shockrah
c10174c32d
Configuration for immich server
2024-05-22 20:26:54 -07:00
shockrah
f2b066b408
REmoving emojis as a dummy commit to trigger sast
2024-05-04 19:29:04 -07:00
shockrah
670007e618
Fixing typo in stagse marker
2024-05-04 19:17:56 -07:00
shockrah
ff504afa8e
Moving to correct directory
2024-05-04 19:08:17 -07:00
shockrah
d6881fbb30
Adjusting sast
2024-05-04 19:07:39 -07:00
shockrah
20c7be6ff4
Enabling sast
2024-05-04 19:04:51 -07:00
shockrah
5abcff70ec
moving deprecated things to it's own folder
2024-05-04 18:58:51 -07:00
shockrah
6203f355b2
removing networking and security groups
2024-05-04 18:41:55 -07:00
shockrah
eeb4295984
Hardening ssh configs a little bit
2024-04-28 23:12:08 -07:00
shockrah
702cc02edd
Note about the cluster being shutdown
2024-04-28 22:11:55 -07:00
shockrah
3c243fe98b
Renaming as a catch all for securing open services a bit more
2024-04-28 22:08:43 -07:00
shockrah
509a025406
Removing alpha-lb references
2024-04-28 21:34:36 -07:00
shockrah
d7038e26b9
Adding firewall stuff
2024-04-28 21:31:59 -07:00
shockrah
2133c1ff3e
certbot installation
2024-04-28 21:25:20 -07:00
shockrah
34923bd5b7
Lest encrypt basic playbook for setup
2024-04-28 21:25:03 -07:00
shockrah
31f558c4bf
flipping dns over to the vultr host
2024-04-28 21:23:45 -07:00
shockrah
485890e961
proper nginx base configurations
2024-04-28 16:46:54 -07:00
shockrah
dffccd4b86
Playbooks for fire wall and refreshing nginx
2024-04-28 16:46:30 -07:00
shockrah
5905deb319
Merging playbooks
2024-04-27 18:47:30 -07:00
shockrah
3a6cf70062
Website files all pulled
2024-04-27 18:40:42 -07:00
shockrah
3ae1c32cff
Keys are working properly now
2024-04-27 18:22:06 -07:00
shockrah
b641368c0a
Getting creds from output
2024-04-27 17:51:14 -07:00
shockrah
fb960b2f1f
Reader account for vultr host
2024-04-27 17:44:13 -07:00
shockrah
7f26b72190
Pull down script for s3
2024-04-27 16:19:22 -07:00
shockrah
f87cc90d9e
Setting base aws cli to pull files from s3
2024-04-20 13:45:07 -07:00
shockrah
c09dd6203f
Streamlining setup of nginx base requriements
2024-04-20 13:23:24 -07:00
shockrah
7edf24ba20
CLeaning out old method things
2024-04-20 12:49:46 -07:00
shockrah
eed48aa32f
moving playbooks
2024-04-16 21:47:25 -07:00
shockrah
8870fb1973
local tests passing now, nginx proxy working as expected without configs
2024-04-16 21:33:19 -07:00
shockrah
5337fabe17
Setting up all nginx websites on the host
2024-04-16 20:37:47 -07:00
shockrah
31795ea6d9
Site configs
2024-04-16 20:27:54 -07:00
shockrah
4fd20a9136
Simple test playbook to confirm things are working as expected
2024-04-15 20:17:54 -07:00
shockrah
1c6fe055f7
Adding a way of getting the ssh key out for now
2024-04-15 18:34:41 -07:00
shockrah
cd42d0c281
nginx setup with anisble
2024-04-15 17:58:23 -07:00
shockrah
fbad8e3a64
Using openssh format for ssh key pub
2024-04-14 18:16:46 -07:00
shockrah
e2fdfd3c6f
Adding ssh key to the host on creation
2024-04-14 18:08:09 -07:00
shockrah
812a4b686f
Base configuration for a small host to hold all the website file stuff
2024-04-14 17:33:05 -07:00
shockrah
0a9aad30fb
Cluster configuration with working TLS for 1 domain but not two
2024-03-24 13:41:55 -07:00
shockrah
61439ca1a1
Removing cluster since project is super backlogged right now
2024-03-24 13:41:21 -07:00
shockrah
219bd2c97d
remove fluff
2024-02-28 18:53:23 -08:00
shockrah
60667f1ef0
Common tls configuration setup however I cant load the new domain with it
2024-02-27 23:38:41 -08:00
shockrah
ba05bb6e2c
Incorporating parameterized lb ip
2024-02-27 23:05:46 -08:00
shockrah
76a47b55a1
parameterizing load balancer public ip
2024-02-27 23:04:59 -08:00
shockrah
39982e516d
Sample secondary configuration for another website
2024-02-27 21:14:12 -08:00
shockrah
57a7642ad7
Cleaning up k8s config files for now
2024-02-27 18:50:09 -08:00
shockrah
a948901e0f
Sample files
2024-02-21 23:19:28 -08:00
shockrah
61e2a8d2aa
Working sample project with full tls and nginx container
2024-02-21 23:13:40 -08:00
shockrah
5409586c18
Slowly building proper cluster
2024-02-21 22:57:08 -08:00
shockrah
c395709c65
Updating k8s version and adding var value for lab_domain
2024-02-19 16:51:49 -08:00
shockrah
2cd95902a5
removing old dns iam things while new testing domain populates ns servers on vultr
2024-02-19 16:51:19 -08:00
shockrah
f896e9a3ff
project template
2024-02-18 19:26:27 -08:00
shockrah
5bd1f53222
fixing container spec in sample deployment
2024-02-09 15:36:53 -08:00
shockrah
b71182d910
Creating user for DNS updates from K8s cluster
2024-02-04 21:09:15 -08:00
shockrah
f60c5b9a35
Sample deployment of simple nginx pod
2024-01-17 21:17:25 -08:00
shockrah
3e149c43ef
Tracking 6443 for kubectl
2024-01-17 21:06:25 -08:00
shockrah
cb065d22f2
Firewall and provider version bump
2024-01-16 19:49:52 -08:00
shockrah
31cee5a125
Base configuration for building an empty cluster with one node
2024-01-16 19:07:55 -08:00
shockrah
8a66a04337
Base configuration for settingup vke
2024-01-16 16:05:38 -08:00
shockrah
69d75cdb2d
Lab folder created
2023-11-28 21:41:15 -08:00
shockrah
f0e815e9cb
Ignoring sensitive tfvars file
2023-11-28 21:21:55 -08:00
shockrah
bf00b3482d
Basic skeleton for new gitea server ( not provisioned yet )
2023-11-27 22:28:06 -08:00
shockrah
4f3d1a090e
Simple outline for services I want to support going foward
2023-11-27 18:16:31 -08:00
shockrah
4840955361
Simple docs for future git server
2023-11-27 17:53:31 -08:00
shockrah
175ae5f1e5
Explicity setting max percent value on nginx
2023-10-30 22:28:38 -07:00
shockrah
49be08d169
Adding mx records for temper@temper.tv email
2023-10-27 17:58:23 -07:00
shockrah
1fe7ccc898
Moving dns records to mail server configuration
2023-10-21 00:00:46 -07:00
shockrah
19e42bf778
adding dns entries that would be required for miab server
2023-10-20 23:54:42 -07:00
shockrah
a681d29457
Fixing reverse dns infra now setup and working to receive emails
2023-10-20 18:08:55 -07:00
shockrah
488722aaff
Creating mail.shockrah.xyz dns records
2023-10-20 16:54:33 -07:00
shockrah
8aee1483fc
Fixing group_id issue and missing quotes
2023-10-20 15:09:23 -07:00
shockrah
e8dec5a6d8
Start of docs for mail server code
2023-10-20 15:04:14 -07:00
shockrah
69b8ad8a50
Sec configuration with ssh keys
2023-10-20 15:03:05 -07:00
shockrah
6f8d8abd15
Fargate readme
2023-10-16 21:00:16 -07:00
shockrah
ba38a0d9c9
Adding back resume.shockrah.xyz to LB endpoints
2023-10-07 15:01:28 -07:00
shockrah
7a388534f1
Cleaning up roles
2023-10-06 22:30:24 -07:00
shockrah
8298dbb4f7
Addig temper.tv conf to docker image'
2023-10-06 00:16:29 -07:00
shockrah
4a210404bb
Adding temper.tv cert
2023-10-06 00:09:24 -07:00
shockrah
82f34d03cd
Fixing certs that get attached to the LB
2023-10-06 00:08:14 -07:00
shockrah
a83debde34
Validation and cert created for tmper
2023-10-05 23:41:18 -07:00
shockrah
d02b5de48c
Splitting certs into lone files
2023-10-05 23:16:49 -07:00
shockrah
df2406720f
Improving dependency chaingin slightly however more will stablize the race condition problem here in this folder
2023-10-05 23:12:39 -07:00
shockrah
b6aebf06b1
Bringing in tmeper records to track
2023-10-05 23:08:27 -07:00
shockrah
da379f20cb
Moving remaining s3 configuration to its own folder
2023-10-05 22:43:35 -07:00
shockrah
9bd6cbd3e3
Fixing makefile
2023-10-05 22:28:54 -07:00
shockrah
b0e5bd50da
Moving out route53 and load balancer resources
2023-10-05 22:20:06 -07:00
shockrah
3029fbb3f6
Moving fargate things to their own folder
2023-10-04 01:15:32 -07:00
shockrah
caf09a63cb
More variable clean up for security groups
...
Removing traces from previous networking cleanout
2023-10-03 19:38:27 -07:00
shockrah
e51ebc7251
Moving security groups out to their own folder as they are basically global to everything
2023-10-03 19:36:59 -07:00
shockrah
609f9b3e7b
Moving networking code out into its own module
2023-10-03 19:07:06 -07:00
shockrah
10ed1f1a98
Adding note regarding master record with special record
2023-09-30 16:26:17 -07:00
shockrah
295f933d8a
Terraform code cleanup and final reduction of containers from 2 -> 1
...
Now able to serve multiple websites with 1 nginx container under an LB
Cost savings not massive but still noticable at this point considering
How low the cost is with this kind of setup
2023-09-10 16:25:21 -07:00
shockrah
b5e53acf0a
Adding health check endpoint to nginx container
2023-09-10 16:23:54 -07:00
shockrah
efdd75b831
Fresh readme
2023-09-10 15:51:35 -07:00
shockrah
830352a851
MVP nginx configuration for single container support
2023-09-10 15:36:47 -07:00
shockrah
50c6bfeac0
switching to borderline vanilla nginx docker image
2023-09-10 15:21:27 -07:00
shockrah
6b75b2534e
Simplifying build and run scripts for general & pipeline usage
2023-09-10 15:20:50 -07:00
shockrah
9cd2fe11db
Updating readme
2023-09-10 15:16:17 -07:00
shockrah
9ca3969a53
Ensuring public read access to all required public buckets
...
* Required to allow task containers to read from here without crazy auth on
nginx's part
2023-09-10 15:10:22 -07:00
shockrah
d9e0e8c70b
Making public files for websites buckets public readable
2023-08-09 21:51:21 -07:00
shockrah
4987559b15
Adding readme for playbooks
2023-05-07 23:53:41 -07:00
shockrah