Gitops/Infrastructure repo for Frost
| forgejo | ||
| heuptsache-hund | ||
| radicale | ||
| .sops.yaml | ||
| 01_traefik_changes.yaml | ||
| 02_cert-manager-v1.19.2.yaml | ||
| 03_cert-manager-resources.yaml | ||
| README.md | ||
Setup Frost
- Take a new Debian 13 installation.
- Do
apt update && apt upgrade -y. - "Harden" SSH:
Edit
/etc/ssh/sshd_configto disable password authentication:
The port-change doesn't really add much to security, but makes log-flooding less annoyingPasswordAuthentication no Port 700 - Reboot and check if you can log in again.
- Install k3s via
curl -sfL https://get.k3s.io | sh -curl -sfL https://get.k3s.io | INSTALL_K3S_EXEC="server --tls-san=frost.felher.org " sh -s -
Setup Local
- Open /etc/rancher/k3s/k3s.yaml and merge it into your ~/.kube/config. Be
sure to change the server address to
https://frost.felher.org:6443 - Just apply all the yamls