62 lines
1.9 KiB
Markdown
62 lines
1.9 KiB
Markdown
# Michael's Homelab
|
|
|
|
## Hosts
|
|
|
|
| Host | OS | Services |
|
|
| :--- | :--- | :------- |
|
|
| [Cuddlefish](cuddlefish/) |  | Gitea |
|
|
| [Thonkpad](thonkpad/) (portable) |  | Misc. Projects |
|
|
| [Rocktiplex](rocktiplex/) |  | Fathom, Status Proxy, RSF Analytics |
|
|
| Cloud8 (under repair) |  | NextCloud |
|
|
| [Backup](backup/) (off-site) |  | Backup Storage |
|
|
|
|
## SELinux Notes
|
|
|
|
Docker volumes violate some SELinux policies. Use `setenforce 0` to disable it temporarily, or make the following permanent change to `/etc/sysconfig/selinux`:
|
|
|
|
```bash
|
|
# SELINUX=enforcing
|
|
SELINUX=permissive
|
|
```
|
|
|
|
## Dockerized Cloudflared Notes
|
|
|
|
If a docker-compose file looks like this:
|
|
|
|
```yaml
|
|
services:
|
|
gitea-server:
|
|
image: gitea/gitea:1.19.3
|
|
...
|
|
gitea-cloudflared:
|
|
image: cloudflare/cloudflared
|
|
...
|
|
```
|
|
|
|
Then in this case the name of the target service is `gitea-server`, and (per Docker's networking shenanigans), should be specified **directly by service name,** e.g.
|
|
|
|
```
|
|
https://git.michaellisano.com -> http://gitea-server:3000
|
|
```
|
|
|
|
## Backup Decryption Notes
|
|
|
|
Everything is encrypted with [age](https://github.com/FiloSottile/age).
|
|
|
|
All keys are generated using age-keygen and stored in a text file, e.g.
|
|
|
|
**backup-key.txt**
|
|
|
|
```
|
|
# created: 2023-06-24T18:01:36-07:00
|
|
# public key: age12345...
|
|
AGE-SECRET-KEY-xyz123...
|
|
```
|
|
|
|
Decrypting a file:
|
|
|
|
```
|
|
age -d -i backup-key.txt -o NAME.tar.gz NAME.tar.gz.enc
|
|
```
|
|
|