Antoine Martin
6afcd36d8e
services: lohr: bump flake
...
I should clean that up anyway
2021-09-04 18:21:10 +02:00
Antoine Martin
af0428fe45
services: gitea: upgrade to v1.15.0
2021-08-26 13:58:10 +02:00
Antoine Martin
c94356e24f
services: navidrome: setup restic backups
2021-08-22 17:51:23 +02:00
Antoine Martin
901556f805
services: navidrome: make music folder configurable
2021-08-22 17:24:52 +02:00
Antoine Martin
7ce48f7164
services: add navidrome
2021-08-22 16:43:27 +02:00
Antoine Martin
d8c3f5c987
services: nextcloud: upgrade to nextcloud 22
2021-08-20 01:52:45 +02:00
Antoine Martin
2c7abf829a
services: adapt bitwarden to vaultwarden rename
2021-08-20 01:44:44 +02:00
Antoine Martin
bdd0748620
flake: switch back entire config to unstable
...
Mixing stable and unstable brought me weird problems, so I'm switching
back to unstable entirely until it breaks hard enough to convince me to
go back to stable. :)
2021-08-19 23:34:41 +02:00
Antoine Martin
12c60e9d2e
services: postgresql: upgraded to v13
2021-08-19 21:30:09 +02:00
Antoine Martin
1b7c4d40c6
services: nextcloud: ignore heavy files
2021-08-10 00:33:19 +02:00
Antoine Martin
e8ea4c8b5f
services: nextcloud: regex don't work with restic
2021-08-09 21:13:55 +02:00
Antoine Martin
b00faf77bb
services: move to restic for everything
2021-08-09 20:19:27 +02:00
Antoine Martin
e9c0d157f1
services: restic: make it verbose
2021-08-09 20:14:09 +02:00
Antoine Martin
0c538fbf86
services: backup postgres to restic
2021-08-09 20:11:00 +02:00
Antoine Martin
a763e0549f
services: setup restic backups service
2021-08-09 20:11:00 +02:00
Antoine Martin
bd5aa2cef5
services: setup fava service
2021-08-07 15:40:01 +02:00
Antoine Martin
611308f120
services: paperless: backup correctly
2021-07-19 14:59:15 +02:00
Antoine Martin
0f4ae45828
services: monitoring: set prometheus scrape interval
2021-07-15 10:27:10 +02:00
Antoine Martin
c7c87fcdb4
pkgs: fix grafanaDashboards access in flake
...
The `packages` output from the flake needs flake-utils' `flattenTree` to
be valid (because it doesn't support nested sets), but that only works
if I use `recurseIntoAttrs`.
2021-07-14 21:13:38 +02:00
Antoine Martin
27ae0552eb
services: paperless: fix backup paths
2021-07-14 03:00:36 +02:00
Antoine Martin
829632e360
services: tailscale: make exit node optional
2021-07-14 00:08:40 +02:00
Antoine Martin
c16d8513d2
services: wireguard: removed unused module
...
replaced by tailscale
2021-07-13 23:51:17 +02:00
Antoine Martin
1d8750efed
services: tailscale: move to service
2021-07-13 23:49:45 +02:00
Antoine Martin
39477a85e7
services: paperless: backups
2021-07-13 22:20:21 +02:00
Antoine Martin
786d884e3a
services: monitoring: package grafana dashboards
2021-07-13 17:34:36 +02:00
Antoine Martin
0f8175519b
services: monitoring: update node exporter dash
2021-07-13 17:25:34 +02:00
Antoine Martin
0b983d1358
services: monitoring: add nginx dashboard
2021-07-13 17:25:34 +02:00
Antoine Martin
b6f712b817
services: nginx: enable prometheus exporter
2021-07-13 17:25:34 +02:00
Antoine Martin
2b59116b8d
services: monitoring: only listen on localhost
2021-07-13 17:25:34 +02:00
Antoine Martin
e7219ae988
services: matrix: enable SSL traffic only
...
This is a requirement anyway for homeservers, and the `forceSSL` option
tried to create a redirect for non-SSL traffic, except the `listen`
option only provided SSL endpoints anyway, so this resulted in
additional rules in the nginx config looking like this:
server {
server_name matrix.alarsyo.net ;
location /.well-known/acme-challenge {
root /var/lib/acme/acme-challenge;
auth_basic off;
}
location / {
return 301 https://$host$request_uri ;
}
}
Which led to nginx listening on port 8000 (the default port in this
situation, I imagine)
2021-07-13 13:54:18 +02:00
Antoine Martin
c75458d8c9
services: bitwarden: only listen on local host
...
This was never a problem because the firewall did its job, but better
safe than sorry.
2021-07-13 13:34:26 +02:00
Antoine Martin
d2835ceb77
services: paperless: drop external traffic to docker
2021-07-13 13:22:21 +02:00
Antoine Martin
8eb1fe5001
services: paperless: restrict to Tailscale
2021-07-13 01:31:55 +02:00
Antoine Martin
f0e5e90c10
services: use wildcard certificate
...
Should have done this a long time ago
2021-07-13 01:08:01 +02:00
Antoine Martin
64d479e2ce
services: prometheus: keep metrics for 2 years
2021-07-12 22:12:03 +02:00
Antoine Martin
95733f9e05
services: paperless: setup reverse proxy
2021-07-12 22:11:41 +02:00
Antoine Martin
7c8017af03
services: init nuage
2021-07-06 18:22:57 +02:00
Antoine Martin
568cd2ccd4
services: matrix: add SMS verification support
2021-06-09 15:37:35 +02:00
Antoine Martin
6c17c2d82c
services: matrix: move smtp port note out of secret
2021-06-09 14:57:51 +02:00
Antoine Martin
1b6258e363
services: matrix: add smtp server
2021-06-09 14:53:11 +02:00
Antoine Martin
4ddee48800
services: lohr: latest commit
2021-06-04 17:40:56 +02:00
Antoine Martin
46df5d0642
services: transmission: use openFirewall setting
2021-06-03 00:33:52 +02:00
Antoine Martin
2dc8502fb8
services: nginx: don't enable everywhere
2021-06-01 14:28:42 +02:00
Antoine Martin
393c803167
services: pipewire: fix broken 20.09 config
2021-05-27 23:01:52 +02:00
Antoine Martin
b1dc709e3f
services: pipewire: ship pactl with pipewire
2021-05-26 01:13:10 +02:00
Antoine Martin
4d091d5aa6
services: add pipewire service
2021-05-26 00:33:15 +02:00
Antoine Martin
2f794cfe3a
matrix: disable presence
2021-05-21 11:45:27 +02:00
Antoine Martin
6e9e4388ae
matrix: log level warn
2021-05-21 10:10:15 +02:00
Antoine Martin
09059273c2
matrix: enable spaces beta
2021-05-21 10:05:20 +02:00
Antoine Martin
e2c77ed4e2
services: gitea: update home template to SVG
...
v1.14 switched from a PNG to a SVG logo
2021-05-13 18:20:21 +02:00
Antoine Martin
af0388b907
borg-backup: save space when pruning
2021-05-04 01:46:19 +02:00
Antoine Martin
71c4871af0
boreal: prune backups older than a month
2021-05-04 01:32:37 +02:00
Antoine Martin
2fdc188973
gitea: use main as default branch
2021-04-09 20:31:58 +02:00
Antoine Martin
b2ab13242c
gitea: enable push to create
2021-04-09 19:43:51 +02:00
Antoine Martin
64d28f9436
gitea: remove useless conditional on backup
2021-04-09 18:14:08 +02:00
Antoine Martin
d2fc16978c
gitea: silence logging
2021-04-09 18:01:01 +02:00
Antoine Martin
798a496709
gitea: use custom home template
2021-04-09 17:30:00 +02:00
Antoine Martin
df463c02fb
lohr: mention systemd specific issue
2021-04-08 03:44:52 +02:00
Antoine Martin
ba0e0e993e
lohr: setup real service
2021-04-08 03:20:58 +02:00
Antoine Martin
9d2073011b
lohr: setup dev service
2021-03-28 22:18:18 +02:00
Antoine Martin
8629db70e6
borg-backup: init repo if doesn't exist
2021-03-24 20:50:47 +01:00
Antoine Martin
4115c3d8d7
nextcloud: don't backup image previews
2021-03-24 19:42:15 +01:00
Antoine Martin
c47d72a376
matrix: don't backup cached media
2021-03-24 19:06:03 +01:00
Antoine Martin
8b5e107aea
matrix: add FIXME
2021-03-24 01:26:25 +01:00
Antoine Martin
0a4fb2e7f7
borg-backup: display info during pruning
2021-03-24 00:55:08 +01:00
Antoine Martin
844b940493
nextcloud: ignore in-progress uploads in backups
2021-03-24 00:41:18 +01:00
Antoine Martin
40d4f07df3
borg-backup: display info during backup
2021-03-24 00:32:46 +01:00
Antoine Martin
e6b1f1381a
nextcloud: require postgresql for service setup
2021-03-24 00:14:43 +01:00
Antoine Martin
0cf16198a8
postgresql: set package version globally
2021-03-23 22:37:55 +01:00
Antoine Martin
6174bcd165
services: remove unneeded conditional
2021-03-23 22:24:12 +01:00
Antoine Martin
b04d9e51a1
nextcloud: create service
2021-03-23 20:03:23 +01:00
Antoine Martin
48c87a4d8a
borg-backup: switch to zstd compression
2021-03-23 12:14:14 +01:00
Antoine Martin
bb477b36a6
tgv: new service
2021-03-16 17:46:25 +01:00
Antoine Martin
968c334c1b
borg: prune files when backing up
2021-03-15 23:52:07 +01:00
Antoine Martin
80942f7eb3
wireguard: setup VPN
2021-02-22 19:42:11 +01:00
Antoine Martin
a1065eb8ab
fail2ban: increase default ban time
2021-02-22 16:18:14 +01:00
Antoine Martin
92e2e19bbf
bitwarden_rs: remove random config
2021-02-22 16:11:59 +01:00
Antoine Martin
80384b2afe
bitwarden_rs: setup fail2ban
2021-02-22 16:07:26 +01:00
Antoine Martin
25f45ec6f6
fail2ban: setup service
2021-02-22 15:07:29 +01:00
Antoine Martin
49a261e5ee
jellyfin: proxy websockets traffic
2021-02-22 11:58:54 +01:00
Antoine Martin
cdf8695794
transmission: setup service
2021-02-19 22:29:04 +01:00
Antoine Martin
2b5ef6b145
jellyfin: setup service
2021-02-19 21:28:12 +01:00
Antoine Martin
e3440b61ab
nginx: centralize configuration
2021-02-14 12:07:07 +01:00
Antoine Martin
bb3532eb8a
miniflux: don't remove old entries from feeds
2021-02-05 22:01:41 +01:00
Antoine Martin
3c0732cedd
s/types.int/types.port
2021-02-02 18:24:28 +01:00
Antoine Martin
fca8f6cb4c
gitea: use own backup solution
2021-02-02 18:09:10 +01:00
Antoine Martin
039fa5a930
gitea: specify backup time
2021-02-02 17:34:22 +01:00
Antoine Martin
5bd4a23909
gitea: setup service
2021-02-02 17:01:40 +01:00
Antoine Martin
288e89502a
matrix: proxy calls to /_synapse/client correctly
2021-02-02 02:13:33 +01:00
Antoine Martin
d5eb537b5e
matrix: use shared secret
2021-02-02 01:24:03 +01:00
Antoine Martin
48bb7a8841
borg-backup: fix exclude config
2021-01-31 13:11:31 +01:00
Antoine Martin
41769615f0
borg-backup: setup paths in respective services
2021-01-31 13:03:28 +01:00
Antoine Martin
8ed0f14f74
bitwarden: setup service
2021-01-31 03:50:10 +01:00
Antoine Martin
253530ea6f
postgresql-backup: move to own services
...
This way the `startAt` setting is only set once.
2021-01-30 22:32:12 +01:00
Antoine Martin
297eb0a6f9
miniflux: setup service
2021-01-30 21:53:05 +01:00
Antoine Martin
8b037b16a4
postgres: create daily backups
2021-01-30 19:35:21 +01:00
Antoine Martin
91eaa2f008
borg-backup: setup service
2021-01-30 19:35:21 +01:00
Antoine Martin
84fff7a6f2
matrix: add hosted Element web setup
2021-01-29 14:33:37 +01:00
Antoine Martin
79aa31f07f
matrix: improve configuration
2021-01-29 14:04:53 +01:00
Antoine Martin
4d89de4841
matrix: migrate server and setup federation
...
It works, but looks and feels hacky. Needs cleanups
2021-01-28 02:54:33 +01:00