IamTheFij
24d66bdef3
Add detect-secrets (there are a lot of false positives right now)
2022-07-21 19:01:39 -07:00
IamTheFij
1b88593f88
Major grafana refactor to include automatic loading of provisioning files
2022-07-21 15:54:05 -07:00
IamTheFij
5126f5f4d4
Go back to a single ingress node to simplify Traefik TLS
...
The open source version of Traefik doesn't natively support HA. Running
multiple instances means that the TLS certificates will have to be
managed outside of Traefik and distributed to running jobs via Vault and
Nomad. This is doable, but I've decided to reduce the scope for now to
simplify things and go to a single Ingress node so that Traefik cert
management can be used.
2022-07-21 15:50:13 -07:00
IamTheFij
c58056d594
More nextcloud config using Vault
2022-07-08 16:26:26 -07:00
IamTheFij
02b448e363
Create levant tf module
...
Also a template service Nomad job that can be used for some straighforward services
2022-07-08 16:24:03 -07:00
IamTheFij
11f5c10f83
Ignore ansible_collections
2022-06-28 12:11:55 -07:00
IamTheFij
b2b409a1fe
Add example secrets
2022-06-28 12:11:24 -07:00
IamTheFij
65ce1b55f0
Fix secrets access from nomad tasks
...
Probably can be cleaned up and updated to follow least access
2022-06-28 12:11:07 -07:00
IamTheFij
c0215bf153
Improve vault bootstrap and nomad connection
2022-06-28 12:10:18 -07:00
IamTheFij
bf1ac31cdf
Bootstrap vault secrets
2022-06-28 12:09:57 -07:00
IamTheFij
41343a6d2c
Small improvement to consul kv role
2022-06-28 12:08:23 -07:00
IamTheFij
ce09177479
Add missing role requirements file
...
This uses updated fork of ansible-consul
2022-06-23 20:13:17 -07:00
IamTheFij
13e9eac407
Deploy traefik one at a time with autorevert
2022-06-23 20:12:30 -07:00
IamTheFij
d40d585358
Install consul dns forwarding
2022-06-23 20:12:09 -07:00
IamTheFij
0bfdddf3ee
Install consul from repo
2022-06-23 20:11:48 -07:00
IamTheFij
617d4ae676
Make blocky config a bit more stable by removing templating based on whami
2022-06-23 20:11:28 -07:00
IamTheFij
3d6b405ab6
Fix blocky upstream tcp for quad9
2022-06-23 20:11:09 -07:00
IamTheFij
2f4d90abdc
Auto revert broken blocky
...
Also enable traefik
2022-06-23 20:10:36 -07:00
IamTheFij
ffdfdeadfb
Add Consul lookup for ads dns allowlist
2022-06-23 13:36:06 -07:00
IamTheFij
fc2db88276
Add some more upstream dns options
...
Should pick one later
2022-06-23 13:34:08 -07:00
IamTheFij
eb066f5d98
Increase priority of Traefik
2022-06-23 09:51:42 -07:00
IamTheFij
e5b61d5307
Update Nomad
2022-06-23 09:51:21 -07:00
IamTheFij
6b14507ca6
Generate blocky host mapping from Consul kv
2022-06-23 09:51:09 -07:00
IamTheFij
5d2301c791
Update blocky one instance at a time
...
Avoids dns going down with all instances updating at once
2022-06-23 09:50:23 -07:00
IamTheFij
d7fa57864f
Deploy backup jobs to all hosts and dynamically determine jobs per node
2022-06-23 09:49:57 -07:00
IamTheFij
9ab300c225
Remove csi deployment
2022-06-23 09:49:03 -07:00
IamTheFij
520d7c56b9
Move databases to a single module
2022-06-23 09:48:01 -07:00
IamTheFij
a02f1a2317
Make traefik a system service
...
For this to work, will need to put TLS certs in Vault
2022-06-17 15:20:43 -07:00
IamTheFij
ce18650e1f
Add base hostname to consul in Playbook
2022-06-17 15:19:43 -07:00
IamTheFij
16b9440e12
WIP: Add democratic-csi storage plugin
2022-06-17 15:19:19 -07:00
IamTheFij
252c9b4111
Make nextcloud backup a non-sidecar task
...
Avoids restarting whole group when if it fails
2022-06-17 15:16:45 -07:00
IamTheFij
8cd2abc6b8
Remove some unecessary traefik configs from tasks
2022-06-17 15:15:37 -07:00
IamTheFij
049364df23
Make order of host configs match playbook order
2022-06-17 15:14:55 -07:00
IamTheFij
c41babe346
Use new host name in terraform consul address
2022-05-24 20:11:57 -07:00
IamTheFij
6cd7bae240
Use new token variable name after bootstrap
2022-05-24 20:11:41 -07:00
IamTheFij
de4c96b104
Add autopilot
2022-05-24 20:11:18 -07:00
IamTheFij
f50cb98d30
Add docker install
2022-05-24 20:11:07 -07:00
IamTheFij
1995434140
Auto initialize vault
2022-05-24 20:10:47 -07:00
IamTheFij
d6407d25a0
Wait until mysql is deployed before continuing
...
Otherwise dependent jobs will fail and take up time restarting
2022-05-24 20:10:26 -07:00
IamTheFij
8eb7a58dfd
Remove unused playbook
2022-05-24 20:09:45 -07:00
IamTheFij
e677259a1d
Switch to a 3 node cluster for better resiliance
2022-05-24 20:09:22 -07:00
IamTheFij
1352eeb3e8
Fix venv detection for ansible cluster target
...
This fixes the installation of the consul python library
2022-05-24 20:07:52 -07:00
IamTheFij
5f9a04fa5d
Make redis optional for blocky to help with resliliance to a single host failing
2022-05-19 16:54:16 -07:00
IamTheFij
38597a7eda
Dynamically add dns routes to traefik instances to blocky
2022-05-19 16:53:56 -07:00
IamTheFij
719c1b62d1
Add dedicated backup module and jobs
...
Possible alternative to backups deployed with each job
2022-05-18 14:23:46 -07:00
IamTheFij
fb9e9017ff
Fix prom scraping
2022-05-18 14:22:52 -07:00
IamTheFij
8d3d0d0224
Add smarttv block list to default on blocky
2022-05-18 14:22:35 -07:00
IamTheFij
f0eacea11f
Default nomad cluster to ansible
2022-05-18 14:22:21 -07:00
IamTheFij
1b8c2d6bcf
nomad: Run block on all hosts
2022-05-18 11:29:00 -07:00
IamTheFij
96f213a535
Bootstrap kubernetes
2022-05-17 10:43:29 -07:00
IamTheFij