4f3b705305
fix: PiHole | remove dnsmasq hosts and use Cloudflare backup DNS
2024-10-24 13:49:41 +05:00
0d4f700b89
feat: NixOS | use LUKS and proper hostname for k3s domain
...
feat: NixOS | move cluster config to /master
fix: update all stuff for office network
feat: PiHole | set up DHCP server
chore: Cloudflare | delete api token secret
chore: remove external-dns annotations from ingressed services
fix: PiHole | turn off liveness checks due to host ip
fix: GiteaActions | use encrypted storage for runner
fix: ElasticSearch | use encrypted volumes for storage
fix: Pihole | static mac addresses all caps
feat: NixOS | manual network configuration
fix: NixOS | k3s cluster init point to static ip with tls-san
chore: Postgres | move certificate resources into own file + reduce volume size
fix: Pihole | add ingress class name
sec: NixOS | remove token from git
2024-10-24 13:49:41 +05:00
38e5e53fd9
fix: ElasticSearch | using clusterIP was a mistake
2024-10-13 17:35:32 +05:00
5f0cd94f34
chore: use RSA certificates and clusterIP on elasticsearch
2024-10-12 22:31:52 +05:00
f8d7470ee6
fix: ElasticSearch | use single node cluster
2024-10-12 21:55:57 +05:00
f54e6f11de
chore: Network | use nginx as much as possible
2024-10-12 21:11:06 +05:00
058666330a
feat: Gitea | enable smtp mail
2024-10-12 18:58:26 +05:00
db935d355c
fix: Gitea | use redis for queue
2024-10-12 18:26:54 +05:00
70736f440e
fix: Gitea | use https endpoint in action runners
2024-10-12 16:05:22 +05:00
6d8afdefb6
feat: ElasticSearch | set up https for service
2024-10-12 13:35:14 +05:00
b313b746df
feat: Authentik | set up for HA
2024-10-12 13:34:58 +05:00
80a6b9c49c
feat: Authentik | set up authentik + dependencies
...
Includes redis and changes to pihole, nginx, prometheus and gitea
2024-10-12 09:31:50 +05:00
5a7fccdfa1
feat: Cloudflare | set up DDNS container
2024-10-12 09:31:16 +05:00
dea64bc039
feat: ElasticSearch | add elasticsearch cluster
2024-10-12 09:30:49 +05:00
c6933157c0
feat: Postgers | use client managed certificates
2024-10-11 15:04:41 +05:00
77a9668446
fix: Pihole | use sticky connections for http
2024-10-08 15:07:09 +05:00
60a54c48ff
fix: Pihole | use router as dns2
2024-10-08 14:56:16 +05:00
887afaca1e
fix: Pihole | use ReadWriteMany access mode on PVC
2024-10-08 13:44:51 +05:00
18ac01be63
feat: Pihole | enable externalDNS metrics and use dogar.dev domain
2024-10-08 13:40:53 +05:00
258877e127
fix: Pihole | remove 192.168.0.1 dns address
2024-10-08 13:34:17 +05:00
7b2de50e02
feat: Gitea | use ED25519 for cloudflare cert
2024-10-08 13:23:25 +05:00
7343e744bf
expose grafana to public internet
2024-10-01 19:19:39 +05:00
34fa878e17
feat: Postgres | expose cluster to public internet
2024-10-01 19:11:32 +05:00
85e8981a11
chore: Memcached | make the pod a single replica
2024-10-01 18:53:43 +05:00
9a655b80af
feat: Memcached| expose memcached on dogar.dev
2024-10-01 17:43:59 +05:00
601a15cca5
feat: Cloudflare | add DDNS container
2024-10-01 17:19:02 +05:00
9a0bd728ac
chore: Nginx | formatting
2024-10-01 17:06:09 +05:00
6b6b9231a6
fix: Gitea | fix ssh clone url
2024-10-01 17:06:00 +05:00
ca7a9fd616
fix: Gitea | use local ip address for home network
2024-10-01 16:06:45 +05:00
e40b3bc110
chore: Cloudflared | remove cloudflare tunnels
2024-10-01 16:06:17 +05:00
4a5c9fda34
feat: Gitea | expose service to public internet without cloudflared
2024-10-01 16:04:52 +05:00
18605f98a1
fix: Postgres | use async replicas only and add dogar.dev to certificate sans
2024-10-01 09:10:50 +05:00
d4edcc0645
fix: only use git.dogar.dev domain for gitea
2024-10-01 09:08:38 +05:00
adee1b5941
fix: Memcached | expose service as type Loadbalancer
...
Also added some custom settings
2024-09-16 14:27:27 +05:00
9340c66e37
feat: adjust ROOT_URL in gitea and create action runner
2024-09-16 13:22:05 +05:00
b2c327e218
fix: Gitea | preserve gitea.home for use, git.dogar.dev readonly
2024-09-09 08:56:23 +05:00
0c956bda49
fix: Gitea | use git.dogar.dev as primary domain name
2024-09-09 07:17:46 +05:00
fd1133237f
feat: Cloudflared | expose gitea service over cloudflare tunnel
2024-09-09 06:46:57 +05:00
649d481ed0
sec: Gitea | disable user registration
2024-09-09 06:36:06 +05:00
f9504f556e
fix: Gitea | disable registration
2024-09-09 06:05:11 +05:00
f93c648e84
fix: Postgres | apply custom pg_hba, add server DNS altname
2024-09-04 17:09:34 +05:00
4615c9f76e
feat: Cloudflared | add cloudflared manifest
2024-09-02 11:36:58 +05:00
727c0ce42c
fix: CertManager | create cluster-issuer in namespace
2024-09-01 15:29:23 +05:00
33c151cce5
fix: Postgres | add internal routes for gitea
2024-09-01 15:29:07 +05:00
38d091ad59
fix: NixOs | add cloudflared to installed packages
2024-09-01 14:20:48 +05:00
710f8b3138
fix: CertManager | create selfsigned CA cert to import into browsers
2024-08-29 18:04:13 +05:00
98ff7bf114
feat: Gitea | enable prometheus operator scraping
2024-08-28 17:15:17 +05:00
ee0a2baa0f
feat: PiHole | enable prometheus metric scraping
2024-08-28 17:05:48 +05:00
7eb575647b
feat: Prometheus | set up prom operator
2024-08-28 17:01:51 +05:00
fe47ed139a
feat: add tls for pihole.home
2024-08-28 15:01:55 +05:00
