Commit Graph

Select branches

Hide Pull Requests

lax-01

logserver-auth

main

roles.dockerserver

roles.minecraftserver

services

services.crowdsec

services.docker

services.healthchecks

services.ntfy

services.traefik

services.uptimekuma

#1

#2

Mono Color

• e660aeac36 roles/printserver: use http to connect to CUPS main services.traefik services Eric Torres 2025-10-24 16:07:55 -04:00
• 4eedb341d8 roles/printserver: remove insecureSkipVerify opt Eric Torres 2025-10-24 16:04:50 -04:00
• 2b71a3f01f hosts/print-01: change serverAlias to loopback IP, not localhost Eric Torres 2025-10-24 16:03:51 -04:00
• cb281f8ffb roles/printserver: change reverse proxy from caddy to traefik Eric Torres 2025-10-24 15:50:09 -04:00
• bc623309ba roles/syncthingserver: change reverse proxy from caddy to traefik Eric Torres 2025-10-24 15:30:29 -04:00
• 241674cb83 hosts/lax-01: Hostsni -> HostSNI Eric Torres 2025-10-24 11:53:22 -04:00
• 46e4aa90de hosts/lax-01: add iPhone ssh key Eric Torres 2025-10-24 08:12:22 -04:00
• 96b591aa2a base/network: fix call for enableTSExitNode in tailscale config Eric Torres 2025-10-20 10:20:06 -07:00
• f3386283ee base/network: add mkOption attr to enableTSExitNode Eric Torres 2025-10-20 10:17:03 -07:00
• 510dc8c6f8 base/network: use if then else instead of mkIf in tailscale routing config Eric Torres 2025-10-20 10:14:54 -07:00
• e7845c4800 hosts/lax-01: enable tailscale exit node Eric Torres 2025-10-20 10:01:39 -07:00
• 490b1f972b base/network: add opt enableTSExitNode Eric Torres 2025-10-20 10:00:29 -07:00
• 35eac0db2e hosts/hel-01: add config and credentials for borg backups Eric Torres 2025-10-19 11:36:44 -07:00
• 4af5feb6c8 hosts/nbg-01: use correct repo path for borg backups Eric Torres 2025-10-19 11:31:27 -07:00
• 638f1d61fe hosts/nbg-01: add borgmatic config Eric Torres 2025-10-19 11:27:43 -07:00
• 69bb2a900f hosts/lax-01: add int port for db in container Eric Torres 2025-10-19 08:01:37 -07:00
• 2e4027f09b hosts: cleanup formatting for sops.secrets blocks Eric Torres 2025-10-19 07:56:07 -07:00
• a5952afb88 hosts/lax-01: enable sops credentials for borg Eric Torres 2025-10-19 07:53:05 -07:00
• 3658b6dd0d hosts/lax-01: add borgmatic config Eric Torres 2025-10-19 07:46:14 -07:00
• c1920fe438 lax-01: add credentials for backups Eric Torres 2025-10-19 07:42:04 -07:00
• 0fe2de0826 hosts/borg-01: add keys for hel-01,lax-01,nbg-01 Eric Torres 2025-10-19 07:28:24 -07:00
• a00479186d Merge branch 'services.crowdsec' Eric Torres 2025-10-18 22:56:29 -07:00
• 2cb43f946b secrets/nbg-01: rotate crowdsec lapiKey for traefik bouncer services.crowdsec Eric Torres 2025-10-18 22:56:08 -07:00
• b2d590a899 hosts: enable crowdsec-firewall-bouncer module for web-exposed hosts Eric Torres 2025-10-18 22:48:16 -07:00
• 3199b45957 Merge branch 'services.crowdsec' into services Eric Torres 2025-10-18 22:46:00 -07:00
• bfd5dfbd2d crowdsec-traefik-bouncer: cleanup unneeded vars Eric Torres 2025-10-18 22:45:35 -07:00
• 80ee346387 services/crowdsec-firewall-bouncer: only use mkIf cfg.enable conditional Eric Torres 2025-10-18 22:44:23 -07:00
• fba44b786d services: add crowdsec-firewall-bouncer module Eric Torres 2025-10-18 22:43:58 -07:00
• 3d0a91417b services/healthchecks: use healthchecks name in opt example services.healthchecks Eric Torres 2025-10-18 21:45:40 -07:00
• 2e8156f2fe flake.lock: update 2025-10-18 Eric Torres 2025-10-18 15:39:32 -07:00
• e8ea6dd73b base/secrets: fix missing age subdir in ageKeyDir Eric Torres 2025-10-18 15:33:33 -07:00
• 274b059311 base/secrets: var usage sopsDir -> ageKeyDir Eric Torres 2025-10-18 15:30:12 -07:00
• 3a46f6b4de base/secrets: add tmpfiles rules for creating key storage file Eric Torres 2025-10-18 15:27:41 -07:00
• cd1c09f28e hosts/nbg-01: add config for crowdsec traefik bouncer Eric Torres 2025-10-18 15:23:22 -07:00
• 2ab3816414 secrets/nbg-01: add crowdsec lapiKey Eric Torres 2025-10-18 15:20:35 -07:00
• 3ca64a9ba6 sops.yaml: add key for nbg-01 Eric Torres 2025-10-18 15:19:42 -07:00
• 6fc106abad hosts/lax-01: set permission for bouncer key to traefik Eric Torres 2025-10-18 15:08:55 -07:00
• 2b19bc29d7 services/crowdsec-traefik-bouncer: rename bouncer plugin instance Eric Torres 2025-10-18 14:57:02 -07:00
• 32a19f6acb services/traefik: set service's working directory Eric Torres 2025-10-18 14:52:29 -07:00
• 1ad5628ee9 services/crowdsec-traefik-bouncer: update comment about tmpfiles Eric Torres 2025-10-18 14:40:50 -07:00
• 111506f08c services/crowdsec: add rules to create credentials files Eric Torres 2025-10-18 14:39:48 -07:00
• e52a73d1a5 services/crowdsec-traefik-bouncer: create subdirectory sources under plugins-storage Eric Torres 2025-10-18 14:37:03 -07:00
• bbb6fc8059 services/crowdsec-traefik-bouncer: create directory for plugins storage Eric Torres 2025-10-18 14:31:55 -07:00
• 45f4e1af44 services/crowdsec-traefik-bouncer: fix section of middlewares for bouncer Eric Torres 2025-10-18 14:28:57 -07:00
• 19c28ebe3c services/crowdsec-traefik-bouncer: var lapiAddress -> lapiHost Eric Torres 2025-10-18 14:19:44 -07:00
• a4a24c82df secrets/lax-01: add lapi key for bouncer Eric Torres 2025-10-18 14:19:24 -07:00
• a373364c25 hosts/lax-01: enable crowdsec-traefik-bouncer module Eric Torres 2025-10-18 13:52:24 -07:00
• a55d163bae hosts/log-01: consolidate sops.secrets blocks Eric Torres 2025-10-18 13:50:37 -07:00
• 60762435f5 services/crowdsec-traefik-bouncer: fix scope of lapiKeyFile Eric Torres 2025-10-18 13:14:09 -07:00
• c1ac126dd4 services/crowdsec-traefik-bouncer: reorder config opts Eric Torres 2025-10-18 13:13:36 -07:00
• f44b992c43 services/crowdsec-traefik-bouncer: simplify conditional logic for config Eric Torres 2025-10-18 13:08:53 -07:00
• 36199bb371 services/crowdsec-traefik-bouncer: change opt environmentFile to lapiKeyFile Eric Torres 2025-10-18 13:06:52 -07:00
• 8e2a38ef28 services/crowdsec-traefik-bouncer: set mode to stream Eric Torres 2025-10-18 13:05:03 -07:00
• 44f65b5898 services/crowdsec-traefik-bouncer: update plugin to v1.4.5 Eric Torres 2025-10-18 13:04:01 -07:00
• 63bd818ca1 services/services: add crowdsec-traefik-bouncer module Eric Torres 2025-10-18 12:55:54 -07:00
• 4f9ab47202 services/crowdsec-traefik-bouncer: initial implementation Eric Torres 2025-10-18 12:55:04 -07:00
• 1d54f46eb5 services/crowdsec: move EnvironmentFile opt into module Eric Torres 2025-10-18 12:39:56 -07:00
• 81ead270fb services/crowdsec: disable autoUpdateService Eric Torres 2025-10-18 12:09:08 -07:00
• 80f3ddd7af services/crowdsec: misc formatting cleanup Eric Torres 2025-10-15 23:05:22 -07:00
• 33b25a71c6 Merge branch 'services' Eric Torres 2025-10-15 23:01:49 -07:00
• bc2a2772ad services/crowdsec: enable alloy monitoring Eric Torres 2025-10-15 23:01:08 -07:00
• 12ff87a782 Merge branch 'services' Eric Torres 2025-10-15 22:51:34 -07:00
• aa7acf9730 services/crowdsec: hardcode port Eric Torres 2025-10-15 22:44:32 -07:00
• b63e67cd15 services/crowdsec: quote port number Eric Torres 2025-10-15 22:39:55 -07:00
• 1e56f160f4 Revert "secrets/log-01_crowdsec.env: change type of port to str" Eric Torres 2025-10-15 22:39:29 -07:00
• 4b7fd600a3 services/crowdsec: double quote port Eric Torres 2025-10-15 22:38:38 -07:00
• a0c4454767 services/crowdsec: add cscli to systemPackages Eric Torres 2025-10-15 22:29:04 -07:00
• 09d099d17c secrets/log-01_crowdsec.env: change type of port to str Eric Torres 2025-10-15 21:57:46 -07:00
• a628d97de1 hosts/log-01: disable postgres database Eric Torres 2025-10-15 21:55:52 -07:00
• 045d6a8aaf secrets/log-01_crowdsec.env: set db-pg17 as host for postgres Eric Torres 2025-10-15 21:54:11 -07:00
• 684e5daf54 roles/dockerserver: use SupplementaryGroups instead of changing traefik group roles.dockerserver Eric Torres 2025-10-15 21:05:31 -07:00
• 34988422b5 services/crowdsec: pull traefik logs by job traefik_access_logs Eric Torres 2025-10-15 20:50:19 -07:00
• 86c9d43619 Merge branch 'main' into services roles.minecraftserver Eric Torres 2025-10-15 18:59:28 -07:00
• 6f57ffc2f3 roles/minecraftserver: misc formatting cleanup Eric Torres 2025-10-15 18:59:08 -07:00
• da4cbd2728 roles/minecraftserver: add alloy collector to minecraft group Eric Torres 2025-10-15 18:58:26 -07:00
• d5f7fba45c services/traefik: fix typo in loki source file Eric Torres 2025-10-15 18:55:07 -07:00
• 950d04a418 services/traefik: target alloy scrape directly on access log Eric Torres 2025-10-15 18:54:50 -07:00
• a6a6b77d6f services/traefik: conditionally add alloy to traefik group Eric Torres 2025-10-15 18:50:41 -07:00
• a48ffaa979 services/traefik: conditionally add alloy to traefik group Eric Torres 2025-10-15 18:49:08 -07:00
• 3467638f24 hosts/lax-01: add mac ssh key Eric Torres 2025-10-15 13:24:10 -07:00
• 8f90f804e8 services/traefik: log traefik access logs to file Eric Torres 2025-10-15 13:20:07 -07:00
• 8fe74f9a99 services/traefik: restructure accessLog config in accordance with traefik example Eric Torres 2025-10-15 13:17:51 -07:00
• acfa1cf94f services/traefik: modify ReadWritePaths scope Eric Torres 2025-10-15 13:07:54 -07:00
• 26edbbef72 Merge branch 'services.crowdsec' into services Eric Torres 2025-10-15 12:56:12 -07:00
• 0cc92f555d services/traefik: enable alloy collection for traefik access logs Eric Torres 2025-10-15 12:55:15 -07:00
• 8bd1dc8751 services/traefik: enable access logging for traefik Eric Torres 2025-10-15 10:28:30 -07:00
• c7adadba48 services/crowdsec: add traefik WAF config Eric Torres 2025-10-13 13:15:05 -07:00
• 69929254da services/crowdsec: set up acquisitions for traefik, gitea, and authentik Eric Torres 2025-10-13 13:11:00 -07:00
• 3b38e810ec services/traefik: mkif -> mkIf services.uptimekuma services.ntfy Eric Torres 2025-10-12 22:14:15 -07:00
• 2e641fb37d hosts/lax-01,nbg-01: redirect http traffic to https Eric Torres 2025-10-12 22:11:32 -07:00
• 782bf9ead0 services/traefik: add opt for redirecting HTTPS Eric Torres 2025-10-12 22:09:24 -07:00
• e93a46fc4c services/traefik: fix incorrect advertisedPort opt Eric Torres 2025-10-12 21:51:58 -07:00
• 1c6cb102e1 services/traefik: add set of middlewares as default for entryPoints Eric Torres 2025-10-12 21:42:02 -07:00
• 8501a8da53 roles/dbserver-postgresql: disable alloy config Eric Torres 2025-10-12 21:20:58 -07:00
• 988853cd79 base/base: add nethogs and btop diag programs Eric Torres 2025-10-12 21:16:41 -07:00
• 1d1c1caab3 Merge branch 'services.crowdsec' into services Eric Torres 2025-10-12 21:13:53 -07:00
• f9575f7714 services/crowdsec: add note about capi_credentials file Eric Torres 2025-10-12 21:08:46 -07:00
• ec0095276c services/crowdsec: simplify credentials file paths Eric Torres 2025-10-12 21:04:07 -07:00
• c1522cf538 Revert "services/crowdsec: use statedir for credentials files" Eric Torres 2025-10-12 21:03:41 -07:00
• adc3119d5c services/crowdsec: remove daemonize opt from api.server Eric Torres 2025-10-12 21:00:46 -07:00