115 commits

Author	SHA1	Message	Date
Sam A.	bbb037df40	Change Watchtower poll interval	2024-02-10 17:00:26 +01:00
Sam A.	b5d468bde8	Enable HTTP/1.1 between NGINX and upstream	2024-02-10 16:38:59 +01:00
Sam A.	f183a1172d	Disable request buffering in NGINX	2024-02-10 16:30:33 +01:00
Sam A.	2c1aec040b	Change Redis command	2024-02-10 15:49:18 +01:00
Sam A.	57adc3efbd	Secure capabilities	2024-02-10 15:39:35 +01:00
Sam A.	5390c9c7a2	HSTS preload doesn't work on subdomains	2024-02-10 15:30:17 +01:00
Sam A.	5899eb45f6	Fix SearXNG headers	2024-02-10 14:56:19 +01:00
Sam A.	8f55cf53e4	Install haveged on VPS instances	2024-02-09 19:25:01 +01:00
Sam A.	2c35f704ee	Fix	2024-02-09 19:06:09 +01:00
Sam A.	fd3e708e4c	Configure UnifiedPush for Nextcloud	2024-02-09 18:20:05 +01:00
Sam A.	0ecec60818	Remove firewall rules from public servers	2024-02-06 20:15:23 +01:00
Sam A.	04b209a829	Add Caddy and SearXNG to apps role	2024-02-04 20:24:33 +01:00
Sam A.	f51540b4a1	Add sapt-labc-pub01	2024-02-04 16:10:17 +01:00
Sam A.	62de1c25b3	Add explicit group specification	2024-01-30 19:15:51 +01:00
Sam A.	e3fcd87b7b	Switch around	2024-01-28 21:31:34 +01:00
Sam A.	91dddb20f8	Add Host header and replace . with \.	2024-01-28 19:24:07 +01:00
Sam A.	733b173594	LKRG is broken	2024-01-28 18:51:13 +01:00
Sam A.	165371e969	Make NGINX only resolve IPv4	2024-01-28 18:43:12 +01:00
Sam A.	479de1cb31	Upgrade IPFS	2024-01-28 18:41:05 +01:00
Sam A.	06460e503e	improv	2024-01-09 21:56:17 +01:00
Sam A.	e10edc362c	Fix file permissions	2024-01-07 19:36:02 +01:00
Sam A.	4f55153783	Fix SELinux context for PostgreSQL	2024-01-07 19:24:04 +01:00
Sam A.	6f0cf7d827	Fix SELinux context for Docker data root	2024-01-07 18:21:48 +01:00
Sam A.	92baeb8236	Healthcheck was fixed upstream	2024-01-07 17:53:39 +01:00
Sam A.	f685830436	Change Docker data-root	2024-01-07 17:29:46 +01:00
Sam A.	5a637039de	Fix Postfix healthcheck	2024-01-07 16:22:49 +01:00
Sam A.	d17617dd3e	s/kvm/qemu/	2024-01-07 15:49:37 +01:00
Sam A.	2b4d73790f	Make sender domain handling even smarter	2024-01-06 19:52:49 +01:00
Sam A.	d73222a7fe	Make sender domain handling smarter	2024-01-06 19:36:50 +01:00
Sam A.	d394c3cbe2	Fix directory permissions	2024-01-06 17:24:39 +01:00
Sam A.	6592020863	Repo installations will add PGP keys	2024-01-06 17:19:51 +01:00
Sam A.	99942dadfb	Fix WebSocket support	2024-01-01 16:33:52 +01:00
Sam A.	0db32bf185	Only install haveged on KVM instances	2023-12-31 23:02:51 +01:00
Sam A.	61fad5cab0	Add in sapt-labs-mda01	2023-12-31 20:03:08 +01:00
Sam A.	6bbf57ccf2	Add Lab LAN to proxy_trusted_subnets	2023-12-31 18:44:25 +01:00
Sam A.	6b7bd105a3	Move stuff around	2023-12-31 18:39:08 +01:00
Sam A.	c8a15443c3	Only allow global access to production in Caddy	2023-12-31 18:34:36 +01:00
Sam A.	f190d0bc61	Add reload-proxy option to deploy.sh	2023-12-31 18:27:09 +01:00
Sam A.	64f09eded2	Configure $connection_upgrade and set X-Real-IP	2023-12-31 15:41:50 +01:00
Sam A.	df2172d72b	Add HTTP headers to Nextcloud	2023-12-31 14:48:22 +01:00
Sam A.	9dc3df8d0f	Make MOTD message less wide, for small screens	2023-12-30 19:01:41 +01:00
Sam A.	e3fa67ef54	Fix stuff	2023-12-29 19:59:58 +01:00
Sam A.	2a0fcd6012	Fix Restic putting Nextcloud in maintenance mode	2023-12-29 19:42:43 +01:00
Sam A.	e5cbeec0d7	Upgrade Nextcloud to version 28	2023-12-29 19:11:33 +01:00
Sam A.	bf2cab8384	Use Jinja2 comments	2023-12-29 19:07:08 +01:00
Sam A.	adb67678a8	Remove !	2023-12-29 19:00:09 +01:00
Sam A.	f59f1dc5cd	Add MOTD	2023-12-29 17:43:18 +01:00
Sam A.	8dfc27cb34	Add NEXTCLOUD_TRUSTED_DOMAINS	2023-12-29 00:22:15 +01:00
Sam A.	aa137ae9e3	Nextcloud success!	2023-12-28 22:39:11 +01:00
Sam A.	fa0d70732d	Allow HTTP(S) for public zone	2023-12-28 21:04:33 +01:00