Thomas Kleinendorst
2b1518a5c3
Remove Nginx setup for public wedding container
2024-10-05 12:58:39 +02:00
Thomas Kleinendorst
ea8e387a1c
Add cloudflared role
2024-10-05 12:58:04 +02:00
Thomas Kleinendorst
fa78dc7a83
Update versions
2024-10-05 12:31:55 +02:00
Thomas Kleinendorst
2e32262690
Change wedding external address
2024-10-04 18:38:39 +02:00
Thomas Kleinendorst
752f187e0b
Allow multiple DDNS addresses
...
This code could probably be optimized a bit more.
2024-10-04 17:16:58 +02:00
Thomas Kleinendorst
6d828ea401
Add an internally working version of wedding
...
Working on the internal network that is.
2024-10-04 16:51:53 +02:00
Thomas Kleinendorst
388bdc025e
Allow specifiying the external port on role
2024-10-04 16:51:10 +02:00
Thomas Kleinendorst
4e0e8c271a
Fix podman container role on empty volumes
...
Still some improvments could be made, such as handling
the variable not being present.
2024-10-04 16:50:35 +02:00
Thomas Kleinendorst
71499b2610
Bind hostname to 172.0.1.1 and use FQDN in config
...
This makes that we see better labels in Grafana and that we don't
need to expose the address externally.
2024-09-23 12:23:05 +02:00
Thomas Kleinendorst
3c0b5ebdab
Add Grafana as scrape target
2024-09-19 13:31:59 +02:00
Thomas Kleinendorst
1ec2428fa9
Update the Actual version
2024-09-18 15:34:33 +02:00
Thomas Kleinendorst
ca3da210d2
Enable processes node collector
...
I downloaded a Grafana dashboard which makes use
of the metrics collected here. After applying the change
this works wonderfully.
2024-09-18 15:34:24 +02:00
Thomas Kleinendorst
b2acd918b5
Add Grafana running in Podman
2024-09-18 14:33:20 +02:00
Thomas Kleinendorst
79913e9d03
Add and configure Alertmanager
2024-09-16 13:16:25 +02:00
Thomas Kleinendorst
c4fd9047f7
Add node exporter installation to monitoring
2024-09-16 11:33:05 +02:00
Thomas Kleinendorst
da250bc2be
Add basic Prometheus role
2024-09-16 10:53:58 +02:00
Thomas Kleinendorst
11140291b4
Update pi-hole and changedetection versions
2024-09-02 12:35:55 +02:00
Thomas Kleinendorst
b91d862c34
Update the actual version
2024-08-19 14:11:05 +02:00
Thomas Kleinendorst
0f17f6491e
Add hook which reloads nginx config on cert change
2024-07-20 15:49:10 +02:00
Thomas Kleinendorst
b379a977cb
Alter nginx signing key
...
The new key's address is mentioned in the Nginx official documentation:
https://nginx.org/en/linux_packages.html#Debian .
2024-07-04 11:14:26 +02:00
Thomas Kleinendorst
465517ef56
Update the actual version to 24.7.0
2024-07-03 12:27:44 +02:00
Thomas Kleinendorst
08cf93276d
Move "podman-restart" to the podman-container role
2024-06-05 17:00:11 +02:00
Thomas Kleinendorst
d92299e66c
Add comment on the podman_image task
2024-06-05 16:55:31 +02:00
Thomas Kleinendorst
fd2052767d
Properly recreate systemd unit on container update
2024-06-05 16:53:00 +02:00
Thomas Kleinendorst
4fb455c6b4
Deduplicate Podman container logic with new role
2024-06-05 12:57:41 +02:00
Thomas Kleinendorst
bcf920053c
Allow removal of Podman container on version bump
...
Before this change it was necessary to remove the container manually.
With these changes it will automatically detect when a new version
should be deployed and the role will automatically remove the old
container.
2024-06-03 13:47:22 +02:00
Thomas Kleinendorst
86d75b8de0
Update the actual version (to 24.5.0)
...
There is also a problem with the configuration in that it's hard to
upgrade running containers, I added a note explaining this.
2024-05-06 10:54:06 +02:00
Thomas Kleinendorst
2014745501
Add changedetection as a hosted service
2024-04-28 15:50:14 +02:00
Thomas Kleinendorst
743af73974
Fix problems with earlier nginx role rename
2024-04-28 15:22:01 +02:00
Thomas Kleinendorst
131991ec22
Create generic rule for simple nginx reverse proxy
2024-04-28 15:13:05 +02:00
Thomas Kleinendorst
a84542a786
Rename reverse-proxy (role) > nginx
2024-04-28 14:56:26 +02:00
Thomas Kleinendorst
b1ff2515e1
Start podman restart service in user role
2024-04-23 17:12:06 +02:00
Thomas Kleinendorst
16c78c0d00
Copy ansible user's authorized_keys for new users
...
This allows logging in directly via SSH to the newly added users.
I also removed the XDG_RUNTIME_DIR variable in ~/.zshrc because
this variable is already correctly loaded when loggin in directly via
SSH.
2024-04-17 16:00:58 +02:00
Thomas Kleinendorst
5d32ed57b4
Add user systemd config to pi-hole container
2024-04-16 17:17:34 +02:00
Thomas Kleinendorst
462e202737
Register actual container as systemd service
...
This service is scoped to the user only but ensures that the container
is started on system boot.
2024-04-16 17:04:45 +02:00
Thomas Kleinendorst
77f20aad28
Set hostname in pi-hole container
...
The hostname is reported in the pi-hole dashboard, this looks a bit
nicer than a randomly generated id.
2024-04-15 20:56:02 +02:00
Thomas Kleinendorst
606a26a008
Add link for starting containers on system boot
...
As mentioned in the comment; this behavior is different in
Podman than how it is in Docker.
2024-04-15 20:35:57 +02:00
Thomas Kleinendorst
9365ce9258
Fix Podman warnings for sudo login users
2024-04-15 19:01:45 +02:00
Thomas Kleinendorst
f23093d8dc
Add UDP forwarding from Nginx
...
This is working locally, I can resolve addresses. But there still
seems to be another problem in that Windows is timing out when setting
the Pi as the DNS server.
2024-04-15 10:20:02 +02:00
Thomas Kleinendorst
690b2d56d8
Comment out ufw rules
2024-04-15 09:50:33 +02:00
Thomas Kleinendorst
2502d034d9
Add failing firewall configuration
2024-04-15 09:46:00 +02:00
Thomas Kleinendorst
e06547e25c
Rearange existing roles to make more sense
2024-04-14 12:29:17 +02:00
Thomas Kleinendorst
bec00118c0
Add a non working setup for ip forwarding
2024-04-14 10:58:41 +02:00
Thomas Kleinendorst
abd99b179e
Fix missing git on new install
...
I locked myself out and had to rerun the scripting. It failed on
the user role since git wasn't installed. The dependency is now
correctly added.
2024-04-13 18:24:49 +02:00
Thomas Kleinendorst
77c9614321
Change actual role user > username
2024-04-13 15:26:58 +02:00
Thomas Kleinendorst
21237b64c0
Install Pi-hole with some existing problems
...
There is an error telling that dnsmasq doesn't start, this might have
to do with the user having to be root.
The DNS service also isn't exposed yet as it needs some ufw forwarding
(there's a TODO in the code mentioning this).
2024-04-13 15:26:45 +02:00
Thomas Kleinendorst
22376928e2
Fix invalid variable naming for user role
...
According to the linter variables used within rules should start with
the role's prefix.
2024-04-13 13:54:49 +02:00
Thomas Kleinendorst
6c0425418e
Install actual on Raspberry Pi
2024-04-12 13:34:45 +02:00
Thomas Kleinendorst
c7a20e14a1
Add certbot installation with root cert renew
2024-04-12 11:49:45 +02:00
Thomas Kleinendorst
a08eb939b6
Install Nginx (with default page running)
2024-04-12 09:33:14 +02:00
