20ce8eedeb
navidrome: fix up things
2024-10-12 10:37:49 -04:00
864c1bdfd3
haproxy, firewall, containers: force connections through bastion vpn
...
docker is now listening on localhost, with a haproxy on the services
server to forward the ports outwards. this is because docker tends to
disregard UFW's rules, but haproxy should be better in that regard.
meanwhile, the firewall rules have been configured properly to only
allow the bastion IP in over the wireguard connection, for proper
authentication.
2024-06-19 23:02:08 -04:00
03d59be0eb
containers, synapse: groups -> group_names
2024-06-19 14:05:35 -04:00
0c8d18dcce
wireguard: use vpn for bastion-fleet comms
...
supposedly fleet will be more secure this way
2024-06-16 21:32:52 -04:00
f7638d136c
paperless: fix consume dir permissions
2024-03-03 09:58:35 -05:00
533082b8d4
paperless-ngx: add service
2023-12-09 21:36:36 -05:00
7f2e74490d
roles/containers: make navidrome dir have the 'vault' group
2023-09-26 18:43:51 -04:00
4144a0647e
roles/synapse: added
2023-09-07 21:47:16 -04:00
2b4ee3a365
roles/containers: also create archive dir
2023-09-04 20:09:48 -04:00
892b5285cc
roles/containers: navidrome added
2023-09-04 18:27:08 -04:00
bf130d2c3f
roles/syncthing, roles/containers: added syncthing
2023-09-04 15:28:03 -04:00
d8db896ac2
roles/containers: put gitea on its own network
2023-09-03 22:05:22 -04:00
ff40949ff7
roles/containers: make gitea bridge network instead of host network
2023-09-03 19:38:29 -04:00
167c01c04e
containers: add gitea user
2023-09-02 18:20:46 -04:00
e8f762a4cb
roles/containers: gitea should work properly now
2023-08-27 21:59:01 -04:00
dd0de3139e
roles/containers: got gitea container up
2023-08-27 20:33:18 -04:00
0288cea768
roles/containers: use systemd instead of docker module
...
arch doesn't package python-docker-compose so just docker compose up via
systemd instead of ansible
2023-08-27 17:39:08 -04:00
97fc92ff56
roles/containers: added gitea container
2023-08-23 20:48:34 -04:00
