Commit Graph

15 Commits

Author SHA1 Message Date
alexandre.pires cd69dbc25a Add auth exporter module: implement Prometheus scrape configuration, exporter logic, and Grafana dashboard 2025-10-03 00:59:58 +02:00
alexandre.pires eb60d37c2d Add auth exporter module: implement Kubernetes resources, exporter logic, and testing 2025-10-03 00:26:47 +02:00
alexandre.pires 0a0d4c9c15 Add Node Exporter and Fail2Ban Exporter modules: implement Kubernetes resources and Prometheus scrape configurations 2025-10-02 20:02:53 +02:00
alexandre.pires a412c96c46 Add cert checker module: implement Kubernetes resources, certificate validation logic, and deployment restart functionality 2025-10-02 16:53:28 +02:00
alexandre.pires e6a3f3affd Add custom error pages and Nginx configuration for proxy module
- Introduced custom HTML error pages for various HTTP status codes (400, 401, 403, 404, 408, 429, 500, 502, 503, 504) in the proxy module.
- Created a .gitignore file to exclude non-HTML files in the error resources directory.
- Updated Nginx configuration to serve custom error pages for upstream errors.
- Added new Nginx configuration templates for handling HTTP and stream protocols.
- Implemented Wireguard configuration templates and associated variables for secure connections.
- Established Kubernetes resources for Stunnel and Wireguard, including deployment, service accounts, and config maps.
- Defined variables for the Stunnel and Wireguard modules to facilitate configuration.
- Created a new Wol Proxy module with Kubernetes resources for deployment and service management.
2025-10-02 00:19:01 +02:00
alexandre.pires 4d00986273 Refactor Trivy integration: update report generation scripts, enhance email dispatch logic, and remove obsolete test file 2025-09-22 19:23:45 +02:00
alexandre.pires 1e8526f442 Enhance Trivy integration: update email dispatch logic, add LLM prompt generation, and improve security context in deployments 2025-09-21 23:55:53 +02:00
alexandre.pires aee57a8b89 Refactor Gitea and SSH configurations, update backup scripts, and enhance Nginx settings
- Updated SSH configuration for Gitea to disable banner and TTY, and modified the AuthorizedKeysCommand.
- Simplified gitea-shell script to directly call the k8s_gitea_shell command with required parameters.
- Removed unused gitea-auth script from playbook_gitea.yml.
- Updated systools_version in playbook_systools.yml to 0.4.5.
- Enhanced ssh_locker_helper to copy redirect URL to clipboard based on OS.
- Added a new script test_imaps for IMAP testing.
- Updated Terraform configurations for various applications, including:
  - Added a backup script for MariaDB with retention policy.
  - Changed Gitea version to 1.24-rootless and adjusted SSH settings.
  - Updated Nginx configurations to log errors and access to stderr/stdout.
  - Refactored services to use ClusterIP type and adjusted security contexts for deployments.
  - Added temporary storage for applications using empty_dir.
  - Enhanced backup.sh scripts for better error handling and logging.
2025-09-20 21:34:33 +02:00
alexandre.pires b0162abb88 Addes support for reverse proxy to home server 2025-06-01 17:14:33 +02:00
alexandre.pires 3e12b13d95 fix(backup): update security context in cron job and improve backup script logging 2025-05-10 19:40:01 +02:00
alexandre.pires 01fc509795 feat(backup): update backup script and configuration to use variable tag and change source path 2025-05-10 19:18:16 +02:00
alexandre.pires a19c71009f feat(backup): add environment variables for app name and backup retention in cron job and fix quoting in backup script 2025-05-10 19:09:21 +02:00
alexandre.pires 9e45ff6376 feat(backup): add backup script and refactor cron job to use it 2025-05-10 19:06:25 +02:00
alexandre.pires bbc4fef0e8 feat(trivy): add Trivy integration with Kubernetes, including cron job and email reporting 2025-05-10 18:16:08 +02:00
alexandre.pires 0eaadbe6a7 Reorganized folder structure 2025-04-29 22:40:27 +02:00