bd1280b970
Clean up comments in setup cluster playbook
2022-09-07 11:09:33 -07:00
ecbd9626e8
Explicitly set envoy version
...
The default v1.23.0 does not work on arm64
2022-09-07 11:06:26 -07:00
a9bbc3705a
Update vault and nomad versions
2022-09-07 11:05:54 -07:00
c8d77e553d
Add playbook to unseal Vault
2022-09-07 11:05:27 -07:00
24c04f4217
Make vault load balancer sticky
...
Assets like css and js were not proxying correctly. I think it may be
because they were proxying to a different instance and that the paths
are dynamic. This should route subsequent requests for the session to
a single backend.
2022-09-06 17:17:14 -07:00
8aed3a877e
Add homeassistant external
2022-09-06 17:15:43 -07:00
47f8b18b46
add nomad login
2022-09-06 14:47:06 -07:00
cfc0a45440
Update security todos and reference node IP for consul queries
2022-09-06 14:46:49 -07:00
a57b1ddee5
Move redis data to ephemeral disk
2022-09-06 11:31:15 -07:00
0e5181fcf0
Move prometheus tsdb data to emphemeral disk
2022-09-06 11:15:14 -07:00
fa5f9e28e6
Move acme certs to /local so they will persit between allocs
2022-09-06 09:45:04 -07:00
722b63260c
Add splay to blocky template render
...
Avoid all instances going down at once when the template canges
2022-09-05 12:57:13 -07:00
67df912755
Fix syslog proxy
...
Apparently traefik only supports http proxy over connect.
https://github.com/traefik/traefik/issues/7803
2022-09-04 20:21:02 -07:00
d62c96fe34
Use nomad as sole metrics exporter
...
Drops cadvisor and node_exporter since Nomad seems to export what I need.
2022-09-04 14:32:24 -07:00
d5cbe7174e
Remove default volume read_only
...
It was always setting to true
2022-09-04 14:27:28 -07:00
c2c3d1abc7
Update nfs volumes to try and fix permissions
2022-09-04 14:27:27 -07:00
8ce4e3ff14
Try to use default netowrk source for proxing syslogng
2022-09-04 14:27:27 -07:00
a36f411c1b
Add Traefik proxy for Syslogng
2022-09-04 14:27:07 -07:00
444782a0a6
Use default arch maps where possible
2022-08-30 16:15:12 -07:00
92a60cbe3b
Update services template to support env and host volumes
...
Also adds sonarr as an example
2022-08-30 15:16:08 -07:00
9c07141dd1
Use nomad token to look up policies
2022-08-30 15:15:29 -07:00
1c57d9f7f6
Have nomad talk to vault over loopback
2022-08-30 15:15:10 -07:00
0ef488b06a
Add new nfs volumes
2022-08-30 15:14:55 -07:00
6fe1d472d0
Multiarch install tweaks for arm64
2022-08-30 15:14:39 -07:00
c073f78ed2
Fix unsealing of single vault instance
...
Checking status of only one node meant that if that node was sealed
we would not try to unseal other nodes
2022-08-30 15:14:00 -07:00
5214d8275a
Enable consul autopilot
2022-08-30 15:12:52 -07:00
89598ffb7c
Update nomad, consul, vault versions
2022-08-30 15:12:35 -07:00
89e14dbf56
Use newer cadvisor
2022-08-30 15:11:52 -07:00
2a54b5454d
Use updated ansible-nomad role
...
Has better support for multi-arch installs and fixes cni
2022-08-30 15:10:16 -07:00
520986d30c
Add pi4 host
2022-08-30 15:09:48 -07:00
9aad3d1594
Rename nomad anon policy file
2022-08-23 10:31:29 -07:00
39107538e9
WIP: Allow specifying https endpoints and fetching nomad token
2022-08-23 09:57:57 -07:00
1c38aa212e
Add mysql database storage to Grafana
2022-07-29 13:02:22 -07:00
0d61ebc877
Add Nomad dashboard to grafana
2022-07-29 13:01:59 -07:00
846ea18a16
Don't deploy Nextcloud
2022-07-29 13:01:40 -07:00
6d31c4e6d6
Stop duplicate nomad scraping
...
Already getting it from Client service
2022-07-29 13:01:22 -07:00
9d57175584
Increase promtail memory
2022-07-28 16:37:19 -07:00
3c0c74797d
Make traefik a service rather than a system job
...
Sets it up to support auto_revert and auto_promote
2022-07-28 15:11:59 -07:00
4b6c388ed9
Traefik wildcard certs
2022-07-28 15:11:24 -07:00
6ccc5a6bcf
Remove variable for consul_address for traefik
...
Now getting from Noamd environment
2022-07-28 15:10:39 -07:00
48d5704b72
Make lldap backup daily
2022-07-28 15:05:00 -07:00
62f59b3929
conditional dns lookups for router assigned domains
2022-07-27 22:04:46 -07:00
c074df4bc7
Working backup and restore
2022-07-27 22:04:22 -07:00
d175166045
Make traefik disk ephemeral and sticky
2022-07-27 17:30:35 -07:00
c8493b1fc5
Bump Traefik mem limit
...
We don't like this crashing
2022-07-27 17:26:13 -07:00
a3f59145bd
Skip dump of lldap db
2022-07-27 17:25:41 -07:00
9a315eb2f7
Add lldap backup and templatize backup job
...
Now oneoff and system jobs are all using the same template
2022-07-27 17:02:29 -07:00
6e074c55aa
Increase prometheus memory limit
2022-07-27 16:11:56 -07:00
ecaee6f8be
Add lldap
2022-07-27 15:57:28 -07:00
4213b322c1
Remove set hostname because that's now done in bootstrap
2022-07-27 15:57:12 -07:00
