Commit Graph

301 Commits

Author SHA1 Message Date
76285164d1 Add music service 2023-02-21 00:06:29 +01:00
7a15e2b981 Setup tools for music organisation 2023-02-19 23:46:17 +01:00
dc59b9a37e Add backups for music 2023-02-19 22:51:17 +01:00
d155da3414 Decouple backups from services 2023-02-19 22:38:30 +01:00
350e6514ae Rename backup batch config files 2023-02-19 21:42:36 +01:00
9ca69f5966 Add music user and enable samba 2023-02-19 21:33:36 +01:00
d4dfe02153 Decouple root directories from services 2023-02-19 17:49:35 +01:00
d87423c244 Add baldur playbook 2023-02-13 00:12:49 +01:00
486a1e9809 Add restore option to restic-batch 2023-02-13 00:12:30 +01:00
c64427f4c8 Enable directory based backups with restic-batch 2023-02-12 22:31:06 +01:00
34c4e29a43 Decouple lrproxy from valkyrie 2023-02-12 19:37:33 +01:00
226bd0369f Seprate snapshots/restic backups roles 2023-02-12 16:37:48 +01:00
730b616640 Separate backups start/stop from main playbook 2023-02-12 14:16:59 +01:00
a8d1a9e9b2 Combine status with state update for start/stop 2023-02-12 12:38:26 +01:00
ab4cc3e394 Separate service start/stop from main playbook 2023-02-11 16:23:31 +01:00
84977b5322 Leave a note about bind mounting 2023-02-11 10:28:19 +01:00
2b197879b5 Print only on error syncoid-batch 2023-02-11 10:27:34 +01:00
479df53e7a Update logcheck ignores 2023-02-11 10:26:51 +01:00
66c6b79aaa Make restic-batch script less verbose 2023-01-04 07:57:39 +01:00
0119db15e8 Properly fix daemon reload 2023-01-04 07:52:21 +01:00
abdc0fff9c Revert to weekly rather than daily fstrim on zfs 2023-01-04 05:57:33 +01:00
66d779afa2 Update joplin server 2023-01-01 10:41:48 +01:00
b47e8ef37a Use major version tag for postgres 2023-01-01 10:41:28 +01:00
7eecb14e29 Unroll numbers to make check-mode idempotent too 2023-01-01 10:31:09 +01:00
ddef2e7651 Adapt hosts for testing 2022-12-28 21:17:33 +01:00
2d38001c6e Fix daemon_reload 2022-12-28 21:17:25 +01:00
e51bba5253 Split logcheck ignores into multiple files 2022-12-28 18:16:37 +01:00
9371383b77 Use inverted commas for strings 2022-12-28 14:25:22 +01:00
048e9d5368 Update logcheck ignore for gitea 2022-12-23 17:28:41 +01:00
38ae5f0b24 Ensure encrypted zpools are loaded 2022-12-22 01:20:41 +01:00
21eb23ed16 Update logcheck ignore for gitea 2022-12-21 11:40:53 +01:00
3b8f6f2d4d Move ignore file to user repo 2022-12-21 11:37:56 +01:00
2603d747d0 Move roles to shared repo 2022-12-20 19:56:45 +01:00
abeaf9fe37 Decouple bridge from wireguard role 2022-12-20 19:40:33 +01:00
c470ff8b86 Edit postfix config 2022-12-20 19:36:26 +01:00
4ec9d5ef96 Cleverer loop 2022-12-20 18:56:02 +01:00
c3244f9ac2 Disable DNS for postfix in testing 2022-12-20 18:26:18 +01:00
4d797ed4c4 Split system:base tasks into roles 2022-12-20 17:31:37 +01:00
bec1c8b658 Block domains in testing 2022-12-20 16:59:36 +01:00
f454d1d421 Fix restic-batch script 2022-12-19 14:44:36 +01:00
69c5bd067e Introduce yamllint 2022-12-18 23:43:40 +01:00
2794486fef Update logcheck ignore 2022-12-18 23:08:37 +01:00
320832829b Introduce ansible-lint 2022-12-18 23:00:28 +01:00
625d29fefb More consistent tags 2022-12-18 19:49:55 +01:00
6410e41173 Add cross-playbook dependencies 2022-12-18 19:41:32 +01:00
72c722ec0b Merge subdirectories 2022-12-18 19:36:21 +01:00
62d698325d Extract nftables into its own role 2022-12-18 19:01:04 +01:00
9c528ce36d Fix task names 2022-12-18 17:09:23 +01:00
1e9fd5272d Rename plays to playbooks 2022-12-18 17:07:44 +01:00
735f835c8e Port restic backups 2022-12-18 17:06:27 +01:00
9eb3905adf Port backup zfs datasets 2022-12-18 01:38:30 +01:00
d0708f520d Port zfs snapshot backups 2022-12-18 00:44:32 +01:00
6ef28ce61a Port notes service 2022-12-17 00:15:10 +01:00
e4adcf5afe Port git service 2022-12-17 00:09:05 +01:00
b126304227 Port cloud service 2022-12-16 23:57:38 +01:00
0a1e0625ab Port database service 2022-12-16 23:42:57 +01:00
b7329cdf58 Port www service 2022-12-16 22:16:23 +01:00
c8a9242706 Port rproxy service 2022-12-16 21:49:50 +01:00
21b93f71ce Port lrproxy services 2022-12-16 21:32:34 +01:00
f2ddfe92ee Be explicit about services in playbook 2022-12-12 23:49:20 +01:00
534e3435e3 Some variable cleanup 2022-12-11 01:11:44 +01:00
64fc6d748f Add services:base:user 2022-12-11 00:41:50 +01:00
0b3542c414 Add services:base:system 2022-12-10 21:58:36 +01:00
9d6cc674fc Add services:datasets 2022-12-10 17:57:15 +01:00
ad6a9c1396 Add vpn:bridge:wg0 2022-12-09 01:16:00 +01:00
dda51db812 Add vpn:bridge:br0 2022-12-08 23:43:20 +01:00
a0738916b5 Fix typo 2022-12-08 20:29:04 +01:00
149e023534 Add vpn:base role 2022-12-07 22:07:39 +01:00
9c412e5d9c Fix pod-service-auto-update script 2022-12-07 20:34:40 +01:00
c3328ddbf4 Create system_smart role 2022-12-04 17:36:26 +01:00
2fffbbfd19 Create system_ups role 2022-12-04 17:29:43 +01:00
a61d6a0046 Create system_zfs role 2022-12-04 17:06:18 +01:00
9843677655 Replace 00-test-hosts play 2022-12-04 15:36:03 +01:00
c2d98fe242 Convert common parts of 00-hosts to roles 2022-12-04 15:14:43 +01:00
1366827abb Add heimdall host 2022-12-01 22:39:47 +01:00
61ae529744 Formatting 2022-11-28 23:19:49 +01:00
2dbaf0f93a Use the autoupdate label for image updates 2022-11-28 23:12:03 +01:00
6d547182a8 Use custom script for podman auto-update 2022-11-26 14:17:40 +01:00
db079ed1ef Use app name for emails 2022-11-21 23:13:50 +01:00
76c27d6731 Fix joplin configuration 2022-11-20 18:09:44 +01:00
63f5ca366a Add notes service 2022-11-20 15:10:07 +01:00
260bc71939 UID and GID need user to exist first 2022-11-20 15:09:34 +01:00
459e561a24 Authenticate pod-www git clone 2022-11-20 15:09:05 +01:00
8744fac500 Fix gitea logcheck ignore 2022-11-20 15:08:50 +01:00
08ae5b51f8 Update gitlab URLs 2022-11-19 18:15:26 +01:00
4cc8501ff4 Add new logcheck ignore for gitea 2022-11-19 18:11:30 +01:00
b74b3e04cb Fix dependency cycle for timers 2022-11-18 23:57:29 +01:00
a18d38ca30 Start gitea ssh server 2022-11-18 23:57:18 +01:00
f4d20636d4 Set up gitea port forwarding 2022-11-15 23:01:51 +01:00
d844925ee0 Add git service 2022-11-15 00:34:50 +01:00
7b44781078 Use nginx stable image 2022-11-14 21:03:34 +01:00
552c61d1b2 Run podman-image-prune before podman-auto-update 2022-11-13 10:28:35 +01:00
a7fa5b9b7a Run fstrim daily on ZFS systems for zvols 2022-11-10 00:53:32 +01:00
e9498669e8 Reduce snapshot and backup numbers 2022-11-10 00:13:15 +01:00
522d93c71e Move sanoid and syncoid config into fewer places 2022-11-09 21:47:00 +01:00
5b5e5fce4f Make sanoid more targeted 2022-11-08 22:40:49 +01:00
2cc62f57ec Optimise volume setup 2022-11-08 21:09:35 +01:00
8dae9d4e76 Increase http body buffer size for pod-cloud 2022-11-04 11:07:43 +01:00
af296a1e3a Increase upload limits for pod-cloud 2022-11-04 11:02:04 +01:00
3fb47b587d Fix issues with cloud service 2022-11-03 22:02:47 +01:00
baa6583484 Prevent ownership change when mount dir exists 2022-11-03 19:33:18 +01:00
a3d318daa2 Do not restart if service was just started 2022-11-03 01:06:40 +01:00
8261f7f379 Add cloud service 2022-11-03 00:25:43 +01:00
be8c9b9a75 Add versioning using variables 2022-11-03 00:24:22 +01:00
07dd795a68 Enabling timer should trigger restart 2022-11-03 00:23:40 +01:00
1db7785dc4 Move database mounts to use _data 2022-11-02 20:24:38 +01:00
581475c1fa Move lrproxy mounts to use _data 2022-11-02 20:03:12 +01:00
8b39d55afa Make service file more legible 2022-11-02 19:50:45 +01:00
ebc55ad9d8 Move rproxy mounts to use _data 2022-11-02 19:44:40 +01:00
79e65e46c2 Add ignores for ZFS snapshots and backups 2022-11-02 11:20:07 +01:00
9e11c060e8 Update fail2ban configuration 2022-11-02 11:19:53 +01:00
4b9dc63253 Add status mail for user servies as well 2022-10-30 22:09:01 +01:00
df86c2b6a8 Localise vars to user or deploy 2022-10-30 21:20:45 +01:00
2982c54d69 Split service deploy into user and deploy 2022-10-30 21:08:41 +01:00
fac7456fa1 Commonise systemd tasks for user services 2022-10-30 20:45:59 +01:00
67b6a9a3f9 Try a fix for startup issues with reverse proxies 2022-10-30 19:46:24 +01:00
0d37e5ae4d Increase zfs_zevent_len_max 2022-10-30 19:00:18 +01:00
814cec050f Tie podman-image-prune to podman-auto-update 2022-10-30 16:21:27 +01:00
da2236a6cd Rename service-data to volume-data for syncoid 2022-10-30 16:21:07 +01:00
48fe1e2496 Deconfigure volume_path 2022-10-26 23:56:59 +02:00
af11b75713 Move rproxy and lrproxy to use bind-mounts 2022-10-26 23:22:38 +02:00
f296ed9ea5 Update restic script from services to volumes 2022-10-26 22:09:50 +02:00
3e5ee2a90e Move pod-database to use zfs datasets 2022-10-26 21:43:08 +02:00
322cb15995 Walk datasets rather than directory for backups 2022-10-25 22:24:43 +02:00
4c2ae32143 Add a databse service 2022-10-24 00:45:52 +02:00
78176c9aa7 Fix backup path setup in restic script 2022-10-20 00:17:42 +02:00
227b2c50a3 Add restic backups to s3 bucket 2022-10-19 23:55:35 +02:00
e0ac5d14f3 Add snapshots and backups to yggdrasil 2022-10-19 21:03:26 +02:00
5ff15a8ff5 Rename file to indicate ordering 2022-10-14 19:54:41 +02:00
bc30de48bc Extra settings for hpool 2022-10-12 22:02:11 +02:00
e884b30d08 Update logcheck ignores for podman auto-update 2022-10-12 19:59:08 +02:00
4be5d17efc Fix issue with connect veths 2022-10-10 20:44:43 +02:00
dbd4904f1d Set auto-snapshot to false on container datasets 2022-10-10 20:44:12 +02:00
d690124d4d Improve connect-pod-service 2022-10-07 09:55:51 +02:00
192843b22a Enable auto-updates 2022-10-06 23:15:06 +02:00
4318d1faee Add tags 2022-10-06 22:15:29 +02:00
acb04f05b1 Use valkyrie's resolv.conf 2022-10-06 22:05:07 +02:00
17cd8d75c3 Split services.yml 2022-10-06 22:04:43 +02:00
e44346975e Pin hugo version 2022-10-02 15:16:17 +02:00
9393e7a79c Rename a variable 2022-10-02 15:03:39 +02:00
9d453f441c Extend services to yggdrasil and add local proxy 2022-10-02 14:56:43 +02:00
7052c91d27 nftables fixes 2022-10-01 16:44:22 +02:00
d187a12565 Add a playbook for test hosts 2022-10-01 16:44:14 +02:00
3d358cb4f3 Fix certbot command 2022-10-01 16:06:46 +02:00
b2eeba466f Remove obsolete cron file 2022-10-01 08:08:53 +02:00
9e227d132a Playbooks to deploy pod-rproxy and pod-www 2022-09-30 23:03:23 +02:00
3bd5df7c65 Make VPN configuration more robust 2022-09-25 16:44:40 +02:00
7f6813600a Add some fixes for logcheck ignore 2022-09-25 13:21:14 +02:00
1b291adb38 Restart networking when nftables is restarted 2022-09-25 13:15:17 +02:00
18263b3556 Set up VPN network 2022-09-24 00:15:46 +02:00
593717d10f Compartamentalise playbooks 2022-09-23 20:46:04 +02:00