20ce8eedeb
navidrome: fix up things
2024-10-12 10:37:49 -04:00
864c1bdfd3
haproxy, firewall, containers: force connections through bastion vpn
...
docker is now listening on localhost, with a haproxy on the services
server to forward the ports outwards. this is because docker tends to
disregard UFW's rules, but haproxy should be better in that regard.
meanwhile, the firewall rules have been configured properly to only
allow the bastion IP in over the wireguard connection, for proper
authentication.
2024-06-19 23:02:08 -04:00
03d59be0eb
containers, synapse: groups -> group_names
2024-06-19 14:05:35 -04:00
c70e33e629
wireguard: clean up
...
- make variables less clunky
- make docker-compose run after wireguard (this seems janky right now)
2024-06-17 17:48:29 -04:00
0c8d18dcce
wireguard: use vpn for bastion-fleet comms
...
supposedly fleet will be more secure this way
2024-06-16 21:32:52 -04:00
24a64c0919
navidrome: add sharing option
2024-03-10 21:22:29 -04:00
1941d0092c
roles/containers/: update docker-compose.service to have longer timeout
2024-03-10 21:21:43 -04:00
f7638d136c
paperless: fix consume dir permissions
2024-03-03 09:58:35 -05:00
96d62d6060
add wifi "support"
2024-01-02 21:03:31 -05:00
533082b8d4
paperless-ngx: add service
2023-12-09 21:36:36 -05:00
314f1cfc8d
containers: use ghc navidrome image
2023-12-09 15:17:31 -05:00
7f2e74490d
roles/containers: make navidrome dir have the 'vault' group
2023-09-26 18:43:51 -04:00
b7013cc53a
fix details
...
playbook has now run on real hardware
2023-09-10 19:25:29 -04:00
f29eae7f1e
roles/synapse: fix mistakes
2023-09-09 09:05:05 -04:00
4144a0647e
roles/synapse: added
2023-09-07 21:47:16 -04:00
2b4ee3a365
roles/containers: also create archive dir
2023-09-04 20:09:48 -04:00
892b5285cc
roles/containers: navidrome added
2023-09-04 18:27:08 -04:00
bf130d2c3f
roles/syncthing, roles/containers: added syncthing
2023-09-04 15:28:03 -04:00
d8db896ac2
roles/containers: put gitea on its own network
2023-09-03 22:05:22 -04:00
e0b7c5a15e
roles/haproxy: fix issues
2023-09-03 20:09:56 -04:00
ff40949ff7
roles/containers: make gitea bridge network instead of host network
2023-09-03 19:38:29 -04:00
167c01c04e
containers: add gitea user
2023-09-02 18:20:46 -04:00
e8f762a4cb
roles/containers: gitea should work properly now
2023-08-27 21:59:01 -04:00
dd0de3139e
roles/containers: got gitea container up
2023-08-27 20:33:18 -04:00
0288cea768
roles/containers: use systemd instead of docker module
...
arch doesn't package python-docker-compose so just docker compose up via
systemd instead of ansible
2023-08-27 17:39:08 -04:00
97fc92ff56
roles/containers: added gitea container
2023-08-23 20:48:34 -04:00