reboot-codes / it-infra

Configs for the LCC data-centre.

Hi there! I'm a student (future CS major) who likes to make things using computers. I really don't finish projects ever though (I know, that's a bad habit, sorry...). Also all of the shields that I use are from shields.io.

You can find me in lot's of places on the internet. A lot of my projects are a bit unfinished, but feel free to look around. Check out Setup.md for a sense of all the stuff I use (not up to date). I'm also working on a homelab, which you can find the info on at Homelab.md.

If you feel like sending me a tip (supports projects, and my dogs), I accept ETH (or Tether, if you'd like to fuel inflation) at: 0x4e46c997e5F9878419FDAAD22De5d9472e850475.

it-infra's Issues

Make repo public

This can definitely help someone, and we can keep all sensitive information in the extra vars file. Since I won't ever push from the server, only pull, this should be safe

dns install

Add MariaDB server

Add a MariaDB server for all the other stuff and tinkering

Authentik install

Create authentik install script

Authentik-mail-integration

Make sure that Authentik can create and delete email credentials

authentik-vpn-integration

Make sure that Authentik can create and delete VPN credentials

authentik-gitea-integration

Make sure that Authentik can create and delete git permissions

website config

reverse proxy rules

Minecraft server configuration

Add OpenTTD config to `games`.

• #40
• Update the ./containers/games/setup.playbook.yml playbook.
  • Mount needed volumes for persistence to subdirs under /opt/run/games/openttd
  • Add configuration files under ./containers/games/files/openttd
• Update the ./containers/games/update.playbook.yml to copy new config files.
• Update ./default.vars.yml (and therefore ./vars.yml) if needed.
• Add UDP/TCP routers and services to ./containers/reverseproxy/traefik/files/services/games.yml.j2 plus new entry point in ./containers/reverseproxy/files/traefik/traefik.yml.j2.

Create Reverse Proxy Config

• Create directory in ./containers called reverseproxy.
• Create setup.playbook.yml with setup steps.
• Create files directory to house templates.
• Write compose.yml.j2 with specifications for:
  • Traefik
  • DuckDNS
• Write static Traefik config.
• Write dynamic Traefik config for each service (at least for website).
• Add all variables to variables template.

Create new setup scripts

Server and client setup needs to be automated more than it currently is.

• Client package install
• Client SSH setup
• Server SSH setup
• Adding the keys to the clients
• Disabling password login on the clients
• Create one source of truth for IPs and container passwords
• Replace IPs in hosts file

authentik-postgres-integration

Make sure that Authentik can create and delete postgres credentials

Move Variables to 1 File

• All variables should be set in one file in the root of the it-infra directory.
• It should be .gitignore'd.

There should be a default/template that isn't .gitignore'd.

Mailserver install

OpenTTD server configuration

Authentik-Matrix-integration

Make sure that Authentik can create and delete matrix credentials

VPN config

Homeassistant install

Spin up HA container

DNS configuration

authentik-nextcloud-integration

Make sure that Authentik can create and delete NextCloud credentials

OpenTTD server install

Add PostgreSQL server

Add a postgres server for Authentik and JabRef

Matrix config

Mailserver config

reverse proxy install

matrix install

nextcloud install

VPN install

Minecraft server install

authentik-sftp-integration

Make sure that Authentik can create and delete SFTP credentials

gitea install

gitea configuration

Create Database Config

• Create directory in ./containers called database.
• Create setup.playbook.yml with setup steps.
• Create files directory to house templates.
• Write compose.yml.j2 with specifications for:
  • MariaDB
  • PostgreSQL
• Setup DB root access.
• Setup access for each service.
• Add all variables to variables template.

website install

Add bateau/openttd to `./containers/games/files/compose.yml.j2`.

Fileserver config

Nextcloud config

fileserver install