Commit Graph

568 Commits

Author SHA1 Message Date
JJGadgets
8d64325d05 feat(taskfiles): add k:gpi & k:sa 2023-06-02 06:09:42 +08:00
JJGadgets
e8a37be851 Merge branch 'main' of github.com:JJGadgets/Biohazard 2023-06-02 05:36:49 +08:00
JJGadgets
790316b4ef feat: init taskfiles & cluster-init-config task 2023-06-02 05:36:25 +08:00
JJGadgets
6cd7ca864d feat(headscale): rm ingress, use TS DERP
- simplify DERP availability and network requirements due to home risk assessment
- removed ingress, let Headscale handle TLS & webserver so that DERP relay can be on the same IP
- EC2 ingress already configures to directly forward traffic to Headscale LBIP
2023-05-31 15:56:48 +08:00
JJGadgets
f5a144df8a feat(cnpg): add dump-local to template 2023-05-29 14:32:52 +08:00
JJGadgets
e1f1f679f3 fix(pg-default-dump-local): POSTGRES_DB env 2023-05-29 14:24:37 +08:00
JJGadgets
a8d7e9d218 fix(pg-default-dump-local): time, timezone, labels 2023-05-29 14:03:23 +08:00
JJGadgets
42aada0e6a feat(pg-default): add pg_dump to NAS 2023-05-29 13:49:51 +08:00
JJGadgets
4ca8619aea fix(headscale): ndots 1 for authentik 2023-05-29 10:25:40 +08:00
JJGadgets
d4e53b7718 feat(gotosocial): TLS netpols 2023-05-28 12:25:29 +08:00
JJGadgets
b7183421d9 feat(gotosocial): TLS 2023-05-28 12:18:44 +08:00
JJGadgets
166a2959ac feat(gotosocial): TLS 2023-05-28 12:16:14 +08:00
JJGadgets
3d67a5cb92 fix(cloudflared): netpol, GtS direct 2023-05-28 12:12:33 +08:00
JJGadgets
cd7698a6e9 fix(headscale): allow cloudflared ingress 2023-05-28 12:02:33 +08:00
JJGadgets
8be8d862df fix(cloudflared): add headscale 2023-05-28 11:52:42 +08:00
JJGadgets
74249d3d4e feat(headscale): add DERP & OIDC expiry 2023-05-28 11:44:32 +08:00
JJGadgets
48e4c044a5 fix(headscale): failed to bind unix socket 2023-05-28 11:25:03 +08:00
JJGadgets
d80792e24e fix(gotosocial): temporarily disable S3 SSL 2023-05-28 09:50:02 +08:00
JJGadgets
1632ef2bb3 feat(gotosocial): switch media to S3 2023-05-28 09:22:13 +08:00
JJGadgets
0c85ea103e fix(rook-ceph): netpol allow labelled pods to RGW 2023-05-28 09:08:10 +08:00
JJGadgets
ba95a0d926 feat(gotosocial): add s3, prep to migrate 2023-05-28 08:21:39 +08:00
JJGadgets
2ef7c3d553 fix(headscale): allow ingress-nginx egress for OIDC 2023-05-27 17:25:17 +08:00
JJGadgets
b1241f4394 fix(headscale): cmd & pg dependency 2023-05-27 12:29:32 +08:00
JJGadgets
b927f135e2 fix(netpols): ingress-nginx to flux webhook
Signed-off-by: JJGadgets <git@jjgadgets.tech>
2023-05-27 12:21:47 +08:00
JJGadgets
71478f42fd feat: add headscale 2023-05-27 12:15:32 +08:00
JJGadgets
aa8b2c1e45 feat(cilium): add docs on BGPCP & DSR 2023-05-27 06:04:38 +08:00
JJGadgets
a25fd0db84 fix(satisfactory): UID 0 for now
the entrypoint (CMD) script init.sh does an `id -u` of current UID before dropping privs, and will exit as error if not UID 0. will open issue to ask if running as true rootless due to K8s is possible via new envvar ROOTLESS=k8s or something like that
2023-05-27 03:28:53 +08:00
JJGadgets
ebaeb77c57 feat: add satisfactory 2023-05-27 03:06:09 +08:00
JJGadgets
91f85d54ce Merge branch 'main' of github.com:JJGadgets/Biohazard 2023-05-22 02:29:36 +08:00
JJGadgets
00111bad1a fix(rook): PVE CephFS 2023-05-22 02:29:15 +08:00
JJGadgets
2c6fa155df fix: default-backend 2023-05-21 01:03:49 +08:00
JJGadgets
c963d0cf7d Update install.yaml 2023-05-20 23:59:24 +08:00
JJGadgets
b996423054 feat(ingress-nginx): custom error page 2023-05-20 23:43:00 +08:00
JJGadgets
891acf3006 feat(ingress): add default-backend 2023-05-20 22:50:02 +08:00
JJGadgets
ea64fb9bdf feat(templates): update hr 2023-05-19 14:43:32 +08:00
JJGadgets
3003793f0c fix(gotosocial): postgres-init image hash 2023-05-19 14:38:26 +08:00
JJGadgets
3da5639b07 feat: update templates 2023-05-18 23:47:37 +08:00
JJGadgets
f9e9518333 fix(netpols): ingress-nginx to flux webhook
Signed-off-by: JJGadgets <git@jjgadgets.tech>
2023-05-18 23:16:58 +08:00
JJGadgets
aa92c628f2 feat(kanidm): volsync to R2 2023-05-18 22:34:24 +08:00
JJGadgets
100da645c5 fix(flux): wrong notification apiVersion
I really gotta upgrade to latest Flux and sed all my apiVersions soon lmfao
2023-05-18 22:14:05 +08:00
JJGadgets
dd60fa59ca fix(flux): deploy webhook 2023-05-18 22:10:51 +08:00
JJGadgets
d05350f4f9 Merge branch 'main' of github.com:JJGadgets/Biohazard 2023-05-18 22:08:14 +08:00
JJGadgets
734581cd58 feat(flux): add github push webhook 2023-05-18 22:06:12 +08:00
JJGadgets
fd9479d308 fix(ingress-nginx): eTP Cluster for HA 2023-05-17 18:30:57 +08:00
JJGadgets
88ecfa32cb fix(ntfy): webosckets: rm L7 http netpol 2023-05-17 18:22:09 +08:00
JJGadgets
c986d4abe6 fix(authentik): webosckets: rm L7 http netpol 2023-05-17 18:20:46 +08:00
JJGadgets
28373d2e83 fix(authentik): ws: string not number 2023-05-17 05:43:45 +08:00
JJGadgets
d18db2ba77 fix(authentik): proxy timeout for websockets
increased ingress-nginx proxy-*-timeout to 3600 for WebSockets to work
2023-05-17 05:38:14 +08:00
JJGadgets
20d9095751 fix(cloudflared): GoToSocial non-wildcard SSL 2023-05-16 05:00:27 +08:00
JJGadgets
fc13e41a65 fix(gotosocial): OIDC migration from <0.7.0
halp admin me can't login lol, asks me for new account
2023-05-16 04:52:29 +08:00