infra

graham/infra

Fork 0

Commit graph

6f5432be73

Remove direnv from base Debian packages (not in Ubuntu 22.04 repos) main Graham McIntire 2026-07-24 16:40:03 -05:00
18da06e769

Fix vault.yml: remove spurious document separator that broke YAML parsing Graham McIntire 2026-07-24 16:39:28 -05:00
d3f4278133

Enable incident.io alerts on all Icinga2 hosts and services Graham McIntire 2026-07-24 16:37:46 -05:00
edd689d8c7

Add incident.io alert integration for Icinga2 Graham McIntire 2026-07-24 16:36:49 -05:00
5171f6666c

Comment out GSSAPIAuthentication in ssh_config on trixie (removed in OpenSSH 10) Graham McIntire 2026-07-24 14:59:15 -05:00
2c6dfcfcb6

Add git safe.directory config to forgejo role for SSH clone access Graham McIntire 2026-07-24 14:55:49 -05:00
9f99683140

Add kaniko-build composite action, update docker-publish to use Kaniko Graham McIntire 2026-07-24 14:36:45 -05:00
6a69247512

Add registry cleanup: keep latest 2 Docker images per repo Graham McIntire 2026-07-24 14:28:38 -05:00
653346a7a3

Add reusable docker-publish workflow Graham McIntire 2026-07-24 14:19:33 -05:00
c20001ce9f

Add reusable container-login composite action for Forgejo registry Graham McIntire 2026-07-24 14:19:18 -05:00
95b3f40dba

Forgejo admin user only created on first deploy, not re-run Graham McIntire 2026-07-24 14:08:08 -05:00
a496efa816

Remove password field from graham user config - only set on initial creation Graham McIntire 2026-07-24 14:07:06 -05:00
e1c7dad545

Set runner container.network to forgejo_forgejo for workflow DNS resolution Graham McIntire 2026-07-24 14:04:53 -05:00
5b05811ec7

Set DEFAULT_PUSH_CREATE_PRIVATE=true Graham McIntire 2026-07-24 14:01:05 -05:00
da2445f2c7

Fix forgejo runner setup, prevent data wipe on re-run, add SSH key to Forgejo Graham McIntire 2026-07-24 13:52:10 -05:00
1e1e423772

Set graham user password hash in managed_users config Graham McIntire 2026-07-24 13:44:19 -05:00
437031aaa3

Add direnv to base Debian packages Graham McIntire 2026-07-24 13:32:58 -05:00
292758900e

Add hi (74.50.113.232) with Forgejo + Caddy, bootstrapped support.vntx.net Graham McIntire 2026-07-24 13:12:33 -05:00
8018ce0eb1

fix(resolvers): put DNSStubListener=no in resolved.conf.d, not unit dropins Graham McIntire 2026-07-24 11:21:10 -05:00
28e119cee2

fix(resolvers): disable systemd-resolved stub listener instead of masking Graham McIntire 2026-07-24 11:17:33 -05:00
3b9507e5c4

fix(resolvers): mask systemd-resolved to prevent port 53 conflict with unbound Graham McIntire 2026-07-24 11:13:29 -05:00
7ff93a5ac3

update opensearch Graham McIntire 2026-07-24 09:17:28 -05:00
d644868602 Migrate mcintire.me DNS from self-hosted BIND9 to Cloudflare Graham McInitre 2026-07-24 09:14:36 -05:00
a6b99691fb fix(prop): add PrunePropagationPolicy=foreground to ArgoCD sync options Graham McInitre 2026-07-21 08:44:56 -05:00
80a85f3916

update Graham McIntire 2026-07-19 14:41:46 -05:00
39bedb08d1

renumber infrastructure from 10.0.15.0/24 to 10.0.16.0/22 (hosts in 10.0.19.x) Graham McIntire 2026-07-18 08:28:16 -05:00
514b346662 cloudflared: aggressive reconnects, always-pull latest, restricted PSS compliance Graham McInitre 2026-07-16 08:48:53 -05:00
8c94ca0d09

update radius Graham McIntire 2026-07-12 15:35:31 -05:00
baec7c22e8

updated talos Graham McIntire 2026-07-05 13:27:15 -05:00
74317f40e1

update Graham McIntire 2026-06-29 10:32:00 -05:00
a42e2eeb7b

exclude manero-ca from most things Graham McIntire 2026-06-25 16:52:20 -05:00
390eb2d835

cleanup Graham McIntire 2026-06-22 16:17:33 -05:00
55451fe285

cleanup resolvers Graham McIntire 2026-06-22 16:11:33 -05:00
6488494d1b

add ipv6 addresses to resolvers Graham McIntire 2026-06-22 16:01:49 -05:00
c85be1d56c

flatcar resolvers Graham McIntire 2026-06-22 15:52:51 -05:00
d6cf15165a

restore UISP server + caddy frontend, fix SSH host key regeneration, add tofu proxmox provider Graham McIntire 2026-06-21 19:06:33 -05:00
216bd8e668

updates Graham McIntire 2026-06-21 13:39:36 -05:00
763d7a938c

updates Graham McIntire 2026-06-20 14:21:32 -05:00
1eb0b74fe8

updates Graham McIntire 2026-06-19 17:24:54 -05:00
fb5803c866

add FreeBSD bootstrap, irc servers, hostname overrides, and cleanups Graham McIntire 2026-06-19 17:19:29 -05:00
b43aa56b5c

icinga2 host updates Graham McIntire 2026-06-19 15:24:44 -05:00
b9a52c258a

updates Graham McIntire 2026-06-19 09:33:27 -05:00
86ae10d963

resolvers: tune unbound for performance and reliability Graham McIntire 2026-06-07 16:43:33 -05:00
02390adff8

telegraf: disable PrivateMounts in containers (fix LXC 226/NAMESPACE) Graham McIntire 2026-06-07 13:38:26 -05:00
66986e294b

monitoring: collect Unbound metrics via Telegraf into Prometheus + Grafana Graham McIntire 2026-06-07 13:34:24 -05:00
43730bf5e7

resolvers: fix empty sshd validation command in post-quantum task Graham McIntire 2026-06-07 10:38:46 -05:00
c64f59929e

resolvers: NXDOMAIN blocklist via RPZ; fix Ansible deprecations Graham McIntire 2026-06-07 10:32:42 -05:00
d632095eb2

cloudflare: disable managed robots.txt; fix v5 config bugs Graham McIntire 2026-06-04 17:41:45 -05:00
c5b658d653

remove findings Graham McIntire 2026-06-04 15:25:00 -05:00
6b7ef92c5b

cleanup: remove audit findings files Graham McIntire 2026-06-04 15:24:43 -05:00
b282921e22

upgrade: Talos v1.13.3, K8s v1.36.1, Cloudflare v5 Graham McIntire 2026-06-04 15:23:13 -05:00
78d0ae179d

fix: resolve talos config issues, Cloudflare v5 migration, and security cleanup Graham McIntire 2026-06-04 14:58:09 -05:00
9b73f436d8

tofu: remove state from tracking, add gitignore, upgrade providers Graham McIntire 2026-06-04 14:48:54 -05:00
5e8823f4dd

fix: resolve all logic bugs Graham McIntire 2026-06-04 14:43:06 -05:00
ec372fd399

fix: add geerlingguy.postgresql to requirements.yml (used by db.w5isp.com) Graham McIntire 2026-06-04 14:41:25 -05:00
8d50d412c6

docs: mark general.yml and docker targets findings as resolved Graham McIntire 2026-06-04 14:40:22 -05:00
ffe1cc3820

docs: mark alpine role finding as resolved in findings.md Graham McIntire 2026-06-04 14:40:02 -05:00
d81f910797

cleanup: remove orphaned host_vars/db.aprs.me.yml (superseded by db.w5isp.com) Graham McIntire 2026-06-04 14:39:29 -05:00
118aa70f51

cleanup: remove broken makefile targets, fix general.yml references Graham McIntire 2026-06-04 14:37:55 -05:00
1b7077dd0d

fix: add template defaults, remove alpine ref, fix ssh -t flag Graham McIntire 2026-06-04 14:37:08 -05:00
44c109c6c9

cleanup: remove dead code and stale files Graham McIntire 2026-06-04 14:35:28 -05:00
ee72c64246

fix: resolve best practice and lint violations Graham McIntire 2026-06-04 14:34:23 -05:00
6f0d308fea

cleanup: remove forgejo, fix ssh key paths, fix tracking issues, update docs Graham McIntire 2026-06-04 14:27:31 -05:00
46f55cdad8

fix Graham McIntire 2026-06-02 14:46:50 -05:00
80943fc684

fix idempotency across roles Graham McIntire 2026-06-02 11:54:34 -05:00
38638e1134

update Graham McIntire 2026-06-01 10:53:23 -05:00
a3bf64521b

updates Graham McIntire 2026-05-20 12:06:54 -05:00
02df6fbbc6

resolvers: serve DoH via Caddy, add IPv6 records and PQ SSH Graham McIntire 2026-05-14 10:10:46 -05:00
1612910654

resolvers: enable IPv6 in unbound (listen, do-ip6, access-control) Graham McIntire 2026-05-14 09:04:22 -05:00
5443e75d70

grafana: prune stale dashboard files from prom on each apply Graham McIntire 2026-05-11 10:39:35 -05:00
6fa9085b18

grafana: add per-app Loki log dashboards (argocd, aprs, towerops, prop, gridmap) Graham McIntire 2026-05-11 10:36:07 -05:00
36eb41736f

promtail: drop namespace.yaml (owned by node-exporter app) Graham McIntire 2026-05-11 10:28:01 -05:00
6d173d9fcb

loki: add log aggregation on prom + promtail daemonset in home-cluster Graham McIntire 2026-05-11 10:24:30 -05:00
b13ae9bd5f

fix(grafana): correct PromEx status_info metric name in towerops dashboards Graham McIntire 2026-05-11 08:15:35 -05:00
4191c0eebb

ansible/hosts: drop decommissioned proxmox + postgresql entries Graham McIntire 2026-05-10 18:12:54 -05:00
04b3855874

k8s: add Starlink dish prometheus exporter + dashboard Graham McIntire 2026-05-10 18:11:21 -05:00
8466e4590f

tmobile-exporter: switch to stock json_exporter + nginx sidecar Graham McIntire 2026-05-10 17:57:13 -05:00
f2d6dbd271

tmobile-exporter: vendor minimal Go exporter that handles G4AR quirks Graham McIntire 2026-05-10 17:42:25 -05:00
20649ba33d

grafana: add T-Mobile Home Internet dashboard Graham McIntire 2026-05-10 17:32:06 -05:00
ebde695bfd

k8s: add T-Mobile Home Internet gateway prometheus exporter Graham McIntire 2026-05-10 17:30:19 -05:00
88bdbbe88f

ansible: add 'monitor' role mirroring live monitor.vntx.net (Icinga2 + Web 2) Graham McIntire 2026-05-08 13:00:53 -05:00
f3f10c3e36

ansible: rewrite netbox role to match live netbox.vntx.net (bare-metal install) Graham McIntire 2026-05-08 12:17:30 -05:00
2f85d55edd

ansible: drop disabled syncthing play stub Graham McIntire 2026-05-08 12:03:40 -05:00
4a84b5b277

ansible: drop dead caddy_ansible dep + commented-out ns/netbox/tailscale_home plays Graham McIntire 2026-05-08 12:02:35 -05:00
0970e29364

ansible: fix two latent bugs surfaced by repo audit Graham McIntire 2026-05-08 11:09:14 -05:00
be96483fb0

prom: add app-specific grafana dashboards + per-pod job override Graham McIntire 2026-05-08 10:25:17 -05:00
a8e1f2fb73

grafana: replace dashboard 13770 (Korean) with 6417 (English) Graham McIntire 2026-05-08 10:23:53 -05:00
e1274bc63b

prom: feed home-cluster metrics + provision standard k8s dashboards Graham McIntire 2026-05-08 10:08:32 -05:00
922552059f

prom: add prometheus stack (prometheus, alertmanager, grafana, node_exporter) Graham McIntire 2026-05-08 09:50:31 -05:00
20896be049

gridmap: move ArgoCD source + image-updater to codeberg Graham McIntire 2026-05-05 12:02:52 -05:00
04d0f76a08

aprs: move ArgoCD source + image-updater to codeberg Graham McIntire 2026-05-05 11:28:06 -05:00
2cd8169e94

towerops: move ArgoCD source + image-updater to codeberg Graham McIntire 2026-05-05 10:58:35 -05:00
abb991e3c6

prop: move ArgoCD source + image-updater to codeberg Graham McIntire 2026-05-05 10:45:41 -05:00
36b5e087b3

updates Graham McIntire 2026-05-04 16:59:31 -05:00
fea69f8a51

updates Graham McIntire 2026-04-29 15:03:17 -05:00
82630fb98b

add argocd-image-updater with forgejo registry config Graham McIntire 2026-04-29 10:38:05 -05:00
ae5ceebf44

migrate from flux to argocd Graham McIntire 2026-04-29 10:26:33 -05:00
c3ae90aff0

dns updates Graham McIntire 2026-04-27 12:43:08 -05:00
841fab5abe

update Graham McIntire 2026-04-21 12:40:18 -05:00
8b4102b1d1

change Graham McIntire 2026-04-20 13:00:52 -05:00