bundlewrap/nodes/carlene.toml

hostname = "193.135.9.29"
groups = [
    "debian-bookworm",
    "webserver",
]
bundles = [
    "check-mail-received",
    "dovecot",
    "element-web",
    "forgejo",
    "matrix-media-repo",
    "matrix-stickerpicker",
    "matrix-synapse",
    "mautrix-telegram",
    "mautrix-whatsapp",
    "miniflux",
    "netbox",
    "nextcloud",
    "nodejs",
    "ntfy",
    "oidentd",
    "php",
    "postfixadmin",
    "postgresql",
    "redis",
    "rspamd",
    "smartd",
    "travelynx",
    "weechat",
    "zfs",
]

# for auto-deployment of salonkatrin.de
[metadata.apt.packages.jekyll]

[metadata.check-mail-received.t-online]
email = "franzi.kunsmann@t-online.de"
imap_host = "secureimap.t-online.de"
imap_pass = "!bwpass_attr:t-online.de/franzi.kunsmann@t-online.de:imap"

[metadata.element-web]
url = "chat.franzi.business"
version = "v1.11.85"
[metadata.element-web.config]
default_server_config.'m.homeserver'.base_url = "https://matrix.franzi.business"
default_server_config.'m.homeserver'.server_name = "franzi.business"
brand = "franzi.business"
defaultCountryCode = "DE"
jitsi.preferredDomain = "meet.ffmuc.net"

[metadata.forgejo]
version = "9.0.2"
sha1 = "5aecc64f93e8ef05c6d6f83d4b647bdb2c831d9f"
domain = "git.franzi.business"
enable_git_hooks = true
install_ssh_key = true
internal_token = "!decrypt:encrypt$gAAAAABfPncYwCX-NdBr9LdxLyGqmjRJqhmwMnWsdZy6kVOWdKrScW78xaqbJ1tpL1J4qa2hcZ7TQj3l-2mkyJNJOenGzU3TsI-gYMj9vC4m8Bhur5zboxjD4dQXaJbD1WSyHJ9sPJYsWP3Gjg6I19xeq9xMlAI6xaS9vOfuoI8nZnnQPx1NjfQEj03Jxf8a0-3F20sfICst1xRa5K48bpq1PFkK_oRojg=="
lfs_secret_key = "!decrypt:encrypt$gAAAAABfPnd1vgNDt86-91YhviQw8Z0djSp4f_tBt76klDv-ZcwxP1ryJzqJ7qnfaTe_6DYCfc82gEzvVDsyBlCoAkGpt1AI2_LCKetuSCnDPjtGvwdQl3A53lFEdG2UJl1uUiR7f8Vr"
oauth_secret_key = "!decrypt:encrypt$gAAAAABfPnbfTISbldhS0WyxVKBHVVoOMcar7Kxmh1kkmiUGd-RzbbnNzzhEER_owjttPQcACPfGKZ6WklaSsXjLq8km4P6A9QmPbC06GmHbc91m0odCb1KiY7SZeUD35PiRiGSq50dz"
security_secret_key = "!decrypt:encrypt$gAAAAABfPnc-R7pkDj4pQgHDb6pzlNYNJgiWdeBFsX7IsHSnCtNPbZxCdtSL8cHtQzVO1KbSxS7zCwssmgiR8Kj54Z-koD-FQbjpbKWoIPw8SsyeqBVlZhIeEzhw_1t7_7ZTvv1O8AePdNYel9JJb_TaAZ8Vx46ZfsEPy8zaaHrqOekHC6RAnB4="

[metadata.interfaces.'eno*']
ips = [
    "193.135.9.29/24",
    "2a0a:51c0:0:225::2/64",
]
gateway4 = "193.135.9.1"
gateway6 = "2a0a:51c0:0:225::1"

[metadata.matrix-media-repo]
admins = ["@kunsi:franzi.business"]
datastore_id = "3fff5da324ed784c771d638bb6be5917"
sha1 = "3e2bb7089b0898b86000243a82cc58ae998dc9d9"
upload_max_mb = 500
version = "v1.3.7"
[metadata.matrix-media-repo.homeservers.'franzi.business']
api = "synapse"
domain = "http://[::1]:20080/"
signing_key_path = "/etc/matrix-synapse/mmr.signing.key"

[metadata.matrix-stickerpicker]
# use this bot token: encrypt$gAAAAABfVK51ErJ6gfsOOkbRxSHDnVYmf7EihAQf7Uwj9og3TlAw64WRsA6ZVEgTSvOdLB3SMKZ-cTEhwkCOpbymq-_WLhes-hZALhN-H_oXHaxTQErJ0lARynKmjM-4ZhoGlUWlfh4Q
domain = "matrix-stickers.franzi.business"
[metadata.matrix-stickerpicker.config]
access_token = "!decrypt:encrypt$gAAAAABg-wBmGbAy-Ou1mkG2w5UyoqWmWYzDr4ZavyUQdmG_VtrUSmwHjx-qcBGIz_7NniD3zKm9GGvzRZItDu5zYiojcudYr74TkWJKhdDrgFbcWlfJJ_m3bWzrSORaTYzBGRckp2Vz_8xHgDk1W03vpT6mdIPMDzjuINssIcPs0YDth25W942tMfPA2csvLADY50qVRMJpdBOVIWba55o0g6-mAAQLOz6Ld4cCvYqZsqXsxjT8JUytJv_uSG4zgCS_aX20JlAyJWpJgT8FQF5HzIbsko_-Z9-TwtY7yllJp5Ri3n0WaDaWoMmUfhLvkMJeymmOc32A4WJBAePQ_2F-_oUDE7t97A-m3ZiMVAEefDnH5MkoiQEJTfHrJsXRkdBT_BnJlY1CoAuXpRYDdvbVDwN_qZHHHtqsno437l9S6GgDK_-sKBiojYkYsfHcJCdSEqeFGuxT"
homeserver = "https://matrix.franzi.business"
user_id = "@dimension:franzi.business"

[metadata.matrix-synapse]
admin_contact = "mailto:hostmaster@kunbox.net"
baseurl = "matrix.franzi.business"
server_name = "franzi.business"
trusted_key_servers = ["matrix.org", "161.rocks"]
additional_client_config.'im.vector.riot.jitsi'.preferredDomain = "meet.ffmuc.net"
wellknown_also_on_vhosts = ["franzi.business"]
[metadata.matrix-synapse.sliding_sync]
version = "v0.99.15"
sha1 = "cecb371ff5f1dd528cfc490484a0967dcc28cd82"
secret = "!decrypt:encrypt$gAAAAABl9yJlbEZafJ2mumtg03rW0-440NIgFcgdWGMo3Axrypugwctacy9Cq7MYtCBGjnDyNvVLI5B2QMJ9ssCD46NCsFRN3-X4u9rDtxPhRZV7rls_LQ_Csc_GsffJfvpmHbn_wsljd3I74h4ouWlYhhEQUIKwb3eErSZ_VTZhu_bC4jTa0FY="

[metadata.mautrix-telegram]
version = "v0.15.2"
homeserver.domain = "franzi.business"
homeserver.url = "https://matrix.franzi.business"
telegram.api_id = "!decrypt:encrypt$gAAAAABfVK5SmDDru-UQxitkE5VhPArnUBhaRbAqQPvAW2Fh3fd1XDrWxa3Qn4BSnJAPNWglH5wil_SXUMcIm95FMhPe8dVeMQ=="
telegram.api_token = "!decrypt:encrypt$gAAAAABfVK5jHuUly1xr9Iku362k7oF4ZYRhLGzNJh3aJpiNrLfAy_DJpTwucx4FV_g45dyQF5boqG2rgdDfwsJN_Ab95es6T4SPGiXIxJOBlvIln1Torwh16pXKchhUTn_PQ077Ll1W"
# same as for matrix-dimension
telegram.bot_token = "!decrypt:encrypt$gAAAAABfVK51ErJ6gfsOOkbRxSHDnVYmf7EihAQf7Uwj9og3TlAw64WRsA6ZVEgTSvOdLB3SMKZ-cTEhwkCOpbymq-_WLhes-hZALhN-H_oXHaxTQErJ0lARynKmjM-4ZhoGlUWlfh4Q"
provisioning.enabled = true
provisioning.shared_secret = "!decrypt:encrypt$gAAAAABfVKflEMAi07C_QGP8cy97hF-4gGPym0oF6p4WSMdAveTpx-hFsZd2s7v9ubw99yIsyKx0dHOJI0UND7hV1rKZdvjy4Qa642abZ2wwW7SWTqvuP_qVtrf6-klc2QKTzeD9c_LVsyZ2dqz_JxRPq3MRXgkubZuWOZ6FmFlAlteTffoGfWE="
[metadata.mautrix-telegram.permissions]
"'*'" = "relaybot"
'franzi.business' = "full"
"'@kunsi:franzi.business'" = "admin"

[metadata.mautrix-whatsapp]
version = "v0.11.0"
sha1 = "997c794eb246e6cc67ac050c106d54f88531f213"
permissions."'@kunsi:franzi.business'" = "admin"
[metadata.mautrix-whatsapp.homeserver]
domain = "franzi.business"
url = "https://matrix.franzi.business"

[metadata.miniflux]
domain = "rss.franzi.business"

[metadata.netbox]
domain = "netbox.franzi.business"
version = "v4.1.6"
admins.kunsi = "hostmaster@kunbox.net"

[metadata.nextcloud]
domain = "warnochwas.de"

[metadata.nginx.'security.txt']
contact = "mailto:security@kunsmann.eu"
Encryption = "https://franzi.business/gpg_hi-kunsmann.eu.asc"

[metadata.nginx.vhosts.'afra.berlin'.locations.'/']
redirect = "https://afra-berlin.de"
mode = 302

[metadata.nginx.vhosts.forgejo]
domain_aliases = ["git.kunsmann.eu"]

[metadata.nginx.vhosts.'franzi.business']
domain = "franzi.business"
webroot_config.owner = "kunsi"

[metadata.nginx.vhosts.'gaenseblum.eu'.webroot_config]
owner = "skye"

[metadata.nginx.vhosts.kunsitracker]
domain = "kunsitracker.de"
locations.'/'.target = "https://travelynx.franzi.business/"
locations.'/'.proxy_pass_host = "travelynx.franzi.business"
locations.'= /'.target = "https://travelynx.franzi.business/p/Kunsi"
locations.'= /'.proxy_pass_host = "travelynx.franzi.business"

[metadata.nginx.vhosts.mta-sts]
domain = "mta-sts.kunbox.net"
domain_aliases = [
    "mta-sts.franzi.business",
    "mta-sts.kunsmann.eu",
]
force_domain = false

[metadata.nginx.vhosts.redirector]
domain = "kunbox.net"
domain_aliases = [
    "carlene.kunbox.net",
    "kunsmann.eu",
]
[metadata.nginx.vhosts.redirector.locations.'/']
redirect = "https://franzi.business/"
[metadata.nginx.vhosts.redirector.locations.'/.well-known/openpgpkey/']
alias = "/var/www/franzi.business/.well-known/openpgpkey"
additional_config = [
    "add_header Access-Control-Allow-Origin *",
    "default_type application/octet-stream",
]

[metadata.ntfy]
domain = "ntfy.franzi.business"
ratelimit-exempt-hosts = [
    "carlene",
    "icinga2",
]

[metadata.php]
version = "8.2"
packages = [
    'gd',
    'imagick',
    'imap',
    'intl',
    'mbstring',
    'opcache',
    'pgsql',
    'readline',
    'xml',
    'yaml',
]

[metadata.postfix]
message_size_limit_mb = 100
myhostname = "mail.franzi.business"
blocked_recipients = [
    "!decrypt:encrypt$gAAAAABlrPHMqx7o9pscfSx4Elayrzwun9jcTYOM4XrcAoUWaHJ9vP_7P5G7V3nwdB8pWfObNew-2IOihn5EPS-0ej2gn9rI4iDnMG_6S2IBCDYMqZMn1W0=", # deadname
    "tectu@kunsmann.eu",
]

[metadata.postfixadmin]
domain = "postfixadmin.franzi.business"
setup_password = "!decrypt:encrypt$gAAAAABgnNGpAqUs--qBXII9ZPcHtxaELy9e2Dx9O44n4l0O4nMHPoIyaPW5HkvpQ2zWTlh5OfjjOgunRtE_voJuY0Kdtji37ixAnuL9ErOJ0LDY5QfMkNPUgPs5alwz1baqYq6rqJ7NDmB0gHraY46v5eG79R2EyQ=="
version = "3.3.13"

[metadata.postgresql]
version = 15

[metadata.rspamd]
ignore_spam_check_for_ips = [
    # entropia
    '45.140.180.32/27', # Entropia e. V.
    '45.140.180.112/28', # MicroPOC
    '2a0e:c5c0:0:201::/64', # Entropia e. V.
    '2a0e:c5c0:0:307::/64', # MicroPOC

    # c3kl
    '116.202.19.236',
    '2a01:4f8:1c17:cc52::/64',

    # ccc
    '212.12.55.65',
    '212.12.55.67',
    '2a00:14b0:4200:3000:23:55:0:65',

    # IN-Berlin mailman
    '130.133.8.35',
    '192.109.42.28',
    '192.109.42.122',
    '193.29.188.9',
    '217.197.80.23',
    '217.197.80.134',
    '2001:bf0:c000:a::2:134',

    # c3voc
    '185.106.84.32/26',
    '2001:67c:20a0:e::/64',

    # DENOG
    '195.20.121.100',
    '2001:1440:201:101::5',
]
password = "!bwpass:bw/rx300/rspamd"
dkim = "uO4aNejDvVdw8BKne3KJIqAvCQMJ0416"

[metadata.smartd]
disks = [
    "/dev/disk/by-id/nvme-SAMSUNG_MZVL22T0HBLB-00B00_S677NF0W508470",
    "/dev/disk/by-id/nvme-SAMSUNG_MZVL22T0HBLB-00B00_S677NX0W114380",
]

[metadata.travelynx]
version = "2.8.40"
mail_from = "travelynx@franzi.business"
domain = "travelynx.franzi.business"

[metadata.users.skye]
ssh_pubkey = [
    "ssh-rsa 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",
]

[metadata.weechat]
user = "kunsi"
relay_domain = "irc.franzi.business"

[[metadata.zfs.pools.tank.when_creating.config]]
devices = [
    "/dev/nvme0n1p3",
    "/dev/nvme1n1p3",
]
type = "mirror"

[metadata.zfs.datasets.tank]
primarycache = "metadata"

[metadata.zfs.datasets.'tank/sewfile']
mountpoint = "/mnt/sewfile/"

[metadata.vm]
cpu = 24
ram = 64
EHLO carlene 2023-07-13 18:09:04 +00:00			`hostname = "193.135.9.29"`
			`groups = [`
			`"debian-bookworm",`
move matrix from rx300 to carlene 2023-07-15 05:01:00 +00:00			`"webserver",`
EHLO carlene 2023-07-13 18:09:04 +00:00			`]`
			`bundles = [`
move mail from rx300 to carlene 2023-09-01 03:55:27 +00:00			`"check-mail-received",`
			`"dovecot",`
move element-web from rx300 to carlene 2023-07-23 13:48:07 +00:00			`"element-web",`
move forgejo from rx300 to carlene 2023-08-02 14:38:32 +00:00			`"forgejo",`
move matrix from rx300 to carlene 2023-07-15 05:01:00 +00:00			`"matrix-media-repo",`
replace matrix-dimension on rx300 with matrix-stickerpicker on carlene 2023-09-02 11:35:04 +00:00			`"matrix-stickerpicker",`
move matrix from rx300 to carlene 2023-07-15 05:01:00 +00:00			`"matrix-synapse",`
			`"mautrix-telegram",`
			`"mautrix-whatsapp",`
migrate miniflux from rx300 to carlene 2023-08-27 07:17:55 +00:00			`"miniflux",`
migrate netbox from rx300 to carlene 2023-08-02 06:07:36 +00:00			`"netbox",`
add bundle:nextcloud to carlene 2023-09-02 19:14:38 +00:00			`"nextcloud",`
move element-web from rx300 to carlene 2023-07-23 13:48:07 +00:00			`"nodejs",`
migrate ntfy from rx300 to carlene 2023-08-27 07:38:06 +00:00			`"ntfy",`
install oidentd on carlene, fix dependencies 2023-09-24 08:40:47 +00:00			`"oidentd",`
move mail from rx300 to carlene 2023-09-01 03:55:27 +00:00			`"php",`
			`"postfixadmin",`
			`"postgresql",`
move matrix from rx300 to carlene 2023-07-15 05:01:00 +00:00			`"redis",`
move mail from rx300 to carlene 2023-09-01 03:55:27 +00:00			`"rspamd",`
carlene: add smartd 2023-07-13 19:31:44 +00:00			`"smartd",`
migrate travelynx to carlene 2023-08-01 19:22:28 +00:00			`"travelynx",`
add bundle:weechat, migrate weechat from rx300 to carlene 2023-08-25 10:51:19 +00:00			`"weechat",`
EHLO carlene 2023-07-13 18:09:04 +00:00			`"zfs",`
			`]`

update matrix-media-repo to 1.3.1 2023-09-09 18:39:23 +00:00			`# for auto-deployment of salonkatrin.de`
			`[metadata.apt.packages.jekyll]`

carlene: add bundle:check-mail-received 2023-07-13 18:28:33 +00:00			`[metadata.check-mail-received.t-online]`
			`email = "franzi.kunsmann@t-online.de"`
			`imap_host = "secureimap.t-online.de"`
			`imap_pass = "!bwpass_attr:t-online.de/franzi.kunsmann@t-online.de:imap"`

move element-web from rx300 to carlene 2023-07-23 13:48:07 +00:00			`[metadata.element-web]`
			`url = "chat.franzi.business"`
update element-web to 1.11.85 2024-11-15 09:24:13 +00:00			`version = "v1.11.85"`
move element-web from rx300 to carlene 2023-07-23 13:48:07 +00:00			`[metadata.element-web.config]`
			`default_server_config.'m.homeserver'.base_url = "https://matrix.franzi.business"`
			`default_server_config.'m.homeserver'.server_name = "franzi.business"`
			`brand = "franzi.business"`
			`defaultCountryCode = "DE"`
			`jitsi.preferredDomain = "meet.ffmuc.net"`

move forgejo from rx300 to carlene 2023-08-02 14:38:32 +00:00			`[metadata.forgejo]`
update forgejo to 9.0.2 2024-11-16 11:11:01 +00:00			`version = "9.0.2"`
			`sha1 = "5aecc64f93e8ef05c6d6f83d4b647bdb2c831d9f"`
move forgejo from rx300 to carlene 2023-08-02 14:38:32 +00:00			`domain = "git.franzi.business"`
			`enable_git_hooks = true`
			`install_ssh_key = true`
			`internal_token = "!decrypt:encrypt$gAAAAABfPncYwCX-NdBr9LdxLyGqmjRJqhmwMnWsdZy6kVOWdKrScW78xaqbJ1tpL1J4qa2hcZ7TQj3l-2mkyJNJOenGzU3TsI-gYMj9vC4m8Bhur5zboxjD4dQXaJbD1WSyHJ9sPJYsWP3Gjg6I19xeq9xMlAI6xaS9vOfuoI8nZnnQPx1NjfQEj03Jxf8a0-3F20sfICst1xRa5K48bpq1PFkK_oRojg=="`
			`lfs_secret_key = "!decrypt:encrypt$gAAAAABfPnd1vgNDt86-91YhviQw8Z0djSp4f_tBt76klDv-ZcwxP1ryJzqJ7qnfaTe_6DYCfc82gEzvVDsyBlCoAkGpt1AI2_LCKetuSCnDPjtGvwdQl3A53lFEdG2UJl1uUiR7f8Vr"`
			`oauth_secret_key = "!decrypt:encrypt$gAAAAABfPnbfTISbldhS0WyxVKBHVVoOMcar7Kxmh1kkmiUGd-RzbbnNzzhEER_owjttPQcACPfGKZ6WklaSsXjLq8km4P6A9QmPbC06GmHbc91m0odCb1KiY7SZeUD35PiRiGSq50dz"`
			`security_secret_key = "!decrypt:encrypt$gAAAAABfPnc-R7pkDj4pQgHDb6pzlNYNJgiWdeBFsX7IsHSnCtNPbZxCdtSL8cHtQzVO1KbSxS7zCwssmgiR8Kj54Z-koD-FQbjpbKWoIPw8SsyeqBVlZhIeEzhw_1t7_7ZTvv1O8AePdNYel9JJb_TaAZ8Vx46ZfsEPy8zaaHrqOekHC6RAnB4="`

carlene: fix network config Apparently, the DC technicians are unable to plug in a server into the correct network ports after changing disks ... 2024-08-10 17:12:55 +00:00			`[metadata.interfaces.'eno*']`
EHLO carlene 2023-07-13 18:09:04 +00:00			`ips = [`
			`"193.135.9.29/24",`
move matrix from rx300 to carlene 2023-07-15 05:01:00 +00:00			`"2a0a:51c0:0:225::2/64",`
EHLO carlene 2023-07-13 18:09:04 +00:00			`]`
			`gateway4 = "193.135.9.1"`
move matrix from rx300 to carlene 2023-07-15 05:01:00 +00:00			`gateway6 = "2a0a:51c0:0:225::1"`

			`[metadata.matrix-media-repo]`
			`admins = ["@kunsi:franzi.business"]`
update matrix-media-repo to 1.3.1 2023-09-09 18:39:23 +00:00			`datastore_id = "3fff5da324ed784c771d638bb6be5917"`
update matrix-media-repo to 1.3.7 2024-08-10 17:13:48 +00:00			`sha1 = "3e2bb7089b0898b86000243a82cc58ae998dc9d9"`
move matrix from rx300 to carlene 2023-07-15 05:01:00 +00:00			`upload_max_mb = 500`
update matrix-media-repo to 1.3.7 2024-08-10 17:13:48 +00:00			`version = "v1.3.7"`
move matrix from rx300 to carlene 2023-07-15 05:01:00 +00:00			`[metadata.matrix-media-repo.homeservers.'franzi.business']`
			`api = "synapse"`
			`domain = "http://[::1]:20080/"`
update matrix-media-repo to 1.3.6 2024-07-12 16:46:10 +00:00			`signing_key_path = "/etc/matrix-synapse/mmr.signing.key"`
move matrix from rx300 to carlene 2023-07-15 05:01:00 +00:00
replace matrix-dimension on rx300 with matrix-stickerpicker on carlene 2023-09-02 11:35:04 +00:00			`[metadata.matrix-stickerpicker]`
			`# use this bot token: encrypt$gAAAAABfVK51ErJ6gfsOOkbRxSHDnVYmf7EihAQf7Uwj9og3TlAw64WRsA6ZVEgTSvOdLB3SMKZ-cTEhwkCOpbymq-_WLhes-hZALhN-H_oXHaxTQErJ0lARynKmjM-4ZhoGlUWlfh4Q`
			`domain = "matrix-stickers.franzi.business"`
			`[metadata.matrix-stickerpicker.config]`
			`access_token = "!decrypt:encrypt$gAAAAABg-wBmGbAy-Ou1mkG2w5UyoqWmWYzDr4ZavyUQdmG_VtrUSmwHjx-qcBGIz_7NniD3zKm9GGvzRZItDu5zYiojcudYr74TkWJKhdDrgFbcWlfJJ_m3bWzrSORaTYzBGRckp2Vz_8xHgDk1W03vpT6mdIPMDzjuINssIcPs0YDth25W942tMfPA2csvLADY50qVRMJpdBOVIWba55o0g6-mAAQLOz6Ld4cCvYqZsqXsxjT8JUytJv_uSG4zgCS_aX20JlAyJWpJgT8FQF5HzIbsko_-Z9-TwtY7yllJp5Ri3n0WaDaWoMmUfhLvkMJeymmOc32A4WJBAePQ_2F-_oUDE7t97A-m3ZiMVAEefDnH5MkoiQEJTfHrJsXRkdBT_BnJlY1CoAuXpRYDdvbVDwN_qZHHHtqsno437l9S6GgDK_-sKBiojYkYsfHcJCdSEqeFGuxT"`
			`homeserver = "https://matrix.franzi.business"`
			`user_id = "@dimension:franzi.business"`

move matrix from rx300 to carlene 2023-07-15 05:01:00 +00:00			`[metadata.matrix-synapse]`
			`admin_contact = "mailto:hostmaster@kunbox.net"`
			`baseurl = "matrix.franzi.business"`
			`server_name = "franzi.business"`
remove finallycoffee.eu from trusted key servers 2024-09-30 08:20:01 +00:00			`trusted_key_servers = ["matrix.org", "161.rocks"]`
move matrix from rx300 to carlene 2023-07-15 05:01:00 +00:00			`additional_client_config.'im.vector.riot.jitsi'.preferredDomain = "meet.ffmuc.net"`
move some stuff from rx300 to carlene 2023-09-03 16:25:48 +00:00			`wellknown_also_on_vhosts = ["franzi.business"]`
bundles/matrix-synapse: add sliding-sync proxy 2024-03-17 17:32:28 +00:00			`[metadata.matrix-synapse.sliding_sync]`
			`version = "v0.99.15"`
			`sha1 = "cecb371ff5f1dd528cfc490484a0967dcc28cd82"`
			`secret = "!decrypt:encrypt$gAAAAABl9yJlbEZafJ2mumtg03rW0-440NIgFcgdWGMo3Axrypugwctacy9Cq7MYtCBGjnDyNvVLI5B2QMJ9ssCD46NCsFRN3-X4u9rDtxPhRZV7rls_LQ_Csc_GsffJfvpmHbn_wsljd3I74h4ouWlYhhEQUIKwb3eErSZ_VTZhu_bC4jTa0FY="`
move matrix from rx300 to carlene 2023-07-15 05:01:00 +00:00
			`[metadata.mautrix-telegram]`
update mautrix-telegram to 0.15.2 2024-07-19 17:21:50 +00:00			`version = "v0.15.2"`
move matrix from rx300 to carlene 2023-07-15 05:01:00 +00:00			`homeserver.domain = "franzi.business"`
			`homeserver.url = "https://matrix.franzi.business"`
			`telegram.api_id = "!decrypt:encrypt$gAAAAABfVK5SmDDru-UQxitkE5VhPArnUBhaRbAqQPvAW2Fh3fd1XDrWxa3Qn4BSnJAPNWglH5wil_SXUMcIm95FMhPe8dVeMQ=="`
			`telegram.api_token = "!decrypt:encrypt$gAAAAABfVK5jHuUly1xr9Iku362k7oF4ZYRhLGzNJh3aJpiNrLfAy_DJpTwucx4FV_g45dyQF5boqG2rgdDfwsJN_Ab95es6T4SPGiXIxJOBlvIln1Torwh16pXKchhUTn_PQ077Ll1W"`
			`# same as for matrix-dimension`
			`telegram.bot_token = "!decrypt:encrypt$gAAAAABfVK51ErJ6gfsOOkbRxSHDnVYmf7EihAQf7Uwj9og3TlAw64WRsA6ZVEgTSvOdLB3SMKZ-cTEhwkCOpbymq-_WLhes-hZALhN-H_oXHaxTQErJ0lARynKmjM-4ZhoGlUWlfh4Q"`
			`provisioning.enabled = true`
			`provisioning.shared_secret = "!decrypt:encrypt$gAAAAABfVKflEMAi07C_QGP8cy97hF-4gGPym0oF6p4WSMdAveTpx-hFsZd2s7v9ubw99yIsyKx0dHOJI0UND7hV1rKZdvjy4Qa642abZ2wwW7SWTqvuP_qVtrf6-klc2QKTzeD9c_LVsyZ2dqz_JxRPq3MRXgkubZuWOZ6FmFlAlteTffoGfWE="`
			`[metadata.mautrix-telegram.permissions]`
			`"'*'" = "relaybot"`
			`'franzi.business' = "full"`
			`"'@kunsi:franzi.business'" = "admin"`

			`[metadata.mautrix-whatsapp]`
update mautrix-whatsapp to 0.11.0 2024-10-28 15:16:36 +00:00			`version = "v0.11.0"`
			`sha1 = "997c794eb246e6cc67ac050c106d54f88531f213"`
move matrix from rx300 to carlene 2023-07-15 05:01:00 +00:00			`permissions."'@kunsi:franzi.business'" = "admin"`
			`[metadata.mautrix-whatsapp.homeserver]`
			`domain = "franzi.business"`
			`url = "https://matrix.franzi.business"`

migrate miniflux from rx300 to carlene 2023-08-27 07:17:55 +00:00			`[metadata.miniflux]`
			`domain = "rss.franzi.business"`

migrate netbox from rx300 to carlene 2023-08-02 06:07:36 +00:00			`[metadata.netbox]`
			`domain = "netbox.franzi.business"`
update netbox to 4.1.6 2024-11-15 09:24:28 +00:00			`version = "v4.1.6"`
migrate netbox from rx300 to carlene 2023-08-02 06:07:36 +00:00			`admins.kunsi = "hostmaster@kunbox.net"`

add bundle:nextcloud to carlene 2023-09-02 19:14:38 +00:00			`[metadata.nextcloud]`
			`domain = "warnochwas.de"`

move mail from rx300 to carlene 2023-09-01 03:55:27 +00:00			`[metadata.nginx.'security.txt']`
			`contact = "mailto:security@kunsmann.eu"`
			`Encryption = "https://franzi.business/gpg_hi-kunsmann.eu.asc"`

move afra.berlin redirect to carlene 2024-09-29 11:46:21 +00:00			`[metadata.nginx.vhosts.'afra.berlin'.locations.'/']`
			`redirect = "https://afra-berlin.de"`
			`mode = 302`

carlene: keep git.kunsmann.eu alias around 2024-02-13 12:47:55 +00:00			`[metadata.nginx.vhosts.forgejo]`
			`domain_aliases = ["git.kunsmann.eu"]`

move some stuff from rx300 to carlene 2023-09-03 16:25:48 +00:00			`[metadata.nginx.vhosts.'franzi.business']`
			`domain = "franzi.business"`
carlene: ensure kunsi can write to the franzi.business vhost 2024-03-16 09:51:56 +00:00			`webroot_config.owner = "kunsi"`
move some stuff from rx300 to carlene 2023-09-03 16:25:48 +00:00
carlene: add web vhost for skye 2023-08-23 10:19:24 +00:00			`[metadata.nginx.vhosts.'gaenseblum.eu'.webroot_config]`
			`owner = "skye"`

carlene: add kunsitracker.de 2024-05-12 17:43:07 +00:00			`[metadata.nginx.vhosts.kunsitracker]`
			`domain = "kunsitracker.de"`
carlene: rework kunsitracker 2024-10-26 06:20:01 +00:00			`locations.'/'.target = "https://travelynx.franzi.business/"`
			`locations.'/'.proxy_pass_host = "travelynx.franzi.business"`
			`locations.'= /'.target = "https://travelynx.franzi.business/p/Kunsi"`
			`locations.'= /'.proxy_pass_host = "travelynx.franzi.business"`
carlene: add kunsitracker.de 2024-05-12 17:43:07 +00:00
move some stuff from rx300 to carlene 2023-09-03 16:25:48 +00:00			`[metadata.nginx.vhosts.mta-sts]`
			`domain = "mta-sts.kunbox.net"`
			`domain_aliases = [`
			`"mta-sts.franzi.business",`
			`"mta-sts.kunsmann.eu",`
			`]`
bundles/nginx: add option to not redirect domain aliases 2024-02-13 13:01:40 +00:00			`force_domain = false`
move some stuff from rx300 to carlene 2023-09-03 16:25:48 +00:00
			`[metadata.nginx.vhosts.redirector]`
			`domain = "kunbox.net"`
			`domain_aliases = [`
			`"carlene.kunbox.net",`
			`"kunsmann.eu",`
			`]`
			`[metadata.nginx.vhosts.redirector.locations.'/']`
			`redirect = "https://franzi.business/"`
			`[metadata.nginx.vhosts.redirector.locations.'/.well-known/openpgpkey/']`
			`alias = "/var/www/franzi.business/.well-known/openpgpkey"`
			`additional_config = [`
			`"add_header Access-Control-Allow-Origin *",`
			`"default_type application/octet-stream",`
			`]`

migrate ntfy from rx300 to carlene 2023-08-27 07:38:06 +00:00			`[metadata.ntfy]`
			`domain = "ntfy.franzi.business"`
			`ratelimit-exempt-hosts = [`
			`"carlene",`
carlene: add new icinga2 host to ntfy exemptions 2023-09-09 13:28:07 +00:00			`"icinga2",`
migrate ntfy from rx300 to carlene 2023-08-27 07:38:06 +00:00			`]`

move mail from rx300 to carlene 2023-09-01 03:55:27 +00:00			`[metadata.php]`
			`version = "8.2"`
			`packages = [`
			`'gd',`
			`'imagick',`
			`'imap',`
			`'intl',`
			`'mbstring',`
			`'opcache',`
			`'pgsql',`
			`'readline',`
			`'xml',`
			`'yaml',`
			`]`

			`[metadata.postfix]`
			`message_size_limit_mb = 100`
			`myhostname = "mail.franzi.business"`
carlene: add some mail addresses to blocked 2024-01-23 08:31:02 +00:00			`blocked_recipients = [`
			`"!decrypt:encrypt$gAAAAABlrPHMqx7o9pscfSx4Elayrzwun9jcTYOM4XrcAoUWaHJ9vP_7P5G7V3nwdB8pWfObNew-2IOihn5EPS-0ej2gn9rI4iDnMG_6S2IBCDYMqZMn1W0=", # deadname`
			`"tectu@kunsmann.eu",`
			`]`
move mail from rx300 to carlene 2023-09-01 03:55:27 +00:00
			`[metadata.postfixadmin]`
			`domain = "postfixadmin.franzi.business"`
			`setup_password = "!decrypt:encrypt$gAAAAABgnNGpAqUs--qBXII9ZPcHtxaELy9e2Dx9O44n4l0O4nMHPoIyaPW5HkvpQ2zWTlh5OfjjOgunRtE_voJuY0Kdtji37ixAnuL9ErOJ0LDY5QfMkNPUgPs5alwz1baqYq6rqJ7NDmB0gHraY46v5eG79R2EyQ=="`
			`version = "3.3.13"`

move matrix from rx300 to carlene 2023-07-15 05:01:00 +00:00			`[metadata.postgresql]`
			`version = 15`
EHLO carlene 2023-07-13 18:09:04 +00:00
move mail from rx300 to carlene 2023-09-01 03:55:27 +00:00			`[metadata.rspamd]`
			`ignore_spam_check_for_ips = [`
			`# entropia`
			`'45.140.180.32/27', # Entropia e. V.`
			`'45.140.180.112/28', # MicroPOC`
			`'2a0e:c5c0:0:201::/64', # Entropia e. V.`
			`'2a0e:c5c0:0:307::/64', # MicroPOC`

			`# c3kl`
			`'116.202.19.236',`
			`'2a01:4f8:1c17:cc52::/64',`

			`# ccc`
			`'212.12.55.65',`
			`'212.12.55.67',`
			`'2a00:14b0:4200:3000:23:55:0:65',`

			`# IN-Berlin mailman`
			`'130.133.8.35',`
			`'192.109.42.28',`
			`'192.109.42.122',`
			`'193.29.188.9',`
			`'217.197.80.23',`
			`'217.197.80.134',`
			`'2001:bf0:c000:a::2:134',`

			`# c3voc`
			`'185.106.84.32/26',`
			`'2001:67c:20a0:e::/64',`

			`# DENOG`
			`'195.20.121.100',`
			`'2001:1440:201:101::5',`
			`]`
			`password = "!bwpass:bw/rx300/rspamd"`
			`dkim = "uO4aNejDvVdw8BKne3KJIqAvCQMJ0416"`

carlene: add smartd 2023-07-13 19:31:44 +00:00			`[metadata.smartd]`
			`disks = [`
bundles/smartd: do not try to guess disk names 2024-10-24 17:25:00 +00:00			`"/dev/disk/by-id/nvme-SAMSUNG_MZVL22T0HBLB-00B00_S677NF0W508470",`
			`"/dev/disk/by-id/nvme-SAMSUNG_MZVL22T0HBLB-00B00_S677NX0W114380",`
carlene: add smartd 2023-07-13 19:31:44 +00:00			`]`

migrate travelynx to carlene 2023-08-01 19:22:28 +00:00			`[metadata.travelynx]`
update travelynx to 2.8.40 2024-09-30 08:21:05 +00:00			`version = "2.8.40"`
migrate travelynx to carlene 2023-08-01 19:22:28 +00:00			`mail_from = "travelynx@franzi.business"`
			`domain = "travelynx.franzi.business"`

carlene: add web vhost for skye 2023-08-23 10:19:24 +00:00			`[metadata.users.skye]`
			`ssh_pubkey = [`
			"ssh-rsa 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",
			`]`

add bundle:weechat, migrate weechat from rx300 to carlene 2023-08-25 10:51:19 +00:00			`[metadata.weechat]`
			`user = "kunsi"`
			`relay_domain = "irc.franzi.business"`

EHLO carlene 2023-07-13 18:09:04 +00:00			`[[metadata.zfs.pools.tank.when_creating.config]]`
			`devices = [`
			`"/dev/nvme0n1p3",`
			`"/dev/nvme1n1p3",`
			`]`
			`type = "mirror"`

move matrix from rx300 to carlene 2023-07-15 05:01:00 +00:00			`[metadata.zfs.datasets.tank]`
			`primarycache = "metadata"`

carlene: add sewfile zfs dataset 2024-03-03 11:47:24 +00:00			`[metadata.zfs.datasets.'tank/sewfile']`
			`mountpoint = "/mnt/sewfile/"`

EHLO carlene 2023-07-13 18:09:04 +00:00			`[metadata.vm]`
			`cpu = 24`
			`ram = 64`