image assets for the cr.imson.co icons / logos.
ansible playbooks and roles for configuration of the environment.
secrets files used for ansible deployment for systems within the environment.
configures administrator users to personal preferences, including deployment of dotfiles, configuration of prompts, switching to zsh, etc.
configures the ansible user used for system configuration and deployments.
configures the certificate packaging service that resides on the ACME DNS server.
configures the certificate retrieval service that resides in the homelab.
handles common configuration and package installation.
for systems with an "initial" user (e.g. AWS EC2 ubuntu spins), this disables said initial user.
deploys and installs docker-ce.
deploys and configures common nginx-proxy paths
deploys configures common docker stack management scripts and hooking capabilities used throughout.
deploys the homelab configuration for homer.
deploys and configures landing page assets used in the homelab.
deploys and configures apprise-based notification capabilities used in the homelab.
deploys and configures the nginx reverse proxy configuration used for several internal services in the homelab.
deploys and configures the backup network mount used in the homelab.
deploys and configures the gitlab container registry mount used in the homelab.
deploys and configures the nextcloud network mount used in the homelab.
deploys and configures the gitlab package registry network mount used in the homelab.
handles initial configuration, hardening, and adjustments for first-touch configuration
deploys and configures the mount-check service used in the homelab to ensure network mounts are remounted upon disconnect.
necessary because systemd network mounts have no auto-reconnect capabilities by decree of Lennart Poettering and are thus afflicted with a serious amount of stupid bikeshedding.
deploys and configures the mount-space-alert service which dispatches a notification upon warning/critical space remaining thresholds for specified filesystems.
handles configuration of pihole in the homelab environment (LAN-only).
handles configuration of raspios based systems.
handles sshd configuration, hardening, and adjustments.
handles execution of updates and rebooting as necessary.
deploys and configures the docker volume backup system.
wireguard server initial configuration.
wireguard client installation and configuration.
wireguard server configuration.