Commit Graph

61 Commits

Author SHA1 Message Date
renovate[bot]
c9588495ce chore(deps): update prom/prometheus docker tag to v3.9.1 2026-02-13 08:01:51 +00:00
36663e63ec fix: minor bugfixes & border cases 2026-02-13 05:00:32 -03:00
5c84b78600 feat: make script autonomous (run without prompts) 2026-02-13 04:59:50 -03:00
27653aaca5 chore: add new grafana dashboard templates 2025-09-06 15:14:30 -03:00
522d73199a fix: wrap .env caddy vars with quotes to avoid expanding $ 2025-09-06 12:41:46 -03:00
127294ed01 fix: generate caddy password before starting the container 2025-09-06 12:27:00 -03:00
2370131022 fix: caddy output format 2025-09-06 12:20:53 -03:00
6b3a5066bc fix: wait for caddy startup to generate loki & prometheus password 2025-09-04 03:07:51 -03:00
c3702cc056 fix: add user to docker group after docker installation 2025-09-04 03:07:37 -03:00
fb3b93b00b fix: remove l4 module due to build issues 2025-09-04 03:07:18 -03:00
b5d2ddf23b refactor: read templates from local files 2025-08-20 04:00:26 -03:00
2dd0edbd49 feat: prompt for prometheus & loki password for proper hashing 2025-07-10 02:28:18 -03:00
379bdefea7 fix: fix caddy config for prometheus and loki 2025-07-10 02:21:18 -03:00
7cd8095663 fix: fix loki setup && weird error 2025-07-10 00:07:05 -03:00
53507eaefe feat: add grafana template dashboard definition 2025-07-10 00:05:14 -03:00
5a489a7584 fix: fix caddy_logs accessibility to monitoring tools 2025-07-09 19:29:40 -03:00
8649d964df fix: wrong caddy logs path on promtail 2025-07-09 18:28:07 -03:00
3ce419d99f fix: allow multiple AllowUsers on sshd_config file 2025-07-09 17:47:44 -03:00
32ed5d4629 feat: make install_caddy autogenerate necessary keys 2025-07-09 02:05:16 -03:00
130575ffd3 refactor: rethink monitoring structure | add Loki && Promtail | new Grafana conf 2025-07-09 01:30:11 -03:00
2d182eaf9c chore: update coraza, crowdsec && monitoring dependencies versions 2025-07-09 00:10:25 -03:00
925cf377c7 chore: refactor caddy folder structure 2025-07-09 00:08:57 -03:00
10b0f122e1 fix: disable password auth on ssh connections + avoid replacing main sshd file 2025-07-08 23:31:43 -03:00
ae13ced4e8 Fix typo in Caddy docker-compose 2025-03-06 21:29:51 -03:00
a380af274f Update Caddy with Layer4 plugin 2025-03-03 22:36:30 -03:00
46ba00f623 Modify deployed files location | Adapt Caddy templaate to new structure 2025-02-07 13:10:04 -03:00
cfed9f4fc0 Fix user creation 2025-02-03 06:30:01 -03:00
782452c375 Add make installation 2025-02-03 04:33:13 -03:00
63875dc2af Fix deploy user installation 2025-02-03 04:25:08 -03:00
1ca5805e80 Lots of stuff 2025-02-03 02:34:53 -03:00
5a7d0a4e14 Merge pull request #1 from elAgala/renovate/configure
Configure Renovate
2025-01-29 20:27:17 -03:00
renovate[bot]
c58d5a5ffd Add renovate.json 2025-01-27 05:42:25 +00:00
4256bcac9f Fix Make installation | Fix caddy CrowdSec API key retrieval script 2025-01-26 18:24:22 -03:00
ffd2c02519 Update metric activation on Caddy 2025-01-26 15:56:23 -03:00
d02cccedfc Add monitoring_network | Add recommended coraza.conf
- Add monitoring_network for prometheus instance
- Add Crowdsec & Caddy scrapes
- Install make as dependency
- Add Makefile for easily executing caddy commands
2025-01-26 15:23:31 -03:00
0a7e94b190 Rename coraza_rules.conf -> coraza.conf 2025-01-26 05:10:27 -03:00
96f839bde1 Minor permission fixes 2025-01-26 01:42:22 -03:00
36e5a72744 Modify UFW setup
- Add DENY ingoing by default
- Add ALLOW outgoing by default
2025-01-26 01:38:07 -03:00
3d9bdc04b2 Add full caddy installation (Coraza WAF + Crowdsec)
- Remove security issue when exposing ports in a docker container: Use
intranet instead
- Modify install_caddy to use new template
2025-01-26 01:35:59 -03:00
f352126e56 Modified docker definitions to use internal caddy_net
Exposing ports on docker-compose bypasses UFW definitions, which is a
high risk, so we use internal networks only to connect between
containers
2025-01-26 00:55:05 -03:00
9b88311406 Add Caddy simple setup 2025-01-26 00:51:34 -03:00
72e1fabd98 Add caddy_net for allowing VPN access to containers from the WebServer 2025-01-25 04:42:51 -03:00
eaca8f8dbd Fix UFW to allow only /tcp 2025-01-24 03:30:36 -03:00
051eecccde Minor fix: Run oh-my-zsh setup --unattended 2025-01-24 03:09:50 -03:00
ddf0301463 Fix minor typo errors | Change Nginx for Caddy | Consolidate templates in this repo 2025-01-24 02:57:53 -03:00
21515daef1 Fixes
- Fix prometheus files path
- Fix sciprt allowing to execute w/out username param
- Add oh-my-zsh installation
- Fix typo un ssh authorized_keys file
- Fix PermitRootLogin disabling
2025-01-23 23:47:10 -03:00
c08b6d393e Add update server before initializing | Fix var assignation issue 2025-01-23 21:51:09 -03:00
feb4056a84 Change cURL for wget for fetching files from the repo 2025-01-23 21:35:30 -03:00
14480e4def Refactor | Add Utils, Firewall & Monitoring 2025-01-23 21:33:30 -03:00
d0394bffe1 Merge branch 'main' of https://github.com/elAgala/server-initializer 2024-08-07 20:24:09 +00:00