DebOps and Ansible scripts to manage my infrastructure
git clone git://
Log | Files | Refs

DateCommit messageAuthorFiles+-
2021-07-21 08:15synapse: Enable cache expiry and prerelease debsDionysis Grigoropoulos2+10-3
2021-07-21 08:14matrix: Reduce remote media retention to one dayDionysis Grigoropoulos1+1-2
2021-07-20 14:59element: Upgrade to v1.7.33Dionysis Grigoropoulos1+2-2
2021-07-05 19:39thor: Init wg settings to connect to brightyDionysis Grigoropoulos1+5-0
2021-07-05 19:37matrix: Have Synapse bind on the public interfaceDionysis Grigoropoulos1+3-1
2021-07-05 19:35synapse: Disable device name over federationDionysis Grigoropoulos2+8-2
2021-07-05 19:34element: Upgrade to v1.7.32Dionysis Grigoropoulos1+2-2
2021-06-23 23:04element: Upgrade to v1.7.31Dionysis Grigoropoulos1+2-2
2021-05-28 20:53brighty: Add thor as a peer for wireguardDionysis Grigoropoulos1+2-0
2021-05-28 20:52oricono: Increase vCPUs of the Tails VMDionysis Grigoropoulos1+1-1
2021-05-28 20:51element: Upgrade to v1.7.29Dionysis Grigoropoulos1+2-2
2021-05-16 22:46brighty: s/warden/oricono to use the proper nameDionysis Grigoropoulos1+1-1
2021-05-16 22:37Init group_vars for hosts that will run QEMU/KVMDionysis Grigoropoulos1+6-0
2021-05-16 22:36postgresql: Make sure we use the upstream reposDionysis Grigoropoulos1+3-0
2021-05-16 22:35brighty: Init host_vars for brightyDionysis Grigoropoulos3+68-0
2021-05-16 22:34warden: Add wireguard configDionysis Grigoropoulos1+8-0
2021-05-16 22:32Add simple and single interface wireguard roleDionysis Grigoropoulos3+125-0
2021-05-12 21:23oricono: Increase memory on all hostsDionysis Grigoropoulos1+7-6
2021-05-12 21:23element: Upgrade to v1.7.27Dionysis Grigoropoulos1+2-2
2021-05-04 15:55libvirt_host: Typo fix in the var of clouidinit NSDionysis Grigoropoulos1+1-1
2021-05-04 13:29oricono: Upgrade OpenBSD box to 6.9Dionysis Grigoropoulos1+4-4
2021-04-30 23:14element: Update to v1.7.26 and GPG signing keyDionysis Grigoropoulos2+5-5
2021-04-15 09:50element: Upgrade to v1.7.25Dionysis Grigoropoulos1+2-2
2021-04-08 17:38oricono: Increase allocated memory to nvcoreDionysis Grigoropoulos1+1-1
2021-03-29 23:58users: Add sk-ssh-ed25519 public keyDionysis Grigoropoulos1+1-1
2021-03-29 23:57apt_install: Don't install rxvt-unicodeDionysis Grigoropoulos1+4-5
2021-03-17 22:12element: Upgrade to v1.7.23Dionysis Grigoropoulos1+2-2
2021-03-03 23:40apt: Pin OpenSSH server to buster backportsDionysis Grigoropoulos1+2-0
2021-03-03 23:40element: Upgrade to v1.7.22Dionysis Grigoropoulos1+2-2
2021-02-06 16:15element: Upgrade to v1.7.20Dionysis Grigoropoulos1+2-2
2021-02-06 16:15docker_server: Fix YAML typoDionysis Grigoropoulos1+1-1
2021-02-03 22:40element: Upgrade to v1.7.19Dionysis Grigoropoulos1+2-2
2021-01-31 02:50ansible: Add mode to all tasks as part of lintingDionysis Grigoropoulos8+12-11
2021-01-31 02:17autonomous: Add file to configure node-exporterDionysis Grigoropoulos1+6-0
2021-01-31 02:16Lint minor detailsDionysis Grigoropoulos2+9-5
2021-01-31 01:57roles: Remove docker role, use debops resourcesDionysis Grigoropoulos2+5-5
2021-01-29 23:38autonomous: Scrape with prometheus, remove openvpnDionysis Grigoropoulos3+15-3
2021-01-24 21:32autonomous: Init k3s infrastructure on autonomousDionysis Grigoropoulos3+64-0
2021-01-24 21:31ansible: Initialize k3s and autonomous varsDionysis Grigoropoulos4+73-0
2021-01-18 21:07element: Upgrade to v1.7.17Dionysis Grigoropoulos1+2-2
2021-01-17 23:49promethes: Add thor to the list of node exportersDionysis Grigoropoulos1+1-1
2020-12-23 00:15element: Upgrade to v1.7.16Dionysis Grigoropoulos1+2-2
2020-12-21 00:10oricono: Update tails to 4.14Dionysis Grigoropoulos1+1-1
2020-12-20 00:38element: s/Riot/Element and upgrade to v1.7.15Dionysis Grigoropoulos2+14-14
2020-12-19 22:59oricono: Terraform fmt and don't autostart openbsdDionysis Grigoropoulos1+19-18
2020-12-19 22:58libvirt_host: Use vga when graphics are enabledDionysis Grigoropoulos2+11-2
2020-12-16 00:35productionmatrix: Update synapse related variablesDionysis Grigoropoulos1+3-1
2020-12-16 00:33synapse: Fix a bug with quoted bool vars in configDionysis Grigoropoulos3+9-4
2020-12-07 00:35oricono: Apply various updatesDionysis Grigoropoulos1+46-17
2020-12-07 00:32libvirt_host: Support file and volume based hostsDionysis Grigoropoulos3+10-20
2020-12-07 00:28libvirt_network: Remove pre-0.12 TF var syntaxDionysis Grigoropoulos1+1-1
2020-11-29 22:33infrastructure: Use the latest libvirt_networkDionysis Grigoropoulos3+4-4
2020-11-29 22:30libvirt_network: Allow a network to be dual stackDionysis Grigoropoulos2+3-3
2020-11-28 18:12resolvconf: Use RadicalDNS for all hostsDionysis Grigoropoulos1+6-0
2020-11-24 23:26element: Upgrade element-web to v1.7.14Dionysis Grigoropoulos1+2-2
2020-11-21 20:50terraform: Run terraform fmt on all TF filesDionysis Grigoropoulos8+169-160
2020-11-20 23:41ansible: Fix typo in docker server vars nameDionysis Grigoropoulos1+3-3
2020-11-20 19:26oricono: Update OpenBSD VM to 6.8Dionysis Grigoropoulos2+6-4
2020-11-16 15:34prometheus: Add a config section to monitor DoTDionysis Grigoropoulos2+20-0
2020-10-28 16:28element: Upgrade element-web to v1.7.12Dionysis Grigoropoulos1+2-2
2020-10-10 22:01productionmatrix: Add cronjob to purge old mediaDionysis Grigoropoulos4+19-3
2020-09-28 19:22element: Change riot to element on variable namesDionysis Grigoropoulos5+42-43
2020-09-28 19:19element: Upgrade to v1.7.8Dionysis Grigoropoulos1+2-2
2020-09-15 22:44element: Update element-web to v1.7.7Dionysis Grigoropoulos2+4-4
2020-09-12 19:58ansible: Rename Riot role to Element, add playbookDionysis Grigoropoulos7+127-115
2020-09-12 19:55oricono: Remove unused VM for ElasticSearch testsDionysis Grigoropoulos1+0-20
2020-09-07 19:17ansible: Remove obsolete filesDionysis Grigoropoulos8+4-40
2020-09-06 16:36production: Remove unneeded variable interpolationDionysis Grigoropoulos1+1-1
2020-09-05 18:16lenny: Initialize Terraform directory for lennyDionysis Grigoropoulos3+101-0
2020-09-05 17:53modules: Ping libvirt provider versionDionysis Grigoropoulos2+21-0
2020-09-01 20:57riot: Upgrade to Element v1.7.5Dionysis Grigoropoulos1+2-2
2020-08-31 22:22openbsd: Use a variable for installurl locationDionysis Grigoropoulos4+6-3
2020-08-31 22:05productiongrafana: Add hosts in blackbox exporterDionysis Grigoropoulos1+4-2
2020-08-25 22:02oricono: Hardcode libvirt provider to custom pathDionysis Grigoropoulos1+8-0
2020-08-25 21:53prod: Remove obsolete hostsDionysis Grigoropoulos1+0-50
2020-08-25 21:52oricono: Add OpenBSD 6.7 hostDionysis Grigoropoulos1+22-6
2020-08-25 20:34riot: Use the new element-web repo and v1.7.4Dionysis Grigoropoulos1+4-4
2020-07-27 21:33productionmatrix: Set a null identity server URLDionysis Grigoropoulos1+2-0
2020-07-27 21:27riot: Upgrade Element to v1.7.2Dionysis Grigoropoulos1+2-2
2020-06-10 14:11riot: Upgrade to v1.6.4Dionysis Grigoropoulos1+2-2
2020-05-31 18:44libreopsgrafana: Update domains for https blacbkoxDionysis Grigoropoulos1+2-1
2020-05-31 18:43riot: Update Riot to v1.6.2Dionysis Grigoropoulos1+2-2
2020-05-21 06:51riot: Use as the default jitsiDionysis Grigoropoulos1+1-1
2020-05-21 06:50riot: Update to v1.6.1Dionysis Grigoropoulos1+2-2
2020-04-25 16:08libvirt_host: Use RadicalDNS for DNS on VMsDionysis Grigoropoulos1+1-1
2020-04-15 22:05oricono: Add a VM host for Rust developmentDionysis Grigoropoulos1+20-0
2020-04-09 21:46jitsi: Create group & host vars for a Jitsi MeetDionysis Grigoropoulos7+121-0
2020-04-09 21:45pki: Enable pki by default for all hostsDionysis Grigoropoulos1+1-1
2020-04-08 19:40riot: Update conf to use the new Jitsi integrationDionysis Grigoropoulos3+8-3
2020-04-04 12:03oricono: Remove dirty_openbsd_dev, add nv_testingDionysis Grigoropoulos1+16-11
2020-04-04 12:02users: Add a second SSH key on my accountDionysis Grigoropoulos1+1-1
2020-04-03 10:34riot: Update to v1.5.15Dionysis Grigoropoulos1+2-2
2020-03-30 15:14riot: Update to v1.5.14Dionysis Grigoropoulos1+2-2
2020-03-22 02:05prometheus: Add support for custom DHT22 exporterDionysis Grigoropoulos2+11-3
2020-03-21 00:00group_vars: Enable unattended upgrades by defaultDionysis Grigoropoulos1+0-3
2020-03-20 23:54requirements: Add a req file to pin DebOps versionDionysis Grigoropoulos1+1-0
2020-03-20 00:06prometheus: Add support for apcupsd exporterDionysis Grigoropoulos2+9-1
2020-03-17 22:45productiongrafana: Monitor matrix postgres hostDionysis Grigoropoulos1+1-0
2020-03-17 22:43monitoring: Setup postgres exporter on PG hostsDionysis Grigoropoulos4+48-1
2020-03-17 22:41prometheus: Add config for postgres exporterDionysis Grigoropoulos1+9-0
2020-03-17 22:39riot: Update to v1.5.13Dionysis Grigoropoulos1+2-2
2020-03-05 19:13postgresql_server: Install prometheus pg exporterDionysis Grigoropoulos1+2-0
2020-03-05 19:11riot: Update Riot to version 1.5.12Dionysis Grigoropoulos1+2-2
2020-03-03 02:07prometheus: Add synapse job on prometheus templateDionysis Grigoropoulos2+11-1
2020-02-20 09:07ansible: Update docker config to DebOps v1.1+Dionysis Grigoropoulos2+7-7
2020-02-17 22:15riot: Update Riot to version 1.5.9Dionysis Grigoropoulos1+2-2
2020-02-17 22:13haproxy: Disable TLS1.0, TLS.1 and TLS ticketsDionysis Grigoropoulos1+1-1
2020-02-17 08:41oricono: Initialize Terraform directoryDionysis Grigoropoulos2+110-0
2020-02-16 19:07group_vars: Set vm.swappiness to 1 for all hostsDionysis Grigoropoulos1+6-0
2020-01-27 20:17riot: Update Riot to version 1.5.8Dionysis Grigoropoulos1+2-2
2020-01-25 23:03postgresmatrix: Add Postgresql related settingsDionysis Grigoropoulos1+23-0
2020-01-25 21:44prometheus: Init role, add Grafana host variablesDionysis Grigoropoulos5+61-0
2020-01-25 13:11metrics: Add default group vars for metrics groupDionysis Grigoropoulos4+26-0
2020-01-25 12:54ansible: Remove deprecated Prometheus Docker setupDionysis Grigoropoulos3+0-55
2020-01-25 12:44terraform: Init dir for services and add GrafanaDionysis Grigoropoulos2+14-0
2020-01-25 12:24production: Add hosts for Grafana and PrometheusDionysis Grigoropoulos1+38-0
2020-01-25 12:23production: Add new PG host for the Synapse DBDionysis Grigoropoulos1+19-0
2019-11-19 22:49group_vars: Add doas flag on `dgrig`Dionysis Grigoropoulos1+2-2
2019-11-19 22:44openbsd: Setup /etc/doas.conf for privileged usersDionysis Grigoropoulos1+10-0
2019-11-19 22:08openbsd: Remove deprecated usage of with_itemsDionysis Grigoropoulos1+1-3
2019-11-15 23:02static: Add configuration for domainDionysis Grigoropoulos2+5-0
2019-11-14 23:26riot: Update Riot to version 1.5.3Dionysis Grigoropoulos1+3-4
2019-11-05 23:15production: Increase RAM/CPU for productionmatrixDionysis Grigoropoulos1+2-0
2019-11-05 21:47host_vars: Add config for productionmatrixDionysis Grigoropoulos1+10-0
2019-11-05 21:40synapse: Add Synapse templates, ferm and variablesDionysis Grigoropoulos7+119-3
2019-11-03 23:56synapse: Init Synapse (Matrix) roleDionysis Grigoropoulos2+26-0
2019-11-03 21:33productionmatrix: Add variable for nginx and RiotDionysis Grigoropoulos2+20-0
2019-11-03 21:31riot: Initialize role to setup Riot IMDionysis Grigoropoulos3+112-0
2019-11-03 17:14production: Initialize Network and Matrix VMDionysis Grigoropoulos2+51-0
2019-11-03 14:29productionmatrix: Create database for SynapseDionysis Grigoropoulos1+12-0
2019-11-03 14:27system_users: Disable creation of controller userDionysis Grigoropoulos1+3-0
2019-11-03 14:21libvirt_host: Make cloud init templates modularDionysis Grigoropoulos4+38-10
2019-11-02 18:53terrafor: Remove dev directoryDionysis Grigoropoulos2+0-104
2019-10-30 20:25libvirt_network: Add variable for disabling DNSDionysis Grigoropoulos2+13-5
2019-10-28 22:54ansible: Add a safe default IP for Prometheus hostDionysis Grigoropoulos1+1-1
2019-10-28 22:52libvirt_host: Add volume pool for CloudInit volDionysis Grigoropoulos2+2-0
2019-10-28 22:50ansible: Delete unused group varsDionysis Grigoropoulos1+0-9
2019-10-26 13:23terraform: Move modules directory outside of infraDionysis Grigoropoulos10+175-157
2019-10-10 21:48libvirt_host: Randomize base volume nameDionysis Grigoropoulos1+6-1
2019-10-10 21:44libvirt_host: Randomize cloud-init.iso nameDionysis Grigoropoulos1+7-2
2019-10-10 21:32libvirt_host: Add support for cloud-initDionysis Grigoropoulos2+35-18
2019-09-30 21:19libvirt_host: Fix erroneous condition on volumeDionysis Grigoropoulos1+1-1
2019-09-29 16:23terraform: Add module for libvirt networksDionysis Grigoropoulos3+35-0
2019-09-29 16:22terraform: Add module for libvirt based hostsDionysis Grigoropoulos2+95-0
2019-09-23 22:07tf: Use cidrhost() instead of hardcoding IPsDionysis Grigoropoulos4+9-9
2019-05-06 22:58tor_relay: Initialize role to setup a tor relayDionysis Grigoropoulos8+61-0
2019-05-06 18:42xmpp: Remove role and config for ProsodyDionysis Grigoropoulos6+2-67
2019-05-06 18:16postgresql: Use upstream repos, disable autobackupDionysis Grigoropoulos1+5-0
2019-05-05 23:47grafana: Init role to configure grafanaDionysis Grigoropoulos2+34-0
2019-05-05 22:58inventory: Install Grafana on debianprometheusDionysis Grigoropoulos3+14-0
2019-05-04 00:18tf: Create debian prometheus host on prodDionysis Grigoropoulos1+32-0
2019-04-17 16:22gitignore: Ignore terraform.tfvarsDionysis Grigoropoulos1+1-0
2019-03-28 18:51tf: Initialize matrix and container hosts in prodDionysis Grigoropoulos2+94-0
2019-03-04 20:52docker: Remove ferment scriptDionysis Grigoropoulos1+0-1
2019-03-04 20:43prometheus: Add default prometheus container nameDionysis Grigoropoulos1+3-0
2019-02-06 22:01core: Don't create facts for auto-discovered usersDionysis Grigoropoulos1+3-0
2019-01-24 19:38tf: Seperate dev and production environmentsDionysis Grigoropoulos5+105-139
2019-01-22 21:26spinny: Forward traffic and perform NAT for devnetDionysis Grigoropoulos1+20-0
2019-01-22 21:24tf: Initialize development and jenkins hostsDionysis Grigoropoulos2+99-0
2019-01-21 22:02apt_install: Install nc-openbsd on spinnyDionysis Grigoropoulos1+2-1
2019-01-21 21:59terraform: Add a basic README fileDionysis Grigoropoulos1+15-0
2019-01-17 22:57terraform: Init TF dir, setup VM disks and networkDionysis Grigoropoulos2+39-0
2019-01-17 21:04gitignore: Ignore Terraform related filesDionysis Grigoropoulos1+4-0
2018-12-11 19:44haproxy: Add settings for buildbot.erethon.comDionysis Grigoropoulos2+16-1
2018-12-05 21:29bootstrap: Set domain using the new netbase roleDionysis Grigoropoulos1+1-1
2018-12-02 18:55static: Add git and about page configsDionysis Grigoropoulos3+14-4
2018-12-02 16:14haproxy: Make sure haproxy is reloaded dailyDionysis Grigoropoulos4+4-3
2018-11-08 20:47monitoring: Install node_exporter from backportsDionysis Grigoropoulos7+14-63
2018-08-22 22:15cron: Add job to concat SSL certificatesDionysis Grigoropoulos4+22-6
2018-08-22 22:07haproxy: Use crt-list to load site certificatesDionysis Grigoropoulos4+13-3
2018-08-22 15:50ferm: Use ferm__rules instead of ferm__group_rulesDionysis Grigoropoulos1+1-1
2018-08-20 20:46monitoring: Restart node exporter on failureDionysis Grigoropoulos1+1-0
2018-07-22 20:09ferm: Open port for node_exporter from prom hostDionysis Grigoropoulos1+11-0
2018-07-22 16:07rpizw: Use armv6 node_exporter buildsDionysis Grigoropoulos1+4-0
2018-06-18 20:32prometheus: Init role and link this with grafanaDionysis Grigoropoulos2+43-1
2018-06-17 20:57Delete old and unused rolesDionysis Grigoropoulos6+0-312
2018-06-03 16:51monitoring: Init role, only works on linux systemdDionysis Grigoropoulos5+82-0
2018-06-02 18:19static: Add configuration for blog.erethon.comDionysis Grigoropoulos3+12-2
2018-05-23 20:01prosody: Don't use haproxy, instead dnat 5222 portDionysis Grigoropoulos3+20-10
2018-05-22 17:38docker: Init playbook that runs custom docker roleDionysis Grigoropoulos1+3-0
2018-05-10 Update role, integrate with haproxyDionysis Grigoropoulos3+15-7
2018-05-08 20:59haproxy: Enable erethon.comDionysis Grigoropoulos3+8-2
2018-04-29 23:53laptop: Enable unbound on rc.conf.localDionysis Grigoropoulos1+1-0
2018-04-29 21:31openbsd: Use copy instead of file module typoDionysis Grigoropoulos1+1-1
2018-04-29 21:30haproxy: Enable (capitalism, hacked).erethon.comDionysis Grigoropoulos2+7-1
2018-04-28 22:54openbsd: Init openbsd role, vars and playbookDionysis Grigoropoulos4+49-0
2018-04-28 22:37docker: Install python-docker by defaultDionysis Grigoropoulos1+1-0
2018-04-28 21:57plothopes: Init plothopes role, vars and playbookDionysis Grigoropoulos5+68-0
2018-04-28 21:38haproxy: Init haproxy roleDionysis Grigoropoulos4+83-1
2018-04-28 20:05spinny: Properly NAT VMsDionysis Grigoropoulos1+7-5
2018-04-28 17:54spinny: Remove iptables rules for tincDionysis Grigoropoulos1+2-20
2018-04-27 00:31users: Enable automatic download of dotfilesDionysis Grigoropoulos2+19-1
2018-04-26 20:51users: Set shell for OpenBSD hostsDionysis Grigoropoulos1+3-3
2018-04-26 20:38ferm: Do not filter "bad buys"Dionysis Grigoropoulos1+1-0
2018-04-19 20:29Use debops.machine instead of deprecated consoleDionysis Grigoropoulos3+10-11
2018-02-14 23:59Initialize grafana roleDionysis Grigoropoulos5+28-1
2017-12-08 00:48Initialize influxdb role and variablesDionysis Grigoropoulos6+285-0
2017-12-07 22:38etherpad: Remove unused port bind for mysqlDionysis Grigoropoulos1+0-2
2017-12-04 01:03Add files for etherpad.erethon.comDionysis Grigoropoulos3+41-0
2017-12-03 22:55Add pf.conf and rc.conf.local from my laptopDionysis Grigoropoulos2+13-0
2017-12-03 22:25Add a readme fileDionysis Grigoropoulos1+31-0
2017-05-30 21:49Initial commitDionysis Grigoropoulos38+402-0