Commit graph

139 commits

Author SHA1 Message Date
Lu Wang 37af72eb5b
services/prometheus: add rules 2024-12-21 22:04:05 +08:00
Lu Wang c6935ca7f7
inputs: bump 2024-12-21 21:36:01 +08:00
Lu Wang 68d8d0a13c
services/prometheus: init server 2024-12-21 20:42:30 +08:00
Lu Wang a06f67bf23
hosts: enable prometheus metrics 2024-12-21 20:23:35 +08:00
Lu Wang 8bb43c697c
services/prometheus: init metrics 2024-12-21 20:22:42 +08:00
Lu Wang 92eb5b1ac4
networking/ports: update enthalpy-ipsec port to 14000 2024-12-21 13:36:14 +08:00
Lu Wang 0e45380338
services/enthalpy: raise retransmission timeout 2024-12-21 01:42:13 +08:00
Lu Wang bc44eb8424
services/mail: hardening postfix and dovecot 2024-12-20 21:41:02 +08:00
Lu Wang 22700c13c7
system/boot: increase maximum buffer size
References: https://github.com/quic-go/quic-go/wiki/UDP-Buffer-Sizes
2024-12-20 16:45:17 +08:00
Lu Wang a75d3f9ea8
zones/rebmit.moe: add srv records for mail service
References: https://www.rfc-editor.org/rfc/rfc6186
2024-12-19 23:38:45 +08:00
Lu Wang 4177868f1c
services/mail: init postfix, dovecot and rspamd 2024-12-19 22:12:03 +08:00
Lu Wang ba323843c8
services/caddy: use caddy-l4 2024-12-19 15:14:46 +08:00
Lu Wang 8474837509
services/matrix: backup synapse media repo for now 2024-12-19 14:00:02 +08:00
Lu Wang 624323f07a
services/matrix: stop serving element-web 2024-12-19 00:52:12 +08:00
Lu Wang 7c19c23481
treewide: drop reisen-lax0 2024-12-19 00:13:47 +08:00
Lu Wang 742595fa65
services/matrix: init mautrix-telegram 2024-12-19 00:09:09 +08:00
Lu Wang 1e71d7fc3e
services/matrix: drop synapse-admin 2024-12-18 20:35:38 +08:00
Lu Wang 97136a9663
services/matrix: init heisenbridge 2024-12-18 20:17:57 +08:00
Lu Wang f3ea502179
services/matrix-synapse: init 2024-12-18 16:36:47 +08:00
Lu Wang 68961dc077
hosts/reisen-lax0: disable matrix again 2024-12-18 02:02:08 +08:00
Lu Wang f8de244771
Revert "hosts/reisen-lax0: disable matrix"
This reverts commit c8ed51df7a.
2024-12-18 01:22:01 +08:00
Lu Wang d1eda7df1b
services/well-known: init 2024-12-18 01:18:04 +08:00
Lu Wang 5b884c320a
infra/passwords: rename tsig secret name 2024-12-17 23:36:44 +08:00
Lu Wang aaaa0158fa
hosts/reisen-fra0: finally disable knot 2024-12-17 23:02:47 +08:00
Lu Wang fa81d0bcb8
zones: drop reisen-fra0 from secondary dns in favor of suwako-vie0 2024-12-17 22:46:17 +08:00
Lu Wang 6dd72d20c7
zones: move primary dns to reisen-sea0 2024-12-17 22:32:23 +08:00
Lu Wang ad70874e8c
hosts/reisen-sin0: init 2024-12-17 22:17:16 +08:00
Lu Wang 9ac31f00fa
services/miniflux: init 2024-12-17 16:32:59 +08:00
Lu Wang acc70f889e
zones: resolve enthalpy addresses temporarily 2024-12-16 22:46:41 +08:00
Lu Wang c615e72739
services/knot: init ddns 2024-12-16 21:45:28 +08:00
Lu Wang 6d1d1af12c
services/vnstat: init 2024-12-16 20:28:28 +08:00
Lu Wang 19fc2292f8
services/restic: add some common paths to backup 2024-12-16 20:08:14 +08:00
Lu Wang 0527be0fc6
zones: update registry and prepare for ddns setup 2024-12-16 18:08:56 +08:00
Lu Wang 2734bc70c4
services/knot: enable dnssec 2024-12-16 00:14:43 +08:00
Lu Wang b9fee44d8f
treewide: drop reisen-sin0 2024-12-15 22:55:08 +08:00
Lu Wang b99ee2913a
services/knot: init 2024-12-15 22:34:29 +08:00
Lu Wang 8867350ace
zones: add rebmit.moe and rebmit.link 2024-12-15 22:33:35 +08:00
Lu Wang 13f4ae9ccd
treewide: init reisen-{sea0,fra0,nrt0} 2024-12-15 18:29:58 +08:00
Lu Wang 1bca414c4c
inputs: downgrade disko temporarily for smaller closure size 2024-12-15 17:30:38 +08:00
Lu Wang 9ee56c2fc5
infra: init vultr 2024-12-15 16:23:50 +08:00
Lu Wang c8ed51df7a
hosts/reisen-lax0: disable matrix 2024-12-15 16:05:31 +08:00
Lu Wang 5fc1c3d71c
services/keycloak: init 2024-12-15 02:52:27 +08:00
Lu Wang 7db8aae188
services/ntfy: init 2024-12-15 01:20:55 +08:00
Lu Wang 0bf3fa4a50
hosts/suwako-vie0: enable caddy and postgresql 2024-12-14 23:38:41 +08:00
Lu Wang f87f518779
services/postgresql: init 2024-12-14 23:38:28 +08:00
Lu Wang c61de2d262
system/state-version: init 2024-12-14 23:38:14 +08:00
Lu Wang 44cf0004f4
services/caddy: init 2024-12-14 22:38:29 +08:00
Lu Wang aa251818a2
networking/netns: allow unprivileged users to create icmp sockets 2024-12-14 22:38:29 +08:00
Lu Wang 2f202aac57
security/sudo: disable lecture and no longer persist /var/db 2024-12-14 22:38:29 +08:00
Lu Wang ee55e4a237
treewide: init restic backup 2024-12-14 22:38:28 +08:00