Commit Graph

Select branches

Hide Pull Requests

authelia

cepfs

consul-acls

gitea

immich

main

nomad-only-metrics

post-bootstrap-improvements

step-ca

syslog-proxy

vault-oidc-provider

Mono Color

• 3ec1d008e8 Move traefik connect intents to core Ian Fijolek 2022-07-25 15:54:23 -0700
• 04bdef01b8 Allow bypass of healthcheck Ian Fijolek 2022-07-25 15:52:02 -0700
• 157005ae7b Get mysql root from vault Ian Fijolek 2022-07-25 15:51:41 -0700
• 4a06f31f49 Tweak memory requirements for tasks Ian Fijolek 2022-07-25 15:51:16 -0700
• 9d4cd68648 Add test consul backup Ian Fijolek 2022-07-25 15:50:25 -0700
• 18807de608 Clean up Grafana and Loki bootstraps Ian Fijolek 2022-07-25 15:49:29 -0700
• de82205147 Remove packer stuff Ian Fijolek 2022-07-25 15:49:07 -0700
• 96263d1e99 Update lockfile Ian Fijolek 2022-07-25 15:40:54 -0700
• 9bb8b39fed Add new playbook and make target for bootstrapping values to Consul and Vault Ian Fijolek 2022-07-25 15:40:22 -0700
• 888b1236f1 Update playbook, move acls and comment for fixes Ian Fijolek 2022-07-25 10:51:34 -0700
• a0aba7f2f0 Make acls module stand alone Ian Fijolek 2022-07-25 10:50:12 -0700
• fed875f852 Shorten pip installs Ian Fijolek 2022-07-25 10:43:25 -0700
• 068da0d539 Add vault kv creation Ian Fijolek 2022-07-25 11:14:51 -0700
• 464cdf7010 Add loki, promtail, and syslog-ng Ian Fijolek 2022-07-25 10:46:16 -0700
• 391ad8dee6 Add sticky disk to service template Ian Fijolek 2022-07-25 10:44:37 -0700
• d386a839c4 Promethus: Use env for consul address rather than variable Ian Fijolek 2022-07-25 10:38:48 -0700
• af4324db6f Move core services to new tf file Ian Fijolek 2022-07-25 10:37:32 -0700
• a7e276c637 WIP: Write a consul backup job Ian Fijolek 2022-07-21 20:24:50 -0700
• 842e656342 Add consul bootstrap and move vault to an example Ian Fijolek 2022-07-21 20:15:11 -0700
• 47a74b6166 Fix consul address in levant Ian Fijolek 2022-07-21 20:11:21 -0700
• 16813e8cb7 Deploy Nomad, Consul, and Vault using apt repo Ian Fijolek 2022-07-21 19:04:44 -0700
• 60dd856666 Use vault for backups jobs Ian Fijolek 2022-07-21 19:03:40 -0700
• 24d66bdef3 Add detect-secrets (there are a lot of false positives right now) Ian Fijolek 2022-07-21 19:01:39 -0700
• 1b88593f88 Major grafana refactor to include automatic loading of provisioning files Ian Fijolek 2022-07-21 15:54:05 -0700
• 5126f5f4d4 Go back to a single ingress node to simplify Traefik TLS Ian Fijolek 2022-07-21 15:50:07 -0700
• c58056d594 More nextcloud config using Vault Ian Fijolek 2022-07-08 16:26:26 -0700
• 02b448e363 Create levant tf module Ian Fijolek 2022-07-08 16:24:03 -0700
• 11f5c10f83 Ignore ansible_collections Ian Fijolek 2022-06-28 12:11:55 -0700
• b2b409a1fe Add example secrets Ian Fijolek 2022-06-28 12:11:24 -0700
• 65ce1b55f0 Fix secrets access from nomad tasks Ian Fijolek 2022-06-28 12:11:07 -0700
• c0215bf153 Improve vault bootstrap and nomad connection Ian Fijolek 2022-06-28 12:10:18 -0700
• bf1ac31cdf Bootstrap vault secrets Ian Fijolek 2022-06-28 12:09:07 -0700
• 41343a6d2c Small improvement to consul kv role Ian Fijolek 2022-06-28 12:08:23 -0700
• ce09177479 Add missing role requirements file Ian Fijolek 2022-06-23 20:13:17 -0700
• 13e9eac407 Deploy traefik one at a time with autorevert Ian Fijolek 2022-06-23 20:12:30 -0700
• d40d585358 Install consul dns forwarding Ian Fijolek 2022-06-23 20:12:09 -0700
• 0bfdddf3ee Install consul from repo Ian Fijolek 2022-06-23 20:11:48 -0700
• 617d4ae676 Make blocky config a bit more stable by removing templating based on whami Ian Fijolek 2022-06-23 20:11:28 -0700
• 3d6b405ab6 Fix blocky upstream tcp for quad9 Ian Fijolek 2022-06-23 20:11:09 -0700
• 2f4d90abdc Auto revert broken blocky Ian Fijolek 2022-06-23 20:10:36 -0700
• ffdfdeadfb Add Consul lookup for ads dns allowlist Ian Fijolek 2022-06-23 13:36:06 -0700
• fc2db88276 Add some more upstream dns options Ian Fijolek 2022-06-23 13:34:08 -0700
• dbaf73e3d6 WIP: Add authelia job authelia Ian Fijolek 2022-06-23 09:53:26 -0700
• eb066f5d98 Increase priority of Traefik Ian Fijolek 2022-06-23 09:51:42 -0700
• e5b61d5307 Update Nomad Ian Fijolek 2022-06-23 09:51:21 -0700
• 6b14507ca6 Generate blocky host mapping from Consul kv Ian Fijolek 2022-06-23 09:51:09 -0700
• 5d2301c791 Update blocky one instance at a time Ian Fijolek 2022-06-23 09:50:19 -0700
• d7fa57864f Deploy backup jobs to all hosts and dynamically determine jobs per node Ian Fijolek 2022-06-23 09:49:57 -0700
• 9ab300c225 Remove csi deployment Ian Fijolek 2022-06-23 09:49:03 -0700
• 520d7c56b9 Move databases to a single module Ian Fijolek 2022-06-23 09:48:01 -0700
• a02f1a2317 Make traefik a system service Ian Fijolek 2022-06-17 15:20:43 -0700
• ce18650e1f Add base hostname to consul in Playbook Ian Fijolek 2022-06-17 15:19:43 -0700
• 16b9440e12 WIP: Add democratic-csi storage plugin Ian Fijolek 2022-06-17 15:19:19 -0700
• 252c9b4111 Make nextcloud backup a non-sidecar task Ian Fijolek 2022-06-17 15:16:39 -0700
• 8cd2abc6b8 Remove some unecessary traefik configs from tasks Ian Fijolek 2022-06-17 15:15:37 -0700
• 049364df23 Make order of host configs match playbook order Ian Fijolek 2022-06-17 15:14:55 -0700
• c41babe346 Use new host name in terraform consul address Ian Fijolek 2022-05-24 20:11:57 -0700
• 6cd7bae240 Use new token variable name after bootstrap Ian Fijolek 2022-05-24 20:11:41 -0700
• de4c96b104 Add autopilot Ian Fijolek 2022-05-24 20:11:18 -0700
• f50cb98d30 Add docker install Ian Fijolek 2022-05-24 20:11:07 -0700
• 1995434140 Auto initialize vault Ian Fijolek 2022-05-24 20:10:47 -0700
• d6407d25a0 Wait until mysql is deployed before continuing Ian Fijolek 2022-05-24 20:10:26 -0700
• 8eb7a58dfd Remove unused playbook Ian Fijolek 2022-05-24 20:09:45 -0700
• e677259a1d Switch to a 3 node cluster for better resiliance Ian Fijolek 2022-05-24 20:09:16 -0700
• 1352eeb3e8 Fix venv detection for ansible cluster target Ian Fijolek 2022-05-24 20:07:52 -0700
• 5f9a04fa5d Make redis optional for blocky to help with resliliance to a single host failing Ian Fijolek 2022-05-19 16:54:16 -0700
• 38597a7eda Dynamically add dns routes to traefik instances to blocky Ian Fijolek 2022-05-19 16:53:56 -0700
• 719c1b62d1 Add dedicated backup module and jobs Ian Fijolek 2022-05-18 14:23:28 -0700
• fb9e9017ff Fix prom scraping Ian Fijolek 2022-05-18 14:22:52 -0700
• 8d3d0d0224 Add smarttv block list to default on blocky Ian Fijolek 2022-05-18 14:22:35 -0700
• f0eacea11f Default nomad cluster to ansible Ian Fijolek 2022-05-18 14:22:21 -0700
• 1b8c2d6bcf nomad: Run block on all hosts Ian Fijolek 2022-05-18 11:29:00 -0700
• 96f213a535 Bootstrap kubernetes Ian Fijolek 2022-05-17 10:43:29 -0700
• 0a003c39b1 WIP: Vault db Ian Fijolek 2022-05-12 19:27:52 -0700
• b13c5a1388 Bind mysql to loopback Ian Fijolek 2022-05-09 21:45:08 -0700
• 3b8f9734ac Add prom ports to nextcloud backup Ian Fijolek 2022-05-09 21:44:26 -0700
• 2ed2079b45 Use consul http port in traefik Ian Fijolek 2022-04-15 12:25:15 -0700
• ba1b5166b9 Build traefik static config better when services aren't found Ian Fijolek 2022-04-15 12:13:00 -0700
• 630a85a2f2 no log for some more sensitive info Ian Fijolek 2022-04-15 12:12:28 -0700
• 420e67b68b WIP nomad vault db integration Ian Fijolek 2022-04-15 12:12:15 -0700
• af743820ec Add nextcloud backup job Ian Fijolek 2022-04-15 12:11:41 -0700
• f1316367de Lint, format, lock Ian Fijolek 2022-04-13 14:01:14 -0700
• 9e97cd5d49 remove useless blank line Ian Fijolek 2022-04-05 09:44:40 -0700
• 96ca3270fa Create a lot more host volumes Ian Fijolek 2022-04-04 22:20:19 -0700
• 428306cdb2 Fix nomad vault policies Ian Fijolek 2022-04-04 22:19:32 -0700
• f1c7e57682 Add Nomad ACL bootstrap Ian Fijolek 2022-03-21 21:26:04 -0700
• a8181a5f29 WIP: Set up step-ca step-ca Ian Fijolek 2022-03-22 16:39:33 -0700
• d38c6059f4 Add Nomad ACL bootstrap Ian Fijolek 2022-03-21 21:26:04 -0700
• 970a9f740e Update bootstrap for acls Ian Fijolek 2022-03-21 20:13:13 -0700
• 3ce91f2d0b Add additional block lists to blocky Ian Fijolek 2022-03-21 20:12:47 -0700
• 05c0afa6fa Add ignore Ian Fijolek 2022-03-16 09:50:55 -0700
• c67ca9822c Maybe dynamic nomad? Ian Fijolek 2022-03-15 12:23:37 -0700
• edec1d992a Remove web and metrics entrypoints from services Ian Fijolek 2022-03-15 12:02:55 -0700
• 968b7ddb72 Add vault setup: Not secured Ian Fijolek 2022-03-15 11:57:00 -0700
• b8fc4016cb Fix mysql intents Ian Fijolek 2022-03-14 16:56:44 -0700
• 30bb579811 Change default bind address to loopback Ian Fijolek 2022-03-14 15:59:07 -0700
• f5da89c55e Add intents Ian Fijolek 2022-03-14 15:58:47 -0700
• 28c919e5b0 Simplify proxy routing Ian Fijolek 2022-03-14 15:58:03 -0700
• 6a7bfb3fc6 Add redis and prometheus support to blocky Ian Fijolek 2022-03-14 15:56:06 -0700
• 98510a422d Make hostname and consul discovery a bit more dynamic Ian Fijolek 2022-03-13 10:14:50 -0700