Joakim
30a882b1e1
- Fix authentik Caddy template to use localhost instead of variable for consistency - Improve Caddy installation logic with better conditional checks - Fix version checking and plugin detection for more reliable deployments - Add cleanup task condition for DNS challenge installations These changes improve deployment reliability and consistency.
Rick's Infra
Arch Linux VPS
Ansible
Infrastructure as code for setting up new instance.
- Security
- SSH
- Firewall
- Fail2ban
- Kernel hardening
- Base packages
- Monitoring/Logging
- Backup
Services
Services are managed by serviced
Caddy
Reverse proxy.
Containers
Containers are managed by rootless Podman.
Documentation
Service Integration
- Service Integration Guide - How to add containerized services with PostgreSQL/Valkey access
Role Documentation
- Authentik Role - Authentication service with Unix socket implementation
- PostgreSQL Role - Database service with Unix socket support
- Valkey Role - Cache service with Unix socket support
- Caddy Role - Reverse proxy and SSL termination
Infrastructure Guides
- Deployment Guide - Complete deployment walkthrough
- Security Hardening - Security configuration and best practices