Commit Graph

62 Commits

Author SHA1 Message Date
709a24366a fix: piped 2025-11-03 12:12:14 +01:00
63dad8c626 fix: invidious password 2025-11-03 01:38:16 +01:00
794d5c2dad feat: move piped to fw host 2025-11-02 14:34:30 +01:00
04cdf1bd2f feat: remove korean-skin.care site 2025-11-02 13:42:54 +01:00
b73bc3e80a feat: initial n8n config 2025-11-01 23:44:03 +01:00
db25b2bfbb feat: add cleanup for grafana alerting rules 2025-11-01 11:09:05 +01:00
7af4b6a5d1 feat: web stack make php optional 2025-10-27 16:38:12 +01:00
a02cefc62a feat: make cloonar website use the web stack module 2025-10-23 19:27:17 +02:00
bfae290927 feat(web-arm): add AVIF image support to cloonar.dev
Implement AVIF image content negotiation with WebP fallback for
cloonar.dev website. Browser will receive AVIF if supported and
available, otherwise WebP, falling back to original JPEG/PNG.

- Add AVIF-first content negotiation in image location block
- Maintain existing WebP fallback logic
- Include .avif in long-term cache headers (365d)
- Add Vary: Accept header for proper CDN/browser caching

AVIF files should be placed at /avif/$request_uri.avif to be served.

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude <noreply@anthropic.com>
2025-10-22 23:55:08 +02:00
1eeb0b7102 fix ssh key for website 2025-10-22 23:49:16 +02:00
7fd35b79c4 fix: blacklist attic website exporter 2025-10-14 22:29:44 +02:00
c9900e4314 fix: atticd server 2025-10-14 22:24:35 +02:00
eae7bb0e09 feat: web-arm add atticd 2025-10-14 20:01:45 +02:00
465daec0ab feat: change authelia 2025-10-14 19:54:45 +02:00
f516f46b06 feat: update secrets 2025-10-14 19:54:24 +02:00
742d0172cf feat: web-arm install atticd 2025-10-14 19:14:46 +02:00
496c483050 feat: web-arm cloonar.dev new key 2025-10-11 21:52:42 +02:00
af60555eea update secrets 2025-10-08 21:48:34 +02:00
305ce21e41 feat: add modularity to scana11y 2025-10-02 19:45:08 +02:00
8ab1c91b38 feat: scana11y changes 2025-09-29 15:59:48 +02:00
b48ec98cb3 feat: web-arm change to docker and install scana11y 2025-09-09 17:55:43 +02:00
8ad0c4d336 feat: web change site handling, add php to scana11y, add ssh deploy key for gitea 2025-09-09 10:39:00 +02:00
a0ffb52f98 feat: add foundry vtt to allerting 2025-09-08 17:13:02 +02:00
eb40b7ff06 feat: add webmail to webhost 2025-09-08 17:12:53 +02:00
1c9302c773 feat: add scana11y website 2025-08-07 12:08:09 +02:00
467ade9340 fix: ldap auth 2025-08-01 22:16:01 +02:00
619136674e feat: updata phpldapadmin, add linuxbind secret 2025-08-01 20:24:40 +02:00
3990566fe5 feat: many changes 2025-08-01 19:48:49 +02:00
7f01dc4cac feat: many changes 2025-07-11 11:19:42 +02:00
da95b2fa71 feat: add dialog-relations.at website 2025-06-25 08:19:32 +02:00
6aeb0c9f89 many changes 2025-06-17 16:46:01 +02:00
4969520222 feat: enhance Blackbox Exporter configuration with domain blacklist and update Grafana alerting rules 2025-06-01 11:40:04 +02:00
9cfd7f5052 fix: correct syntax for extraScrapeConfigs in VictoriaMetrics configuration 2025-06-01 09:37:16 +02:00
faad280aa0 fix: update Blackbox Exporter scrape config and Grafana alert expressions for improved monitoring accuracy 2025-06-01 09:08:36 +02:00
f1ea4b9b20 feat: implement website alerting plan with Blackbox Exporter and VictoriaMetrics integration 2025-06-01 00:47:43 +02:00
b6b90bca7d refactor: Grafana alerting rules: consolidate and reorganize alert definitions
- Deleted individual alert files for host down, inode usage, and RAM usage.
- Merged service down alerts into a new structure with separate files for each service (Gitea, Postfix, Dovecot, OpenLDAP, WireGuard).
- Introduced a new system alert structure consolidating CPU, disk, host down, inode, and RAM usage alerts.
- Updated alert conditions to use 'D' for thresholds and adjusted expressions accordingly.
- Improved annotations and labels for clarity and consistency across alerts.
2025-05-31 21:14:36 +02:00
39b9726be7 feat: add Loki datasource configuration for Grafana 2025-05-31 19:30:04 +02:00
7fc3c3db63 feat: add VictoriaMetrics module, update Dovecot Sieve extensions, and fix Grafana service expression 2025-05-31 19:21:56 +02:00
89b2a1cf45 feat: add service monitoring alerts for Gitea, Postfix, Dovecot, OpenLDAP, and WireGuard, and consolidate alerting rules in Grafana 2025-05-31 15:53:26 +02:00
35fa61ef34 feat: refactor Grafana alerting rules into a consolidated system module and update individual alert files 2025-05-31 09:57:03 +02:00
8b5fb0861d feat: restructure Grafana configuration, migrate alert rules to new format and add VictoriaMetrics datasource 2025-05-31 09:27:25 +02:00
17a3602d3c feat: implement centralized alerting with vmalert and Grafana, add alert rules for CPU, disk, inode, RAM usage, and host status 2025-05-30 21:39:58 +02:00
fa42667c2a fix: update NixOS channel references to version 25.05 and adjust netdata configuration 2025-05-30 18:32:47 +02:00
cf340ca277 feat: add set-nix-channel module to manage nix-channel automatically 2025-05-29 00:38:12 +02:00
53d73142ae Add a11ywatch and related configurations for Podman and Nginx
- Introduced a new module for a11ywatch with Podman support, creating a bridge network and defining backend and frontend containers.
- Configured Nginx to serve the a11ywatch application with SSL and ACME support.
- Added user and group configurations for a11ywatch.
- Created a systemd service to ensure the Podman network exists on boot.

Implement Firefox Container Controller extension and host

- Added a module for the Firefox Container Controller extension, allowing installation via Nix.
- Created a native messaging host for the extension to communicate with the container controller.
- Included CLI helpers to enqueue commands for showing and hiding containers.

Enable fingerprint authentication in PAM

- Configured fingerprint authentication for login, sudo, and swaylock services.

Setup Raspberry Pi OS image creation script

- Developed a script to create a read-only Raspberry Pi OS Lite image with Snapcast client.
- Included configuration for Wi-Fi, hostname, and Snapcast server.
- Implemented user and group setup for Snapcast client and ensured necessary services are enabled.

Document Raspberry Pi Zero W setup instructions

- Added detailed instructions for configuring Raspberry Pi OS on Zero W, including disabling unused services and setting up Snapcast client.

Create test configuration script for NixOS

- Implemented a script to perform dry-builds for NixOS configurations, allowing for easy validation of host configurations.
2025-05-29 00:10:07 +02:00
2a5496118b feat: add postfix to web server 2025-05-24 10:12:39 +02:00
f362b2ab77 feat: add hs-cloud to collabora 2025-05-24 10:12:23 +02:00
7a8cd490d5 feat: update nextcloud 2025-05-24 10:12:12 +02:00
7ac54dd987 feat: add test to updns 2025-04-30 15:54:18 +02:00
c02651e65a feat: add updns 2025-04-25 22:35:42 +02:00