Commit Graph

76 Commits

Author SHA1 Message Date
alexandre.pires b0162abb88 Addes support for reverse proxy to home server 2025-06-01 17:14:33 +02:00
alexandre.pires 071b4eea9e feat(ssh_locker): implement ssh locker helper scripts and configuration for Duo API integration 2025-05-22 22:55:27 +02:00
alexandre.pires 05d1624bdd feat(terraform): update metallb version, refactor IAM policies, and enhance security 2025-05-11 20:58:05 +02:00
alexandre.pires bbc4fef0e8 feat(trivy): add Trivy integration with Kubernetes, including cron job and email reporting 2025-05-10 18:16:08 +02:00
alexandre.pires 5d2f50feb9 feat(mail): add stunnel support for Dovecot and Postfix with configuration and certificate management 2025-05-10 15:37:00 +02:00
alexandre.pires a0ac55e746 feat(gitea): update Gitea version to 1.23.7 and enhance liveness probe with TLS support 2025-05-09 23:22:34 +02:00
alexandre.pires 17a54f6792 feat(gitea): refactor configuration to use structured app_config and add TLS support 2025-05-09 22:21:33 +02:00
alexandre.pires 9de7d52192 feat(sftpgo): add TLS support and internal certificate management 2025-05-08 22:36:47 +02:00
alexandre.pires 4d4f085c3e refactor: clean up environment variables and remove unused Nextcloud configurations 2025-05-08 19:18:19 +02:00
alexandre.pires d1267f816b feat(mail): add Dovecot and Getmail configurations with ingress setup for SFTPGo 2025-05-05 19:56:43 +02:00
alexandre.pires e6e85b00f7 feat(mail): enhance mail configuration with getmail and dovecot settings
- Added getmail configuration generation using template files.
- Introduced postfix and dovecot configuration checksums for deployment.
- Created new dovecot configuration file and sieve script for email handling.
- Updated main.tf to utilize local variables for configuration management.
- Removed redundant external password hasher from main.tf.

feat(nginx): improve nginx configuration management

- Centralized nginx configuration into a local variable with checksum.
- Created separate config maps for default website configurations.
- Updated deployment to utilize new configuration structure.

feat(sftpgo): add SFTPGo application deployment

- Introduced SFTPGo with Kubernetes resources including namespace, config maps, and secrets.
- Configured SFTPGo with SMTP settings and AWS credentials.
- Implemented health checks and volume mounts for persistent storage.

refactor(seafile): remove Seafile module

- Deleted Seafile module and associated resources as part of cleanup.
2025-05-05 00:47:36 +02:00
alexandre.pires 0eaadbe6a7 Reorganized folder structure 2025-04-29 22:40:27 +02:00
alexandre.pires 0d3f4a0a30 refactor: Clean up unused variables and simplify configurations across modules 2025-04-29 19:33:33 +02:00
alexandre.pires b7408fb4d8 Add Gitea and Mail modules with configuration and resources
- Created Gitea module with outputs, provider, and variables for deployment.
- Implemented Mail module including configuration for Dovecot and Postfix, along with necessary resources such as secrets, config maps, and deployments.
- Added Python script for bcrypt password hashing and integrated it into the Mail module.
- Defined persistent volumes and claims for Seafile module, along with Nginx configuration for serving content.
- Established necessary variables for all modules to ensure flexibility and configurability.
2025-04-27 22:36:18 +02:00
alexandre.pires 58fb1ea167 feat(terraform): remove websites module and add m3uproxy and nginx modules
- Deleted the websites module from the Terraform configuration.
- Introduced a new m3uproxy module with resources for Kubernetes namespace, secrets, config maps, deployments, services, and cron jobs.
- Added configuration files for m3uproxy, including JSON and playlist resources.
- Created a new nginx module with resources for Kubernetes namespace, services, config maps, deployments, and ingress.
- Added necessary variables for both m3uproxy and nginx modules.
- Updated provider configurations for m3uproxy and nginx modules to specify required versions.
2025-04-27 19:40:16 +02:00
alexandre.pires 654cf500f9 feat: Implement MariaDB and backup job modules with configuration and secrets management 2025-04-27 19:12:07 +02:00
alexandre.pires 761c183ce2 feat: Add Kubernetes website module with configuration, resources, and NGINX setup 2025-04-27 19:09:32 +02:00
alexandre.pires 4e5346e2e0 feat: Enhance website deployment and build process
- Added rsync installation in setup-env action for file synchronization.
- Excluded playbook_websites.yml from ansible-apply-playbook workflow.
- Created a new workflow for building and releasing the Hugo website.
- Added submodule for Hugo theme in .gitmodules.
- Updated host_vars for production to include websites configuration.
- Introduced playbook_websites.yml for managing static files deployment.
- Implemented hugo_build script for building and archiving Hugo sites.
- Updated inventory to include a new web group for website deployment.
- Refactored Terraform configuration to support new website structure.
- Removed deprecated WordPress Terraform configuration.
- Added .gitignore files for websites and specific Hugo site.
- Created archetype and configuration files for the Hugo site.
- Added static assets including CV and images for the Hugo site.
- Integrated Hugo profile theme as a submodule for the website.
2025-04-27 14:03:56 +02:00
alexandre.pires 30e2b0c440 Add GitHub Actions workflows for OpenTofu K8S Apps apply and validate; update S3 backend configuration 2025-04-25 21:44:43 +02:00
alexandre.pires 41ee9e0618 Refactor email configuration in Terraform files for improved clarity and consistency 2025-04-24 22:47:25 +02:00
alexandre.pires 558c867bc7 Add fail2ban configuration for Postfix and adjust logging settings 2025-04-24 19:34:28 +02:00
alexandre.pires 5253d4dd41 Refactor CI/CD setup: streamline Python package installations and add bcrypt hashing for email credentials 2025-04-24 19:15:04 +02:00
alexandre.pires 4abdccef21 Remove unused kodi flags from playlist.json and add new media sources for CNNBrasil and RTPInternacional 2025-04-20 13:39:33 +02:00
alexandre.pires 25698de08f Update playlist.json: add radio tag to ignore_tags for m3upt provider 2025-04-10 23:09:03 +02:00
alexandre.pires e31cb71572 Update m3uproxy configuration: remove replace_triggered_by from lifecycle, add ignore_tags for media and group-title, and modify IPTV sources and priorities 2025-04-10 20:29:34 +02:00
alexandre.pires 5083580d43 Add mail cryptography support: create secrets for cryptographic keys, update Dovecot configuration, and remove unused vault file 2025-03-23 22:05:34 +01:00
alexandre.pires 6168afdc32 Remove sectool.json, update mail.tf to ignore annotation changes, and consolidate sensitive variables in secrets.tf 2025-03-23 21:08:18 +01:00
alexandre.pires 2657388998 Refactor sectool usage in workflows to include configuration file and remove redundant sectool.json files 2025-03-22 13:06:35 +01:00
alexandre.pires 51d6229b03 Enhance mail configuration: add envelope support in Sieve, create SMTP and IMAP SRV records, update Dovecot settings, and implement Postfix startup script 2025-03-16 19:37:44 +01:00
alexandre.pires 7dd59fa72a Remove the Important mailbox configuration from Dovecot settings 2025-03-15 23:33:38 +01:00
alexandre.pires c05ee5912c Update lifecycle rules for backup buckets and add mail cleanup rule 2025-03-15 23:31:36 +01:00
alexandre.pires 300f4725dd Disable read all 2025-03-15 23:31:28 +01:00
alexandre.pires 134d3f5362 Add configuration to mark emails as read after retrieval 2025-03-15 23:20:29 +01:00
alexandre.pires 380bdf7e2a Add mail backup module and cron schedule; refactor mail paths and deployment strategy 2025-03-15 23:14:47 +01:00
alexandre.pires 5fbd28e69c Add Sieve script for mail filtering to move messages to Sent folder 2025-03-15 23:05:12 +01:00
alexandre.pires 98f789d2c8 Implement mail server 2025-03-15 23:01:46 +01:00
alexandre.pires 7c5f6c5f0f Updated to new sectool 2025-03-15 22:45:15 +01:00
alexandre.pires b66af6fe77 Update Terraform and application configurations; upgrade Terraform version, WordPress and Gitea versions, and adjust m3uproxy settings 2025-02-22 16:12:39 +01:00
alexandre.pires 22361df07d Refactor Nextcloud Terraform configuration; update database and backup paths 2025-01-25 16:08:39 +01:00
alexandre.pires e8710ea134 Refactor database path variables in Ansible and Terraform playbooks; add local database folder variable 2025-01-12 15:15:16 +01:00
alexandre.pires 7eae07ddb6 Reduce num_workers to 2 and increase scan_time to 43200 in m3uproxy configuration 2025-01-12 10:22:34 +01:00
alexandre.pires d63869ce73 Reenabled some apps 2025-01-12 09:53:31 +01:00
alexandre.pires 984d1bd9f9 Disabeld apps 2025-01-11 17:34:45 +01:00
alexandre.pires d7c8870fc1 Update wireguard and squid versions; reduce num_workers in m3uproxy configuration 2025-01-05 22:14:05 +01:00
alexandre.pires 115f4b2387 Re-enabled rustdesk 2024-12-13 19:46:51 +01:00
alexandre.pires 9053d9d7b0 Renabled apps, removed probes wordpress 2024-12-12 20:54:18 +01:00
alexandre.pires e1264540cd Disabled some apps 2024-12-12 20:37:16 +01:00
alexandre.pires a3898ed0d5 Disabled rustdesk 2024-12-12 20:29:53 +01:00
alexandre.pires 58c914befd Changed wordpress liveness probe 2024-12-12 20:15:19 +01:00
alexandre.pires 8fec8d0039 Disabled monitoring 2024-12-12 20:05:32 +01:00