stevensblueprint / techops Goto Github PK

we want techops members to add their ssh keys to their github profile, so in the future our IaC script can automatically update their ssh/authorized_keys.

we'll need someone to maintain the servers

• blocked until wiki team finds a wiki software

we want to deploy and maintain this wiki software.

We want dokuwiki to automatically log user on by reading the header sent from nginx.

the nginx headers added can be found on /etc/nixos/authelia-extras.nix in the proxy settings.

https://www.dokuwiki.org/plugin:authremoteuser

one question: do we need to create the user in dokuwiki first, or will it automatically make them as one logs in.

Description

Authelia uses the following command to add a new user
Create endpoint that modifies users.yaml

manage dns entries

Install and setup docker, tmux, vim, openssh-server.

Look into what IaC to use, either nix, ansible, or something else.

this issue will track our research into setting up webservers.
webserver (apache2, nginx, caddy, traefik, etc..)

will also have to setup tls certs via letsencrypt.

to setup the staging environments for the teams, we will need people with experience with docker-compose and a reverse proxy (nginx, apache, caddy, etc...) to help manage various services.

https://github.com/authelia/authelia

look into how we can deploy it

install https://www.dokuwiki.org/template:bootstrap3

an internal panel might be cool, we can brainstorm here

Description

Provide a method to fetch traffic data from sitblueprint.com. This information will be used in the User Management API to provide information on the site usage.

This issue will track the deployment of the Production server, expected to be done Nov 3.

• Provision
• Base configuration.nix installation
• Add users
• Install extra packages, enable docker[1], etc...
• Install Nginx
• Nginx LE cert
• Secrets Mangement
• Install Dokuwiki @danielyu2003
• Install Authelia
• Docker env, pull team 1 project [BLOCKED]
• Init git repo, upload to here 🎉

[1]: podman doesn't work with watchtower, and we want compose to work aswell
virtualisation.oci-containers.backend
RE: Reverse proxy, we will use something like -p 127.0.0.1:80:80

Description

Create a form to add users to Authelia. The form should receive as input the username, email, and display name. Return corresponding errors if the user already exists.

• look into setting up vaultwarden
• set up accounts (blocked by #1)

host static files (generated by ssg), on our server.

• migadu signup
• dns
• email provisioning

we want to gather the logs of our services into one centralized place.
we want to be able to see historic and current usages of the server.
we want alerts when things fail.

stacks to choose from
elastic*
grafana+prom+other things
icinga
net thing