arcodange-org/factory
1
0
Fork 0
Code Issues 4 Pull Requests Actions Packages Projects Releases Wiki Activity
77 Commits 15 Branches 0 Tags
b299469d00f1cbb4f23f79002a8bd7772ad96e87
Commit Graph
77 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
arcodange b299469d00 Consolidate ADRs into docs/adr/ 
This commit moves Architecture Decision Records (ADRs) from ../../../docs/adr/ to docs/adr/ in the arcodange/factory repository. This centralizes all ADRs in one location for better maintainability and discoverability.

Generated by Mistral Vibe.
Co-Authored-By: Mistral Vibe <[email protected]>
 2026-04-08 11:09:34 +02:00
arcodange fc9164f11e Update README with detailed playbook execution sequence 
This commit updates the README to include a detailed timeline of the playbook execution sequence, organized into sections for system setup, application setup, CI/CD, tools, and backups.

Generated by Mistral Vibe.
Co-Authored-By: Mistral Vibe <[email protected]>
 2026-04-08 11:04:11 +02:00
arcodange c751b621ba Enable PostgreSQL backup in backup playbook 
This commit uncomments the PostgreSQL backup section in the backup playbook to enable regular backups of the PostgreSQL database.

Generated by Mistral Vibe.
Co-Authored-By: Mistral Vibe <[email protected]>
 2026-04-08 11:04:07 +02:00
arcodangeandMistral Vibe 07a619b274 Fix step-issuer ARM64 compatibility on pi3 
The default kube-rbac-proxy image (gcr.io/kubebuilder/kube-rbac-proxy:v0.15.0) is AMD64-only and fails on pi3 (ARM64). This commit overrides the image to use quay.io/brancz/kube-rbac-proxy:v0.15.0, which supports ARM64.

Note: pi2 (ARMv7) may work with AMD64 images, but pi3 (ARM64) requires an ARM64-compatible image.

Generated by Mistral Vibe.
Co-Authored-By: Mistral Vibe <[email protected]>
 2026-04-08 11:04:03 +02:00
arcodange 9931f81998 Update Docker storage configuration and revoke token task 2026-04-07 19:19:03 +02:00
arcodange 437fd506ed Fix Vault Gitea OIDC setup: remove trailing slash from bound_issuer and pass CA certificate 2026-04-07 19:17:47 +02:00
arcodange 943915be74 gitea act runner: reuse docker images 2026-04-07 09:20:30 +02:00
arcodange 8a82d14797 upgrade gitea version to 1.25.5 2026-04-06 10:55:20 +02:00
arcodange 0285d171ff tweack backup and setup cronjob to fix pg table ownership 2026-03-15 22:14:12 +01:00
arcodange 55d137132f backup k3s volumes 2026-01-23 18:26:28 +01:00
arcodange 451dfa5133 restart traefik when editing crowdsec middleware 2026-01-03 20:08:00 +01:00
arcodange 17e99db641 runner image and setup for gitea workflow with self signed cert 2026-01-03 12:44:27 +01:00
arcodange 07e5ff460b use self signed cert 2026-01-02 18:17:53 +01:00
arcodange 5b3c896a25 use self signed cert for internal domain arcodange.lab 2025-12-31 17:38:04 +01:00
arcodange 91219c49f1 use exposed webapp.arcodange.fr instead in gitea cicd 2025-12-23 14:23:12 +01:00
arcodange 74b8676244 auto upgrade webapp image 2025-12-23 14:20:56 +01:00
arcodange 1fd47e9d97 install pihole to fix failing duckdns name servers 2025-12-23 14:20:04 +01:00
arcodange 0fbfbd589f tool plausible CE analytics database 2025-12-11 07:25:04 +01:00
arcodange 8d6be311ae argocd: add --enable-helm to kustomize ; enable shell from web ui 2025-12-10 13:48:22 +01:00
arcodange 2b4aa30a64 use cache redis with crowdsec traefik bouncer 2025-12-06 15:09:36 +01:00
arcodange cd3c4d86ff install socat package to enable kubectl port-forward 2025-12-06 15:09:12 +01:00
arcodange 45d39d13b4 postgres db for crowdsec 2025-12-03 16:45:43 +01:00
arcodange f4cb04c9c9 configure crowdsec captcha with cloudflare turnstile 2025-12-03 16:45:25 +01:00
arcodange 17a0f23bbb declare gitea external service 2025-12-01 16:22:44 +01:00
arcodange f7bfe2f71d get cloudflared client real ip and fix crowdsec mw 2025-11-29 17:24:51 +01:00
arcodange 72628f0f0e add crowdsec plugin and middleware for traefik 2025-11-26 14:20:09 +01:00
arcodange b6d240ce31 configure ovh client and allow cms project to access zoho client 2025-11-07 13:54:52 +01:00
arcodange 2d8f5de482 add s3 endpoint to cf r2 secret 2025-10-30 10:27:48 +01:00
arcodange 140dab4f1d cloudflare management for cms 2025-10-30 10:17:14 +01:00
arcodange 9b09e6bd86 fixes and set preferred_ip since new interface eth0 2025-10-09 17:27:42 +02:00
arcodange 83410d9eb1 set cms application argo image updater strategy 2025-10-09 16:12:31 +02:00
arcodange fa5bc7e30e deploy argocd image updater 2025-10-09 15:01:05 +02:00
arcodange c19cf7eced register cms argo application 2025-09-09 09:04:18 +02:00
arcodange 68fb29357a add tag to run single arcodange.factory.gitea_sync role 2025-09-09 09:03:51 +02:00
arcodange 6d3adb5834 setup cron local mail reporting and longhorn recurring backup job 2025-09-08 13:25:02 +02:00
arcodange 2d4cb5d8a5 setup gcs backup bucket for longhorn 2025-08-31 21:21:03 +02:00
arcodange b9a46afb82 renamed iac/main.tf 2025-08-30 18:00:28 +02:00
arcodange c6807851c5 edit crontab to store backup for postgres and gitea 2025-08-28 19:35:52 +02:00
arcodange c5a8d5ef52 fixes 2025-08-28 10:13:16 +02:00
arcodange 6ec2d299fc fix gitea action registration 2025-08-27 18:11:14 +02:00
arcodange 3cfc5f2bfd refactor storage and setup shared backup directory 2025-08-27 17:26:05 +02:00
arcodange 588a6482e9 setup longhorn and prepare nfs server to store backups 2025-08-14 15:42:33 +02:00
arcodange b4bde14809 fixes 2025-08-09 17:01:18 +02:00
arcodange 561331b825 fixes 2025-08-07 15:51:53 +02:00
arcodange b8636a6d48 document uv python package manager command for ansible setup - minor fixes in playbook 2025-08-05 12:22:27 +02:00
arcodange 58aece92b6 disable allowIp middleware while fixing ip filtering - upgrade traefik and fix gitea admin urls by adding prefix 2025-08-04 17:35:11 +02:00
arcodange b185999478 add pi3 to inventory + fixes 2024-12-15 22:13:03 +01:00
arcodange fa0df6f175 create gitea tofu bot user 2024-11-05 23:31:13 +01:00
arcodange 66e9ec5091 ERP: declare argocd app and postgresql database 2024-11-04 12:58:49 +01:00
arcodange 1c22b946d6 role management for postgres synergy with vault dynamic credentials 2024-10-30 12:23:14 +01:00
arcodange f9a47c8ccf traefik CA pem is a client crt not the Authority (let's encrypt) and is not needed here 2024-10-18 19:27:00 +02:00
arcodange 50399328dc configure vault oidc login and cicd jwt login 2024-10-07 17:39:27 +02:00
arcodange 5beaee60ac argocd: add webapp app 2024-09-29 17:55:19 +02:00
arcodange 2fd5ee703b gitea_action: fix extra_hosts 2024-09-29 17:11:38 +02:00
arcodange ed45b993a9 fix ingress pending status 2024-09-28 22:09:44 +02:00
arcodange 407bf12165 setup gitea as oidc provider for tool vault 2024-09-27 18:21:52 +02:00
arcodange 1332def067 setup pgbouncer role and pg function 2024-09-05 19:38:27 +02:00
arcodange aa127b53ec reference tool repo 2024-08-29 14:42:20 +02:00
arcodange 955006dd5d changed app path from argocd to chart 2024-08-27 10:14:33 +02:00
arcodange 3c77cb007a upgrade to traefik v3 - switched to DaemonSet to prevent NAT and keep source IP 2024-08-26 19:27:45 +02:00
arcodange f15bdb707e simple helm chart for url-shortener app 2024-08-23 13:45:25 +02:00
arcodange 3b4140a0c1 deploy argo cd 2024-08-21 18:46:41 +02:00
arcodange 95f365dbb5 provide PACKAGES_TOKEN secret 2024-08-20 11:25:19 +02:00
arcodange 80fa4ca92f doc: begin cicd setup md 2024-08-18 12:02:16 +02:00
arcodange aaaee3066a new gitea_sync role 2024-08-18 11:34:37 +02:00
arcodange 22533623bd désactiver le mode mirroir pour pouvoir 'git push' sur gitea 2024-08-17 14:15:40 +02:00
arcodange 4d83e9fceb gitea add ssh key in setup 2024-08-17 13:49:36 +02:00
arcodange 459d255471 new role gitea_repo 2024-08-16 13:53:03 +02:00
arcodange 1b832cbd1d setup gitea mailer 2024-08-13 17:28:44 +02:00
arcodange cb4d679d8b k3s setup and git action runner 2024-08-12 21:45:16 +02:00
arcodange 3cfbc59f50 readme: use title 1 2024-07-18 10:39:41 +02:00
arcodange db61020023 wip: playing with traefik 2024-07-18 10:36:38 +02:00
arcodange f4b54d2941 ansible: playbook for postgres and gitea 2024-07-18 10:36:12 +02:00
arcodange 0e2ea5cb36 ansible: begin inventory 2024-07-10 15:39:43 +02:00
arcodange ef7a468991 readme: HD setup as done 2024-07-10 11:37:05 +02:00
arcodange b97af4010f ansible: HD setup 2024-07-10 11:08:29 +02:00
arcodange 397a5d3b7f init arcodange factory 2024-07-05 16:16:11 +02:00