49e41fe89e
Disable Traefik access logging
2022-07-15 12:11:11 -07:00
7dafac87cf
Disable the lan-only@file middleware for autopirate stack
2022-07-15 11:15:07 -07:00
650ba74622
Remove authentik@file middleware from services
2022-07-15 10:56:20 -07:00
cb69083c43
Remove authentik@file middleware from services
2022-07-15 10:56:02 -07:00
e9ce87c684
Merge branch 'main' of ssh://gitlab.jafner.net:2229/Jafner/homelab
2022-07-15 10:52:00 -07:00
5741b8c33e
Rename homepage_homer to homer_homer
2022-07-15 10:51:32 -07:00
29deb0af4b
Remove Authentik from autopirate stack
2022-07-15 10:50:59 -07:00
f5e1a9860e
Run loki as 1000:1000
2022-07-15 00:02:56 -07:00
e1a4b1edcf
Add access logging to Traefik
2022-07-14 23:46:34 -07:00
582df413f9
Add keep-file: true to loki driver
2022-07-14 15:22:44 -07:00
e0de2b4963
Remove root from loki
2022-07-14 14:28:38 -07:00
d199ebe1f7
Change path_prefix to loki-logs
2022-07-14 14:28:03 -07:00
a48762a0f7
Update Cloudflare DDNS key
2022-07-14 14:19:01 -07:00
fe2ce31c47
Switch to using common block to define chunks and rules directories
2022-07-14 14:14:21 -07:00
e28bbcc674
Uncomment common config
2022-07-14 14:10:49 -07:00
ac36fb2b3e
Explicitly elevate to root
2022-07-14 14:10:08 -07:00
fb81db3336
Disable volume map
2022-07-14 14:07:50 -07:00
851cb52aac
Try again
2022-07-14 13:59:43 -07:00
b0b4a65e36
Switch to local_storage_config with /loki-logs
2022-07-14 13:56:26 -07:00
b501fcf020
Remove loki storage binding
2022-07-14 13:47:56 -07:00
45fd10df15
Persist loki log storage
2022-07-14 13:44:43 -07:00
2060584229
Update pihole exporter config
2022-07-14 00:07:54 -07:00
c6498076f5
Set empty password
2022-07-14 00:02:58 -07:00
8c0067071b
Add pihole-specific env vars
2022-07-13 23:25:35 -07:00
af7ed80074
Automatically append /admin to requests to the route
2022-07-13 23:06:45 -07:00
e7f6581ced
Elevate pihole container runner
2022-07-13 22:58:08 -07:00
958dfbee15
Add missing image
2022-07-13 22:55:31 -07:00
74de951750
Init PiHole
2022-07-13 22:54:57 -07:00
af4e88f4c1
Fix typo
2022-07-13 22:52:52 -07:00
e004dde635
Fix typo
2022-07-13 19:52:06 -07:00
c270a43597
Reset Qbt, autopirate to stable
...
Use jdl as guinnea pig
2022-07-13 19:49:54 -07:00
d381db8053
Switch to authentik-auth@file service
2022-07-13 19:46:31 -07:00
c3ba396caa
Protect autopirate suite with lan-only until authentik is worked out
2022-07-13 19:06:02 -07:00
eebc4b088c
Correct missing rule
2022-07-13 19:03:08 -07:00
00885797b3
Add Authentik to all autopirate stack
2022-07-13 16:29:41 -07:00
446d617071
Remove lan-only middleware from Sonarr
2022-07-13 16:20:19 -07:00
088353315a
Accidentally added Radarr to authentik, not Sonarr.
...
Fix that
2022-07-13 16:18:27 -07:00
33f7fcb2bb
Add Sonarr to Authentik
2022-07-13 16:16:31 -07:00
181dfa89c6
Update SSO documentation
2022-07-13 16:16:20 -07:00
07e506a1dd
Fix typo
2022-07-13 13:53:13 -07:00
241d798f9e
#31 Update basic webapp template with new logging instrumentation
2022-07-13 13:40:48 -07:00
54124da9d1
#31 Add Loki logging for all "main" apps
...
Also converted a few old composes from 4-space indentation to 2-space
Ignores supporting containers like postgres, redis, etc.
2022-07-13 13:35:56 -07:00
0e657d231f
Remove redundant labels
2022-07-13 13:12:30 -07:00
a68fd68f41
Rename loki-labels to just labels
2022-07-13 13:11:34 -07:00
97015ca9b5
Add loki-labels as string
2022-07-13 13:11:04 -07:00
ea307ce4af
Add loki-timeout as string
2022-07-13 13:10:49 -07:00
8a852bc438
Switch loki-retries to string
2022-07-13 13:10:29 -07:00
a61796c7c8
Add loki-retries
2022-07-13 13:10:13 -07:00
5ea87a5d1f
Switch loki-batch-size to string
2022-07-13 13:09:52 -07:00
d7a18cec66
Add loki-batch-size
2022-07-13 13:09:31 -07:00
6109a20277
Isolate loki-url
2022-07-13 13:09:09 -07:00
0e2b6bf3d9
Confirm logging block is responsible for errors
2022-07-13 13:08:42 -07:00
9c2d96b253
Fix typo
2022-07-13 13:08:02 -07:00
77bde24457
Fix typo
2022-07-13 13:07:22 -07:00
7c836b4849
Fix typo
2022-07-13 13:06:22 -07:00
072286d261
Test wg-easy loki logging
2022-07-13 13:00:28 -07:00
9ed2c76fc8
Add log_tags link
2022-07-13 12:51:57 -07:00
3cc35fa4d8
Add docker logging docs
2022-07-13 12:50:39 -07:00
af1e3a3571
Update Loki docs
2022-07-13 12:14:38 -07:00
df054da499
Disable auto-start for all containers. (Set all restart: "no")
2022-07-13 10:47:27 -07:00
600b28b859
Add to Authentik documentation
2022-07-13 00:27:02 -07:00
98f97bb316
Implement second gitlab runner
2022-07-12 17:02:18 -07:00
4b2fc18d8e
Switch to master branch
2022-07-12 16:47:44 -07:00
a2f0496399
Switch to nodb branch
2022-07-12 15:47:26 -07:00
24041a4476
Archive xbackbone
2022-07-12 10:30:56 -07:00
4c94bed815
See previous commit
2022-07-12 01:22:16 -07:00
24cb55cba9
Re-enable persistent volume
2022-07-12 01:20:22 -07:00
89ab3610f2
Switch dev to new image
2022-07-12 01:19:14 -07:00
05d0af4d42
services -> service
2022-07-12 01:04:31 -07:00
664322d274
Fix field services to service
2022-07-12 01:02:46 -07:00
1dcb89211c
Init auth to qbt
2022-07-12 01:01:15 -07:00
4b458ebc5c
Disable config persistence
2022-07-12 00:03:44 -07:00
0b518aa983
Test security headers
2022-07-11 21:44:37 -07:00
a7c8ebd55d
Add X-Scheme: https to security headers
2022-07-11 21:44:01 -07:00
e909f1bfe4
Try again
2022-07-11 14:07:10 -07:00
9ad6a71ad6
Switch to customResponseHeaders
2022-07-11 14:03:34 -07:00
0b9c2537e2
Switch to customerRequestHeaders
2022-07-11 14:02:19 -07:00
2c6478611a
Fix dev not being on network
2022-07-11 14:01:31 -07:00
1555fdf261
Restore securityheaders
...
Single-variable testSchemeHeaders
2022-07-11 13:15:57 -07:00
4c941d35a6
Remove test headers
2022-07-11 12:36:43 -07:00
35fddb4879
Delete testSchemeHeaders, instead update securityHeaders
2022-07-11 12:36:26 -07:00
45a461849c
Add custom request headers
2022-07-11 11:25:14 -07:00
1ef7a1f9be
Fix for:
...
time="2022-07-11T18:01:05Z" level=error msg="Unable to obtain ACME certificate for domains \"loki-monitoring\": unable to generate a certificate for the domains [loki-monitoring]: acme: error: 400 :: POST :: https://acme-v02.api.letsencrypt.org/acme/new-order :: urn:ietf:params:acme:error:rejectedIdentifier :: Error creating new order :: Cannot issue for \"loki-monitoring\": Domain name needs at least one dot" ACME CA="https://acme-v02.api.letsencrypt.org/directory " routerName=prometheus@docker rule="Host(`loki-monitoring`)" providerName=lets-encrypt.acme
2022-07-11 11:02:21 -07:00
f3268d41de
Add testSchemeHeaders for passing X-Scheme: https
2022-07-11 11:00:37 -07:00
0a40c254a4
Switch to correct-er image
2022-07-11 10:51:28 -07:00
9a01809c79
Switch to correct image
2022-07-11 10:50:11 -07:00
848cbfa5ef
Update calibre-web dev to new image
2022-07-10 23:04:17 -07:00
9c4bc96342
Disable authentik middleware for dev.calibre-web
2022-07-10 16:36:31 -07:00
94c898ae6e
Add authentik to prometheus
2022-07-10 16:04:10 -07:00
bed490e6c2
Fix overlapping router name
2022-07-10 16:01:15 -07:00
33a8045f3a
Increase max file size to 40GB
2022-07-09 23:43:57 -07:00
61f9c9d54f
Set explicit file size
2022-07-09 23:40:56 -07:00
0730545d41
Update plex token
2022-07-09 01:09:48 -07:00
b0cd68e05b
Remove dead prometheus jobs
2022-07-09 01:05:37 -07:00
f9bce31c2a
Fix typo
2022-07-09 00:46:28 -07:00
5fc635cbb5
Traefik cleanup and switch to yaml
2022-07-09 00:44:40 -07:00
53e06baaad
Add Authentik to Traefik
2022-07-09 00:09:56 -07:00
f6ebc9f03f
Add Omniauth config for Authentik
2022-07-09 00:01:18 -07:00
50c96641c6
Update docs
2022-07-09 00:00:22 -07:00
9b87035d2f
Enable automatic oauth
2022-07-08 23:37:07 -07:00
7061652edd
Remove role mapping
2022-07-08 23:33:41 -07:00
93356aabe5
Init grafana OAuth2 with Authentik
...
Per Authentik: https://goauthentik.io/integrations/services/grafana/
And Grafana: https://grafana.com/docs/grafana/latest/setup-grafana/configure-security/configure-authentication/generic-oauth/
2022-07-08 23:31:04 -07:00
65a4590108
Init partial OAuth provisioning docs
2022-07-08 23:30:26 -07:00
b0fbe10ab0
Fix navidrome container name
2022-07-08 23:03:33 -07:00
ec40c3f7d4
Add Authentik simple services:
...
- jdownloader2
- librespeed
- navidrome
- stashapp
- uptime-kuma
- wg-easy
2022-07-08 22:57:08 -07:00
04a5a280ee
Delete testing nginx stack
2022-07-08 22:55:39 -07:00
7b86a276b5
Add Authentik to simple service: homer
2022-07-08 22:23:26 -07:00
d34419ac92
Add Authentik to simple service: send
2022-07-08 22:21:51 -07:00
81ba152c80
Documentation update
2022-07-08 12:48:34 -07:00
0171f2b6af
Refactor volume management
2022-07-08 12:47:43 -07:00
a1e21f674e
Fix path
2022-07-08 11:12:20 -07:00
7cffa6513a
Fix indentation
2022-07-08 11:11:46 -07:00
ee6ff79b8d
Update docs
2022-07-08 11:10:33 -07:00
a4b9200a37
Remove dangling promtail-config
2022-07-08 10:48:57 -07:00
ab31af5e33
Remove superfluous promtail
2022-07-08 10:48:36 -07:00
cd3be3c088
Remove entry_parser
2022-07-08 01:32:31 -07:00
9ffd267145
Fix indentation
2022-07-08 01:31:00 -07:00
1e0a1fee1c
Disable other jobs
2022-07-08 01:28:15 -07:00
5496ea400c
Implement ruanbekker's job
2022-07-08 01:27:27 -07:00
83b84fd0cd
Add docker_sd job
2022-07-08 01:18:17 -07:00
6eaf80cb44
Switch back to TechnoTim's log scraping method
2022-07-08 01:09:35 -07:00
1dfdbde52b
Run loki as default user
2022-07-08 01:01:24 -07:00
d1df32e63c
Run promtail as default user
2022-07-08 00:56:51 -07:00
c4278e32d5
Fix typo
2022-07-08 00:56:21 -07:00
2e947e075c
Disable :ro due to permissions errors
2022-07-08 00:55:53 -07:00
549927b387
- Switch back to 1000:1000
...
- Mount docker socket read-only
- Use docker service discovery
2022-07-08 00:54:24 -07:00
852edc1ace
Test with 0:0
2022-07-08 00:35:34 -07:00
d646d61ee0
Fix typo
2022-07-08 00:32:53 -07:00
11c34a70e7
make container volume map explicitly read-only
2022-07-08 00:30:44 -07:00
0d1c273a16
Map /var/lib/docker/containers to promtail
2022-07-08 00:21:58 -07:00
45af08b682
Fix promtail config indentation
2022-07-07 23:32:56 -07:00
0e90367495
Fix job indentation
2022-07-07 23:30:13 -07:00
dbc04d9a74
Switch from machine logs to docker logs
2022-07-07 23:25:09 -07:00
7c0d6e1354
Fix typo
2022-07-07 23:20:02 -07:00
81c2eafdf1
Clarify new daemon.json
2022-07-07 23:16:52 -07:00
0d503e917c
Init loki & promtail
2022-07-07 23:12:57 -07:00
5641035a6a
Add dev calibre-web container for oauth image
2022-07-07 21:07:02 -07:00
dc14b2bbfa
Explicitly configure service for gitlab router
2022-07-07 12:48:18 -07:00
687dd783a8
Update gitlab config per https://gitlab.com/gitlab-org/omnibus-gitlab/-/issues/5560
2022-07-07 12:43:18 -07:00
65e89ce32b
Update gitlab config and docs
2022-07-07 12:31:22 -07:00
c68ecbc26f
Update Homer
2022-07-07 09:30:20 -07:00
518213c0bd
Disable TLS for SSL
2022-07-06 19:46:43 -07:00
af12cba701
Remove adminer
2022-07-06 18:28:51 -07:00
03bb25a4eb
Add authentik to calibre-rpg
2022-07-06 18:25:58 -07:00
d744ceeb69
Undo and switch to using authentik-server
2022-07-06 18:14:37 -07:00
c7a8ebe175
Set authentik hostname
2022-07-06 18:12:38 -07:00
67adc6ce83
Fix typo
2022-07-06 18:04:28 -07:00
bec7d5b6d5
Fix typo
2022-07-06 18:03:36 -07:00
8ccdb21bcd
Flesh out nginx stack
2022-07-06 18:02:51 -07:00
f2e754da1d
Disable authentik on calibre-web
2022-07-06 17:57:20 -07:00
597bfe6b14
Init test nginx
2022-07-06 17:56:52 -07:00
f79ab99b37
Fix missing property
2022-07-06 17:50:03 -07:00
6f93917d16
Switch middleware name from security-headers to securityheaders
2022-07-06 17:46:52 -07:00
e7bd691717
Fix typos
2022-07-06 17:40:41 -07:00
816b2d80cb
Add new security headers to calibre-web-rpg and Authentik
2022-07-06 17:36:51 -07:00
9d2006067f
Cleanup
2022-07-06 17:35:12 -07:00
01dca31730
Switch Traefik dynamic config files from toml to yaml
2022-07-06 17:34:52 -07:00
b7826004b7
Make explicit authentik@file middleware
2022-07-06 15:11:32 -07:00
106db702dd
Enable authentik middleware for calibre-web-rpg
2022-07-06 15:09:54 -07:00
cf977e104b
Move authentik middleware definition to authentik.yaml traefik dynamic config
2022-07-06 15:08:19 -07:00
9504d75d7f
Re-disable authentik@docker
2022-07-06 14:59:46 -07:00
6f9dd55e59
Pin to 2022.7.1 tag
2022-07-06 14:52:19 -07:00
a69fe327cd
Enable authentik for calibre-web-rpg
2022-07-06 14:46:55 -07:00
f6925b9413
Init adminer
2022-07-06 14:31:58 -07:00
52c6dcc281
Re-init Authentik
2022-07-06 11:27:59 -07:00
149da2f664
Add Jackett to homer
2022-07-05 20:46:06 -07:00
2882c4e6c0
Fix jackett traefik port
2022-07-05 16:56:53 -07:00
432b6092a0
Init jackett
2022-07-05 16:54:14 -07:00
0c2d7d7807
Update homer with jdl and qbt
2022-06-30 11:35:57 -07:00
5537a3135e
Make Traefik port explicit
2022-06-30 10:24:58 -07:00
65ec10c3a7
Init jdownloader2
2022-06-30 10:22:49 -07:00
fc7f00f096
LibreNMS is not useful.
...
Requires installation and configuration of SNMP agents on each host.
Geared toward professional Network Engineers who must manage many hosts (in a pre-cloud paradigm) and the network.
2022-06-30 01:28:04 -07:00
901c02d352
Init librenms
2022-06-30 00:15:40 -07:00
f4e79aa19a
Add fantasy realm server to exporter
2022-06-29 11:10:59 -07:00
477c57f54f
Add fantasy realm pack
2022-06-27 21:25:51 -07:00
ee4dfc63e1
Move torrent documentation to server
2022-06-27 10:51:10 -07:00
9a917b519f
Switch to non-default port
2022-06-24 17:25:36 -07:00
d29d0f65ba
Add volume mapping
2022-06-24 17:12:13 -07:00
70731223e0
Set Traefik port explicitly
2022-06-24 16:51:49 -07:00
802030e0ba
Init qbittorrent on server
2022-06-24 16:45:57 -07:00
acab5d56f8
FIx typo
2022-06-24 11:50:27 -07:00
a349eacf91
Add stash to homer
2022-06-24 11:38:40 -07:00
8001117afb
Fix typos
2022-06-23 22:38:49 -07:00
19891f4304
Fix typo
2022-06-23 22:37:07 -07:00
45fb06172d
Refactor volumes to media, metadata, and config
2022-06-23 22:24:59 -07:00
13c288fdc4
Add config volume mapping
2022-06-23 22:03:44 -07:00
1c9e82e8fd
init stashapp
2022-06-23 22:01:26 -07:00
d834a21836
Remove newline
2022-06-23 22:01:21 -07:00
cf1c00cf99
Add example docker-compose for web app
2022-06-23 22:00:44 -07:00
a6a1e58c9f
Open to public
2022-06-22 17:16:30 -07:00
c2bed25e7f
Remove nd_baseurl
2022-06-22 17:02:44 -07:00
fa8414d149
Unbind web port
2022-06-22 17:02:28 -07:00
5c8abf4a9b
Fix music dir var name
2022-06-22 17:00:03 -07:00
1cdf054afa
Init navidrome
2022-06-22 16:58:34 -07:00
0d61ec65bd
Add doc, enable anonymouse access
2022-06-21 23:31:21 -07:00
e92913f7d8
Enable unprivileged viewing of dashboards
2022-06-21 23:28:51 -07:00
2ff97328fc
Undo previous
2022-06-21 23:24:16 -07:00
e424a65b68
Add grafana-image-renderer plugin to Grafana
2022-06-21 23:20:24 -07:00
af4dc31a6a
Disable lets-encrypt on jafner.dev
2022-06-20 16:13:09 -07:00
57e21ecb4c
add dev router
2022-06-20 16:07:13 -07:00
43c07f7c74
Spin up jafner.net instance of librespeed
2022-06-20 11:19:11 -07:00
3e31bbdd27
Add librespeed readme
2022-06-20 11:18:51 -07:00
31cb8ea879
Assist with rcon error handling
2022-06-13 10:29:16 -07:00
8481bf591a
Update vanilla to use 1.19
2022-06-10 21:12:53 +00:00
29befbc369
Update Uptime Kuma prom config
2022-05-16 17:38:11 -07:00
3859de6b1c
Update homer
2022-05-13 21:13:16 -07:00
1684fa7d3d
Refactor calibre-web subdomaining
2022-05-13 21:09:49 -07:00
ee4f782bf4
Add send, xbackbone to homer
2022-05-13 20:49:26 -07:00
2fce02ddb3
fix networking
2022-05-13 20:28:49 -07:00
d9622ae557
Fix protocol
2022-05-13 20:22:19 -07:00
f9fb83d4c9
correct redis container name
2022-05-13 20:12:55 -07:00
cbbf790e4e
add port label
2022-05-13 20:12:23 -07:00
479101caf8
Declare web network
2022-05-13 20:07:28 -07:00
761de8bcc6
Init Send
2022-05-13 20:06:49 -07:00
79fa6396bb
Update custom.ini
2022-05-13 09:37:26 -07:00
12d2e8bf20
Update custom.ini
2022-05-13 09:35:12 -07:00
1f5f9a1a63
Fix ini formatting
2022-05-13 09:34:32 -07:00
32d87ec4ed
Migrate dashboards
2022-05-13 00:57:12 -07:00
17fc1eaf78
Update dashboards
2022-05-13 00:52:03 -07:00
40f4fee906
Switch to custom.ini
2022-05-13 00:36:59 -07:00
4637d883b5
Update and re-implement grafana.ini
2022-05-13 00:33:51 -07:00
0176210592
Document Grafana dashboards
2022-05-12 22:07:25 -07:00
0a51bcf2d6
Disable grafana.ini
2022-05-12 22:00:16 -07:00
fcbe57f175
Fix user ID for Prom
2022-05-12 21:52:33 -07:00
3dfe8669e4
Add persistent storage for Prometheus
2022-05-12 21:48:08 -07:00
e200e96e28
Consolidate Grafana-stack and prometheus into Monitoring
2022-05-12 21:36:21 -07:00
397a1e0c51
Init working
2022-05-11 13:21:25 -07:00
06943544e8
Add sabnzbd scrape job
2022-05-11 01:39:36 -07:00
d250ea4a72
Implement sabnzbd_exporter init
2022-05-11 01:35:59 -07:00
b33411e3a5
Fix pipeline failures
2022-05-11 01:16:15 -07:00
67f2da87a8
Improve docs
2022-05-10 12:02:26 -07:00
9f03219338
Add SFTP readme
2022-05-10 11:42:14 -07:00
8c8764d18e
Fix missing code block
2022-05-10 10:08:24 -07:00
7220af2361
Add pregen automation
2022-05-09 23:33:34 -07:00
55bf0b8387
Add chunk pregen reference
2022-05-09 23:12:50 -07:00
8720c204e6
Add documentation
2022-05-09 21:55:42 -07:00
9b0551a5c4
Set RCON port
2022-05-09 20:56:41 -07:00
0faa6dcc87
Increase BMCP RAM allocation
2022-05-09 20:29:31 -07:00
c739410ff2
Update mc-router mapping
2022-05-08 19:38:46 -07:00
30371cf7f3
Add bmcp
2022-05-08 19:10:03 -07:00
0239aa8934
Disable calibre-dev
2022-05-07 13:32:04 -07:00
50b340d899
Add new RED deluge instance to homer
2022-05-05 23:13:45 -07:00
d785f101b6
Add Lidarr to homer
2022-05-05 22:27:09 -07:00
1bd2de969a
Switch Headphones to Lidarr
2022-05-04 09:38:17 -07:00
44a598fecf
Disable traefik on plex exporter
2022-05-04 09:31:30 -07:00
2aa3bd81a1
Init config.ini
2022-05-04 09:21:09 -07:00
6fd6bb8f81
Separate binding for config.ini
2022-05-04 09:18:50 -07:00
92fedf3823
Init headphones
2022-05-03 22:37:59 -07:00
f1890088fe
Add plex scrape job to prom.yml
2022-05-03 14:49:14 -07:00
51590d999f
Enable auto-discover
...
Switch to public address
2022-05-03 14:40:26 -07:00
