Commit Graph

381 Commits

Author SHA1 Message Date
0b9c2537e2 Switch to customerRequestHeaders 2022-07-11 14:02:19 -07:00
2c6478611a Fix dev not being on network 2022-07-11 14:01:31 -07:00
1555fdf261 Restore securityheaders
Single-variable testSchemeHeaders
2022-07-11 13:15:57 -07:00
4c941d35a6 Remove test headers 2022-07-11 12:36:43 -07:00
35fddb4879 Delete testSchemeHeaders, instead update securityHeaders 2022-07-11 12:36:26 -07:00
45a461849c Add custom request headers 2022-07-11 11:25:14 -07:00
1ef7a1f9be Fix for:
time="2022-07-11T18:01:05Z" level=error msg="Unable to obtain ACME certificate for domains \"loki-monitoring\": unable to generate a certificate for the domains [loki-monitoring]: acme: error: 400 :: POST :: https://acme-v02.api.letsencrypt.org/acme/new-order :: urn:ietf:params:acme:error:rejectedIdentifier :: Error creating new order :: Cannot issue for \"loki-monitoring\": Domain name needs at least one dot" ACME CA="https://acme-v02.api.letsencrypt.org/directory" routerName=prometheus@docker rule="Host(`loki-monitoring`)" providerName=lets-encrypt.acme
2022-07-11 11:02:21 -07:00
f3268d41de Add testSchemeHeaders for passing X-Scheme: https 2022-07-11 11:00:37 -07:00
0a40c254a4 Switch to correct-er image 2022-07-11 10:51:28 -07:00
9a01809c79 Switch to correct image 2022-07-11 10:50:11 -07:00
848cbfa5ef Update calibre-web dev to new image 2022-07-10 23:04:17 -07:00
9c4bc96342 Disable authentik middleware for dev.calibre-web 2022-07-10 16:36:31 -07:00
94c898ae6e Add authentik to prometheus 2022-07-10 16:04:10 -07:00
bed490e6c2 Fix overlapping router name 2022-07-10 16:01:15 -07:00
33a8045f3a Increase max file size to 40GB 2022-07-09 23:43:57 -07:00
61f9c9d54f Set explicit file size 2022-07-09 23:40:56 -07:00
0730545d41 Update plex token 2022-07-09 01:09:48 -07:00
b0cd68e05b Remove dead prometheus jobs 2022-07-09 01:05:37 -07:00
f9bce31c2a Fix typo 2022-07-09 00:46:28 -07:00
5fc635cbb5 Traefik cleanup and switch to yaml 2022-07-09 00:44:40 -07:00
53e06baaad Add Authentik to Traefik 2022-07-09 00:09:56 -07:00
f6ebc9f03f Add Omniauth config for Authentik 2022-07-09 00:01:18 -07:00
50c96641c6 Update docs 2022-07-09 00:00:22 -07:00
9b87035d2f Enable automatic oauth 2022-07-08 23:37:07 -07:00
7061652edd Remove role mapping 2022-07-08 23:33:41 -07:00
93356aabe5 Init grafana OAuth2 with Authentik
Per Authentik: https://goauthentik.io/integrations/services/grafana/
And Grafana: https://grafana.com/docs/grafana/latest/setup-grafana/configure-security/configure-authentication/generic-oauth/
2022-07-08 23:31:04 -07:00
65a4590108 Init partial OAuth provisioning docs 2022-07-08 23:30:26 -07:00
b0fbe10ab0 Fix navidrome container name 2022-07-08 23:03:33 -07:00
ec40c3f7d4 Add Authentik simple services:
- jdownloader2
- librespeed
- navidrome
- stashapp
- uptime-kuma
- wg-easy
2022-07-08 22:57:08 -07:00
04a5a280ee Delete testing nginx stack 2022-07-08 22:55:39 -07:00
7b86a276b5 Add Authentik to simple service: homer 2022-07-08 22:23:26 -07:00
d34419ac92 Add Authentik to simple service: send 2022-07-08 22:21:51 -07:00
81ba152c80 Documentation update 2022-07-08 12:48:34 -07:00
0171f2b6af Refactor volume management 2022-07-08 12:47:43 -07:00
a1e21f674e Fix path 2022-07-08 11:12:20 -07:00
7cffa6513a Fix indentation 2022-07-08 11:11:46 -07:00
ee6ff79b8d Update docs 2022-07-08 11:10:33 -07:00
a4b9200a37 Remove dangling promtail-config 2022-07-08 10:48:57 -07:00
ab31af5e33 Remove superfluous promtail 2022-07-08 10:48:36 -07:00
cd3be3c088 Remove entry_parser 2022-07-08 01:32:31 -07:00
9ffd267145 Fix indentation 2022-07-08 01:31:00 -07:00
1e0a1fee1c Disable other jobs 2022-07-08 01:28:15 -07:00
5496ea400c Implement ruanbekker's job 2022-07-08 01:27:27 -07:00
83b84fd0cd Add docker_sd job 2022-07-08 01:18:17 -07:00
6eaf80cb44 Switch back to TechnoTim's log scraping method 2022-07-08 01:09:35 -07:00
1dfdbde52b Run loki as default user 2022-07-08 01:01:24 -07:00
d1df32e63c Run promtail as default user 2022-07-08 00:56:51 -07:00
c4278e32d5 Fix typo 2022-07-08 00:56:21 -07:00
2e947e075c Disable :ro due to permissions errors 2022-07-08 00:55:53 -07:00
549927b387 - Switch back to 1000:1000
- Mount docker socket read-only
- Use docker service discovery
2022-07-08 00:54:24 -07:00
852edc1ace Test with 0:0 2022-07-08 00:35:34 -07:00
d646d61ee0 Fix typo 2022-07-08 00:32:53 -07:00
11c34a70e7 make container volume map explicitly read-only 2022-07-08 00:30:44 -07:00
0d1c273a16 Map /var/lib/docker/containers to promtail 2022-07-08 00:21:58 -07:00
45af08b682 Fix promtail config indentation 2022-07-07 23:32:56 -07:00
0e90367495 Fix job indentation 2022-07-07 23:30:13 -07:00
dbc04d9a74 Switch from machine logs to docker logs 2022-07-07 23:25:09 -07:00
7c0d6e1354 Fix typo 2022-07-07 23:20:02 -07:00
81c2eafdf1 Clarify new daemon.json 2022-07-07 23:16:52 -07:00
0d503e917c Init loki & promtail 2022-07-07 23:12:57 -07:00
5641035a6a Add dev calibre-web container for oauth image 2022-07-07 21:07:02 -07:00
dc14b2bbfa Explicitly configure service for gitlab router 2022-07-07 12:48:18 -07:00
687dd783a8 Update gitlab config per https://gitlab.com/gitlab-org/omnibus-gitlab/-/issues/5560 2022-07-07 12:43:18 -07:00
65e89ce32b Update gitlab config and docs 2022-07-07 12:31:22 -07:00
c68ecbc26f Update Homer 2022-07-07 09:30:20 -07:00
518213c0bd Disable TLS for SSL 2022-07-06 19:46:43 -07:00
af12cba701 Remove adminer 2022-07-06 18:28:51 -07:00
03bb25a4eb Add authentik to calibre-rpg 2022-07-06 18:25:58 -07:00
d744ceeb69 Undo and switch to using authentik-server 2022-07-06 18:14:37 -07:00
c7a8ebe175 Set authentik hostname 2022-07-06 18:12:38 -07:00
67adc6ce83 Fix typo 2022-07-06 18:04:28 -07:00
bec7d5b6d5 Fix typo 2022-07-06 18:03:36 -07:00
8ccdb21bcd Flesh out nginx stack 2022-07-06 18:02:51 -07:00
f2e754da1d Disable authentik on calibre-web 2022-07-06 17:57:20 -07:00
597bfe6b14 Init test nginx 2022-07-06 17:56:52 -07:00
f79ab99b37 Fix missing property 2022-07-06 17:50:03 -07:00
6f93917d16 Switch middleware name from security-headers to securityheaders 2022-07-06 17:46:52 -07:00
e7bd691717 Fix typos 2022-07-06 17:40:41 -07:00
816b2d80cb Add new security headers to calibre-web-rpg and Authentik 2022-07-06 17:36:51 -07:00
9d2006067f Cleanup 2022-07-06 17:35:12 -07:00
01dca31730 Switch Traefik dynamic config files from toml to yaml 2022-07-06 17:34:52 -07:00
b7826004b7 Make explicit authentik@file middleware 2022-07-06 15:11:32 -07:00
106db702dd Enable authentik middleware for calibre-web-rpg 2022-07-06 15:09:54 -07:00
cf977e104b Move authentik middleware definition to authentik.yaml traefik dynamic config 2022-07-06 15:08:19 -07:00
9504d75d7f Re-disable authentik@docker 2022-07-06 14:59:46 -07:00
6f9dd55e59 Pin to 2022.7.1 tag 2022-07-06 14:52:19 -07:00
a69fe327cd Enable authentik for calibre-web-rpg 2022-07-06 14:46:55 -07:00
f6925b9413 Init adminer 2022-07-06 14:31:58 -07:00
52c6dcc281 Re-init Authentik 2022-07-06 11:27:59 -07:00
149da2f664 Add Jackett to homer 2022-07-05 20:46:06 -07:00
2882c4e6c0 Fix jackett traefik port 2022-07-05 16:56:53 -07:00
432b6092a0 Init jackett 2022-07-05 16:54:14 -07:00
0c2d7d7807 Update homer with jdl and qbt 2022-06-30 11:35:57 -07:00
5537a3135e Make Traefik port explicit 2022-06-30 10:24:58 -07:00
65ec10c3a7 Init jdownloader2 2022-06-30 10:22:49 -07:00
fc7f00f096 LibreNMS is not useful.
Requires installation and configuration of SNMP agents on each host.
Geared toward professional Network Engineers who must manage many hosts (in a pre-cloud paradigm) and the network.
2022-06-30 01:28:04 -07:00
901c02d352 Init librenms 2022-06-30 00:15:40 -07:00
f4e79aa19a Add fantasy realm server to exporter 2022-06-29 11:10:59 -07:00
477c57f54f Add fantasy realm pack 2022-06-27 21:25:51 -07:00
ee4dfc63e1 Move torrent documentation to server 2022-06-27 10:51:10 -07:00