kris/homelab
1
0
Fork 0
Code Issues Pull Requests Projects Releases Wiki Activity
226 Commits 20 Branches 0 Tags
d36be78c4f021db8a596020e58553fd866a39bb9
Commit Graph
100 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
kris d36be78c4f testing 2024-04-28 20:59:05 -04:00
kris 324fe0b191 Upgrade Nextcloud setup to use compose files 
- Integrated MariaDB role into Dockerbox configuration
- Moved proxy role to the end to avoid early endpoint activation
- Temporarily disabled select roles for future re-evaluation
- Introduced flush_handlers task for early MariaDB restart
- Moved a few Nextcloud tasks to handlers
- Configured Nextcloud to utilize the host's MariaDB instance
- Enhanced overall code linting quality
 2024-04-21 22:27:48 -04:00
kris 6fbd3c53bb Add Vagrant cache option for dhparams.pem 2024-03-26 21:51:39 -04:00
kris 01e8e22c01 Prevent running 'vagrant ssh' as root 
Resolve possible issues with 'vagrant ssh' when executed as root
 2024-03-04 23:42:40 -05:00
kris a31bf233dc Slight message tweaks in forward-ssh.sh script 2023-12-09 13:16:46 -05:00
kris 60fafed9cd Update forward-ssh.sh script for Swarm support 
- Address limitations in Swarm with loopback binding
- Ensure compatibility with localhost DNS wildcard A record
- Enable port forwarding on 80 and 443 using VM IP for Swarm compatibility
- Retain 8443:localhost:8443 for non-Swarm setups
 2023-12-09 13:04:07 -05:00
kris 2c00858590 Update README.md 2023-11-18 17:37:27 -05:00
kris be80681485 Add multi-machine support to forward-ssh.sh 
- Detects multiple private keys
- Adds validation for all discovered keys
- Defaults to "default" machine, with override via the first parameter
 2023-11-05 21:37:33 -05:00
kris a2e60972c7 Comply with linting on proxy setup 2023-11-05 21:34:19 -05:00
kris 598359854f Update proxy role to comply with linting 2023-11-03 00:47:06 -04:00
kris ef812c1877 Add copyright notice on forward-ssh.sh 2023-11-03 00:12:12 -04:00
kris 385e60aee5 Update proxy playbook 2023-11-02 23:29:54 -04:00
kris 5633468f41 Fix linting issues on Docker role 2023-10-22 13:48:20 -04:00
kris 7f91b24adb Add Debian/Official Docker repo toggle 
- Default docker_official toggle to false (for now)
- Preempt MariaDB restart before container restarts
- Start containers in a handler
 2023-10-22 11:33:05 -04:00
kris 5b09029239 Update base role to pass linting 2023-10-20 21:30:25 -04:00
kris 7adb5f10e9 Update Gitea role for docker_compose_deploy 
- Add MariaDB to dev playbook
- Set Git user in "users:"
- Define Gitea external compose project
- Forward SSH port in forwarding script
- Create user groups with system users
- Install python3-pymysql for Ansible
- Strip old Gitea deployment methods
- Bind MariaDB to docker0 for Docker access
 2023-10-20 15:41:44 -04:00
kris c3b4321667 Add Gitea dev playbook and host_vars 2023-10-19 16:40:34 -04:00
kris d05c5d3086 Slight tweaks on Ansible output 2023-10-19 16:36:05 -04:00
kris ac412f16ef Simplify the "Import GPG keys" loop 2023-10-19 14:09:10 -04:00
kris 2354a8fb8c Verify successful GPG imports 2023-10-19 13:37:35 -04:00
kris 251a7c0dd5 Import PGP key and verify git commits 2023-10-19 02:56:36 -04:00
kris 1d8ae8a0b6 Install ntpsec 2023-10-19 01:27:31 -04:00
kris 6b2feaee5e Hide docker-compose secrets from diff output 2023-10-18 23:03:52 -04:00
kris 31e0538b84 Add locale configuration tasks to base role 2023-10-18 16:32:09 -04:00
kris a65c4b9cf6 Handle Ansible undefined loop variable 
- Default docker_compose_deploy to empty list if undefined
- Add conditional check to avoid looping through an empty list
 2023-10-10 00:14:52 -04:00
kris 7ee6e4810d Convert booleans to lowercase 2023-10-10 00:00:00 -04:00
kris 87aa7ecf8b Add external compose support in the docker role 
- Use ansible.posix.synchronize for compose.yml
- Set fact for compose service restarts
- Introduce plain Docker dev host
- Optionally verify repos via GPG before sync
- Hide docker_repos_path in .folder
- Tweak .env for conciseness
- Add --diff to Ansible in Vagrantfile
- Clean output with loop_control
- Embed GPG in base role
 2023-10-09 23:47:49 -04:00
kris 0377a5e642 Add option for private OCI registry auth 2023-09-29 22:18:59 -04:00
kris 2e02efcbb7 Add Makefile, roles_path, and SSH tunnel variable 2023-09-26 21:14:06 -04:00
kris 8fed63792b Ask permission for starting vagrant SSH tunnels 2023-09-16 00:04:58 -04:00
kris 2c4fcbacc3 Introduce forward-ssh.sh method & reorganize 
- Abandoned update-hosts.sh in favor of loopback SSH forwarding
- Adopted *.local.krislamo.org as a wildcard loopback domain
- Bound Traefik to ports 443/80 on Dockerbox dev
- Removed outdated Gitea config from Dockerbox
- Relocated production playbooks to a new directory
 2023-09-15 23:46:45 -04:00
kris b81372c07a Fix the Vagrantfile for Github runners 2023-08-30 19:45:42 -04:00
kris 9b5be29a1a Update Vagrantfile to use external settings 2023-08-21 18:46:47 -04:00
kris ef5aacdbbd No deploy keys without compose deploy variable 2023-07-21 23:52:18 -04:00
kris a635c7aa48 Add option to deploy external docker-compose stack 2023-07-20 03:51:44 -04:00
kris 56aee460ad Limit Github actions to specific branches 2023-07-20 00:33:42 -04:00
kris 027ba46f6b Add Github actions and remove old ansible stuff 2023-07-08 23:43:52 -04:00
kris 48216db8f9 Updated Nextcloud settings and added cron job 2023-06-18 23:52:10 -04:00
kris fa1dc4acb7 Fix WireGuard firewall rule 2023-06-15 03:09:13 -04:00
kris 228cd5795b Config adjustments for Jellyfin/Samba deployment 
- Ignored .vscode
- Added firewall exclusion option
- Allowed guest access in Samba
 2023-06-09 22:26:47 -04:00
kris 74a559f1f6 Update mediaserver playbook and fix Wireguard task 2023-06-08 03:47:54 -04:00
kris 4c2a1550c4 Adding samba and general user management 2023-06-07 02:12:17 -04:00
kris f02cf7b0cc Refactor docker playbook 
- Removed copyright notice
- Variablize 'hosts' value in the playbook
- Install Jenkins agent before running Docker role
 2023-05-08 16:26:16 -04:00
kris 9142254a57 Improvements for ansible-linting 2023-05-04 01:44:18 -04:00
kris dfd93dd5f8 Updated Ansible tasks to FQCN format 2023-05-03 23:42:55 -04:00
kris 81d2ea447a Add mediaserver, rm .gitignore, FQCN, Jellyfin 
- Added development "mediaserver" playbook for testing
- rm .gitignore in roles dir since no external ansible roles are used
- Update a part of the base role to use FQCN for linting
- Added "jellyfin" role to install Jellyfin with docker-compose
- Updated Traefik to use the loopback for default web entry points
- Simplified Traefik docker-compose vars, Ansible sets defaults
 2023-04-26 02:26:50 -04:00
kris 9512212b84 Refactor Traefik deploy: docker-compose + systemd 
- Replace docker_container ansible with new setup
- Add option to disable HTTPS for alternate reverse proxy use
 2023-04-21 03:04:53 -04:00
kris c67a39982e Option to enable websockets for the noVNC console 2022-12-06 00:15:10 -05:00
kris f68f57d0cf ROOT_URL should have HTTPS for the clone URL 2022-09-18 15:21:16 -04:00
kris b9f9b0bf3c Update TLS settings in nginx proxy 2022-08-27 18:56:12 -04:00
kris 4f4a341b05 Add client_max_body_size for Nextcloud 2022-08-19 01:27:55 -04:00
kris cab6ab2d8e Strip auth header and update external config 2022-08-19 00:51:05 -04:00
kris 95f54b7f0a Add Traefik toggles 2022-08-18 23:32:37 -04:00
kris 7522c333da Disable Traefik LE resolver and HSTS 2022-08-18 21:53:38 -04:00
kris 344b79e97f Add base domain to the wildcard certificate 2022-08-17 02:17:36 -04:00
kris e4fed78193 Remove basic auth on static nginx sites 2022-08-17 01:40:11 -04:00
kris 85a6c3894a Add basic auth and ignore backend SSL errors 2022-08-17 01:15:15 -04:00
kris 7677bc25fa Add WireGuard firewall rule 2022-08-13 00:19:24 -04:00
kris b255680a7a Use host MariaDB in Gitea container 2022-08-11 21:04:07 -04:00
kris 9eefad0e87 Install Fail2ban IP allow list 2022-06-28 23:43:58 -04:00
kris 8362230eb4 Add nginx proxy server 2022-06-27 20:21:25 -04:00
kris 82df91305a Install aggressive Fail2ban jail for SSH 2022-06-18 19:47:02 -04:00
kris dd9f84d498 Create initial log files for fail2ban 2022-06-07 00:25:47 -04:00
kris b52ccabd22 Add Fail2ban to Gitea and Bitwarden 2022-05-28 02:31:41 -04:00
kris eccd6b7874 Add reverse proxy settings for Gitea and Bitwarden 2022-05-28 00:18:15 -04:00
kris 3a92921932 Minor cleanup 2022-05-27 23:14:06 -04:00
kris 330f2b5a91 Add X-Forwarded-For proxy header 2022-05-27 22:33:35 -04:00
kris 45465ad26b Add the ufw firewall 2022-05-27 16:29:27 -04:00
kris d7838563a1 Gitea SSH container passthrough 2022-05-27 02:28:51 -04:00
kris 03a57d2531 Only create LE directory if production is true 2022-05-27 00:06:09 -04:00
kris e346180b13 Add Bitwarden systemd service 2022-05-27 00:03:49 -04:00
kris be6e1596c5 Rehaul Gitea role for compose and PostgreSQL 2022-05-27 00:02:45 -04:00
kris dc520a09e9 Add generic docker-compose systemd service 2022-05-26 23:50:14 -04:00
kris c0be314268 Add PostgreSQL server role 2022-05-26 23:49:06 -04:00
kris 9aca035f2d Redirect HTTP to HTTPS 2022-05-26 23:32:25 -04:00
kris 209ff57a4a Determine wildcard cert paths and tidy nginx role 2022-05-23 22:33:17 -04:00
kris 9a4aece442 Use DNS-01 on Cloudflare for wildcard LE certs 2022-05-23 03:32:56 -04:00
kris acd2cefb1e Setup nginx reverse proxy 2022-05-22 00:19:56 -04:00
kris cd11567164 Fix broken Bitwarden provision 2022-05-19 23:19:09 -04:00
kris 1c321f6ef7 Use Debian repositories for Docker 2022-05-19 21:06:34 -04:00
kris ed9100bc8f Migrate to Debian 11 2022-05-19 00:39:42 -04:00
kris bda68c8570 Remove WordPress from Dockerbox 2022-03-13 01:14:23 -05:00
kris 26a336dae1 Add Jenkins client to backup server 2021-09-11 01:54:33 -04:00
kris ff581265b5 Add shared folder for external project development 2021-07-16 18:48:46 -04:00
kris 4dbc6e3a72 Default Java to 16 for MC 1.17 using AdoptOpenJDK 2021-07-16 18:44:28 -04:00
kris 294b447de5 Run Jenkins agent playbook on Minecraft hosts 2021-07-09 00:54:52 -04:00
kris 143162fdd5 Add Minecraft playbook 2021-07-08 21:59:59 -04:00
kris 09dd034b2c Add optional btrfs support 2021-06-24 00:37:12 -04:00
kris d87eb4f8cd Dynamic Java options on Minecraft systemd service 2021-06-21 22:36:35 -04:00
kris f44ac239d9 Minecraft modpacks.ch server management 2021-06-21 22:02:42 -04:00
kris 6a73e4120e Email rsnapshot backup reports 2021-06-08 00:33:55 -04:00
kris e3200f6ad0 Simplify rsnapshot example 2021-06-05 23:40:54 -04:00
kris 38d1cd78e1 Fix mismatch with the ansible cron interface 2021-06-04 19:24:27 -04:00
kris d9ab865fd9 Use a list for the expected ordering of intervals 2021-06-04 00:50:14 -04:00
kris c6931ff48b Add rsnapshot backup server playbook 2021-06-03 21:30:46 -04:00
kris 828539dceb Implement rsnapshot backups on infrastructure 2021-06-03 20:38:56 -04:00
kris 3dc0e04ab4 Manage Minecraft servers with systemd 2021-05-13 03:35:00 -04:00
kris 32455e8016 Remain a monolithic project for now 2021-05-12 17:31:49 -04:00
kris 96e7a0f8d2 Restart WireGuard on configuration update 2021-05-07 02:38:49 -04:00
kris e3a89aecc2 Add WireGuard VPN 2021-05-07 00:24:52 -04:00