Commit Graph

600 Commits

Author SHA1 Message Date
570950cb7e Rename homepage_homer to homer_homer 2022-07-15 10:51:32 -07:00
f0b316432e Remove Authentik from autopirate stack 2022-07-15 10:50:59 -07:00
a1f8e43213 Run loki as 1000:1000 2022-07-15 00:02:56 -07:00
4af3f5c2e9 Add access logging to Traefik 2022-07-14 23:46:34 -07:00
29bb9c150d Add keep-file: true to loki driver 2022-07-14 15:22:44 -07:00
e2dbd1b89f Remove root from loki 2022-07-14 14:28:38 -07:00
e22f94631e Change path_prefix to loki-logs 2022-07-14 14:28:03 -07:00
901a06c9cd Switch to using common block to define chunks and rules directories 2022-07-14 14:14:21 -07:00
67772fb8e3 Uncomment common config 2022-07-14 14:10:49 -07:00
a49e27a3e8 Explicitly elevate to root 2022-07-14 14:10:08 -07:00
ba41bf6bf8 Disable volume map 2022-07-14 14:07:50 -07:00
cb60b422ff Try again 2022-07-14 13:59:43 -07:00
74abe421bb Switch to local_storage_config with /loki-logs 2022-07-14 13:56:26 -07:00
a791f2ed47 Remove loki storage binding 2022-07-14 13:47:56 -07:00
3b640c0f17 Persist loki log storage 2022-07-14 13:44:43 -07:00
02f0e42781 Update pihole exporter config 2022-07-14 00:07:54 -07:00
253a1cec66 Set empty password 2022-07-14 00:02:58 -07:00
ca1604a200 Add pihole-specific env vars 2022-07-13 23:25:35 -07:00
2ed769d0b2 Automatically append /admin to requests to the route 2022-07-13 23:06:45 -07:00
73d38f136d Elevate pihole container runner 2022-07-13 22:58:08 -07:00
54a3a4fcd4 Add missing image 2022-07-13 22:55:31 -07:00
9d7670e323 Init PiHole 2022-07-13 22:54:57 -07:00
5f8770b6ee Fix typo 2022-07-13 22:52:52 -07:00
415c1cda52 Fix typo 2022-07-13 19:52:06 -07:00
590ecfdc2a Reset Qbt, autopirate to stable
Use jdl as guinnea pig
2022-07-13 19:49:54 -07:00
5bdb3ecbbc Switch to authentik-auth@file service 2022-07-13 19:46:31 -07:00
f77afe2f44 Protect autopirate suite with lan-only until authentik is worked out 2022-07-13 19:06:02 -07:00
ef352cb8b7 Correct missing rule 2022-07-13 19:03:08 -07:00
88bbd9e50a Add Authentik to all autopirate stack 2022-07-13 16:29:41 -07:00
e05630789e Remove lan-only middleware from Sonarr 2022-07-13 16:20:19 -07:00
17b27624bc Accidentally added Radarr to authentik, not Sonarr.
Fix that
2022-07-13 16:18:27 -07:00
5c0ed2434e Add Sonarr to Authentik 2022-07-13 16:16:31 -07:00
c03211f591 Update SSO documentation 2022-07-13 16:16:20 -07:00
a3f25f1709 Fix typo 2022-07-13 13:53:13 -07:00
3253145881 #31 Update basic webapp template with new logging instrumentation 2022-07-13 13:40:48 -07:00
b67ef90d3c #31 Add Loki logging for all "main" apps
Also converted a few old composes from 4-space indentation to 2-space
Ignores supporting containers like postgres, redis, etc.
2022-07-13 13:35:56 -07:00
871c91fe08 Remove redundant labels 2022-07-13 13:12:30 -07:00
917cb6af4c Rename loki-labels to just labels 2022-07-13 13:11:34 -07:00
a24bd2e90c Add loki-labels as string 2022-07-13 13:11:04 -07:00
cb332d0520 Add loki-timeout as string 2022-07-13 13:10:49 -07:00
90243b5907 Switch loki-retries to string 2022-07-13 13:10:29 -07:00
6b1922b1e7 Add loki-retries 2022-07-13 13:10:13 -07:00
9ac7674e1a Switch loki-batch-size to string 2022-07-13 13:09:52 -07:00
949a5d8c25 Add loki-batch-size 2022-07-13 13:09:31 -07:00
60b71e7f8f Isolate loki-url 2022-07-13 13:09:09 -07:00
635a666c70 Confirm logging block is responsible for errors 2022-07-13 13:08:42 -07:00
ece50f7c04 Fix typo 2022-07-13 13:08:02 -07:00
2c6802f62e Fix typo 2022-07-13 13:07:22 -07:00
c76d85bc41 Fix typo 2022-07-13 13:06:22 -07:00
a3732d19e2 Test wg-easy loki logging 2022-07-13 13:00:28 -07:00
a9fe279a0a Add log_tags link 2022-07-13 12:51:57 -07:00
37494800ef Add docker logging docs 2022-07-13 12:50:39 -07:00
8bd6573146 Update Loki docs 2022-07-13 12:14:38 -07:00
d419cc2014 Disable auto-start for all containers. (Set all restart: "no") 2022-07-13 10:47:27 -07:00
df2eeec270 Add to Authentik documentation 2022-07-13 00:27:02 -07:00
70e5681db2 Implement second gitlab runner 2022-07-12 17:02:18 -07:00
380edd8323 Switch to master branch 2022-07-12 16:47:44 -07:00
859f327929 Switch to nodb branch 2022-07-12 15:47:26 -07:00
311d593d6a Archive xbackbone 2022-07-12 10:30:56 -07:00
3f4bf88682 See previous commit 2022-07-12 01:22:16 -07:00
8373dd6b6b Re-enable persistent volume 2022-07-12 01:20:22 -07:00
367d0462ce Switch dev to new image 2022-07-12 01:19:14 -07:00
eca1d27e23 services -> service 2022-07-12 01:04:31 -07:00
6bb4ea2575 Fix field services to service 2022-07-12 01:02:46 -07:00
2c561859d4 Init auth to qbt 2022-07-12 01:01:15 -07:00
2e50e7fe8e Disable config persistence 2022-07-12 00:03:44 -07:00
650d32d57b Test security headers 2022-07-11 21:44:37 -07:00
5083d5e127 Add X-Scheme: https to security headers 2022-07-11 21:44:01 -07:00
c676aba109 Try again 2022-07-11 14:07:10 -07:00
4f39fa2614 Switch to customResponseHeaders 2022-07-11 14:03:34 -07:00
86cfb5807c Switch to customerRequestHeaders 2022-07-11 14:02:19 -07:00
8bcecc602a Fix dev not being on network 2022-07-11 14:01:31 -07:00
6569093d8e Restore securityheaders
Single-variable testSchemeHeaders
2022-07-11 13:15:57 -07:00
8d87c81512 Remove test headers 2022-07-11 12:36:43 -07:00
d478c38401 Delete testSchemeHeaders, instead update securityHeaders 2022-07-11 12:36:26 -07:00
bab62f910b Add custom request headers 2022-07-11 11:25:14 -07:00
079ee7decc Fix for:
time="2022-07-11T18:01:05Z" level=error msg="Unable to obtain ACME certificate for domains \"loki-monitoring\": unable to generate a certificate for the domains [loki-monitoring]: acme: error: 400 :: POST :: https://acme-v02.api.letsencrypt.org/acme/new-order :: urn:ietf:params:acme:error:rejectedIdentifier :: Error creating new order :: Cannot issue for \"loki-monitoring\": Domain name needs at least one dot" ACME CA="https://acme-v02.api.letsencrypt.org/directory" routerName=prometheus@docker rule="Host(`loki-monitoring`)" providerName=lets-encrypt.acme
2022-07-11 11:02:21 -07:00
f4bdeff5a7 Add testSchemeHeaders for passing X-Scheme: https 2022-07-11 11:00:37 -07:00
7706e90fc3 Switch to correct-er image 2022-07-11 10:51:28 -07:00
6253e4daa2 Switch to correct image 2022-07-11 10:50:11 -07:00
c71c3c5977 Update calibre-web dev to new image 2022-07-10 23:04:17 -07:00
cebf1c8509 Disable authentik middleware for dev.calibre-web 2022-07-10 16:36:31 -07:00
a11d6e55e1 Add authentik to prometheus 2022-07-10 16:04:10 -07:00
07985a94e6 Fix overlapping router name 2022-07-10 16:01:15 -07:00
fdf510bcc9 Increase max file size to 40GB 2022-07-09 23:43:57 -07:00
7d9b97f363 Set explicit file size 2022-07-09 23:40:56 -07:00
40d7630c1e Remove dead prometheus jobs 2022-07-09 01:05:37 -07:00
1544cd6d4b Fix typo 2022-07-09 00:46:28 -07:00
fcecacd31a Traefik cleanup and switch to yaml 2022-07-09 00:44:40 -07:00
8f826b8007 Add Authentik to Traefik 2022-07-09 00:09:56 -07:00
9119f72f13 Add Omniauth config for Authentik 2022-07-09 00:01:18 -07:00
10b3e13a66 Update docs 2022-07-09 00:00:22 -07:00
456e67674f Enable automatic oauth 2022-07-08 23:37:07 -07:00
143d58b9b1 Remove role mapping 2022-07-08 23:33:41 -07:00
ba1ae131d9 Init grafana OAuth2 with Authentik
Per Authentik: https://goauthentik.io/integrations/services/grafana/
And Grafana: https://grafana.com/docs/grafana/latest/setup-grafana/configure-security/configure-authentication/generic-oauth/
2022-07-08 23:31:04 -07:00
540834c4d2 Init partial OAuth provisioning docs 2022-07-08 23:30:26 -07:00
83c37c02ed Fix navidrome container name 2022-07-08 23:03:33 -07:00
1bf8057b27 Add Authentik simple services:
- jdownloader2
- librespeed
- navidrome
- stashapp
- uptime-kuma
- wg-easy
2022-07-08 22:57:08 -07:00
3aa3b81ac4 Delete testing nginx stack 2022-07-08 22:55:39 -07:00
5ca735a518 Add Authentik to simple service: homer 2022-07-08 22:23:26 -07:00
f6ef13b784 Add Authentik to simple service: send 2022-07-08 22:21:51 -07:00
7dafd7b087 Documentation update 2022-07-08 12:48:34 -07:00
94cc7e4b12 Refactor volume management 2022-07-08 12:47:43 -07:00
9daebe3aa0 Fix path 2022-07-08 11:12:20 -07:00
ff43e5cc43 Fix indentation 2022-07-08 11:11:46 -07:00
cf2accd42d Update docs 2022-07-08 11:10:33 -07:00
82f96ef3f6 Remove dangling promtail-config 2022-07-08 10:48:57 -07:00
548de71a39 Remove superfluous promtail 2022-07-08 10:48:36 -07:00
c6f8cbd61a Remove entry_parser 2022-07-08 01:32:31 -07:00
7593e21cf6 Fix indentation 2022-07-08 01:31:00 -07:00
e55baff8e6 Disable other jobs 2022-07-08 01:28:15 -07:00
9a48e1349d Implement ruanbekker's job 2022-07-08 01:27:27 -07:00
1abf602e1c Add docker_sd job 2022-07-08 01:18:17 -07:00
d7eaa943c7 Switch back to TechnoTim's log scraping method 2022-07-08 01:09:35 -07:00
3ed05ae45d Run loki as default user 2022-07-08 01:01:24 -07:00
4bc314e8be Run promtail as default user 2022-07-08 00:56:51 -07:00
2eb8e1dc5a Fix typo 2022-07-08 00:56:21 -07:00
bf5b24e5af Disable :ro due to permissions errors 2022-07-08 00:55:53 -07:00
5d30f520a5 - Switch back to 1000:1000
- Mount docker socket read-only
- Use docker service discovery
2022-07-08 00:54:24 -07:00
ccb6e00a10 Test with 0:0 2022-07-08 00:35:34 -07:00
d79f61cffe Fix typo 2022-07-08 00:32:53 -07:00
7524c7c5bc make container volume map explicitly read-only 2022-07-08 00:30:44 -07:00
ede63a36e6 Map /var/lib/docker/containers to promtail 2022-07-08 00:21:58 -07:00
f2765400ba Fix promtail config indentation 2022-07-07 23:32:56 -07:00
2239e9b605 Fix job indentation 2022-07-07 23:30:13 -07:00
c1c743f979 Switch from machine logs to docker logs 2022-07-07 23:25:09 -07:00
97dbc9af7b Fix typo 2022-07-07 23:20:02 -07:00
9fbe2f1f47 Clarify new daemon.json 2022-07-07 23:16:52 -07:00
72b8c77959 Init loki & promtail 2022-07-07 23:12:57 -07:00
01d5192da5 Add dev calibre-web container for oauth image 2022-07-07 21:07:02 -07:00
a40102ad77 Explicitly configure service for gitlab router 2022-07-07 12:48:18 -07:00
7d82f33adb Update gitlab config per https://gitlab.com/gitlab-org/omnibus-gitlab/-/issues/5560 2022-07-07 12:43:18 -07:00
eae8e9848c Update gitlab config and docs 2022-07-07 12:31:22 -07:00
5345fffcde Update Homer 2022-07-07 09:30:20 -07:00
619be8c45a Disable TLS for SSL 2022-07-06 19:46:43 -07:00
8da7913824 Remove adminer 2022-07-06 18:28:51 -07:00
ace8286f9e Add authentik to calibre-rpg 2022-07-06 18:25:58 -07:00
9ab238deb3 Undo and switch to using authentik-server 2022-07-06 18:14:37 -07:00
1f085bdf41 Set authentik hostname 2022-07-06 18:12:38 -07:00
5ec5248e62 Fix typo 2022-07-06 18:04:28 -07:00
bc6f6c2d26 Fix typo 2022-07-06 18:03:36 -07:00
59e12c6df6 Flesh out nginx stack 2022-07-06 18:02:51 -07:00
9cf1c9cf38 Disable authentik on calibre-web 2022-07-06 17:57:20 -07:00
d8695061e7 Init test nginx 2022-07-06 17:56:52 -07:00
a2faba9198 Fix missing property 2022-07-06 17:50:03 -07:00
a86f0fde20 Switch middleware name from security-headers to securityheaders 2022-07-06 17:46:52 -07:00
775cf7089d Fix typos 2022-07-06 17:40:41 -07:00
206c515a70 Add new security headers to calibre-web-rpg and Authentik 2022-07-06 17:36:51 -07:00
cb28ba5218 Cleanup 2022-07-06 17:35:12 -07:00
2dc3fa2af1 Switch Traefik dynamic config files from toml to yaml 2022-07-06 17:34:52 -07:00
5e982e7f7b Make explicit authentik@file middleware 2022-07-06 15:11:32 -07:00
8e61a93c9c Enable authentik middleware for calibre-web-rpg 2022-07-06 15:09:54 -07:00
d3d49d6d2f Move authentik middleware definition to authentik.yaml traefik dynamic config 2022-07-06 15:08:19 -07:00
f0e62fe483 Re-disable authentik@docker 2022-07-06 14:59:46 -07:00
94127647ff Pin to 2022.7.1 tag 2022-07-06 14:52:19 -07:00
3f82389e3e Enable authentik for calibre-web-rpg 2022-07-06 14:46:55 -07:00
fd9f13ca57 Init adminer 2022-07-06 14:31:58 -07:00
bfb3a0d16f Re-init Authentik 2022-07-06 11:27:59 -07:00
a9f1a378e6 Add Jackett to homer 2022-07-05 20:46:06 -07:00
2d1c9248ef Fix jackett traefik port 2022-07-05 16:56:53 -07:00
66ab07e04a Init jackett 2022-07-05 16:54:14 -07:00
068b8efb94 Update homer with jdl and qbt 2022-06-30 11:35:57 -07:00
b8a108ebaf Make Traefik port explicit 2022-06-30 10:24:58 -07:00
f4d5cbfac9 Init jdownloader2 2022-06-30 10:22:49 -07:00
6a92b72a6e LibreNMS is not useful.
Requires installation and configuration of SNMP agents on each host.
Geared toward professional Network Engineers who must manage many hosts (in a pre-cloud paradigm) and the network.
2022-06-30 01:28:04 -07:00
8cfbb37ed9 Init librenms 2022-06-30 00:15:40 -07:00
bee147c8e6 Add fantasy realm server to exporter 2022-06-29 11:10:59 -07:00
4cf8a27ad9 Add fantasy realm pack 2022-06-27 21:25:51 -07:00
55bce4dfe1 Move torrent documentation to server 2022-06-27 10:51:10 -07:00
4fcc9e7374 Switch to non-default port 2022-06-24 17:25:36 -07:00
dfc91bf16b Add volume mapping 2022-06-24 17:12:13 -07:00
823b0559af Set Traefik port explicitly 2022-06-24 16:51:49 -07:00
6c1c32b409 Init qbittorrent on server 2022-06-24 16:45:57 -07:00
8563d38d12 FIx typo 2022-06-24 11:50:27 -07:00
5d0a49f4d0 Add stash to homer 2022-06-24 11:38:40 -07:00
dd79cd531f Fix typos 2022-06-23 22:38:49 -07:00
52711f97ac Fix typo 2022-06-23 22:37:07 -07:00
4aea783e85 Refactor volumes to media, metadata, and config 2022-06-23 22:24:59 -07:00
8ce0d50830 Add config volume mapping 2022-06-23 22:03:44 -07:00
da0014ce76 init stashapp 2022-06-23 22:01:26 -07:00
a3ffcc44e1 Remove newline 2022-06-23 22:01:21 -07:00
d59436125c Add example docker-compose for web app 2022-06-23 22:00:44 -07:00
e8040455d0 Open to public 2022-06-22 17:16:30 -07:00
5521ee4ca9 Remove nd_baseurl 2022-06-22 17:02:44 -07:00
22f828072e Unbind web port 2022-06-22 17:02:28 -07:00
84d6943c6a Fix music dir var name 2022-06-22 17:00:03 -07:00
3594714da0 Init navidrome 2022-06-22 16:58:34 -07:00
a43c68c431 Add doc, enable anonymouse access 2022-06-21 23:31:21 -07:00
4b6dd70515 Enable unprivileged viewing of dashboards 2022-06-21 23:28:51 -07:00
645269b4f2 Undo previous 2022-06-21 23:24:16 -07:00
d7fa0237bd Add grafana-image-renderer plugin to Grafana 2022-06-21 23:20:24 -07:00
a791b08b40 Disable lets-encrypt on jafner.dev 2022-06-20 16:13:09 -07:00
89827ee2c2 add dev router 2022-06-20 16:07:13 -07:00
2f7ac90317 Spin up jafner.net instance of librespeed 2022-06-20 11:19:11 -07:00
4b354562ab Add librespeed readme 2022-06-20 11:18:51 -07:00
dd83310679 Assist with rcon error handling 2022-06-13 10:29:16 -07:00
b71f391f96 Update vanilla to use 1.19 2022-06-10 21:12:53 +00:00
abbbce4f57 Update Uptime Kuma prom config 2022-05-16 17:38:11 -07:00
992ebedb96 Update homer 2022-05-13 21:13:16 -07:00
9e6f2f2f87 Refactor calibre-web subdomaining 2022-05-13 21:09:49 -07:00
766584f0ab Add send, xbackbone to homer 2022-05-13 20:49:26 -07:00
b30546a8b2 fix networking 2022-05-13 20:28:49 -07:00
70d989fa53 Fix protocol 2022-05-13 20:22:19 -07:00
ce120ad1e1 correct redis container name 2022-05-13 20:12:55 -07:00
3dc3fac83c add port label 2022-05-13 20:12:23 -07:00
d2716b6792 Declare web network 2022-05-13 20:07:28 -07:00
6d2d3fa4da Init Send 2022-05-13 20:06:49 -07:00
5764432cf7 Update custom.ini 2022-05-13 09:37:26 -07:00
92cf92edb5 Update custom.ini 2022-05-13 09:35:12 -07:00
588a03d95e Fix ini formatting 2022-05-13 09:34:32 -07:00
e9aeff4c0c Migrate dashboards 2022-05-13 00:57:12 -07:00
9ef10ae551 Update dashboards 2022-05-13 00:52:03 -07:00
dadf56447a Switch to custom.ini 2022-05-13 00:36:59 -07:00
1d5da3d003 Update and re-implement grafana.ini 2022-05-13 00:33:51 -07:00
d01f0c7488 Document Grafana dashboards 2022-05-12 22:07:25 -07:00
f88090f9df Disable grafana.ini 2022-05-12 22:00:16 -07:00
fd8b5ab3c7 Fix user ID for Prom 2022-05-12 21:52:33 -07:00
874ada9e43 Add persistent storage for Prometheus 2022-05-12 21:48:08 -07:00
4b702a7762 Consolidate Grafana-stack and prometheus into Monitoring 2022-05-12 21:36:21 -07:00
7211a8d450 Init working 2022-05-11 13:21:25 -07:00
a526253576 Add sabnzbd scrape job 2022-05-11 01:39:36 -07:00
587da7b8e1 Implement sabnzbd_exporter init 2022-05-11 01:35:59 -07:00
81fccabbcf Fix pipeline failures 2022-05-11 01:16:15 -07:00
602ff8320c Improve docs 2022-05-10 12:02:26 -07:00
4a7044a65c Add SFTP readme 2022-05-10 11:42:14 -07:00
3767d7719a Fix missing code block 2022-05-10 10:08:24 -07:00
e6a9a80f27 Add pregen automation 2022-05-09 23:33:34 -07:00
b2d9516eea Add chunk pregen reference 2022-05-09 23:12:50 -07:00
9a5292d65c Add documentation 2022-05-09 21:55:42 -07:00
3aa69387c2 Set RCON port 2022-05-09 20:56:41 -07:00
ee47548cb4 Increase BMCP RAM allocation 2022-05-09 20:29:31 -07:00
904d3dcde2 Update mc-router mapping 2022-05-08 19:38:46 -07:00
b253913570 Add bmcp 2022-05-08 19:10:03 -07:00
058bc37efa Disable calibre-dev 2022-05-07 13:32:04 -07:00
20b48c2e00 Add new RED deluge instance to homer 2022-05-05 23:13:45 -07:00
9ff4e8e3fc Add Lidarr to homer 2022-05-05 22:27:09 -07:00
760729ac67 Switch Headphones to Lidarr 2022-05-04 09:38:17 -07:00
d594cb8141 Disable traefik on plex exporter 2022-05-04 09:31:30 -07:00
8f1c95d303 Init config.ini 2022-05-04 09:21:09 -07:00
2714825199 Separate binding for config.ini 2022-05-04 09:18:50 -07:00
ab822e4105 Init headphones 2022-05-03 22:37:59 -07:00
6f9efce853 Add plex scrape job to prom.yml 2022-05-03 14:49:14 -07:00
709adbeec7 Enable auto-discover
Switch to public address
2022-05-03 14:40:26 -07:00
3813245e3c Switch plex-exporter image 2022-05-03 14:31:44 -07:00
50a4a10db4 Init plex-exporter 2022-05-03 14:29:03 -07:00
e3d607d23e Switch label name to tracker 2022-05-02 17:49:55 -07:00
f89d69224a Smush deluge into one job with separate labels for each target 2022-05-02 17:48:12 -07:00
bfc4f27784 Add deluge labels 2022-05-02 17:42:20 -07:00
a8b948ad41 Split deluge jobs for better organization 2022-05-02 17:32:03 -07:00
60d5e3bfb8 Add Deluge scrape job 2022-05-02 17:20:10 -07:00