1985 commits

This branch

This branch

All branches

Author	SHA1	Message	Date
Franzi	72b5b8d880	nodes/htz.ex42-1048908: do not set security headers for webmail	2020-08-18 15:03:07 +02:00
Franzi	17828a29f8	bundles/nginx: fix hsts header	2020-08-14 08:23:41 +02:00
Franzi	79a5baa04e	htz.ex42-1048908: increase proxy timeout for matrix-media-repo	2020-08-07 17:50:53 +02:00
Franzi	460b7d5375	htz.ex42-1048908: remove riot-web permalink prefix	2020-07-30 16:12:48 +02:00
Franzi	087f4cbad9	htz.ex42-1048908: add buster-backports repo	2020-07-30 15:51:10 +02:00
Franzi	83ff19f3fb	htz.ex42-1048908: fix matrix .well-known config	2020-07-30 15:37:39 +02:00
Franzi	7986f6ee7d	bundles/letsencrypt: remove ocsp stapling ... This causes problems with weechat and dovecot. Those certificates are short-lived, so not having OCSP stapling is probably fine.	2020-07-26 18:48:37 +02:00
Franzi	ae6e590bda	htz.ex42-1048908: add mx0.kunbox.net to letsencrypt	2020-07-26 18:46:08 +02:00
Franzi	85c0abeb7e	make sure to use bundlewrap<4.0.0	2020-07-19 14:02:40 +02:00
Franzi	f7eb0cc150	bundles/{letsencrypt,nginx}: fix ocsp stapling	2020-07-19 12:10:19 +02:00
Franzi	245559ee09	groups/locations: update	2020-07-19 12:09:34 +02:00
Franzi	de632a7725	htz.ex42-1048908: add missing domains	2020-07-19 11:26:12 +02:00
Franzi	94c2c644a6	bundles/nginx: support PHP 7.3	2020-07-19 11:09:53 +02:00
Franzi	0743283763	bundles/letsencrypt: use sorted() in domains.txt	2020-07-19 10:59:19 +02:00
Franzi	31a1a88d13	bundles/nginx: use DEFAULTS for letsencrypt	2020-07-19 10:58:54 +02:00
Franzi	ce0af62968	remove legacy nodes	2020-07-05 17:00:35 +02:00
Franzi	950897324c	bundles/mx-puppet-discord: add dependency on chown	2020-07-05 16:59:30 +02:00
Franzi	291392d2ba	hostus.ovz-512: is dummy ... somehow i'm not able to get this thing to boot reliably. Will need to be fixed another day	2020-06-12 16:50:42 +02:00
Franzi	0833b10d69	htz.ex42-1048908: update riot config	2020-06-12 16:48:55 +02:00
Franzi	f47c9ea0a0	htz-cloud: keep cloud-init	2020-06-08 10:12:48 +02:00
Franzi	2e92f9851a	bundles/apt: auto reboot after upgrade if needed	2020-06-08 10:08:16 +02:00
Franzi	9bc4b4c149	nodes/ovh.39528a5b: third nameserver	2020-06-06 10:38:32 +02:00
Franzi	75aa654f1c	nodes/gce.bind01: add to dns	2020-06-06 10:34:19 +02:00
Franzi	507e28bc24	bundles/apt: remove cloud-init if found on node	2020-06-06 10:26:05 +02:00
Franzi	7c53a13483	gce.bind01 / hostus.ovz-512: add	2020-06-06 10:20:58 +02:00
Franzi	88083bb8c3	dns: update zonefiles	2020-06-06 07:18:41 +02:00
Franzi	d3c6eb5b7d	add dns group	2020-06-06 06:28:21 +02:00
Franzi	9d9e33977a	bundles/bind: add	2020-06-05 17:50:45 +02:00
Franzi	d1236d6e25	bundles/nginx: add stub_status	2020-06-01 13:35:54 +02:00
Franzi	1e475d8638	nodes/htz.ex42-1048908: more nginx vhosts	2020-06-01 13:33:33 +02:00
Franzi	5f804ca3be	bundles/letsencrypt: add metadata to reload certificates and services	2020-06-01 12:33:25 +02:00
Franzi	2a6547dfb7	bundles/cron: add	2020-06-01 11:54:28 +02:00
Franzi	f0d962ab04	nodes/htz-cloud.sewfile: deploy nginx for seafile	2020-06-01 11:35:56 +02:00
Franzi	85b3adf671	add proxy feature to nginx	2020-06-01 11:31:13 +02:00
Franzi	3523edbcb4	bundles/nginx: ensure we're doing letsencrypt, since we're enforcing ssl	2020-06-01 11:17:52 +02:00
Franzi	54467af6f5	bundles/jenkins-ci: fix metaproc name	2020-06-01 11:14:04 +02:00
Franzi	943a7c1566	nodes/htz.ex42-1048908: move postgres roles and databases to bundles	2020-06-01 11:09:40 +02:00
Franzi	033adc1f0b	move nginx and letsencrypt bundle to group "webserver"	2020-06-01 11:04:51 +02:00
Franzi	36c8b90c4b	bundles/nginx: switch to TLS 1.2 and 1.3 only	2020-06-01 11:01:00 +02:00
Franzi	871341dd4b	bundles/riot-web: add nginx metadata	2020-06-01 10:53:19 +02:00
Franzi	c4330f866b	bundles/nginx: add deployment of vhost configs	2020-06-01 10:52:52 +02:00
Franzi	dc9e8dc679	add letsencrypt bundle	2020-06-01 10:26:37 +02:00
Franzi	04f2baacf4	nodes/htz.ex42-1048908: metadata apt/packages needs to be a dict	2020-05-29 20:15:04 +02:00
Franzi	58a9683cfd	nodes/htz.ex42-1048908: more comments	2020-05-29 20:13:34 +02:00
Franzi	4362b0feb0	nodes/htz.ex42-1048908: add weechat packages	2020-05-29 20:12:06 +02:00
Franzi	d136e90a3d	bundles/apt: no need to do minimal steps when doing unattended-upgrade	2020-05-29 20:06:33 +02:00
Franzi	6d9e62e653	bundles/apt: fix typo	2020-05-29 19:58:21 +02:00
Franzi	86d88a4355	fix apt unattended-upgrades	2020-05-23 17:01:30 +02:00
Franzi	bd48c45553	bundles/users: edit tmux.conf	2020-05-23 11:36:03 +02:00
Franzi	3c56a0ce51	update Jenkinsfile	2020-05-17 19:15:43 +02:00