Commit Graph

405 Commits

Author SHA1 Message Date
Khue Doan
f2392d6559 Confirm pacman can't use --noconfirm for conflict packages 2021-05-12 06:30:38 +07:00
Khue Doan
9e7f7909fd Add cloudflared tunnel config files and service 2021-05-03 21:52:59 +07:00
Khue Doan
27c048931f Move cloudflared package URL to default var 2021-05-03 13:30:07 +07:00
Khue Doan
94ae26ee90 Install cloudflared 2021-05-03 13:18:34 +07:00
Khue Doan
6935170f54 Fix wrong config symlink 2021-05-03 12:00:09 +07:00
Khue Doan
56de19a303 Add config symlink 2021-05-03 11:55:35 +07:00
Khue Doan
dffe892a2d Fix wrong VPN IP 2021-05-03 11:42:05 +07:00
Khue Doan
b301e4083a Enable VPN server in base 2021-05-03 11:08:02 +07:00
Khue Doan
de977f2560 Add Wireguard client keys 2021-05-03 11:07:40 +07:00
Khue Doan
fb823e30f4 Start Wireguard service 2021-05-03 11:07:19 +07:00
Khue Doan
6ef691eca4 Render wg0 config file with private key and subnet 2021-05-03 10:41:26 +07:00
Khue Doan
26d7fa3e2f Use container for master nodes
For better resource usage, still use VM on worker nodes due to ISCSI
bug in the Linux kernel
2021-05-03 00:28:16 +07:00
Khue Doan
0a1b1cecaa Update 0.0.1-alpha milestone 2021-05-02 23:15:31 +07:00
Khue Doan
d45637056a Move RKE cluster to sperate module, with cleaner Ansible check 2021-05-02 23:07:16 +07:00
Khue Doan
acbc2e5803 Use quote instead of code for warning 2021-05-02 22:26:54 +07:00
Khue Doan
9331b90567 Add warning emoji 2021-05-02 22:26:26 +07:00
Khue Doan
51cefc4ab6 Initial scripts
Brain dump
2021-05-02 22:25:38 +07:00
Khue Doan
d02fc8dd92 Rename 2021-05-02 22:19:28 +07:00
Khue Doan
9becad7623 Clean up 2021-05-02 22:18:33 +07:00
Khue Doan
f7f9844ac2 Use Ansible provisioner module for VPN 2021-05-02 22:16:37 +07:00
Khue Doan
a6a1a7266d Add Ansible provisioner module 2021-05-02 21:58:33 +07:00
Khue Doan
c1a993cd22 Restructure 2021-05-02 21:30:26 +07:00
Khue Doan
20a27a1ee2 Update TODOs 2021-05-02 21:10:42 +07:00
Khue Doan
cc0b931514 Always apply to argocd namespace 2021-05-01 23:12:43 +07:00
Khue Doan
e6e5c177d6 Standardize TODOs 2021-05-01 22:51:55 +07:00
Khue Doan
e559769e6f Update todos 2021-05-01 22:42:58 +07:00
Khue Doan
8878dc65bb Move cert-manager config to seperate file 2021-05-01 22:33:46 +07:00
Khue Doan
3acd328de0 Move MetalLB config to seperate file 2021-05-01 22:14:00 +07:00
Khue Doan
543214e2d3 Turn on Vault ingress 2021-05-01 17:52:17 +07:00
Khue Doan
bbfcb714b1 Enable Gitea ingress 2021-05-01 16:18:57 +07:00
Khue Doan
c8331959bd Use var for macvlan parent 2021-05-01 16:17:19 +07:00
Khue Doan
c09d02531d Disable VPN 2021-05-01 16:15:49 +07:00
Khue Doan
75a3e2cddf Generate Wireguard keys 2021-05-01 16:13:27 +07:00
Khue Doan
0fc931e62e Use VM for VPN instance
Due to CentOS 8 kernel
2021-05-01 15:39:10 +07:00
Khue Doan
06143f2798 Terraform format 2021-05-01 14:57:20 +07:00
Khue Doan
c8bb547c49 Move limits to seperate block 2021-05-01 11:59:25 +07:00
Khue Doan
d9cadb36bb Working VPN module and Ansible 2021-05-01 11:50:21 +07:00
Khue Doan
51c725edc0 Change VPN module name 2021-04-30 14:55:36 +07:00
Khue Doan
62a830caa7 Fix wrong module name 2021-04-30 14:54:30 +07:00
Khue Doan
77859b49f9 Add VPN module 2021-04-30 14:53:06 +07:00
Khue Doan
ad5e8cef86 Use VM instead of container for Kubernetes node
Squashed commit of the following:

commit 421e849664810ae41e493049edcc1ac2846ca6fc
Author: Khue Doan <khuedoan98@gmail.com>
Date:   Mon Apr 26 22:09:35 2021 +0700

    Move k8s nodes to LXD virtual machines instead of containers

    Avoid kernel issue and improve security (not using privileged containers)

commit 0ce297d0aee30e2253cd69c4ac93f21cf637f25a
Author: Khue Doan <khuedoan98@gmail.com>
Date:   Mon Apr 26 21:25:11 2021 +0700

    Adjust priority
2021-04-26 22:24:11 +07:00
Khue Doan
74015da237 Increase LXD storage size 2021-04-26 01:21:22 +07:00
Khue Doan
f84fc1ae4e Set default username 2021-04-26 01:21:01 +07:00
Khue Doan
b3f2d0dec3 Rework global makefile 2021-04-25 13:24:26 +07:00
Khue Doan
58043b8b1c Add apps makefile 2021-04-25 12:30:33 +07:00
Khue Doan
afb3fb966a Move gitea from terrafrom to argo 2021-04-25 01:40:58 +07:00
Khue Doan
2eb9b87f56 Update todo 2021-04-25 00:55:34 +07:00
Khue Doan
96a9c8edb3 Configure etcd using env file 2021-04-25 00:55:04 +07:00
Khue Doan
c16d1a5a22 Use native lxd connection instead of lxd exec 2021-04-25 00:30:52 +07:00
Khue Doan
eaba343a5d Increase node disk size to 32GiB 2021-04-24 22:58:22 +07:00