Gitops/Infrastructure repo for Frost
Find a file
2026-01-06 19:01:29 +01:00
forgejo add heuptsache-hund 2026-01-05 23:02:40 +01:00
heuptsache-hund add heuptsache-hund 2026-01-05 23:02:40 +01:00
radicale add radicale 2026-01-06 19:01:29 +01:00
.sops.yaml initial commit 2026-01-05 16:47:39 +01:00
01_traefik_changes.yaml initial commit 2026-01-05 16:47:39 +01:00
02_cert-manager-v1.19.2.yaml initial commit 2026-01-05 16:47:39 +01:00
03_cert-manager-resources.yaml initial commit 2026-01-05 16:47:39 +01:00
README.md add to README.md 2026-01-05 16:47:56 +01:00

Setup Frost

  1. Take a new Debian 13 installation.
  2. Do apt update && apt upgrade -y.
  3. "Harden" SSH: Edit /etc/ssh/sshd_config to disable password authentication:
    PasswordAuthentication no
    Port 700
    
    The port-change doesn't really add much to security, but makes log-flooding less annoying
  4. Reboot and check if you can log in again.
  5. Install k3s via curl -sfL https://get.k3s.io | sh - curl -sfL https://get.k3s.io | INSTALL_K3S_EXEC="server --tls-san=frost.felher.org " sh -s -

Setup Local

  1. Open /etc/rancher/k3s/k3s.yaml and merge it into your ~/.kube/config. Be sure to change the server address to https://frost.felher.org:6443
  2. Just apply all the yamls