77 Commits

This Branch

This Branch

All Branches

Author	SHA1	Message	Date
pi-ux-ce	3ca891b0b5	new volume for the geeraert.eu certs	2026-08-11 14:38:10 +01:00
pi-ux-ce	d664077a58	add before adding new stuff	2026-08-11 13:59:37 +01:00
pi-ux-ce	763788d455	creating the configmap, not used yet by netdata	2026-08-04 16:18:37 +01:00
pi-ux-ce	0b09d50e7f	add before change	2026-08-04 16:05:14 +01:00
pi-ux-ce	9349bc5122	watcher struggling	2026-07-30 11:02:29 +01:00
pi-ux-ce	93f8d41aac	fix(reverse-proxy): preserve real client IP in nginx logs ... Nginx logs showed internal cluster IPs instead of public client IPs. Root cause was three stacked issues in the traffic path from MetalLB LoadBalancer VIP to the reverse-proxy pods: 1. Service was using externalTrafficPolicy: Cluster, allowing kube-proxy to forward traffic cross-node and SNAT the source IP in the process. Changed to externalTrafficPolicy: Local so traffic is only handled by pods on the node that received it. 2. reverse-proxy DaemonSet had a pinned in the pod template, forcing all replicas onto a single node instead of scheduling one per node as expected for a DaemonSet. Removed nodeName so the DaemonSet scheduler places one pod per eligible node (both control-plane nodes, tolerations already in place). 3. Even with the above fixed, flannel's CNI masquerade rule was still SNAT'ing traffic to the pod network address (10.244.x.x) before it reached nginx, since traffic into the pod overlay network gets masqueraded regardless of kube-proxy's policy. Switched the DaemonSet to hostNetwork: true (with dnsPolicy: ClusterFirstWithHostNet) so nginx binds directly to the node's network namespace and bypasses the overlay masquerade entirely. Result: nginx access logs now show the real public client IP for every request instead of node/pod-internal addresses.	2026-07-23 10:06:43 +01:00
pi-ux-ce	f5a786386f	adding before converting to daemonset	2026-07-23 09:35:12 +01:00
pi-ux-ce	03d2743507	removing fail2ban policy as well	2026-07-22 23:33:00 +01:00
pi-ux-ce	f957ca2545	removing the auto deny rule for now until I figure out the network problem, nginx receive a private ip instead of the public one	2026-07-22 23:32:33 +01:00
pi-ux-ce	b1def329e9	adding specifiy geoip option	2026-04-15 09:29:59 +01:00
pi-ux-ce	9335e0ac24	adding the terradfrom module just in case	2026-03-19 23:34:22 +00:00
pi-ux-ce	2d4a96098c	revert the change made	2026-03-19 23:22:50 +00:00
pi-ux-ce	f457e9ae18	revert the change made	2026-03-19 23:21:54 +00:00
pi-ux-ce	b61f613e3c	revert the change made	2026-03-19 23:20:32 +00:00
pi-ux-ce	d6b428258e	try this but too much restriction, probaly gonna use this safety in the future though	2026-03-19 23:19:07 +00:00
pi-ux-ce	1ea92b8e6d	trying the certifcate check as well	2026-03-19 23:05:37 +00:00
pi-ux-ce	f96e93eab1	display the country in the logs	2026-03-13 15:17:43 +00:00
pi-ux-ce	5e0ad69cd8	removing template as we use terraform now	2026-03-13 11:23:46 +00:00
pi-ux-ce	4107c11651	trying different inotifywait command	2026-03-13 10:49:44 +00:00
pi-ux-ce	6923977cd1	putting the inotify file into a shared memory medium	2026-03-13 10:41:47 +00:00
pi-ux-ce	669be9f97e	rename to watched for easy access	2026-03-13 10:25:37 +00:00
pi-ux-ce	dd4b8df134	remove random.conf as not sure why it's there in the first place	2026-03-13 10:24:41 +00:00
pi-ux-ce	ffb076cf47	removing geoip as built inside the image	2026-03-13 10:23:49 +00:00
pi-ux-ce	ceb7fb6479	building a sidecar to watch the blacklisted file	2026-03-13 10:21:51 +00:00
pi-ux-ce	a378e0a41d	blocking every requests coming to scan wp-content	2026-03-13 10:06:27 +00:00
pi-ux-ce	3570e436f8	success with geoip2	2026-03-13 00:33:43 +00:00
pi-ux-ce	2ea483265b	UK = GB	2026-03-13 00:09:56 +00:00
pi-ux-ce	5847aed43e	blocking every country instead of allowing all	2026-03-13 00:07:31 +00:00
pi-ux-ce	79ef0ab640	trying geoip2	2026-03-12 23:59:39 +00:00
pi-ux-ce	b09999a8d0	removing all the fail2ban stuff	2026-02-02 21:50:23 +00:00
pi-ux-ce	800d23ac8e	adding before some work	2026-01-26 22:17:14 +00:00
pi-ux-ce	f3aa767cd5	adding before some work	2026-01-26 22:16:52 +00:00
pi-ux-ce	6d7897e2a6	work to add oauth	2025-07-08 00:14:56 +01:00
pi-ux-ce	347103b9f9	change to publish only the enabled one	2025-06-18 23:41:35 +01:00
pi-ux-ce	b7a0e73665	work on a configmap to store these infos for django	2025-06-18 23:36:38 +01:00
pi-ux-ce	04aab9b16e	save before servarr migration	2025-05-13 09:35:57 +01:00
pi-ux-ce	6009e6a4f7	add all unstaged files	2025-04-23 10:24:52 +01:00
pi-ux-ce	c8e2a94826	remove bookstack.tryton.geeraert.eu.conf.configmap.yaml	2025-04-23 10:23:34 +01:00
pi-ux-ce	cbce88af18	add all unstaged files	2025-04-23 10:21:52 +01:00
pi-ux-ce	706673a4a3	enable disabling https redirection and allowing port 80	2025-04-23 10:21:39 +01:00
pi-ux-ce	e45b2e703b	add logging format	2025-04-23 10:21:10 +01:00
pi-ux-ce	089504b76d	clean manifest	2025-04-23 10:15:12 +01:00
pi-ux-ce	a947004e54	add nginx.conf logging option	2025-04-23 10:13:42 +01:00
pi-ux-ce	6dbcb88857	remove comments	2025-04-07 19:05:40 +01:00
pi-ux-ce	0643b5e292	some variable before deletion	2025-04-07 19:04:57 +01:00
pi-ux-ce	29880fbb85	enable another field text inside the location block	2025-04-02 15:24:38 +01:00
pi-ux-ce	56bd79aa5f	enable actions	2024-11-11 11:20:28 +00:00
pi-ux-ce	090b9eda2c	remove ingress to avoid this to be deployed	2024-11-07 11:54:45 +00:00
pi-ux-ce	786b1d56c0	add just in case	2024-11-07 11:53:30 +00:00
pi-ux-ce	700d508c8d	remove conf.d as not required anymore	2024-11-07 11:52:59 +00:00
pi-ux-ce	d0c4a69c06	✨ 📝 add README and therefore test new repo	2024-10-31 12:44:33 +00:00
pi-ux-ce	194a558cb4	trying to purge from staticfiles	2024-10-15 11:00:28 +01:00
pi-ux-ce	0522c52697	trying to purge from staticfiles	2024-10-15 10:59:55 +01:00
pi-ux-ce	6356a07e45	probably had a change but it's not working yet	2024-10-14 21:59:09 +01:00
pi-ux-ce	1a1db6d6df	loop to create configmap	2024-09-25 16:17:55 +01:00
pi-ux-ce	225b60b1fd	file updated due to Terraform, purge some useles files as well	2024-07-30 15:52:47 +01:00
pi-ux-ce	89c5666074	🎨 add testing and put as optional many varaibles	2024-07-30 15:52:05 +01:00
pi-ux-ce	05fc32f18a	🎨 enable externalTrafficPolicy: Local option to forward external IP	2024-07-29 14:16:43 +01:00
pi-ux-ce	0f6eb95f20	✨ upgrade terraform files to prevent giutlab webui issues	2024-07-29 08:52:22 +01:00
pi-ux-ce	09c4d35c29	terraform state files	2024-07-28 21:58:06 +01:00
pi-ux-ce	22e2c141fc	upload mdified files	2024-07-28 21:56:52 +01:00
pi-ux-ce	8b9c11d383	🎨 add some terraform sites	2024-07-25 18:00:18 +01:00
pi-ux-ce	6cc7ace590	adding sites into terraform	2024-07-25 17:56:10 +01:00
pi-ux-ce	3b67e1b3c6	add the files	2024-07-25 17:06:25 +01:00
pi-ux-ce	cda1d12883	✨ starting to use terraform	2024-07-25 17:04:03 +01:00
pi-ux-ce	2bd11a174d	✨ add CPU and MEMORY limit	2024-07-24 15:13:44 +01:00
pi-ux-ce	afd8a07317	add the bakcup nginx config file	2024-07-22 10:06:47 +01:00
pi-ux-ce	49387e280b	setup the proxy	2024-07-22 10:05:46 +01:00
pi-ux-ce	d0dfc52249	add the proxy arguments	2024-07-22 10:05:27 +01:00
pi-ux-ce	3ceb7a0afd	add the proxy arguments	2024-07-22 10:04:17 +01:00
pi-ux-ce	794f73669a	try http2 by respectign syntax	2024-07-22 10:03:54 +01:00
pi-ux-ce	b05fcbc944	add memory medium for proxy cache	2024-07-19 12:02:24 +01:00
pi-ux-ce	dd9fdf8342	enable proxy cache mode	2024-07-19 12:01:59 +01:00
pi-ux-ce	14f38c8ec6	update nginx.conf	2024-07-03 13:23:31 +01:00
pi-ux-ce	a7ad81a3fe	🔥 remove backup files	2024-07-03 13:22:38 +01:00
pi-ux-ce	47ab6b91a8	update nginx.conf	2024-07-03 13:20:13 +01:00
pi-ux-ce	0ce409bcce	💥 add all the files	2024-06-19 13:48:53 +01:00