Commit graph

415 commits

Author SHA1 Message Date
Viktor Barzin
efb8e99bc2 add metabase secured ingress [ci skip] 2023-11-25 13:34:15 +00:00
Viktor Barzin
e2b077f521
add metabase secured ingress [ci skip] 2023-11-24 19:04:44 +00:00
Viktor Barzin
26f5ba41fe
upgrade immich to v1.88.2 [ci skip] 2023-11-24 18:30:29 +00:00
Viktor Barzin
46b19e7887
partially add reactive resume but do not use for now as it requires too much shit [ci skip] 2023-11-24 17:39:17 +00:00
Viktor Barzin
74bfaaeeb0
add postgresql to dbaas [ci skip] 2023-11-24 17:38:49 +00:00
Viktor Barzin
13fda3424a
add cluster secret dbaas as it is needed for pma [ci skip] 2023-11-24 12:55:55 +00:00
Viktor Barzin
fdb4d6228a
add crowdsec module [ci skip] 2023-11-24 11:08:25 +00:00
Viktor Barzin
49c043aeb9
increase immich upload size [ci skip] 2023-11-24 11:07:13 +00:00
Viktor Barzin
3fb7afa9e6
increase immich ingress limit to 1gb to allow for videos upload [ci skip] 2023-11-19 16:17:31 +00:00
Viktor Barzin
41c0b13868
add smtp config to vaultwarden to enable email 2fa [ci skip] 2023-11-18 19:13:40 +00:00
Viktor Barzin
9bb1a73003
disable owasp rules for everyone as it is too false positiv-y [ci skip] 2023-11-18 18:57:04 +00:00
Viktor Barzin
b7fc4fd8f0
add modsecurity waf to ingress with some blacklisted ips [ci skip] 2023-11-18 18:38:59 +00:00
Viktor Barzin
dc565c4d87
add nginx ingress as tf module [ci skip] 2023-11-18 16:18:26 +00:00
Viktor Barzin
8032697076
add immich deployment [ci skip] 2023-11-18 14:54:57 +00:00
Viktor Barzin
525203c181
add immich to dashy [ci skip] 2023-11-16 19:20:57 +00:00
Viktor Barzin
f4dd039a53
add limits to finance app resources as its breaking stuff every now and then [ci skip] 2023-11-15 18:13:04 +00:00
Viktor Barzin
f186816a7f
remove some obsolete dbaas resources [ci skip] 2023-11-15 18:12:39 +00:00
Viktor Barzin
ecfcb459f7
disable fail2ban as it was blockign forwardmail lol. yolo [ci skip] 2023-11-12 20:54:27 +00:00
Viktor Barzin
76179083dd
add my.cnf as config instead of file [ci skip] 2023-11-12 17:47:50 +00:00
Viktor Barzin
5206aa7438
redirect users to external ip of oauth2 while doing the verification against the internal to avoid hairpinning [ci skip] 2023-11-12 16:08:32 +00:00
Viktor Barzin
93c6f701c1
protect k8s dashboard with 0auth instead of client tls [ci skip] 2023-11-11 22:30:52 +00:00
Viktor Barzin
c06f071da0
move drone to nfs [ci skip] 2023-11-11 02:32:20 +00:00
Viktor Barzin
d1dde6696d
add ytdlp to dashy [ci skip] 2023-11-11 02:28:39 +00:00
Viktor Barzin
03ddb0da8a
add youtube-dlp module [ci skip] 2023-11-11 02:26:25 +00:00
Viktor Barzin
bd4754b339
move grafana to nfs [ci skip] 2023-11-11 00:16:58 +00:00
Viktor Barzin
fa445d500b
move hackmd to mysql and increase replicase as it is now stateless [ci skip] 2023-11-10 23:58:18 +00:00
Viktor Barzin
1b66e78db2
increase upload limit for pma to 50mb [ci skip] 2023-11-10 23:57:30 +00:00
Viktor Barzin
4ed2d3ec43
upgrade hackm to latest version[ci skip] 2023-11-10 22:57:12 +00:00
Viktor Barzin
ab367c5124
move hackmd to nfs [ci skip] 2023-11-10 22:52:42 +00:00
Viktor Barzin
73d63b7713
add alert if node memory exceeds 90% [ci skip] 2023-11-10 22:48:45 +00:00
Viktor Barzin
4a101935b4
move mailserver to nfs [ci skip] 2023-11-10 22:48:31 +00:00
Viktor Barzin
0162435a88
use nfs to prometheus [ci skip] 2023-11-10 22:20:25 +00:00
Viktor Barzin
dbc6603cfe
remove data mount for finance app [ci skip] 2023-11-10 22:20:02 +00:00
Viktor Barzin
404ee3f3f0
use nfs for dbaas [ci skip] 2023-11-10 22:19:40 +00:00
Viktor Barzin
9ef1b97f83
set max body size to 50mb [ci skip] 2023-11-10 22:19:20 +00:00
Viktor Barzin
91cab7871c
move privatebin to use nfs from iscsi as it is more rleiable [ci skip] 2023-11-10 18:46:00 +00:00
Viktor Barzin
e02be21cdf
do not do hairpin for oauth2 proxy redirects [ci skip] 2023-11-10 10:59:56 +00:00
Viktor Barzin
e432f47f22 readd gocardless auth as that is needed to get user requisitions [ci skip] 2023-11-06 22:44:49 +00:00
Viktor Barzin
0b1f1b68c8
ad redis in dashy[ci skip] 2023-11-04 16:39:48 +00:00
Viktor Barzin
67074e9dd0
add latifistreams to f1 site[ci skip] 2023-11-04 16:39:21 +00:00
Viktor Barzin
2de4891974
add redis and update send to use redis [ci skip] 2023-11-04 01:07:41 +00:00
Viktor Barzin
eb8773ae7a
add service to share files [ci skip] 2023-11-04 00:51:04 +00:00
Viktor Barzin
5bd6abe963
add another synology js file that is available when downloading files[ci skip] 2023-11-03 23:47:02 +00:00
Viktor Barzin
3f809e946a
add option to specify which ingresses are protected and also expose list of paths to allow [ci skip] 2023-11-03 23:27:12 +00:00
Viktor Barzin
255eb1e2db
add roundcube web mail client [ci skip] 2023-11-03 22:36:12 +00:00
Viktor Barzin
93241f7756
remove old reverse proxy module [ci skip] 2023-11-01 20:45:58 +00:00
Viktor Barzin
1afb83e426
use .lan domain for idrac metrics scrape [ci skip] 2023-11-01 20:44:17 +00:00
Viktor Barzin
c4c3554e55
connect to https port on idrac [ci skip] 2023-11-01 20:34:25 +00:00
Viktor Barzin
9fad8e9025
open grafana tabs in new tab instead modal in dashy to avoid google iframe issues [ci skip] 2023-11-01 14:06:19 +00:00
Viktor Barzin
a373ee0a8c
add reverse proxy with a bunch of internal sites exposed behind oauth; also update dashy [ci skip] 2023-11-01 13:27:25 +00:00