202 Commits
Author SHA1 Message Date
aykhans 6adca4400f crowdsec: whitelist all git registry /v2/ traffic (blob 404s + auth 401s) 2026-08-15 13:56:58 +00:00
aykhans 61d27a6340 grafana: bump image to 13.1 2026-08-05 08:10:02 +00:00
aykhans 175e3b4416 crowdsec: whitelist first-party client false positives (Matrix media/rooms, DAV auth) 2026-08-05 08:10:02 +00:00
aykhans e577bf7304 crowdsec: whitelist Matrix client feature-probe 404s to stop http-probing false positives 2026-07-31 11:37:26 +00:00
aykhans dc27676d0f matrix: add Synapse + Postgres compose with resource limits 2026-07-30 17:07:49 +00:00
aykhans d24df73aad stalwart: add mail.aykhans.me alias on caddy network 2026-07-30 17:00:54 +00:00
aykhans c2622dc6ac add matrix 2026-07-30 16:25:59 +00:00
aykhans 14f48aae55 memos: bump image to 0.30.0 and load instance URL from .env 2026-07-27 15:38:27 +00:00
aykhans e974f981c7 vaultwarden: bump image to 1.37.0 2026-07-25 11:51:21 +00:00
aykhans 7bf35c4863 wg-easy: switch to iptables-nft so wg-quick works on kernel 6.18+ 2026-07-17 19:11:05 +00:00
aykhans 1f876b1402 update README.md 2026-07-13 15:32:00 +04:00
aykhans 2b8b8b6514 fix(cadvisor): set -containerd to Docker's socket so per-container metrics work 2026-07-13 15:17:31 +04:00
aykhans b53c6b3d4a preflight: ensure ~/.docker/config.json is a file (watchtower mount) 2026-07-13 14:33:06 +04:00
aykhans adc45ebc56 fix data ownership for fixed-uid services before start 2026-07-13 14:15:14 +04:00
aykhans 7f8bfb81c0 Merge pull request #1 from aykhans/nixos-migration
NixOS migration
2026-07-13 12:21:37 +04:00
aykhans e9ae811fcf gitea: route SSH to container's built-in sshd on port 22 2026-07-13 04:51:51 +04:00
aykhans 3c46b0de47 gitea: expose SSH on port 2222 2026-07-13 04:46:01 +04:00
aykhans 6d9c4e7d39 crowdsec: use sshd.service unit for journalctl ssh acquisition on NixOS 2026-07-13 04:34:51 +04:00
aykhans b1d78905ca grafana: add hetzner storage box dashboard 2026-07-09 18:35:15 +04:00
aykhans 72e34c982c prometheus: add Hetzner storagebox exporter 2026-07-09 18:26:22 +04:00
aykhans 9630364e8e update README.md 2026-07-03 23:24:00 +04:00
aykhans e67b05d6c0 immich: bump versions 2026-07-03 14:36:48 +00:00
aykhans fb9aaf1a94 caddy: drop appsec WAF from sftpgo and immich to fix >10MB upload 403s 2026-07-02 08:26:07 +00:00
aykhans 4f30cb18e4 crowdsec/exporter: POLL_INTERVAL_SECS 30s -> 120s 2026-06-23 13:48:19 +00:00
aykhans 018bf69289 crowdsec: add resource limits 2026-06-16 21:32:07 +04:00
aykhans 1927243369 glance: bump v0.8.4 -> v0.8.5 2026-06-03 11:09:29 +00:00
aykhans 383914d4c5 sftpgo: remove dead keep_alive_interval env var (no such config in SFTPGo) 2026-05-31 20:42:49 +04:00
aykhans 943d136d79 sftpgo: fix env var names (single→double underscore for nested keys) 2026-05-31 20:36:21 +04:00
aykhans 257897c23a sftpgo: add SSH keep-alive interval to prevent connection drops 2026-05-31 20:13:05 +04:00
aykhans daa56d72ef watchtower: set interval to 8 hours 2026-05-28 12:07:53 +00:00
aykhans fc73b80930 memos: update 2026-05-28 12:07:18 +00:00
aykhans a3d051c71a caddy fix 2026-05-20 12:37:14 +04:00
aykhans ba03407420 crowdsec: add 'CROWDSEC_BOUNCER_KEY_EXPORTER' 2026-05-17 18:41:08 +04:00
aykhans 8092079047 crowdsec: update profiles/profiles.yaml 2026-05-17 14:17:17 +04:00
aykhans c9b2d723d8 crowdsec: add profiles/profiles.yaml 2026-05-17 13:56:46 +04:00
aykhans 59a62a3cc7 monitoring/crowdsec: update country 2026-05-17 13:34:47 +04:00
aykhans cb4d12822d monitoring/crowdsec: add country flagss 2026-05-17 13:27:07 +04:00
aykhans 1581be1722 monitoring/crowdsec: add MaxMind GeoLite2-City.mmdb 2026-05-17 13:17:08 +04:00
aykhans 2e132075b3 grafana: update dashboards 2026-05-17 12:39:29 +04:00
aykhans 4ebbe30b4a crowdsec: update exporter 2026-05-17 12:28:10 +04:00
aykhans 73829dd5a4 monitoring: update crowdsec 2026-05-17 12:26:26 +04:00
aykhans ed68045605 grafana: update crowdsec dashboard 2026-05-16 03:04:53 +04:00
aykhans b19d315f9a monitoring: update grafana configss 2026-05-16 00:44:31 +04:00
aykhans 8250e08871 monitoring: update grafana configss 2026-05-16 00:40:28 +04:00
aykhans 5a2c6e2d50 monitoring: update crowdsec 2026-05-16 00:28:15 +04:00
aykhans 504619b7b4 grafana: update crowdsec dashboard 2026-05-16 00:01:25 +04:00
aykhans 90b8b5a3c3 monitoring: add crowdsec 2026-05-15 23:50:01 +04:00
aykhans 61b76934da caddy: forward original Host to all upstreams, drop redundant X-Forwarded-* overrides 2026-05-10 02:57:56 +04:00
aykhans 121ce2ed78 update README.md 2026-05-10 01:16:38 +04:00
aykhans 58e247f770 crowdsec: enable sshd acquisition, add http admin probing scenario 2026-05-10 00:51:24 +04:00