Adyrem
7ba749c620
Ansible Lint / lint (push) Successful in 4s
Proxmox host role: - Admin user setup, SSH hardening (port 2222, no root login) - claude-code SFTP chroot user - Unattended upgrades, DuckDNS dynamic DNS updater (vault-encrypted token) - WireGuard VPN server (10.10.10.0/24) with Fedora client registered - Proxmox firewall management via pvesh API (idempotent Python script) Public Gitea exposure: - Traefik: add HTTPS entrypoint, Let's Encrypt ACME (HTTP-01), StripPrefix middleware for /git subpath, HTTP→HTTPS redirect - Gitea ROOT_URL updated to https://adyrem.duckdns.org/git/ - Pi-hole split DNS: adyrem.duckdns.org → 10.10.1.3 for internal hairpin bypass SSH config fixes: - StrictHostKeyChecking no → accept-new across all hosts - Proxmox jump host: port 2222, user adyrem (root login disabled) Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
22 lines
522 B
YAML
22 lines
522 B
YAML
---
|
|
traefik_version: "3.3.4"
|
|
traefik_http_port: 80
|
|
traefik_https_port: 443
|
|
traefik_dashboard_port: 8080
|
|
traefik_log_level: "INFO"
|
|
traefik_acme_email: "fanfohcd@gmail.com"
|
|
|
|
traefik_services:
|
|
- name: gitea
|
|
host: "gitea.homelab"
|
|
backend: "http://10.10.1.125:3000"
|
|
public_host: "adyrem.duckdns.org"
|
|
public_path: "/git"
|
|
strip_prefix: "/git"
|
|
- name: grafana
|
|
host: "grafana.homelab"
|
|
backend: "http://10.10.1.137:3000"
|
|
- name: pihole
|
|
host: "pihole.homelab"
|
|
backend: "http://10.10.1.2:80"
|