Commit Graph

591 Commits

Author SHA1 Message Date
JJGadgets
6c3eae558f feat(kah-irc): netpol client port 2023-06-04 20:36:45 +08:00
JJGadgets
ca35581230 feat(kah-irc): add client port
im an idiot i forgot that lol
2023-06-04 20:35:25 +08:00
JJGadgets
9d8e1b4128 fix(inspircd): recvpass format 2023-06-04 20:29:12 +08:00
JJGadgets
f848054427 Update hr.yaml 2023-06-04 20:03:04 +08:00
JJGadgets
ab1855eaea fix(kah-irc): external-dns 2023-06-04 19:48:58 +08:00
JJGadgets
057ee7d653 Update hr.yaml 2023-06-04 19:43:21 +08:00
JJGadgets
c035ae04e8 Update hr.yaml 2023-06-04 19:40:30 +08:00
JJGadgets
77dc047cc9 fix(kah-irc): mounts 2023-06-04 19:36:43 +08:00
JJGadgets
ec129d3166 fix(kah-irc): damn you olive tree 2023-06-04 19:21:30 +08:00
JJGadgets
1ab5b98571 fix(inspircd): pebkac 2023-06-04 18:58:47 +08:00
JJGadgets
f0b82fc1ab fix(inspircd): pebkac 2023-06-04 18:55:21 +08:00
JJGadgets
8074eaf19d feat: add kah inspircd 2023-06-04 18:54:00 +08:00
JJGadgets
a02f7e8e90 fix(zipline): fix ingress routing 2023-06-04 04:16:20 +08:00
JJGadgets
2ca9b9eb3c fix(zipline): fix ingress routing 2023-06-04 03:58:53 +08:00
JJGadgets
5e0d8aa3e8 fix(zipline): fix ingress routing 2023-06-04 03:56:57 +08:00
JJGadgets
80b878e3f4 feat(zipline): fix 401, ingress changes 2023-06-04 03:44:07 +08:00
JJGadgets
340b5203ab feat: add zipline 2023-06-03 20:59:32 +08:00
JJGadgets
951521ec33 fix(flux)!: disable suffix on generators 2023-06-03 14:07:32 +08:00
JJGadgets
8103c1b101 fix(flux)!: switch vars from cm to secret 2023-06-03 13:34:06 +08:00
JJGadgets
fd878f2fcb feat(flux)!: switch vars to .sops.env+kustomize generators
This allows for a native way to use these vars locally using `sops exec-env`, such as when building manifests to check their outputs.

Also begin gradually phasing out numbers, RIP fast hands 1/2/3-tab 2023-2023.
2023-06-03 13:14:29 +08:00
JJGadgets
91328a17d1 feat(netpols): init refactor to labels-based 2023-06-03 08:58:08 +08:00
JJGadgets
9a789820c2 feat(task): add README.md 2023-06-02 06:28:15 +08:00
JJGadgets
3dad835400 feat(flux): init repo refactor, cluster secrets & vars as .env not .yaml, move .sops.yaml 2023-06-02 06:15:06 +08:00
JJGadgets
8d64325d05 feat(taskfiles): add k:gpi & k:sa 2023-06-02 06:09:42 +08:00
JJGadgets
e8a37be851 Merge branch 'main' of github.com:JJGadgets/Biohazard 2023-06-02 05:36:49 +08:00
JJGadgets
790316b4ef feat: init taskfiles & cluster-init-config task 2023-06-02 05:36:25 +08:00
JJGadgets
6cd7ca864d feat(headscale): rm ingress, use TS DERP
- simplify DERP availability and network requirements due to home risk assessment
- removed ingress, let Headscale handle TLS & webserver so that DERP relay can be on the same IP
- EC2 ingress already configures to directly forward traffic to Headscale LBIP
2023-05-31 15:56:48 +08:00
JJGadgets
f5a144df8a feat(cnpg): add dump-local to template 2023-05-29 14:32:52 +08:00
JJGadgets
e1f1f679f3 fix(pg-default-dump-local): POSTGRES_DB env 2023-05-29 14:24:37 +08:00
JJGadgets
a8d7e9d218 fix(pg-default-dump-local): time, timezone, labels 2023-05-29 14:03:23 +08:00
JJGadgets
42aada0e6a feat(pg-default): add pg_dump to NAS 2023-05-29 13:49:51 +08:00
JJGadgets
4ca8619aea fix(headscale): ndots 1 for authentik 2023-05-29 10:25:40 +08:00
JJGadgets
d4e53b7718 feat(gotosocial): TLS netpols 2023-05-28 12:25:29 +08:00
JJGadgets
b7183421d9 feat(gotosocial): TLS 2023-05-28 12:18:44 +08:00
JJGadgets
166a2959ac feat(gotosocial): TLS 2023-05-28 12:16:14 +08:00
JJGadgets
3d67a5cb92 fix(cloudflared): netpol, GtS direct 2023-05-28 12:12:33 +08:00
JJGadgets
cd7698a6e9 fix(headscale): allow cloudflared ingress 2023-05-28 12:02:33 +08:00
JJGadgets
8be8d862df fix(cloudflared): add headscale 2023-05-28 11:52:42 +08:00
JJGadgets
74249d3d4e feat(headscale): add DERP & OIDC expiry 2023-05-28 11:44:32 +08:00
JJGadgets
48e4c044a5 fix(headscale): failed to bind unix socket 2023-05-28 11:25:03 +08:00
JJGadgets
d80792e24e fix(gotosocial): temporarily disable S3 SSL 2023-05-28 09:50:02 +08:00
JJGadgets
1632ef2bb3 feat(gotosocial): switch media to S3 2023-05-28 09:22:13 +08:00
JJGadgets
0c85ea103e fix(rook-ceph): netpol allow labelled pods to RGW 2023-05-28 09:08:10 +08:00
JJGadgets
ba95a0d926 feat(gotosocial): add s3, prep to migrate 2023-05-28 08:21:39 +08:00
JJGadgets
2ef7c3d553 fix(headscale): allow ingress-nginx egress for OIDC 2023-05-27 17:25:17 +08:00
JJGadgets
b1241f4394 fix(headscale): cmd & pg dependency 2023-05-27 12:29:32 +08:00
JJGadgets
b927f135e2 fix(netpols): ingress-nginx to flux webhook
Signed-off-by: JJGadgets <git@jjgadgets.tech>
2023-05-27 12:21:47 +08:00
JJGadgets
71478f42fd feat: add headscale 2023-05-27 12:15:32 +08:00
JJGadgets
aa8b2c1e45 feat(cilium): add docs on BGPCP & DSR 2023-05-27 06:04:38 +08:00
JJGadgets
a25fd0db84 fix(satisfactory): UID 0 for now
the entrypoint (CMD) script init.sh does an `id -u` of current UID before dropping privs, and will exit as error if not UID 0. will open issue to ask if running as true rootless due to K8s is possible via new envvar ROOTLESS=k8s or something like that
2023-05-27 03:28:53 +08:00