42 commits

Author	SHA1	Message	Date
Franzi	9e78b9e07b	python3.12 compat	2024-04-28 21:40:35 +02:00
Franzi	698f203936	bundles/nginx: add option to not redirect domain aliases	2024-02-13 14:01:40 +01:00
Franzi	cd48cf495d	rework firewall setup	2023-09-24 21:01:51 +02:00
Franzi	72607adbfe	bundles/nginx: allow vhosts to set their own index files	2023-09-02 20:48:41 +02:00
Franzi	757e9e6bb8	bundles/nginx: add option to disable anon_timing log	2023-08-26 17:21:23 +02:00
Franzi	98cd2df8ff	bundles/nginx: add certificate name to icinga check	2022-03-02 07:19:15 +01:00
Franzi	db83b1614b	bundles/nginx: add anonymous timing logging for http requests	2021-06-05 15:53:02 +02:00
Franzi	d569b00960	modify nodes and bundles for new nftables syntax	2021-06-03 13:59:36 +02:00
Franzi	cf3c45fdd5	bundles/nginx: prepare for arch linux	2021-06-01 16:52:03 +02:00
Franzi	22c98a4206	nodes/home.paperless: introduce	2021-05-23 17:41:19 +02:00
Franzi	8fd83241ca	bundles: ensure apt/repos/*/items is a set	2021-04-30 12:49:59 +02:00
Franzi	a37d31973a	bundles: add some telegraf plugins	2021-04-24 09:14:25 +02:00
Franzi	e36a352a42	bundles: fix usage of set() vs {}	2021-04-04 10:34:55 +02:00
Franzi	b943d2d465	rework iptables configuration	2021-03-21 10:30:04 +01:00
Franzi	74d81eb7ba	bundles/nginx: support disabling ssl for each vhost individually	2021-02-20 14:25:27 +01:00
Franzi	5c1eba0d58	bundles: use a common metadata key for firewall restrictions, use repo.libs.tools.resolve_identifier()	2021-02-15 14:16:35 +01:00
Franzi	f52df58517	bundles: code style improvements	2021-02-12 20:45:41 +01:00
Franzi	2d42e5f7dd	update bw to 4.3, add .provides() to metadata reactors	2021-01-07 18:44:38 +01:00
Franzi	03d3ab6e9d	bundles/{netdata,nginx,unbound}: fix iptables rules (should also create ip6tables rules)	2021-01-02 16:19:55 +01:00
Franzi	6045debe9e	bundles/nginx: check ssl certificates	2020-12-18 13:28:08 +01:00
Franzi	4a57926577	bundles/icinga2: set some notification options for checks	2020-11-22 08:24:44 +01:00
Franzi	5419bf31fb	bundles: fix some icinga checks	2020-11-21 10:30:05 +01:00
Franzi	2d856a1e9a	bundles/nginx: add iptables rules	2020-11-16 16:43:57 +01:00
Franzi	0749fc75c5	bundles: add backup paths	2020-11-13 12:37:26 +01:00
Franzi	11701a67c8	dns: deploy MTA-STS	2020-11-11 11:41:06 +01:00
Franzi	8cb997133a	bundles/nginx: add monitoring	2020-11-10 10:57:04 +01:00
Franzi	e2d8923dee	bundles/nginx: use metadata reactor to determine index files	2020-10-31 10:41:48 +01:00
Franzi	67c5c23194	bundles/nginx: support non-domain vhost names	2020-10-31 10:30:07 +01:00
Franzi	366374b4e5	bundles/apt: handle unattended-upgrades ourselves	2020-10-18 15:33:41 +02:00
Franzi	d6799088c4	bundles/nginx: add metadata option to disable https	2020-09-20 14:36:43 +02:00
Franzi	ccd4a09183	bundles/apt: allow variables {os} and {os_release} in sources.list entries	2020-08-30 12:06:19 +02:00
Franzi	b24253a64b	bundles/nginx: determine worker processes by cpu count by default	2020-08-30 10:32:29 +02:00
Franzi	ad620396f5	bundles/apt: rework gpg key handling	2020-08-20 10:59:45 +02:00
Franzi	5e2fea8497	update to bw4	2020-08-18 15:31:52 +02:00
Franzi	31a1a88d13	bundles/nginx: use DEFAULTS for letsencrypt	2020-07-19 10:58:54 +02:00
Franzi	5f804ca3be	bundles/letsencrypt: add metadata to reload certificates and services	2020-06-01 12:33:25 +02:00
Franzi	c4330f866b	bundles/nginx: add deployment of vhost configs	2020-06-01 10:52:52 +02:00
Franzi	86d88a4355	fix apt unattended-upgrades	2020-05-23 17:01:30 +02:00
Franzi	ffb962b108	bundles/nginx: add nginx config	2020-04-13 09:52:26 +02:00
Franzi	f1a693d0d6	bundles: only install apt packages via apt bundle to avoid double defining packages	2020-04-11 11:25:24 +02:00
Franzi	a1e05108c1	bundles/apt: change origins to sites	2020-04-04 11:21:30 +02:00
Franzi	9556e423bd	bundles/nginx: initial commit	2020-03-14 09:56:19 +00:00