Gitops/Infrastructure repo for Frost
Find a file
2026-02-07 15:25:57 +01:00
coredns add coredns for own dyndns setup 2026-02-07 15:25:57 +01:00
forgejo use https redirect 2026-02-06 11:53:17 +01:00
gardinar add gardinar 2026-02-06 11:52:54 +01:00
heuptsache-hund use https redirect 2026-02-06 11:53:17 +01:00
matrix add matrix 2026-02-06 11:53:07 +01:00
radicale use https redirect 2026-02-06 11:53:17 +01:00
.sops.yaml initial commit 2026-01-05 16:47:39 +01:00
01_traefik_changes.yaml initial commit 2026-01-05 16:47:39 +01:00
02_cert-manager-v1.19.2.yaml initial commit 2026-01-05 16:47:39 +01:00
03_cert-manager-resources.yaml initial commit 2026-01-05 16:47:39 +01:00
README.md add to README.md 2026-01-05 16:47:56 +01:00

Setup Frost

  1. Take a new Debian 13 installation.
  2. Do apt update && apt upgrade -y.
  3. "Harden" SSH: Edit /etc/ssh/sshd_config to disable password authentication:
    PasswordAuthentication no
    Port 700
    
    The port-change doesn't really add much to security, but makes log-flooding less annoying
  4. Reboot and check if you can log in again.
  5. Install k3s via curl -sfL https://get.k3s.io | sh - curl -sfL https://get.k3s.io | INSTALL_K3S_EXEC="server --tls-san=frost.felher.org " sh -s -

Setup Local

  1. Open /etc/rancher/k3s/k3s.yaml and merge it into your ~/.kube/config. Be sure to change the server address to https://frost.felher.org:6443
  2. Just apply all the yamls