Commit graph

950 commits

Author SHA1 Message Date
c17a28d7a9 ldap: now got skMemberOf to replace memberof (memberof does not work on unixgroups) 2023-05-20 15:26:03 +01:00
0c57b35778 ldap: is working as intended, working on scripting to add and manage users 2023-05-20 03:08:30 +01:00
f6183c1b10 podman: was working, now it isnt AGHHHHHHHHH 2023-05-19 19:15:22 +01:00
bc8b294469 doc: added the commands to make them easier to follow 2023-05-19 18:28:35 +01:00
f8bb79adbd fix: typos 2023-05-19 18:21:33 +01:00
614d905dfd docker: now using podman
had to reboot to make ti come into effect
2023-05-19 18:18:41 +01:00
7e380d6932 ldap: a mostly working ldaish setup 2023-05-18 21:59:23 +01:00
baa226cacf ldap: cant have uppercase letters in username 2023-05-16 23:58:34 +01:00
a930a980dc secret: added kitt and rekeyed 2023-05-16 23:18:40 +01:00
1a08dd66f9 retired: if ash is dead then no need for this either 2023-05-16 23:18:05 +01:00
53696c927e ldap: first attempt at ldap 2023-05-16 22:23:04 +01:00
fbbefc1e2a retired: Ash never got a chance to be online 2023-05-16 22:08:24 +01:00
1738ed16a5 fmt: small tidyup 2023-05-16 18:34:53 +01:00
4ef6c14a32 feat: basic gitlab setup 2023-05-16 16:40:49 +01:00
960a5c8772 nodes: not using ash 2023-05-10 11:41:30 +01:00
a5d6ca55ed firewall: I think this is the correct network config for the firewall 2023-05-10 11:40:28 +01:00
5579de7e7c dns: fixed issue that could cause a DOS attach (via DNS amplification)
ITD's router was setting teh IP of all external traffic as 193.1.99.65, which was part of the 193.1.99.64/26 subnet.
The fix is to explisitly list all our IP's
2023-05-05 14:40:27 +01:00
d750b046d1 dns: go back to basically an earlier config 2023-04-29 02:35:58 +01:00
ec8b458d75 dns: use a hash to make a unique config file 2023-04-29 01:54:17 +01:00
e8254a0d65 minecraft: got the classic server and maps up and running 2023-04-27 01:47:17 +01:00
f39934a437 secrets: reorganised it so it makes more sense who has access to what secrets 2023-04-27 01:46:51 +01:00
81afc614a3 minecraft: fix up the paths 2023-04-27 00:49:55 +01:00
b85410e895 minecraft: use a better proxy 2023-04-26 02:18:21 +01:00
de87d97fbc fmt: reduced nesting to make it easier to read/understand 2023-04-26 02:01:29 +01:00
3eac87bbd8 games: split it up into 3 different services for easier management 2023-04-26 01:52:47 +01:00
733b867f47 games: split minecraft out into its own folder for manageability 2023-04-26 00:24:54 +01:00
2603cf9584 games: turns out I wasnt treating it properly like a docker-compose file 2023-04-26 00:09:31 +01:00
4052aeac6b dns: setup dnssec (need to backup the required folders later)
Also it cleared out the spam of errors
2023-04-25 15:11:02 +01:00
c0f160faa3 dns: use epoch for the serial instead of YYYYMMDDSS.
Lacking hours/min could mean that the YYYYMMDD could remain the same but the SS would decrece, which is not what we want
2023-04-25 14:31:19 +01:00
612ba70bbf games: it is possible to have multiple minecraft servers running 2023-04-25 00:44:17 +01:00
d762001cb6 dns: some light reorganisation for clarity 2023-04-24 20:40:48 +01:00
695f9a5763 dns: no mailserver yet 2023-04-24 20:38:36 +01:00
e5e5350b90 dns: added a comment on teh indentation 2023-04-24 20:24:17 +01:00
78fcafc566 ssl: got the ssl certs riunning and live 2023-04-24 20:21:36 +01:00
43111f41b3 dns: swap the order of the nameservers 2023-04-24 20:19:32 +01:00
8de2b27099 dns: reduce te time that the record is alive for 2023-04-24 20:19:16 +01:00
94784ee6d2 dns: this is supposted to cut down spam logs but it dosent 2023-04-24 20:17:24 +01:00
70f3e03b74 dns: turns out this spacing is really really important 2023-04-24 20:14:24 +01:00
a474819992 ssh: added thenobrainer to the ssh keys and rekied the secrets 2023-04-23 16:43:52 +01:00
3d15446d63 dns: serial of therecord is now updated dynamically 2023-04-23 13:37:42 +01:00
6119c9a88a dns: got a working letsencrypt setup 2023-04-23 04:22:01 +01:00
ef37392f07 ulfm: initial test run 2023-04-21 01:44:11 +01:00
ce9e245000 ulfm: prepping to setup ulfm 2023-04-21 01:22:16 +01:00
c2842fb766 acme: temp disable this for a bit 2023-04-21 01:20:23 +01:00
2c71efd56d fix: some simplificatiobn 2023-04-21 01:14:24 +01:00
c38a2cfd7a nginx: basic setup complete (copied from my own stuff) 2023-04-21 01:10:30 +01:00
fe93f796a6 fix: centralise the ports 2023-04-21 00:53:25 +01:00
f63aa7f245 dns: still some kinks with the dns but its easing out 2023-04-20 23:46:43 +01:00
80f0a6eda7 dns: set a tag for the dns servers 2023-04-20 23:15:59 +01:00
8e3b4d0243 dns: set upstream dns resolvers 2023-04-20 23:15:08 +01:00