150 commits

This branch

This branch

All branches

Author	SHA1	Message	Date
Sam A.	000726debe	Add restore bind mount and hostname to restic	2024-02-26 22:47:37 +01:00
Sam A.	af7e997d1d	Add Jitsi Meet	2024-02-10 23:56:23 +01:00
Sam A.	d91cb37303	Add Tor	2024-02-10 21:28:47 +01:00
Sam A.	4f849f27f7	Add personal website	2024-02-10 18:57:58 +01:00
Sam A.	bbb037df40	Change Watchtower poll interval	2024-02-10 17:00:26 +01:00
Sam A.	b5d468bde8	Enable HTTP/1.1 between NGINX and upstream	2024-02-10 16:38:59 +01:00
Sam A.	f183a1172d	Disable request buffering in NGINX	2024-02-10 16:30:33 +01:00
Sam A.	2c1aec040b	Change Redis command	2024-02-10 15:49:18 +01:00
Sam A.	57adc3efbd	Secure capabilities	2024-02-10 15:39:35 +01:00
Sam A.	5390c9c7a2	HSTS preload doesn't work on subdomains	2024-02-10 15:30:17 +01:00
Sam A.	5899eb45f6	Fix SearXNG headers	2024-02-10 14:56:19 +01:00
Sam A.	8f55cf53e4	Install haveged on VPS instances	2024-02-09 19:25:01 +01:00
Sam A.	2c35f704ee	Fix	2024-02-09 19:06:09 +01:00
Sam A.	fd3e708e4c	Configure UnifiedPush for Nextcloud	2024-02-09 18:20:05 +01:00
Sam A.	0ecec60818	Remove firewall rules from public servers	2024-02-06 20:15:23 +01:00
Sam A.	04b209a829	Add Caddy and SearXNG to apps role	2024-02-04 20:24:33 +01:00
Sam A.	0b6f045648	Consolidate vars files	2024-02-04 16:34:29 +01:00
Sam A.	f51540b4a1	Add sapt-labc-pub01	2024-02-04 16:10:17 +01:00
Sam A.	67e65e807e	Prepare for multiple inventories	2024-01-30 20:58:08 +01:00
Sam A.	de4acaa6f2	Update README.md	2024-01-30 19:57:40 +01:00
Sam A.	62de1c25b3	Add explicit group specification	2024-01-30 19:15:51 +01:00
Sam A.	e3fcd87b7b	Switch around	2024-01-28 21:31:34 +01:00
Sam A.	0151979a31	Fix ansible-lint	2024-01-28 21:29:48 +01:00
Sam A.	91dddb20f8	Add Host header and replace . with \.	2024-01-28 19:24:07 +01:00
Sam A.	733b173594	LKRG is broken	2024-01-28 18:51:13 +01:00
Sam A.	165371e969	Make NGINX only resolve IPv4	2024-01-28 18:43:12 +01:00
Sam A.	479de1cb31	Upgrade IPFS	2024-01-28 18:41:05 +01:00
Sam A.	06460e503e	improv	2024-01-09 21:56:17 +01:00
Sam A.	e10edc362c	Fix file permissions	2024-01-07 19:36:02 +01:00
Sam A.	4f55153783	Fix SELinux context for PostgreSQL	2024-01-07 19:24:04 +01:00
Sam A.	6f0cf7d827	Fix SELinux context for Docker data root	2024-01-07 18:21:48 +01:00
Sam A.	92baeb8236	Healthcheck was fixed upstream	2024-01-07 17:53:39 +01:00
Sam A.	f685830436	Change Docker data-root	2024-01-07 17:29:46 +01:00
Sam A.	5a637039de	Fix Postfix healthcheck	2024-01-07 16:22:49 +01:00
Sam A.	d17617dd3e	s/kvm/qemu/	2024-01-07 15:49:37 +01:00
Sam A.	2b4d73790f	Make sender domain handling even smarter	2024-01-06 19:52:49 +01:00
Sam A.	d73222a7fe	Make sender domain handling smarter	2024-01-06 19:36:50 +01:00
Sam A.	ab48bff23a	Enable retry_files_enabled	2024-01-06 17:47:10 +01:00
Sam A.	d394c3cbe2	Fix directory permissions	2024-01-06 17:24:39 +01:00
Sam A.	6592020863	Repo installations will add PGP keys	2024-01-06 17:19:51 +01:00
Sam A.	0ba0a6d1c9	Control role inclusion in Ansible	2024-01-02 19:29:13 +01:00
Sam A.	f4249ea484	Dynamically exclude roles based on host type	2024-01-01 20:18:38 +01:00
Sam A.	99942dadfb	Fix WebSocket support	2024-01-01 16:33:52 +01:00
Sam A.	0db32bf185	Only install haveged on KVM instances	2023-12-31 23:02:51 +01:00
Sam A.	61fad5cab0	Add in sapt-labs-mda01	2023-12-31 20:03:08 +01:00
Sam A.	6bbf57ccf2	Add Lab LAN to proxy_trusted_subnets	2023-12-31 18:44:25 +01:00
Sam A.	6b7bd105a3	Move stuff around	2023-12-31 18:39:08 +01:00
Sam A.	c8a15443c3	Only allow global access to production in Caddy	2023-12-31 18:34:36 +01:00
Sam A.	f190d0bc61	Add reload-proxy option to deploy.sh	2023-12-31 18:27:09 +01:00
Sam A.	64f09eded2	Configure $connection_upgrade and set X-Real-IP	2023-12-31 15:41:50 +01:00