22 commits

Author	SHA1	Message	Date
Earl Warren	b3cfba4952	use IPv6 local address, not link local ... https://en.wikipedia.org/wiki/Unique_local_address	2024-10-17 17:15:47 +02:00
Earl Warren	8f0c9c17b9	re-order section for reseting the cluster ... so that they can be applied in order	2024-10-17 14:55:46 +02:00
Earl Warren	644faf989e	force nfs version 4 ... It is equivalent to -t nfs4 except there is no way to specify this on mount and it has to be done via options	2024-10-17 14:23:19 +02:00
Earl Warren	3f79d6d365	allow 10.0.0.0/8 in the firewall	2024-10-17 13:36:16 +02:00
Earl Warren	b5f7d949ab	nfs mounts must not be sync ... This is a 10x performance hit. It is reasonable to mount NFS in async. Just like with locally mounted disk, there is a risk of data loss. But since it honors requests to sync, the application is in control of when it matters. An application (database, git, forgejo even) would have a bad design if, for instance, it returned success on a write operation without issuing a sync.	2024-10-17 13:36:16 +02:00
Earl Warren	40513d541a	nfs: define a root so that nfsv4 is used instead of nfsv3	2024-10-17 13:36:16 +02:00
Earl Warren	f76d6ea2a9	use and create a NFS backed PVC	2024-10-17 13:36:16 +02:00
Earl Warren	dfb473fd00	nginx stream reverse proxy: use default timeout ... 3s is too short for connect timeout when the user it manually typing a password http://nginx.org/en/docs/stream/ngx_stream_proxy_module.html#proxy_connect_timeout	2024-10-13 14:51:16 +03:00
Earl Warren	f70e35d1e8	k8s: simplify installation instructions	2024-10-06 12:38:53 +02:00
Earl Warren	efedb1db3c	k8s: the ipv6 range for nodes must not conflict with cluster/service	2024-10-06 12:13:57 +02:00
earl-warren	aeda8706d3	Merge pull request 'note on Hetzner firewall' (#17) from earl-warren/documentation:wip-k8s-network into main ... Reviewed-on: https://code.forgejo.org/infrastructure/documentation/pulls/17	2024-10-05 10:25:12 +00:00
earl-warren	bed22adf2b	Merge pull request 'k8s three nodes cluster' (#19) from earl-warren/documentation:wip-k8s-cluster into main ... Reviewed-on: https://code.forgejo.org/infrastructure/documentation/pulls/19	2024-10-05 10:25:00 +00:00
Earl Warren	7ec8e13b84	setup NFS to use the DRBD volume ... Closes #2	2024-10-05 12:23:22 +02:00
Earl Warren	fb8209f378	k8s three nodes cluster ... Closes #18	2024-10-05 12:07:33 +02:00
Earl Warren	a503942e6a	note on Hetzner firewall	2024-10-05 12:00:12 +02:00
Earl Warren	e7c40323a2	permanently redirect port 80 to 443 ... Closes #14	2024-10-01 11:12:59 +02:00
Earl Warren	015327b5e3	hetzner{05,06} k8s node & network configuration	2024-09-29 17:52:24 +02:00
Earl Warren	52d46196dd	nginx configuration for rate limiting crawlers ... Fixes: #8	2024-09-18 15:51:10 +02:00
Earl Warren	5b4570e204	ssh port forwarding via nginx stream for code.forgejo.org ... Fixes: #6	2024-09-17 08:51:04 +02:00
Earl Warren	f77193590b	add link to the mirror	2024-09-16 16:41:36 +02:00
Earl Warren	bd6143997c	migrate from the Forgejo documentation	2024-09-14 13:47:16 +02:00
earl-warren	a4704558a7	Initial commit	2024-09-14 11:43:39 +00:00