T

Damien 25bd5f2ac9 fix(proxy): couvrir les deux ordres de champs dans l'ignoreregex git

L'ignoreregex n'excluait que l'ordre RequestPath puis DownstreamStatus,
alors que le failregex juste au-dessus gère explicitement les deux
ordres possibles de sérialisation JSON de Traefik. Si Traefik
sérialise dans l'autre ordre, l'exclusion ne matchait pas et le ban
sur git fetch revenait silencieusement.

Ajoute la seconde ligne (DownstreamStatus puis RequestPath), symétrique
au failregex.

2026-08-01 10:58:51 +02:00

gitea-runner

Add shellcheck ignore for dynamic source

2026-07-30 14:31:27 +02:00

komodo

Remove KOMODO_HOST fallback from MOTD script

2026-06-14 15:33:22 +02:00

lib

lib/common.sh: fix refresh_os_packages contract, drop set -e, add ensure_template_present

2026-07-30 14:05:43 +02:00

netlab

Remove unused timezone configuration

2026-05-30 15:57:56 +02:00

openbao

openbao,gitea-runner: use shared ensure_template_present, gitea-runner parity fixes

2026-07-30 14:05:50 +02:00

proxy

fix(proxy): couvrir les deux ordres de champs dans l'ignoreregex git

2026-08-01 10:58:51 +02:00

.gitignore

Add .DS_Store to gitignore

2026-05-12 15:17:34 +02:00

README.md

Remove ferretdb (Debian LXC, no Alpine build for DocumentDB extension)

2026-07-30 11:09:05 +02:00

README.md

infra-scripts

Public infrastructure deployment scripts designed to be executed directly via curl | bash.

Philosophy

These scripts automate the deployment of personal infrastructure components. They are:

Self-contained: No external dependencies beyond standard Debian packages
Idempotent-ish: Safe to re-run (where possible)
Curl-friendly: Designed for one-liner deployment from a fresh server
Multi-OS: Supports Debian and Alpine-based deployments, chosen per-script based on that service's requirements
Loopback by default: Services bind to 127.0.0.1; Tailscale handles the reverse proxy and TLS termination
Log hygiene: Every long-running service ships with a logrotate config (no unbounded log files)
Console auto-login: Proxmox LXCs are configured for root auto-login on tty1 (fast pct enter and Web UI shell access)
Keep it simple: One script per service, plain bash, no frameworks — readability over cleverness

Available Scripts

Script	Description	Usage
`proxy/install.sh`	Reverse proxy with Tailscale + Nginx Proxy Manager	`curl -fsSL https://gitea.arnodo.fr/Damien/infra-scripts/raw/branch/main/proxy/install.sh` \| `bash`
`netlab/install.sh`	Network lab with ContainerLab	`curl -fsSL https://gitea.arnodo.fr/Damien/infra-scripts/raw/branch/main/netlab/install.sh` \| `bash`
`gitea-runner/install.sh`	Gitea Act Runner on Alpine LXC (Proxmox)	`bash -c "$(curl -fsSL https://gitea.arnodo.fr/Damien/infra-scripts/raw/branch/main/gitea-runner/install.sh)"`
`openbao/install.sh`	OpenBao secrets manager on Alpine LXC (Proxmox)	`bash -c "$(curl -fsSL https://gitea.arnodo.fr/Damien/infra-scripts/raw/branch/main/openbao/install.sh)"`
`komodo/install.sh`	Komodo (Docker + MongoDB) on Alpine VM	`bash -c "$(curl -fsSL https://gitea.arnodo.fr/Damien/infra-scripts/raw/branch/main/komodo/install.sh)"`

Requirements

Fresh Debian 12/13 installation (proxy, netlab) or Proxmox VE host (gitea-runner, openbao) or Alpine VM (komodo)
User with sudo privileges (do not run as root) — except gitea-runner, openbao, and komodo which run as root
Internet access