Commit Graph

26 Commits

Author SHA1 Message Date
20ce8eedeb
navidrome: fix up things 2024-10-12 10:37:49 -04:00
864c1bdfd3
haproxy, firewall, containers: force connections through bastion vpn
docker is now listening on localhost, with a haproxy on the services
server to forward the ports outwards. this is because docker tends to
disregard UFW's rules, but haproxy should be better in that regard.

meanwhile, the firewall rules have been configured properly to only
allow the bastion IP in over the wireguard connection, for proper
authentication.
2024-06-19 23:02:08 -04:00
03d59be0eb
containers, synapse: groups -> group_names 2024-06-19 14:05:35 -04:00
c70e33e629
wireguard: clean up
- make variables less clunky
- make docker-compose run after wireguard (this seems janky right now)
2024-06-17 17:48:29 -04:00
0c8d18dcce
wireguard: use vpn for bastion-fleet comms
supposedly fleet will be more secure this way
2024-06-16 21:32:52 -04:00
24a64c0919
navidrome: add sharing option 2024-03-10 21:22:29 -04:00
1941d0092c
roles/containers/: update docker-compose.service to have longer timeout 2024-03-10 21:21:43 -04:00
f7638d136c
paperless: fix consume dir permissions 2024-03-03 09:58:35 -05:00
96d62d6060
add wifi "support" 2024-01-02 21:03:31 -05:00
533082b8d4
paperless-ngx: add service 2023-12-09 21:36:36 -05:00
314f1cfc8d
containers: use ghc navidrome image 2023-12-09 15:17:31 -05:00
7f2e74490d
roles/containers: make navidrome dir have the 'vault' group 2023-09-26 18:43:51 -04:00
b7013cc53a
fix details
playbook has now run on real hardware
2023-09-10 19:25:29 -04:00
f29eae7f1e roles/synapse: fix mistakes 2023-09-09 09:05:05 -04:00
4144a0647e
roles/synapse: added 2023-09-07 21:47:16 -04:00
2b4ee3a365
roles/containers: also create archive dir 2023-09-04 20:09:48 -04:00
892b5285cc
roles/containers: navidrome added 2023-09-04 18:27:08 -04:00
bf130d2c3f
roles/syncthing, roles/containers: added syncthing 2023-09-04 15:28:03 -04:00
d8db896ac2
roles/containers: put gitea on its own network 2023-09-03 22:05:22 -04:00
e0b7c5a15e
roles/haproxy: fix issues 2023-09-03 20:09:56 -04:00
ff40949ff7
roles/containers: make gitea bridge network instead of host network 2023-09-03 19:38:29 -04:00
167c01c04e
containers: add gitea user 2023-09-02 18:20:46 -04:00
e8f762a4cb
roles/containers: gitea should work properly now 2023-08-27 21:59:01 -04:00
dd0de3139e
roles/containers: got gitea container up 2023-08-27 20:33:18 -04:00
0288cea768
roles/containers: use systemd instead of docker module
arch doesn't package python-docker-compose so just docker compose up via
systemd instead of ansible
2023-08-27 17:39:08 -04:00
97fc92ff56
roles/containers: added gitea container 2023-08-23 20:48:34 -04:00