Commit Graph

90 Commits

Author SHA1 Message Date
Damien
9f6e583135 Update proxy server installation script
Switch to Let's Encrypt HTTP challenge
Add Tailscale exit node support
Add Fail2ban protection for Traefik
Improve idempotency and error handling
2026-05-13 16:37:15 +02:00
Damien
7c3cab2b5a Update proxy installer to use Traefik v3 with Fail2ban and Infomaniak
DNS
2026-05-13 10:39:44 +02:00
Damien
f2b8d758b8 Add .DS_Store to gitignore 2026-05-12 15:17:34 +02:00
Damien
47e3275e6b Remove unused Gitea dashboard 2026-05-12 15:17:24 +02:00
cd9827625d feat(grafana): add Gitea + Gitea Actions dashboard (LXC-adapted) 2026-05-12 12:22:39 +00:00
Damien
ac92b3a6c3 Remove deprecated seedbox deployment workflow 2026-05-12 09:24:14 +02:00
Damien
f9c79ded96 Update Gitea runner download URL to use gitea-runner 2026-05-12 09:02:38 +02:00
096a78c6af Merge pull request 'feat/gitea-runner-metrics-logrotate' (#3) from feat/gitea-runner-metrics-logrotate into main
Reviewed-on: #3
2026-05-12 06:50:10 +00:00
Damien
defe8c7ade feat(gitea-runner): add Prometheus metrics, logrotate and LXC tags 2026-05-11 20:08:02 +02:00
a6652e37eb chore: add agent prompt for gitea-runner metrics + logrotate 2026-05-11 17:50:06 +00:00
Damien
bd38cb4f82 Install and configure Tailscale during runner setup
- Add Tailscale installation and service start in install.sh
- Update service dependencies to include tailscale
- Add instructions to connect via Tailscale after installation
2026-05-04 15:05:05 +02:00
Damien
2bbbb5f04d Configure LXC for Docker and Tailscale
Add unconfined AppArmor profile to allow Docker and required TUN/TAP
device access for Tailscale in LXC container.
2026-05-04 14:56:11 +02:00
Damien
526063b31b Enable console auto-login for root
This sets up automatic login on the console by modifying the agetty
options in /etc/conf.d/agetty and updating the inittab configuration
accordingly.
2026-05-04 14:51:03 +02:00
Damien
b36e729e08 Enable TUN/TAP device for Tailscale in LXC container
Add necessary LXC configuration entries to allow TUN/TAP device access
2026-05-04 14:39:07 +02:00
Damien
49d6920f44 Use ip command to get container IP and suppress Docker service output
The script now uses the ip command instead of hostname -i to reliably
obtain the container's IPv4 address. Service command output is also
redirected to /dev/null to reduce noise in the logs.
2026-05-04 14:25:59 +02:00
Damien
ebc5547838 Add gitea-runner installation script and update READMEs
- Added new gitea-runner/install.sh script for deploying a Gitea Act
  Runner on Alpine LXC in Proxmox
- Updated main README with new script entry and adjusted formatting
- Added multi-OS support note to requirements
- Improved formatting in code examples with proper command separation
- Translated and enhanced gitea-runner/README.md with consistent
  terminology
2026-05-04 14:14:57 +02:00
b6b9278c50 docs: add gitea runner README 2026-05-04 12:00:46 +00:00
7e6ae2613b feat: add gitea act runner install/update script 2026-05-04 12:00:30 +00:00
828361a7b2 feat(netlab): support TAILSCALE_AUTHKEY for headless cloud-init deployment 2026-04-22 08:58:39 +00:00
90273fbbca feat(netlab): add MOTD configuration 2026-01-11 19:01:23 +00:00
13d97ff627 feat(proxy): add MOTD configuration 2026-01-11 19:00:39 +00:00
36e40211f6 refactor(netlab): use robust awk-based Tailscale FQDN extraction from seedbox 2026-01-11 18:51:40 +00:00
4935ae3c3e refactor(proxy): use robust awk-based Tailscale FQDN extraction from seedbox 2026-01-11 18:51:01 +00:00
52d7d024e5 refactor(netlab): align with proxy script - use Tailscale DNS hostname 2026-01-11 18:49:01 +00:00
727a29fed4 fix(sonarr): add missing serve.json for Tailscale proxy
All checks were successful
Deploy Seedbox / Deploy Seedbox Stacks (push) Successful in 35s
2026-01-04 17:38:37 +00:00
f9ce62d296 Update seedbox/install.sh
Some checks failed
Deploy Seedbox / Deploy Seedbox Stacks (push) Has been cancelled
2026-01-04 17:16:03 +00:00
bca52e345f Update seedbox/install.sh
Some checks failed
Deploy Seedbox / Deploy Seedbox Stacks (push) Has been cancelled
2026-01-04 17:01:10 +00:00
8680397c08 fix(ci): use rsync to sync only stacks/ without polluting /srv/seedbox
- Clone repo to temp directory
- Rsync only seedbox/stacks/ to /srv/seedbox/stacks/
- Preserve .env and volume data directories
2026-01-04 16:59:22 +00:00
4576df0773 fix(seedbox): simplify git clone with sparse checkout
All checks were successful
Deploy Seedbox / Deploy Seedbox Stacks (push) Successful in 36s
Only clone seedbox/ subdirectory into /srv/seedbox using git sparse-checkout
2026-01-04 16:28:00 +00:00
41f3f7224c Update README.md 2026-01-04 16:09:15 +00:00
036fd8b714 Update seedbox/install.sh
All checks were successful
Deploy Seedbox / Deploy Seedbox Stacks (push) Successful in 1m7s
2026-01-04 16:05:49 +00:00
69753e52e5 fix(seedbox): add --accept-routes and secure SSH via Tailnet only
Some checks failed
Deploy Seedbox / Deploy Seedbox Stacks (push) Failing after 27s
- Add --accept-routes flag to tailscale up for subnet routing
- Schedule SSH lockdown via 'at' to avoid cutting access during setup
- SSH will only be accessible via Tailscale interface after 2 minutes
2026-01-04 16:03:25 +00:00
7ccfa58dc1 fix(seedbox): disable Tailscale SSH management for CI compatibility
All checks were successful
Deploy Seedbox / Deploy Seedbox Stacks (push) Successful in 1m0s
- Remove --ssh flag from tailscale up
- Remove temporary SSH port 22 opening (not needed anymore)
- SSH now uses standard auth via Tailscale network
- CI can connect without Tailscale SSH check prompts
2026-01-04 15:58:55 +00:00
c7155d0555 feat(ci): add workflow_dispatch for manual trigger
Allows manual execution from Gitea Actions UI
2026-01-04 15:49:02 +00:00
97dbe32354 fix(ci): replace actions/checkout with git clone for Alpine compatibility
Alpine doesn't have Node.js by default, and actions/checkout requires it.
Using native git clone instead - simpler and KISS approach.
2026-01-04 15:13:54 +00:00
eb0720d0b1 fix(seedbox): update Sonarr README with correct /downloads path
Some checks failed
Deploy Seedbox / Deploy Seedbox Stacks (push) Failing after 3s
2026-01-04 13:46:51 +00:00
cc5b9be116 fix(seedbox): update Transmission README with correct /downloads path
Some checks failed
Deploy Seedbox / Deploy Seedbox Stacks (push) Failing after 3s
2026-01-04 13:46:32 +00:00
09da2f514b fix(seedbox): update README to reflect /downloads mount point
Some checks failed
Deploy Seedbox / Deploy Seedbox Stacks (push) Failing after 3s
- Storage section now shows /downloads (local RAID - 3.4T)
- Updated directory structure
- Fixed post-install verification commands
2026-01-04 13:44:52 +00:00
8237a425b1 fix(seedbox): update install.sh to reflect /downloads mount point
Some checks failed
Deploy Seedbox / Deploy Seedbox Stacks (push) Failing after 3s
- Remove /srv/seedbox/downloads creation (using /downloads RAID)
- Update MOTD to show correct storage paths
- Update final summary
2026-01-04 13:43:58 +00:00
3f23f418ea fix(seedbox): use /downloads mount point for Sonarr
Some checks failed
Deploy Seedbox / Deploy Seedbox Stacks (push) Failing after 3s
2026-01-04 13:43:06 +00:00
d5edc12e65 fix(seedbox): use /downloads mount point instead of /srv/seedbox/downloads
Some checks failed
Deploy Seedbox / Deploy Seedbox Stacks (push) Failing after 3s
2026-01-04 13:42:56 +00:00
7eaba56b44 ci(seedbox): remove misplaced workflow file
Some checks failed
Deploy Seedbox / Deploy Seedbox Stacks (push) Failing after 4s
Workflow moved to .gitea/workflows/deploy-seedbox.yml at repo root
2026-01-04 13:39:15 +00:00
0a9132b669 ci(seedbox): move workflow to repo root for Gitea discovery
Gitea only looks for workflows in .gitea/workflows/ at repository root
2026-01-04 13:38:54 +00:00
49d16f886e Merge pull request 'feat(seedbox): Docker + Tailscale sidecar architecture' (#1) from feature/seedbox-docker-tailscale into main
Reviewed-on: #1
2026-01-04 13:29:48 +00:00
3a39b7c4f2 docs(seedbox): add README for Sonarr stack 2026-01-04 12:30:29 +00:00
5f13ee47df docs(seedbox): add README for Prowlarr stack 2026-01-04 12:30:18 +00:00
90dfc9ec8a docs(seedbox): add README for Portainer stack 2026-01-04 12:30:08 +00:00
be0f6abaa2 docs(seedbox): add README for Transmission stack 2026-01-04 12:30:00 +00:00
979040a4c7 docs(seedbox): complete README rewrite for new architecture
- Document Docker + Tailscale sidecar architecture
- Add Gitea secrets configuration guide
- Add service management (add/remove/update)
- Add troubleshooting section
- Add Tailscale ACL configuration
2026-01-04 12:29:49 +00:00
1935d7fc99 feat(seedbox): add Sonarr stack with Tailscale sidecar
- TV series management
- Accessible via sonarr.taila5ad8.ts.net (HTTPS only)
- Mounts downloads and media volumes
2026-01-04 12:24:43 +00:00