Lukáš Kucharczyk
|
8658efa4d9
|
minor: add space around variable
|
2021-06-20 19:44:58 +02:00 |
Lukáš Kucharczyk
|
3d353c4b84
|
general: add show-pass.sh
|
2021-06-20 19:43:37 +02:00 |
Lukáš Kucharczyk
|
f73272ac91
|
keycloak: enable authelia interstitial
|
2021-06-20 19:39:46 +02:00 |
Lukáš Kucharczyk
|
3d06cf48b8
|
authelia: add configuration.yml
|
2021-06-20 19:39:31 +02:00 |
Lukáš Kucharczyk
|
851f5ac25e
|
authelia: add more nginx configuration
|
2021-06-20 19:38:53 +02:00 |
Lukáš Kucharczyk
|
c45df9911f
|
authelia: add the nginx configuration
|
2021-06-20 19:38:28 +02:00 |
Lukáš Kucharczyk
|
c19bd16a41
|
authelia: add the main task
|
2021-06-20 19:38:06 +02:00 |
Lukáš Kucharczyk
|
763b6993fc
|
Add authelia role to playbook
|
2021-06-20 19:37:45 +02:00 |
Lukáš Kucharczyk
|
b7c3a3af8a
|
openldap: disable debug logging
|
2021-06-20 18:19:18 +02:00 |
Lukáš Kucharczyk
|
da527acb17
|
openldap: remove more cruft
|
2021-06-20 18:18:44 +02:00 |
Lukáš Kucharczyk
|
d38701a0e9
|
openldap: remove cruft
|
2021-06-20 18:18:21 +02:00 |
Lukáš Kucharczyk
|
6fca397d25
|
openldap: move admin password to vault
|
2021-06-20 18:16:10 +02:00 |
Lukáš Kucharczyk
|
592273fc5b
|
List OpenLDAP in README
|
2021-05-18 23:18:11 +02:00 |
Lukáš Kucharczyk
|
e986991466
|
Add Keycloak (#1)
|
2021-05-18 23:10:37 +02:00 |
Lukáš Kucharczyk
|
6dcb21fe75
|
Add PostgreSQL (#14)
|
2021-05-18 23:09:37 +02:00 |
Lukáš Kucharczyk
|
5b5f53564f
|
nginx: add more snippets, some placeholders
|
2021-05-18 19:40:58 +02:00 |
Lukáš Kucharczyk
|
c79009e541
|
Add hostname to OpenLDAP, remove bridge network
|
2021-05-18 19:37:43 +02:00 |
Lukáš Kucharczyk
|
8d193080dc
|
Allow outside access to LDAP
|
2021-05-16 23:47:07 +02:00 |
Lukáš Kucharczyk
|
c93f579af9
|
Make loading of custom ldifs work
|
2021-05-16 23:46:45 +02:00 |
Lukáš Kucharczyk
|
8f4cf4883e
|
Add minimum viable role.
|
2021-05-16 23:02:01 +02:00 |
Lukáš Kucharczyk
|
2fe28931e7
|
Move ovh.ini to Ansible Vault for now
|
2021-05-15 00:15:11 +02:00 |
Lukáš Kucharczyk
|
87853b9fde
|
Fix nginx template snippets not being copied
|
2021-05-15 00:01:23 +02:00 |
Lukáš Kucharczyk
|
60cb099b4b
|
Add ANSIBLE_ARGS to Vagrantfile
|
2021-05-15 00:00:54 +02:00 |
Lukáš Kucharczyk
|
5dfca40517
|
Remove docker-data from .gitignore
|
2021-05-15 00:00:32 +02:00 |
Lukáš Kucharczyk
|
a19ebceece
|
Add .editorconfig
|
2021-05-15 00:00:06 +02:00 |
Lukáš Kucharczyk
|
89c7618c4c
|
Merge pull request 'Improve SSL handling' (#25) from feat/better-ssl into main
Reviewed-on: homelab/next#25
|
2021-05-14 21:58:11 +00:00 |
Lukáš Kucharczyk
|
af5e7c153f
|
Move certificates to Ansible Vault (#27)
|
2021-05-14 21:58:11 +00:00 |
Lukáš Kucharczyk
|
bd6f1b2371
|
Put cert generation behind variable
|
2021-05-14 21:58:11 +00:00 |
Lukáš Kucharczyk
|
9cd4aa1ad3
|
Add nginx snippets from Nginx Proxy Manager
|
2021-05-14 21:58:11 +00:00 |
Lukáš Kucharczyk
|
2412c87fbb
|
Change certificate paths in nginx.conf
|
2021-05-14 21:58:11 +00:00 |
Lukáš Kucharczyk
|
cd7b9918a1
|
Change how certificates are installed
|
2021-05-14 21:58:11 +00:00 |
Lukáš Kucharczyk
|
69ce5dc3a9
|
Move certificates to roles/nginx/files for now
|
2021-05-14 21:58:11 +00:00 |
Lukáš Kucharczyk
|
dadfb98455
|
Add new certs
|
2021-05-14 21:58:11 +00:00 |
Lukáš Kucharczyk
|
11a7231f61
|
Add back hosts file, update README
|
2021-05-14 00:11:05 +02:00 |
Lukáš Kucharczyk
|
f458dc9229
|
Move from localhost to vagrant
|
2021-05-13 23:47:34 +02:00 |
Lukáš Kucharczyk
|
5986bdeed8
|
Remove redundant hosts file
|
2021-05-13 23:46:02 +02:00 |
Lukáš Kucharczyk
|
b33ca21149
|
Add certs directory
|
2021-05-13 21:35:22 +02:00 |
Lukáš Kucharczyk
|
c158a21dfc
|
nginx: separate self-signed certs
|
2021-05-05 20:41:28 +02:00 |
Lukáš Kucharczyk
|
d0d33b47b9
|
nginx: join the default bridge network for ext access
|
2021-05-05 19:35:55 +02:00 |
Lukáš Kucharczyk
|
54de631d29
|
Improve routing between containers
Create user network nginx-internal
and use Docker's internal DNS server
to resolve containers by hostname.
|
2021-04-27 23:09:21 +02:00 |
Lukáš Kucharczyk
|
d9bd3ac145
|
Improve certificate generation
1. Generate root CA
2. Generate wildcard CSR
3. Sign wildcard CSR with root CA
4. Install root CA system-wide
|
2021-04-27 22:29:52 +02:00 |
Lukáš Kucharczyk
|
b5140b9e81
|
Add README
|
2021-04-27 19:21:14 +02:00 |
Lukáš Kucharczyk
|
4cc2998fac
|
Generate certificates automatically
|
2021-04-27 19:13:35 +02:00 |
Lukáš Kucharczyk
|
765e9e5a47
|
Enable SSL
|
2021-04-26 23:54:10 +02:00 |
Lukáš Kucharczyk
|
4907cdfd99
|
Explicitly restart containers to prevent hard-to-debug issues
|
2021-04-26 22:36:53 +02:00 |
Lukáš Kucharczyk
|
e3d4aa61a8
|
Change domain to dev.local
|
2021-04-26 22:36:14 +02:00 |
Lukáš Kucharczyk
|
58fd1aa430
|
Make sure directories exist
|
2021-04-26 22:35:59 +02:00 |
Lukáš Kucharczyk
|
50ffe15dcd
|
Add the rest of the Jellyfin NGINX config
|
2021-04-26 18:54:59 +02:00 |
Lukáš Kucharczyk
|
9f57877177
|
Fix incorrect quotes
|
2021-04-26 18:54:27 +02:00 |
Lukáš Kucharczyk
|
83f0382de2
|
Rename jellyfin.conf to jellyfin.conf.j2
|
2021-04-23 01:22:31 +02:00 |