JJGadgets
8d64325d05
feat(taskfiles): add k:gpi & k:sa
2023-06-02 06:09:42 +08:00
JJGadgets
e8a37be851
Merge branch 'main' of github.com:JJGadgets/Biohazard
2023-06-02 05:36:49 +08:00
JJGadgets
790316b4ef
feat: init taskfiles & cluster-init-config task
2023-06-02 05:36:25 +08:00
JJGadgets
6cd7ca864d
feat(headscale): rm ingress, use TS DERP
...
- simplify DERP availability and network requirements due to home risk assessment
- removed ingress, let Headscale handle TLS & webserver so that DERP relay can be on the same IP
- EC2 ingress already configures to directly forward traffic to Headscale LBIP
2023-05-31 15:56:48 +08:00
JJGadgets
f5a144df8a
feat(cnpg): add dump-local to template
2023-05-29 14:32:52 +08:00
JJGadgets
e1f1f679f3
fix(pg-default-dump-local): POSTGRES_DB env
2023-05-29 14:24:37 +08:00
JJGadgets
a8d7e9d218
fix(pg-default-dump-local): time, timezone, labels
2023-05-29 14:03:23 +08:00
JJGadgets
42aada0e6a
feat(pg-default): add pg_dump to NAS
2023-05-29 13:49:51 +08:00
JJGadgets
4ca8619aea
fix(headscale): ndots 1 for authentik
2023-05-29 10:25:40 +08:00
JJGadgets
d4e53b7718
feat(gotosocial): TLS netpols
2023-05-28 12:25:29 +08:00
JJGadgets
b7183421d9
feat(gotosocial): TLS
2023-05-28 12:18:44 +08:00
JJGadgets
166a2959ac
feat(gotosocial): TLS
2023-05-28 12:16:14 +08:00
JJGadgets
3d67a5cb92
fix(cloudflared): netpol, GtS direct
2023-05-28 12:12:33 +08:00
JJGadgets
cd7698a6e9
fix(headscale): allow cloudflared ingress
2023-05-28 12:02:33 +08:00
JJGadgets
8be8d862df
fix(cloudflared): add headscale
2023-05-28 11:52:42 +08:00
JJGadgets
74249d3d4e
feat(headscale): add DERP & OIDC expiry
2023-05-28 11:44:32 +08:00
JJGadgets
48e4c044a5
fix(headscale): failed to bind unix socket
2023-05-28 11:25:03 +08:00
JJGadgets
d80792e24e
fix(gotosocial): temporarily disable S3 SSL
2023-05-28 09:50:02 +08:00
JJGadgets
1632ef2bb3
feat(gotosocial): switch media to S3
2023-05-28 09:22:13 +08:00
JJGadgets
0c85ea103e
fix(rook-ceph): netpol allow labelled pods to RGW
2023-05-28 09:08:10 +08:00
JJGadgets
ba95a0d926
feat(gotosocial): add s3, prep to migrate
2023-05-28 08:21:39 +08:00
JJGadgets
2ef7c3d553
fix(headscale): allow ingress-nginx egress for OIDC
2023-05-27 17:25:17 +08:00
JJGadgets
b1241f4394
fix(headscale): cmd & pg dependency
2023-05-27 12:29:32 +08:00
JJGadgets
b927f135e2
fix(netpols): ingress-nginx to flux webhook
...
Signed-off-by: JJGadgets <git@jjgadgets.tech >
2023-05-27 12:21:47 +08:00
JJGadgets
71478f42fd
feat: add headscale
2023-05-27 12:15:32 +08:00
JJGadgets
aa8b2c1e45
feat(cilium): add docs on BGPCP & DSR
2023-05-27 06:04:38 +08:00
JJGadgets
a25fd0db84
fix(satisfactory): UID 0 for now
...
the entrypoint (CMD) script init.sh does an `id -u` of current UID before dropping privs, and will exit as error if not UID 0. will open issue to ask if running as true rootless due to K8s is possible via new envvar ROOTLESS=k8s or something like that
2023-05-27 03:28:53 +08:00
JJGadgets
ebaeb77c57
feat: add satisfactory
2023-05-27 03:06:09 +08:00
JJGadgets
91f85d54ce
Merge branch 'main' of github.com:JJGadgets/Biohazard
2023-05-22 02:29:36 +08:00
JJGadgets
00111bad1a
fix(rook): PVE CephFS
2023-05-22 02:29:15 +08:00
JJGadgets
2c6fa155df
fix: default-backend
2023-05-21 01:03:49 +08:00
JJGadgets
c963d0cf7d
Update install.yaml
2023-05-20 23:59:24 +08:00
JJGadgets
b996423054
feat(ingress-nginx): custom error page
2023-05-20 23:43:00 +08:00
JJGadgets
891acf3006
feat(ingress): add default-backend
2023-05-20 22:50:02 +08:00
JJGadgets
ea64fb9bdf
feat(templates): update hr
2023-05-19 14:43:32 +08:00
JJGadgets
3003793f0c
fix(gotosocial): postgres-init image hash
2023-05-19 14:38:26 +08:00
JJGadgets
3da5639b07
feat: update templates
2023-05-18 23:47:37 +08:00
JJGadgets
f9e9518333
fix(netpols): ingress-nginx to flux webhook
...
Signed-off-by: JJGadgets <git@jjgadgets.tech >
2023-05-18 23:16:58 +08:00
JJGadgets
aa92c628f2
feat(kanidm): volsync to R2
2023-05-18 22:34:24 +08:00
JJGadgets
100da645c5
fix(flux): wrong notification apiVersion
...
I really gotta upgrade to latest Flux and sed all my apiVersions soon lmfao
2023-05-18 22:14:05 +08:00
JJGadgets
dd60fa59ca
fix(flux): deploy webhook
2023-05-18 22:10:51 +08:00
JJGadgets
d05350f4f9
Merge branch 'main' of github.com:JJGadgets/Biohazard
2023-05-18 22:08:14 +08:00
JJGadgets
734581cd58
feat(flux): add github push webhook
2023-05-18 22:06:12 +08:00
JJGadgets
fd9479d308
fix(ingress-nginx): eTP Cluster for HA
2023-05-17 18:30:57 +08:00
JJGadgets
88ecfa32cb
fix(ntfy): webosckets: rm L7 http netpol
2023-05-17 18:22:09 +08:00
JJGadgets
c986d4abe6
fix(authentik): webosckets: rm L7 http netpol
2023-05-17 18:20:46 +08:00
JJGadgets
28373d2e83
fix(authentik): ws: string not number
2023-05-17 05:43:45 +08:00
JJGadgets
d18db2ba77
fix(authentik): proxy timeout for websockets
...
increased ingress-nginx proxy-*-timeout to 3600 for WebSockets to work
2023-05-17 05:38:14 +08:00
JJGadgets
20d9095751
fix(cloudflared): GoToSocial non-wildcard SSL
2023-05-16 05:00:27 +08:00
JJGadgets
fc13e41a65
fix(gotosocial): OIDC migration from <0.7.0
...
halp admin me can't login lol, asks me for new account
2023-05-16 04:52:29 +08:00