07:00
92a60cbe3b Update services template to support env and host volumes
Also adds sonarr as an example
2022-08-30 15:16:08 -07:00
9c07141dd1 Use nomad token to look up policies 2022-08-30 15:15:29 -07:00
1c57d9f7f6 Have nomad talk to vault over loopback 2022-08-30 15:15:10 -07:00
0ef488b06a Add new nfs volumes 2022-08-30 15:14:55 -07:00
6fe1d472d0 Multiarch install tweaks for arm64 2022-08-30 15:14:39 -07:00
c073f78ed2 Fix unsealing of single vault instance
Checking status of only one node meant that if that node was sealed
we would not try to unseal other nodes
2022-08-30 15:14:00 -07:00
5214d8275a Enable consul autopilot 2022-08-30 15:12:52 -07:00
89598ffb7c Update nomad, consul, vault versions 2022-08-30 15:12:35 -07:00
89e14dbf56 Use newer cadvisor 2022-08-30 15:11:52 -07:00
2a54b5454d Use updated ansible-nomad role
Has better support for multi-arch installs and fixes cni
2022-08-30 15:10:16 -07:00
520986d30c Add pi4 host 2022-08-30 15:09:48 -07:00
9aad3d1594 Rename nomad anon policy file 2022-08-23 10:31:29 -07:00
39107538e9 WIP: Allow specifying https endpoints and fetching nomad token 2022-08-23 09:57:57 -07:00
1c38aa212e Add mysql database storage to Grafana 2022-07-29 13:02:22 -07:00
0d61ebc877 Add Nomad dashboard to grafana 2022-07-29 13:01:59 -07:00
846ea18a16 Don't deploy Nextcloud 2022-07-29 13:01:40 -07:00
6d31c4e6d6 Stop duplicate nomad scraping
Already getting it from Client service
2022-07-29 13:01:22 -07:00
9d57175584 Increase promtail memory 2022-07-28 16:37:19 -07:00
3c0c74797d Make traefik a service rather than a system job
Sets it up to support auto_revert and auto_promote
2022-07-28 15:11:59 -07:00
4b6c388ed9 Traefik wildcard certs 2022-07-28 15:11:24 -07:00
6ccc5a6bcf Remove variable for consul_address for traefik
Now getting from Noamd environment
2022-07-28 15:10:39 -07:00
48d5704b72 Make lldap backup daily 2022-07-28 15:05:00 -07:00