218 Commits
Author SHA1 Message Date
aykhans 8056c94871 caddy: serve MTA-STS policy hosts for Stalwart 2026-10-08 09:01:24 +00:00
aykhans cf7eb35467 vaultwarden: bump image to 1.37.4 2026-10-06 21:42:31 +00:00
aykhans 5615177778 gitea: bump image to 28 2026-10-02 07:19:16 +00:00
aykhans 83bfc4482e prometheus: remove Hetzner Storage Box monitoring 2026-09-22 19:56:32 +00:00
aykhans cbb83f99f2 grafana: remove Hetzner Storage Box dashboard 2026-09-22 19:49:24 +00:00
aykhans cb6a43b87b memos: bump image to 0.31 2026-09-19 18:19:53 +00:00
aykhans 94ba5a0d4d vaultwarden: bump image to 1.37.3 2026-09-18 14:02:49 +00:00
aykhans 866d7c151b fix: generate and document Memos environment file 2026-09-09 19:37:34 +00:00
aykhans 9847cbd936 watchtower: track v1 and enable self-updates 2026-09-05 12:09:26 +00:00
aykhans 1613e761e0 vaultwarden: bump image to 1.37.2 2026-09-05 12:09:26 +00:00
aykhans da6be939bd storagebox-exporter: bump image to 0.7.0 2026-09-05 12:09:20 +00:00
aykhans 4acddaba06 cadvisor: bump image to 0.60 2026-09-05 12:09:20 +00:00
aykhans 005fe3f518 grafana: bump image to 13.2 2026-09-05 12:08:44 +00:00
aykhans 2f85ecec3a glance: bump image to v0.8.6 2026-09-05 12:08:44 +00:00
aykhans 4080a1c73e crowdsec: bump geoipupdate image to v8 2026-09-05 12:08:44 +00:00
aykhans 2dc19eb77a croc: bump image to 11 2026-09-05 12:08:43 +00:00
aykhans 6adca4400f crowdsec: whitelist all git registry /v2/ traffic (blob 404s + auth 401s) 2026-08-15 13:56:58 +00:00
aykhans 61d27a6340 grafana: bump image to 13.1 2026-08-05 08:10:02 +00:00
aykhans 175e3b4416 crowdsec: whitelist first-party client false positives (Matrix media/rooms, DAV auth) 2026-08-05 08:10:02 +00:00
aykhans e577bf7304 crowdsec: whitelist Matrix client feature-probe 404s to stop http-probing false positives 2026-07-31 11:37:26 +00:00
aykhans dc27676d0f matrix: add Synapse + Postgres compose with resource limits 2026-07-30 17:07:49 +00:00
aykhans d24df73aad stalwart: add mail.aykhans.me alias on caddy network 2026-07-30 17:00:54 +00:00
aykhans c2622dc6ac add matrix 2026-07-30 16:25:59 +00:00
aykhans 14f48aae55 memos: bump image to 0.30.0 and load instance URL from .env 2026-07-27 15:38:27 +00:00
aykhans e974f981c7 vaultwarden: bump image to 1.37.0 2026-07-25 11:51:21 +00:00
aykhans 7bf35c4863 wg-easy: switch to iptables-nft so wg-quick works on kernel 6.18+ 2026-07-17 19:11:05 +00:00
aykhans 1f876b1402 update README.md 2026-07-13 15:32:00 +04:00
aykhans 2b8b8b6514 fix(cadvisor): set -containerd to Docker's socket so per-container metrics work 2026-07-13 15:17:31 +04:00
aykhans b53c6b3d4a preflight: ensure ~/.docker/config.json is a file (watchtower mount) 2026-07-13 14:33:06 +04:00
aykhans adc45ebc56 fix data ownership for fixed-uid services before start 2026-07-13 14:15:14 +04:00
aykhans 7f8bfb81c0 Merge pull request #1 from aykhans/nixos-migration
NixOS migration
2026-07-13 12:21:37 +04:00
aykhans e9ae811fcf gitea: route SSH to container's built-in sshd on port 22 2026-07-13 04:51:51 +04:00
aykhans 3c46b0de47 gitea: expose SSH on port 2222 2026-07-13 04:46:01 +04:00
aykhans 6d9c4e7d39 crowdsec: use sshd.service unit for journalctl ssh acquisition on NixOS 2026-07-13 04:34:51 +04:00
aykhans b1d78905ca grafana: add hetzner storage box dashboard 2026-07-09 18:35:15 +04:00
aykhans 72e34c982c prometheus: add Hetzner storagebox exporter 2026-07-09 18:26:22 +04:00
aykhans 9630364e8e update README.md 2026-07-03 23:24:00 +04:00
aykhans e67b05d6c0 immich: bump versions 2026-07-03 14:36:48 +00:00
aykhans fb9aaf1a94 caddy: drop appsec WAF from sftpgo and immich to fix >10MB upload 403s 2026-07-02 08:26:07 +00:00
aykhans 4f30cb18e4 crowdsec/exporter: POLL_INTERVAL_SECS 30s -> 120s 2026-06-23 13:48:19 +00:00
aykhans 018bf69289 crowdsec: add resource limits 2026-06-16 21:32:07 +04:00
aykhans 1927243369 glance: bump v0.8.4 -> v0.8.5 2026-06-03 11:09:29 +00:00
aykhans 383914d4c5 sftpgo: remove dead keep_alive_interval env var (no such config in SFTPGo) 2026-05-31 20:42:49 +04:00
aykhans 943d136d79 sftpgo: fix env var names (single→double underscore for nested keys) 2026-05-31 20:36:21 +04:00
aykhans 257897c23a sftpgo: add SSH keep-alive interval to prevent connection drops 2026-05-31 20:13:05 +04:00
aykhans daa56d72ef watchtower: set interval to 8 hours 2026-05-28 12:07:53 +00:00
aykhans fc73b80930 memos: update 2026-05-28 12:07:18 +00:00
aykhans a3d051c71a caddy fix 2026-05-20 12:37:14 +04:00
aykhans ba03407420 crowdsec: add 'CROWDSEC_BOUNCER_KEY_EXPORTER' 2026-05-17 18:41:08 +04:00
aykhans 8092079047 crowdsec: update profiles/profiles.yaml 2026-05-17 14:17:17 +04:00