JJGadgets
6c3eae558f
feat(kah-irc): netpol client port
2023-06-04 20:36:45 +08:00
JJGadgets
ca35581230
feat(kah-irc): add client port
...
im an idiot i forgot that lol
2023-06-04 20:35:25 +08:00
JJGadgets
9d8e1b4128
fix(inspircd): recvpass format
2023-06-04 20:29:12 +08:00
JJGadgets
f848054427
Update hr.yaml
2023-06-04 20:03:04 +08:00
JJGadgets
ab1855eaea
fix(kah-irc): external-dns
2023-06-04 19:48:58 +08:00
JJGadgets
057ee7d653
Update hr.yaml
2023-06-04 19:43:21 +08:00
JJGadgets
c035ae04e8
Update hr.yaml
2023-06-04 19:40:30 +08:00
JJGadgets
77dc047cc9
fix(kah-irc): mounts
2023-06-04 19:36:43 +08:00
JJGadgets
ec129d3166
fix(kah-irc): damn you olive tree
2023-06-04 19:21:30 +08:00
JJGadgets
1ab5b98571
fix(inspircd): pebkac
2023-06-04 18:58:47 +08:00
JJGadgets
f0b82fc1ab
fix(inspircd): pebkac
2023-06-04 18:55:21 +08:00
JJGadgets
8074eaf19d
feat: add kah inspircd
2023-06-04 18:54:00 +08:00
JJGadgets
a02f7e8e90
fix(zipline): fix ingress routing
2023-06-04 04:16:20 +08:00
JJGadgets
2ca9b9eb3c
fix(zipline): fix ingress routing
2023-06-04 03:58:53 +08:00
JJGadgets
5e0d8aa3e8
fix(zipline): fix ingress routing
2023-06-04 03:56:57 +08:00
JJGadgets
80b878e3f4
feat(zipline): fix 401, ingress changes
2023-06-04 03:44:07 +08:00
JJGadgets
340b5203ab
feat: add zipline
2023-06-03 20:59:32 +08:00
JJGadgets
951521ec33
fix(flux)!: disable suffix on generators
2023-06-03 14:07:32 +08:00
JJGadgets
8103c1b101
fix(flux)!: switch vars from cm to secret
2023-06-03 13:34:06 +08:00
JJGadgets
fd878f2fcb
feat(flux)!: switch vars to .sops.env+kustomize generators
...
This allows for a native way to use these vars locally using `sops exec-env`, such as when building manifests to check their outputs.
Also begin gradually phasing out numbers, RIP fast hands 1/2/3-tab 2023-2023.
2023-06-03 13:14:29 +08:00
JJGadgets
91328a17d1
feat(netpols): init refactor to labels-based
2023-06-03 08:58:08 +08:00
JJGadgets
9a789820c2
feat(task): add README.md
2023-06-02 06:28:15 +08:00
JJGadgets
3dad835400
feat(flux): init repo refactor, cluster secrets & vars as .env not .yaml, move .sops.yaml
2023-06-02 06:15:06 +08:00
JJGadgets
8d64325d05
feat(taskfiles): add k:gpi & k:sa
2023-06-02 06:09:42 +08:00
JJGadgets
e8a37be851
Merge branch 'main' of github.com:JJGadgets/Biohazard
2023-06-02 05:36:49 +08:00
JJGadgets
790316b4ef
feat: init taskfiles & cluster-init-config task
2023-06-02 05:36:25 +08:00
JJGadgets
6cd7ca864d
feat(headscale): rm ingress, use TS DERP
...
- simplify DERP availability and network requirements due to home risk assessment
- removed ingress, let Headscale handle TLS & webserver so that DERP relay can be on the same IP
- EC2 ingress already configures to directly forward traffic to Headscale LBIP
2023-05-31 15:56:48 +08:00
JJGadgets
f5a144df8a
feat(cnpg): add dump-local to template
2023-05-29 14:32:52 +08:00
JJGadgets
e1f1f679f3
fix(pg-default-dump-local): POSTGRES_DB env
2023-05-29 14:24:37 +08:00
JJGadgets
a8d7e9d218
fix(pg-default-dump-local): time, timezone, labels
2023-05-29 14:03:23 +08:00
JJGadgets
42aada0e6a
feat(pg-default): add pg_dump to NAS
2023-05-29 13:49:51 +08:00
JJGadgets
4ca8619aea
fix(headscale): ndots 1 for authentik
2023-05-29 10:25:40 +08:00
JJGadgets
d4e53b7718
feat(gotosocial): TLS netpols
2023-05-28 12:25:29 +08:00
JJGadgets
b7183421d9
feat(gotosocial): TLS
2023-05-28 12:18:44 +08:00
JJGadgets
166a2959ac
feat(gotosocial): TLS
2023-05-28 12:16:14 +08:00
JJGadgets
3d67a5cb92
fix(cloudflared): netpol, GtS direct
2023-05-28 12:12:33 +08:00
JJGadgets
cd7698a6e9
fix(headscale): allow cloudflared ingress
2023-05-28 12:02:33 +08:00
JJGadgets
8be8d862df
fix(cloudflared): add headscale
2023-05-28 11:52:42 +08:00
JJGadgets
74249d3d4e
feat(headscale): add DERP & OIDC expiry
2023-05-28 11:44:32 +08:00
JJGadgets
48e4c044a5
fix(headscale): failed to bind unix socket
2023-05-28 11:25:03 +08:00
JJGadgets
d80792e24e
fix(gotosocial): temporarily disable S3 SSL
2023-05-28 09:50:02 +08:00
JJGadgets
1632ef2bb3
feat(gotosocial): switch media to S3
2023-05-28 09:22:13 +08:00
JJGadgets
0c85ea103e
fix(rook-ceph): netpol allow labelled pods to RGW
2023-05-28 09:08:10 +08:00
JJGadgets
ba95a0d926
feat(gotosocial): add s3, prep to migrate
2023-05-28 08:21:39 +08:00
JJGadgets
2ef7c3d553
fix(headscale): allow ingress-nginx egress for OIDC
2023-05-27 17:25:17 +08:00
JJGadgets
b1241f4394
fix(headscale): cmd & pg dependency
2023-05-27 12:29:32 +08:00
JJGadgets
b927f135e2
fix(netpols): ingress-nginx to flux webhook
...
Signed-off-by: JJGadgets <git@jjgadgets.tech >
2023-05-27 12:21:47 +08:00
JJGadgets
71478f42fd
feat: add headscale
2023-05-27 12:15:32 +08:00
JJGadgets
aa8b2c1e45
feat(cilium): add docs on BGPCP & DSR
2023-05-27 06:04:38 +08:00
JJGadgets
a25fd0db84
fix(satisfactory): UID 0 for now
...
the entrypoint (CMD) script init.sh does an `id -u` of current UID before dropping privs, and will exit as error if not UID 0. will open issue to ask if running as true rootless due to K8s is possible via new envvar ROOTLESS=k8s or something like that
2023-05-27 03:28:53 +08:00