Tuan-Dat Tran
9cce71f73b
refactor(k3s): manage token securely and install guest agent
...
Signed-off-by: Tuan-Dat Tran <tuan-dat.tran@tudattr.dev >
2025-07-13 02:15:01 +02:00
Tuan-Dat Tran
97a5d6c41d
refactor(k3s): centralize k3s primary server IP and integrate Netcup DNS
...
Signed-off-by: Tuan-Dat Tran <tuan-dat.tran@tudattr.dev >
2025-07-13 01:30:05 +02:00
Tuan-Dat Tran
f1b0cfad2c
refactor(k3s): streamline inventory and primary server IP handling
...
Signed-off-by: Tuan-Dat Tran <tuan-dat.tran@tudattr.dev >
2025-07-13 00:40:48 +02:00
Tuan-Dat Tran
dac0d88d60
feat(proxmox): add k3s agents and refine VM provisioning
...
Signed-off-by: Tuan-Dat Tran <tuan-dat.tran@tudattr.dev >
2025-07-12 23:08:44 +02:00
Tuan-Dat Tran
609e000089
refactor(ansible): centralize inventory and variables in 'vars' directory
...
Signed-off-by: Tuan-Dat Tran <tuan-dat.tran@tudattr.dev >
2025-07-12 21:38:53 +02:00
Tuan-Dat Tran
3d7f652ff3
refactor(ansible): restructure inventory and remove postgres role
...
Signed-off-by: Tuan-Dat Tran <tuan-dat.tran@tudattr.dev >
2025-07-12 20:35:26 +02:00
Tuan-Dat Tran
cb8ccd8f00
wip
...
Signed-off-by: Tuan-Dat Tran <tuan-dat.tran@tudattr.dev >
2025-06-07 01:19:27 +02:00
Tuan-Dat Tran
02168225b1
wip
...
Signed-off-by: Tuan-Dat Tran <tuan-dat.tran@tudattr.dev >
2025-06-07 00:16:54 +02:00
Tuan-Dat Tran
6ff1ccecd0
refactor(infra): reorganize docker host VMs and service assignments
...
Signed-off-by: Tuan-Dat Tran <tuan-dat.tran@tudattr.dev >
2025-05-07 00:02:30 +02:00
Tuan-Dat Tran
a913e1cbc0
refactor: reorganize proxmox roles, add hardware acceleration, and update common config tasks
...
Signed-off-by: Tuan-Dat Tran <tuan-dat.tran@tudattr.dev >
2025-05-03 10:24:50 +02:00
Tuan-Dat Tran
e3c67a32e9
feat(reverse_proxy): add Netcup DNS ACME challenge support and refactor Caddy setup
...
Signed-off-by: Tuan-Dat Tran <tuan-dat.tran@tudattr.dev >
2025-04-28 23:24:29 +02:00
Tuan-Dat Tran
8f2998abc0
refactor(ansible): use ansible_user_id and add root package condition
...
Signed-off-by: Tuan-Dat Tran <tuan-dat.tran@tudattr.dev >
2025-04-27 18:15:07 +02:00
Tuan-Dat Tran
7fcee3912f
refactor(ansible): refactor common role application and improve vm ssh config
...
Signed-off-by: Tuan-Dat Tran <tuan-dat.tran@tudattr.dev >
2025-04-27 17:46:41 +02:00
Tuan-Dat Tran
591342f580
feat(proxmox): refactor vm provisioning and add pci passthrough config
...
Signed-off-by: Tuan-Dat Tran <tuan-dat.tran@tudattr.dev >
2025-04-26 23:34:42 +02:00
Tuan-Dat Tran
f2ea03bc01
feat(proxmox): automatic vm creation
...
Signed-off-by: Tuan-Dat Tran <tuan-dat.tran@tudattr.dev >
2025-04-26 21:58:58 +02:00
Tuan-Dat Tran
0e8e07ed3e
feat(docker): Added healthcheck
...
Signed-off-by: Tuan-Dat Tran <tuan-dat.tran@tudattr.dev >
2025-04-26 13:21:02 +02:00
Tuan-Dat Tran
a2a58f6343
feat(keycloak|docker): improved templating
...
Signed-off-by: Tuan-Dat Tran <tuan-dat.tran@tudattr.dev >
2025-04-25 23:37:24 +02:00
Tuan-Dat Tran
42196a32dc
feat(docker): Add karakeep and keycloak services
...
Signed-off-by: Tuan-Dat Tran <tuan-dat.tran@tudattr.dev >
2025-04-24 20:24:33 +02:00
Tuan-Dat Tran
6934a9f5fc
distributed secrets to group_vars and added karakeep
...
Signed-off-by: Tuan-Dat Tran <tuan-dat.tran@tudattr.dev >
2025-04-06 23:46:28 +02:00
Tuan-Dat Tran
27621aac03
Added proxmox-vm and static tagging of docker images
...
Signed-off-by: Tuan-Dat Tran <tuan-dat.tran@tudattr.dev >
2025-04-06 18:04:33 +02:00
Tuan-Dat Tran
56f058c254
moved ssh to cert based
...
Signed-off-by: Tuan-Dat Tran <tuan-dat.tran@tudattr.dev >
2025-03-25 01:09:08 +01:00
Tuan-Dat Tran
161e6446cd
fix(compose): made port expose optional
...
Signed-off-by: Tuan-Dat Tran <tuan-dat.tran@tudattr.dev >
2025-01-24 07:28:12 +01:00
Tuan-Dat Tran
ae929ca09d
feat(docker): Added cadvisor on all hosts, added docker metric exporter, added docker compose restart as handler, moved repetetive directory/permission creation into loops, moved repetetive values into variables, cleanup compose template for better empty lines
...
Signed-off-by: Tuan-Dat Tran <tuan-dat.tran@tudattr.dev >
2025-01-17 21:50:36 +01:00
Tuan-Dat Tran
6bc591550c
fix(port mapping,docker): fixed duplicate port mapping on hosts and incompatible docker options in compose
...
Signed-off-by: Tuan-Dat Tran <tuan-dat.tran@tudattr.dev >
2025-01-17 02:10:36 +01:00
Tuan-Dat Tran
e68d534e4f
feat(docker): Move compose content to ansible group vars
...
Signed-off-by: Tuan-Dat Tran <tuan-dat.tran@tudattr.dev >
2025-01-17 01:31:10 +01:00
Tuan-Dat Tran
1a1b8cb69c
feat(reverse-proxy): Add Caddy for reverse proxy
...
Signed-off-by: Tuan-Dat Tran <tuan-dat.tran@tudattr.dev >
2025-01-12 21:19:37 +01:00
Tuan-Dat Tran
6d099061ac
feat(docker): Split docker compose to be deployed different services on different hosts. See host_vars of each host.
...
Signed-off-by: Tuan-Dat Tran <tuan-dat.tran@tudattr.dev >
2024-12-11 19:58:57 +01:00
Tuan-Dat Tran
711dc58f2e
fix(docker/jellyfin): Moved jellyfin config to local machine due to error with sqlite dbs used for config
...
Signed-off-by: Tuan-Dat Tran <tuan-dat.tran@tudattr.dev >
2024-11-15 14:09:31 +01:00
Tuan-Dat Tran
33253e934d
feat(docker): add Calibre Web service to Docker Compose configuration
...
- Add Calibre Web container configuration to `docker-compose.yaml`
- Use `lscr.io/linuxserver/calibre-web:latest` image
- Configure environment variables (PUID, PGID, TZ, DOCKER_MODS)
- Set up volumes for persistent storage of Calibre configuration and books
- Expose port 8084 to access the Calibre Web UI
- Implement automatic restart policy (`unless-stopped`)
This commit introduces the Calibre Web service to the Docker Compose setup, enabling users to run a Calibre library management and e-book reader web service in a Docker container.
Signed-off-by: Tuan-Dat Tran <tuan-dat.tran@tudattr.dev >
2024-11-11 01:04:30 +01:00
Tuan-Dat Tran
4db26b56da
feat(ansible): add Docker host configuration with NFS mounts and utility packages
...
- Introduce Docker host configuration playbooks in `docker_host` role
- Install Docker and Docker Compose via apt repository
- Configure Docker user, group, and required directories (`/opt/docker`, `/media`)
- Add NFS mounts for Docker data, series, movies, and songs directories
- Add extra utility packages (`bat`, `ripgrep`, `fd-find`, `screen`, `eza`, `neovim`)
- Set up and manage `bash_aliases` for user-friendly command replacements (`batcat`, `nvim`, `eza`)
- Enhance `/group_vars` and `/host_vars` for Docker-related settings and secure access
- Add `docker-host00` and `docker-host01` entries to production and staging inventories
Signed-off-by: Tuan-Dat Tran <tuan-dat.tran@tudattr.dev >
2024-11-10 21:37:22 +01:00
Tuan-Dat Tran
ce0411cdb0
fixed taint
...
Signed-off-by: Tuan-Dat Tran <tuan-dat.tran@tudattr.dev >
2024-10-13 22:56:59 +02:00
Tuan-Dat Tran
28d946cae5
Add noexecute taint on longhorn
...
Signed-off-by: Tuan-Dat Tran <tuan-dat.tran@tudattr.dev >
2024-10-13 21:49:10 +02:00
Tuan-Dat Tran
5d0f56ce38
linting
...
Signed-off-by: Tuan-Dat Tran <tuan-dat.tran@tudattr.dev >
2024-10-08 11:31:26 +02:00
Tuan-Dat Tran
0c1a8a95f2
add postgres exporter
...
Signed-off-by: Tuan-Dat Tran <tuan-dat.tran@tudattr.dev >
2024-10-08 11:17:03 +02:00
Tuan-Dat Tran
05c35a546a
added installation of reqs for longhorn
...
Signed-off-by: Tuan-Dat Tran <tuan-dat.tran@tudattr.dev >
2024-10-08 05:20:35 +02:00
Tuan-Dat Tran
7d58de98d9
Added storage nodes for k3s
...
Signed-off-by: Tuan-Dat Tran <tuan-dat.tran@tudattr.dev >
2024-10-08 04:13:38 +02:00
Tuan-Dat Tran
ed980f816f
prod and staging for tls in loadbalancer
...
Signed-off-by: Tuan-Dat Tran <tuan-dat.tran@tudattr.dev >
2024-10-04 00:00:02 +02:00
Tuan-Dat Tran
c0e81ee277
Added script etc for ssl on lb
...
Signed-off-by: Tuan-Dat Tran <tuan-dat.tran@tudattr.dev >
2024-10-03 17:38:08 +02:00
Tuan-Dat Tran
a09448985c
Added https lb for lb
...
Signed-off-by: Tuan-Dat Tran <tuan-dat.tran@tudattr.dev >
2024-09-30 20:06:27 +02:00
Tuan-Dat Tran
95afa201e3
Fixed host forwarding for subdomain reverse proxy
...
Signed-off-by: Tuan-Dat Tran <tuan-dat.tran@tudattr.dev >
2024-09-30 10:53:18 +02:00
Tuan-Dat Tran
000375c7ba
adjust name for upstream in lb
...
Signed-off-by: Tuan-Dat Tran <tuan-dat.tran@tudattr.dev >
2024-09-30 10:46:19 +02:00
Tuan-Dat Tran
2cc4fd0be0
Added http lb for lb
...
Signed-off-by: Tuan-Dat Tran <tuan-dat.tran@tudattr.dev >
2024-09-30 07:51:33 +02:00
Tuan-Dat Tran
8fb4eaf610
Added k3s agents
...
Signed-off-by: Tuan-Dat Tran <tuan-dat.tran@tudattr.dev >
2024-09-20 16:57:59 +02:00
Tuan-Dat Tran
3aa56be025
Full k3s server installation done
...
Signed-off-by: Tuan-Dat Tran <tuan-dat.tran@tudattr.dev >
2024-09-20 15:01:33 +02:00
Tuan-Dat Tran
51a49d003d
Finished lb and db
...
Signed-off-by: Tuan-Dat Tran <tuan-dat.tran@tudattr.dev >
2024-09-19 23:10:00 +02:00
Tuan-Dat Tran
50abbf933c
First step towards rewrite
...
Signed-off-by: Tuan-Dat Tran <tuan-dat.tran@tudattr.dev >
2024-09-17 23:44:20 +02:00
TuDatTr
6fd77266cd
Added Homarr and removed jellyseer
...
Signed-off-by: TuDatTr <tuan-dat.tran@tudattr.dev >
2024-01-25 00:15:15 +01:00
TuDatTr
58bfb589f1
Added additional info for gitea runner
...
Signed-off-by: TuDatTr <tuan-dat.tran@tudattr.dev >
2023-11-27 23:25:18 +01:00
TuDatTr
cb6909bbde
Adjusted changed domain for ddns and fixed synlink for rclone
...
Signed-off-by: TuDatTr <tuan-dat.tran@tudattr.dev >
2023-11-27 22:51:08 +01:00
TuDatTr
17d149b622
Fixed indentation for paperless
...
Signed-off-by: TuDatTr <tuan-dat.tran@tudattr.dev >
2023-11-06 10:47:31 +01:00