304ce8aa54
home.router: a bit more firewall rules
2024-02-25 20:56:13 +01:00
b89ba32f4c
home.router: allow forwarding for new vlan
2024-02-25 20:55:53 +01:00
9e59bb044a
nodes/home.*: add ipv6 site-local ip addressing and v6-only vlan
2024-02-25 20:50:25 +01:00
7d4624ce62
remove users/$user/is_admin metadata, directly write sudo_commands instead
2024-02-25 15:29:10 +01:00
c02a1f2a90
clean up some users
2024-02-03 19:12:53 +01:00
2497800f4a
home.router: remove wg external_hostname
2023-12-10 16:59:24 +01:00
493dc91e0d
home.router: disable pppd restart at night
2023-12-10 16:59:14 +01:00
cd48cf495d
rework firewall setup
2023-09-24 21:01:51 +02:00
d999895450
home.router: let dyndns have ipv6 please
2023-09-23 16:42:00 +02:00
07de570175
auto-generate full wireguard mesh between all nodes in libs.s2s.WG_AUTOGEN_NODES
2023-09-23 15:06:16 +02:00
4f260932c3
bundles/wireguard: health checks for everyone
2023-09-12 20:15:19 +02:00
9bde0d9410
home.router: upgrade to bookworm and switch to kea-dhcp-server
2023-09-10 22:02:14 +02:00
234e81431d
bundles/wireguard: easier snat setup
2023-09-10 21:27:03 +02:00
25a484f04e
remove ovh nodes from monitoring
2023-09-09 17:46:30 +02:00
e6e9e425fc
move icinga2 to new host
2023-09-09 14:12:24 +02:00
a6f865104c
rename nameservers, once again
2023-05-16 20:05:40 +02:00
f8416215d5
ns-ionos: move powerdnsadmin webinterface to new hostname
2023-05-16 18:08:00 +02:00
9b11e69a73
home.router: fix vlans
2023-03-29 18:19:11 +02:00
317a3df11d
home.router: rotate all the vlans
2023-03-29 16:17:44 +00:00
527181bba8
home.router: fix dyndns hostname
2023-01-29 11:15:59 +01:00
f790e2cee0
bundles/vnstat: rework bundle
2022-12-12 07:56:23 +01:00
9c8523ab49
home.{nas,router}: fixup icinga dependencies
2022-12-11 18:03:09 +01:00
1189b58cd2
home.router: new hardware
2022-12-11 17:43:33 +01:00
afa1e4abb7
move usv telegraf info collection to influxdb host
2022-12-11 17:42:59 +01:00
e8d24bc363
bundles/pppd: automatically add interface entry for ignored interface
2022-12-11 17:42:08 +01:00
Sophie Schiller
1677670441
fossgis die drölfte
kunsi/bundlewrap/pipeline/head This commit looks good
2022-03-20 11:13:43 +01:00
Sophie Schiller
11cd77436e
fossgis die drölfte
kunsi/bundlewrap/pipeline/head This commit looks good
2022-03-15 21:48:26 +01:00
Sophie Schiller
d989abcf68
open firewall to rechenmonster for fossgis releasing
kunsi/bundlewrap/pipeline/head This commit looks good
2022-03-12 11:37:32 +01:00
Sophie Schiller
59cd441292
open firewall to rechenmonster for fossgis releasing
kunsi/bundlewrap/pipeline/head There was a failure building this commit
2022-03-11 16:39:46 +01:00
Sophie Schiller
8a2ee1bd00
open firewall to rechenmonster for fossgis releasing
kunsi/bundlewrap/pipeline/head There was a failure building this commit
2022-03-10 18:20:56 +01:00
Sophie Schiller
6c6066d93a
open firewall to rechenmonster for fossgis releasing
kunsi/bundlewrap/pipeline/head There was a failure building this commit
2022-03-09 20:31:13 +01:00
Sophie Schiller
4458afe654
open firewall to rechenmonster for fossgis releasing
kunsi/bundlewrap/pipeline/head There was a failure building this commit
2022-03-08 15:06:42 +01:00
0d865c93d4
bundles/cron: use MAILTO=, rework metadata syntax
2022-02-05 11:41:41 +01:00
2b06c77439
bundles/pppd: allow dynamic configuration of nftables rules
kunsi/bundlewrap/pipeline/head This commit looks good
2021-12-14 16:18:11 +01:00
0101e0c92d
bundles/nftables: store rules in dedicated files instead of nftables.conf
kunsi/bundlewrap/pipeline/pr-main This commit looks good
kunsi/bundlewrap/pipeline/head This commit looks good
2021-12-14 15:27:30 +01:00
74f5b25f0d
various fixes, remove some TODOs
2021-11-27 10:40:20 +01:00
f02088d9fe
nodes/home.router: enable wg_health_check
kunsi/bundlewrap/pipeline/head This commit looks good
2021-10-14 09:02:29 +02:00
b7482008df
home.router: add hosts entry for wireguard box
kunsi/bundlewrap/pipeline/head This commit looks good
2021-09-30 06:48:22 +02:00
13057d6f76
home.router: remove openvpn client
2021-09-29 20:36:34 +02:00
89f91f3857
nodes: add bird to wireguard nodes
kunsi/bundlewrap/pipeline/head This commit looks good
2021-09-29 19:47:14 +02:00
ece7b343f9
nodes/home.router: disable sms alerts for now
kunsi/bundlewrap/pipeline/head This commit looks good
2021-08-22 07:14:47 +02:00
bd10dc578f
bundles/pppd: refactor check_dyndns_update
...
kunsi/bundlewrap/pipeline/head There was a failure building this commit
We don't care about what the DNS provider said when updating the ip
address. The only thing we care about is wether the current external ip
of the system matches the resolved ip address.
2021-08-14 08:00:43 +02:00
77f785135d
groups/home: add icinga host dependencies
kunsi/bundlewrap/pipeline/head This commit looks good
2021-07-17 09:21:43 +02:00
72d4826dbb
remove bundle:netdata - we have telegraf and grafana now
bundlewrap/pipeline/head This commit looks good
2021-06-05 13:28:25 +02:00
95856a2c2d
add bundle:sysctl
2021-06-04 07:28:26 +02:00
d569b00960
modify nodes and bundles for new nftables syntax
2021-06-03 13:59:36 +02:00
a6434bd8d0
create dedicated user for kunsi work laptop
2021-06-01 16:55:16 +02:00
d51cded72d
nodes/home.router: use debian buster nginx repo for now
bundlewrap/pipeline/head This commit looks good
2021-05-15 06:58:42 +02:00
a8e07c62c3
nodes/home.router: add ssl to vnstat nginx vhost
2021-04-25 09:10:05 +02:00
1360a36a95
nodes/home.router: poll switch and usv more often
2021-04-24 14:58:09 +02:00
