Commit graph

1429 commits

Author SHA1 Message Date
Franzi 0eca42d188
bundles/dovecot: fix home directory for virtual mailboxes
All checks were successful
bundlewrap/pipeline/head This commit looks good
2020-11-08 13:00:44 +01:00
Franzi b4b988e5f2
bundles/postfix: disable TLS1.0 and 1.1, disable weak ciphers
All checks were successful
bundlewrap/pipeline/head This commit looks good
2020-11-08 12:24:37 +01:00
Franzi f85349f0c5
bundles/postfixadmin: fix apt packages
All checks were successful
bundlewrap/pipeline/head This commit looks good
2020-11-08 11:53:51 +01:00
Franzi 15428b03be
bundles/rspamd: introduce, add to htz.ex42-1048908
Some checks failed
bundlewrap/pipeline/head There was a failure building this commit
2020-11-08 10:43:51 +01:00
Franzi a236444fe5
bundles/dovecot: make sure to reload dovecot after letsencrypt 2020-11-08 10:42:08 +01:00
Franzi b00b2aa245
bundles/dovecot: autoexpunge Junk folder
Some checks failed
bundlewrap/pipeline/head There was a failure building this commit
2020-11-07 22:46:15 +01:00
Franzi 7080b0d89e
bundles/rspamd: create dummy bundle 2020-11-07 22:32:08 +01:00
Franzi 18b573a9c6
bundles/dovecot: introduce 2020-11-07 22:31:47 +01:00
Franzi f42dda5961
bundles/postfixadmin: introduce 2020-11-07 22:31:29 +01:00
Franzi 5550d2cc56
bundles/postfix: introduce 2020-11-07 22:31:18 +01:00
Franzi 88afba9ce9
bundles/mx-puppet-discord: add RestartSec= to systemd unit file 2020-11-07 09:40:22 +01:00
Franzi 7ab121e7e5
bundles/mautrix-telegram: install bridge from git repository 2020-11-07 09:39:57 +01:00
Franzi d7f578742b
bundles/mx-puppet-discord: put bridge repo into subdirectory
this avoids recreating config and registration on every update, which in turn
avoids restarting synapse
2020-11-07 09:08:10 +01:00
Franzi c481fc1327
nodes/htz.ex42-1048908: add php
All checks were successful
bundlewrap/pipeline/head This commit looks good
2020-11-07 09:06:11 +01:00
Franzi f8bc4b2ad9
bundles/php: introduce 2020-10-31 13:00:38 +01:00
Franzi e2d8923dee
bundles/nginx: use metadata reactor to determine index files 2020-10-31 10:41:48 +01:00
Franzi f1f7086aab
bundles/postgresql: make sure we have postgres_role before adding postgres_db 2020-10-31 10:30:48 +01:00
Franzi 67c5c23194
bundles/nginx: support non-domain vhost names 2020-10-31 10:30:07 +01:00
Franzi 113221a9b2
bundles/nginx: make sure we have dhparam.pem 2020-10-31 10:18:40 +01:00
Franzi 9cc5c07466
bundles/letsencrypt: do not try to do authorizations without a webserver 2020-10-31 10:11:58 +01:00
Franzi 76fe68a3d1
bundles/zfs: fix dependencies, auto-load zfs module if not loaded 2020-10-31 10:11:15 +01:00
Franzi 8eeaabf615
bundles/nginx: use http 308 for https redirect
All checks were successful
bundlewrap/pipeline/head This commit looks good
basically "go away. nothing's here. use https forever."
2020-10-30 15:24:24 +01:00
Franzi 50372572f4
bundles/zfs: improvements 2020-10-25 16:41:18 +01:00
Franzi 3077d74318
bundles/users: alias s='sudo -i' 2020-10-25 13:21:04 +01:00
Franzi 351d779f20
bundles/users: add metadata entry for bash aliases 2020-10-25 13:19:46 +01:00
Franzi 2a992773f3
bundles/users: fish shell is gone everywhere 2020-10-25 13:17:26 +01:00
Franzi 831545d8b1
introduce node.metadata['hostname'] to other bundles, update nodefiles to reflect changes
All checks were successful
bundlewrap/pipeline/head This commit looks good
2020-10-25 11:14:46 +01:00
Franzi b70f9c9c9d
bundles/powerdns: make sure every dns server is able to resolve every other dns server 2020-10-25 10:58:11 +01:00
Franzi a33d8e4201
bundles/powerdns: decrease RETRY time 2020-10-25 10:57:26 +01:00
Franzi 29f488c082
bundles/powerdns: put ip addresses of secondary nameservers into allow-axfer-ips
Some checks failed
bundlewrap/pipeline/head There was a failure building this commit
2020-10-25 10:56:55 +01:00
Franzi 152bb56fdd
bundles/powerdns: remove superslave setting
Some checks failed
bundlewrap/pipeline/head There was a failure building this commit
debian currently does ship an older version, in which this
setting is enabled by default.
2020-10-25 10:55:17 +01:00
Franzi 7a3e3ad68f
bundles/powerdns: we don't need the node names of primary nameservers 2020-10-25 10:53:55 +01:00
Franzi 43bd6b4774
bundles/powerdns: only enable webserver and api on primary nameservers 2020-10-25 10:52:51 +01:00
Franzi 78c553faf9
bundles/nodejs: update to 14.x
All checks were successful
bundlewrap/pipeline/head This commit looks good
2020-10-24 17:20:50 +02:00
Franzi a0702416a0
bundles/radicale: introduce
All checks were successful
bundlewrap/pipeline/head This commit looks good
2020-10-23 15:22:35 +02:00
Franzi d76f69ab49
bundles/apt: more output for upgrade-and-reboot
All checks were successful
bundlewrap/pipeline/head This commit looks good
2020-10-23 06:26:19 +02:00
Franzi 2bc659af5f
bundles/users: add some bash aliases
All checks were successful
bundlewrap/pipeline/head This commit looks good
2020-10-23 06:06:59 +02:00
Franzi 6398e668e1
bundles/apt: use DEBIAN_FRONTEND=noninteractive everywhere in upgrade-and-reboot
All checks were successful
bundlewrap/pipeline/head This commit looks good
2020-10-23 04:33:01 +02:00
Franzi 07dcb813f3
bundles/raspberrypi: add options for camera and gpu_mem
All checks were successful
bundlewrap/pipeline/head This commit looks good
2020-10-18 19:51:52 +02:00
Franzi 48cc865892
bundles/nginx: make sure webroot directory exists
All checks were successful
bundlewrap/pipeline/head This commit looks good
2020-10-18 18:55:00 +02:00
Franzi 5c31cdccdd
bundles/kodi: fix path
All checks were successful
bundlewrap/pipeline/head This commit looks good
2020-10-18 16:53:19 +02:00
Franzi 4271c92d70
bundles/gitea: fix chmod
All checks were successful
bundlewrap/pipeline/head This commit looks good
2020-10-18 16:18:12 +02:00
Franzi e32ad2eb19
formatting
All checks were successful
bundlewrap/pipeline/head This commit looks good
2020-10-18 15:51:45 +02:00
Franzi ececab44b4
bundles/miniflux: introduce 2020-10-18 15:49:32 +02:00
Franzi 366374b4e5
bundles/apt: handle unattended-upgrades ourselves 2020-10-18 15:33:41 +02:00
kunsi 5635571f97 Merge pull request 'PowerDNS instead of bind9' (#2) from kunsi-feature-powerdns-instead-of-bind into main
All checks were successful
bundlewrap/pipeline/head This commit looks good
Reviewed-on: https://git.kunsmann.eu/kunsi/bundlewrap/pulls/2
2020-10-17 11:12:35 +00:00
Franzi ae7c3220e0
bundles/powerdns: fix NS records in zonefile header
Some checks are pending
bundlewrap/pipeline/head Build queued...
2020-10-17 13:04:28 +02:00
Franzi 4d6b867bb3
bundles/powerdns: add metadata reactor for automatic node-dns-generation
All checks were successful
bundlewrap/pipeline/head This commit looks good
2020-10-17 12:57:35 +02:00
Franzi 793220c0ec
bundles/powerdns: auto-generate zonefile header based on dns server nodes 2020-10-17 12:57:07 +02:00
Franzi 51e6d0534e
bundles/powerdns: fix Faults
All checks were successful
bundlewrap/pipeline/head This commit looks good
2020-10-17 10:50:21 +02:00
Franzi ca1646d394
bundles/powerdns: add support for zone transfers
Some checks failed
bundlewrap/pipeline/head There was a failure building this commit
2020-10-16 23:02:47 +02:00
Franzi 31cc74951b
bundles/powerdns: only reload pdns on zone changes, don't restart
Some checks failed
bundlewrap/pipeline/head There was a failure building this commit
2020-10-16 20:40:05 +02:00
Franzi 7c1c0f5e80
bundles/powerdns: increase default TTL to 1 day 2020-10-16 20:16:34 +02:00
Franzi 0a115d2372
EOL bundles/bind 2020-10-16 20:12:47 +02:00
Franzi 155c93f739
bundles/powerdns: fix schema import for pgsql 2020-10-16 20:10:55 +02:00
Franzi 9bba18d13e
bundles/powerdnsadmin: introduce 2020-10-16 20:10:34 +02:00
Franzi 0533e4087a
bundles/postgresql: install dev packages
All checks were successful
bundlewrap/pipeline/head This commit looks good
2020-10-16 19:24:40 +02:00
Franzi d442ab399e
bundles/powerdns: support pgsql 2020-10-16 19:24:12 +02:00
Franzi 2c1a825b7d
bundles/apt: make sure we have python3-dev 2020-10-16 19:14:15 +02:00
Franzi 8acc0a7bb1
bundles/apt: make sure we have build-essential and git 2020-10-16 19:12:26 +02:00
Franzi a553e736d1
bundles/powerdns: fix dependencies 2020-10-16 17:59:46 +02:00
Franzi df852e8ef9
bundles/powerdns: more config, add bind backend
All checks were successful
bundlewrap/pipeline/head This commit looks good
2020-10-16 17:44:31 +02:00
Franzi fa67bd13f4
bundles/powerdns: minimal pdns.conf
All checks were successful
bundlewrap/pipeline/head This commit looks good
2020-10-16 13:19:44 +02:00
Franzi d029af554c
bundles/travelynx: make sure to restart worker service, too
All checks were successful
bundlewrap/pipeline/head This commit looks good
2020-10-16 13:03:52 +02:00
Franzi c5c0c923d1
home.kodi-wohnzimmer: switch to debian-multimedia repository to have kodi 18
All checks were successful
bundlewrap/pipeline/head This commit looks good
2020-10-15 19:34:22 +02:00
Franzi a08f483ac5
bundles/powerdns: introduce
All checks were successful
bundlewrap/pipeline/head This commit looks good
2020-10-13 19:06:22 +02:00
Franzi 591d3fb947
bundles/nfs-client: fix installation of automount units
All checks were successful
bundlewrap/pipeline/head This commit looks good
2020-10-10 17:25:39 +02:00
Franzi 6a8768fb2f
bundles/nfs-client: introduce 2020-10-10 16:37:33 +02:00
Sophie Schiller 3170e75bbe update kodi to unstable 2020-10-09 18:12:56 +02:00
Franzi a955a7b84d
bundles/raspberrypi: do not set empty default for config.txt 2020-10-09 17:46:36 +02:00
Franzi c953d138ee
bundles/kodi: fix dependencies for alsa 2020-10-09 17:46:07 +02:00
Franzi 5e8489a74c
bundles/kodi: add missing dependencies 2020-10-03 18:36:48 +02:00
Franzi c2bcd1f0d9
bundles/apt: add raspbian to supported OSes 2020-10-03 18:36:29 +02:00
Franzi 2387b196b2
bundles/kodi: use alsa instead of pulseaudio
All checks were successful
bundlewrap/pipeline/head This commit looks good
2020-10-03 17:00:13 +02:00
Franzi 018bdd1d00
bundles/kodi: also install addon repository
All checks were successful
bundlewrap/pipeline/head This commit looks good
2020-10-03 15:54:03 +02:00
Franzi 9b8c5450ec
bundles/raspberrypi: make sure dphys-swapfile is uninstalled 2020-10-03 15:10:28 +02:00
Franzi 60cfe90a1d
bundles/raspberrypi: force maximum cpu frequency 2020-10-03 13:52:34 +02:00
Franzi 32fd2f7a7b
bundles/kodi: introduce 2020-10-03 13:36:12 +02:00
Franzi fc44a9cd69
bundles/raspberrypi: enable audio, force hdmi mode 2020-10-03 13:35:44 +02:00
Franzi 675f8beea9
bundles/raspberrypi: improvements 2020-09-27 17:18:05 +02:00
Franzi c2c9913514
allow setting hostname in metadata 2020-09-27 16:46:54 +02:00
Franzi 5d1e71e83e
bundles/raspberrypi: introduce 2020-09-27 16:46:26 +02:00
Franzi 0784b85fbb
bundles/mx-puppet-discord: create registration.yaml using bw
All checks were successful
bundlewrap/pipeline/head This commit looks good
2020-09-26 15:34:12 +02:00
Franzi bf7e982fdb
bundles/bind: change zonefile header
All checks were successful
bundlewrap/pipeline/head This commit looks good
2020-09-26 15:20:37 +02:00
Franzi 4b41a00ac4
bundles/matrix-synapse: don't remove conf.d directory
We're taking care of that by deploying a override.conf instead
2020-09-26 15:20:08 +02:00
Franzi a67353e24f
Merge branch 'pending-new-bw-release' into main 2020-09-26 15:18:29 +02:00
Franzi c8adfcabf1
bundles/octoprint: add octoprint to dialout group 2020-09-26 15:16:09 +02:00
Franzi 91c4846129
bundles/mjpg-streamer: introduce
All checks were successful
bundlewrap/pipeline/head This commit looks good
2020-09-22 19:59:36 +02:00
Franzi 176a41e2f3
bundles/octoprint: add octoprint to gpio group
All checks were successful
bundlewrap/pipeline/head This commit looks good
2020-09-22 19:16:38 +02:00
Franzi d02538368a
bundles/octoprint: add systemd-wrapper script
All checks were successful
bundlewrap/pipeline/head This commit looks good
2020-09-22 18:52:11 +02:00
Franzi 7ea85247e0
bundles/nginx: proxy is a dict now, add some more configuration options
All checks were successful
bundlewrap/pipeline/head This commit looks good
2020-09-22 18:39:38 +02:00
Franzi d1672a9a45
bundles/octoprint: restart octoprint after changing unit file
All checks were successful
bundlewrap/pipeline/head This commit looks good
2020-09-22 18:11:42 +02:00
Franzi eee9b00f10
bundles/systemd: fix daemon-reload command 2020-09-22 18:11:09 +02:00
Franzi 44a6e8292a
bundles/bind: add node-dns-auto-generator 2020-09-20 18:56:53 +02:00
Franzi 151d8e92c3
bundles/nginx: do not set X-Forwarded-Proto if https is disabled, do not use http2 without ssl 2020-09-20 15:46:39 +02:00
Franzi 84a78f5fec
bundles/octoprint: allow 'sudo /usr/bin/vcgencmd' 2020-09-20 15:12:18 +02:00
Franzi 577c3c7c49
bundles/sudo: change metadata key to 'sudo_commands' 2020-09-20 15:11:52 +02:00
Franzi 04c632953d
bundles/octoprint: introduce 2020-09-20 15:05:17 +02:00
Franzi d6799088c4
bundles/nginx: add metadata option to disable https 2020-09-20 14:36:43 +02:00
Franzi bb0b6f2079
shuffle some ports around
All checks were successful
bundlewrap/pipeline/head This commit looks good
2020-09-20 13:16:08 +02:00
Franzi 3242d97cfa
bundles/mautrix-telegram: use pkg_pip 2020-09-20 10:30:13 +02:00
Franzi eede422e9a
shuffle some ports around 2020-09-20 10:29:19 +02:00
Franzi d1bbb5a855
bundles/travelynx: restart service when changing imprint
All checks were successful
bundlewrap/pipeline/head This commit looks good
2020-09-12 17:08:18 +02:00
Franzi dd082d45e9
bundles/matrix-synapse: set suppress_key_server_warning if using matrix.org as trusted key server
All checks were successful
bundlewrap/pipeline/head This commit looks good
2020-09-12 13:22:16 +02:00
Franzi 6adc4a675f
bundles/mautrix-telegram: reload systemd when changing service file
All checks were successful
bundlewrap/pipeline/head This commit looks good
2020-09-12 13:03:15 +02:00
Franzi 2361466c84
bundles/mautrix-telegram: handle registration.yaml ourselves
All checks were successful
bundlewrap/pipeline/head This commit looks good
2020-09-12 12:59:34 +02:00
Franzi f6ecaf3c29
bundles/mautrix-telegram: also deploy alembic.ini, make sure alembic ini gets called if alembic scripts dir does not exist
All checks were successful
bundlewrap/pipeline/head This commit looks good
2020-09-12 12:09:20 +02:00
Franzi cf2920f284
bundles/mautrix-telegram: introduce 2020-09-06 12:15:37 +02:00
Franzi 180802a669
bundles/apt: make sure we do have pip3 and virtualenv 2020-09-06 12:04:56 +02:00
Franzi 1744596296
bundles/matrix-synapse: deploy override.conf to make sure synapse doesn't try to load config from there
All checks were successful
bundlewrap/pipeline/head This commit looks good
2020-09-05 20:06:35 +02:00
Franzi a443272e02
bundles/gitea: make sure to restart gitea after downloading binary 2020-09-04 21:06:13 +02:00
Franzi e35f41c6dc
bundles/letsencrypt: change cronjob times
All checks were successful
bundlewrap/pipeline/head This commit looks good
2020-08-30 21:26:33 +02:00
Franzi 27d6c1880a
bundles/influxdb: introduce
All checks were successful
bundlewrap/pipeline/head This commit looks good
2020-08-30 12:07:06 +02:00
Franzi ccd4a09183
bundles/apt: allow variables {os} and {os_release} in sources.list entries 2020-08-30 12:06:19 +02:00
Franzi 77051c0a0e
bundles/nginx: clean up unmanaged nginx vhosts 2020-08-30 11:36:48 +02:00
Franzi 626355178a
bundles/apt: make sure popularity-contest is uninstalled 2020-08-30 11:14:31 +02:00
Franzi f22b30e4fa
bundles/cron: purge unwanted data from /etc/cron.d 2020-08-30 11:14:10 +02:00
Franzi c8ae22da8a
I HATE GOOGLE (v3)
All checks were successful
bundlewrap/pipeline/head This commit looks good
2020-08-30 10:44:13 +02:00
Franzi b24253a64b
bundles/nginx: determine worker processes by cpu count by default 2020-08-30 10:32:29 +02:00
Franzi 049b77e702
bundles/postgresql: use zfs if possible
All checks were successful
bundlewrap/pipeline/head This commit looks good
2020-08-29 21:30:12 +02:00
Franzi 4934eb46fb
bundles/zfs: import bundle from work repository 2020-08-29 21:10:59 +02:00
Franzi b690ae25b0
bundles/apt: use node.os and node.os_version to determine settings 2020-08-29 21:10:22 +02:00
Franzi 007a617785
bundles/users: rework 2020-08-29 19:21:35 +02:00
Franzi 0de62a0afa
bundles/postgresql: add apt packages, create root user
All checks were successful
bundlewrap/pipeline/head This commit looks good
2020-08-21 16:21:46 +02:00
Franzi b4122bf3f9
travelynx: add imprint
All checks were successful
bundlewrap/pipeline/head This commit looks good
2020-08-21 15:06:04 +02:00
Franzi 4a81c05f6d
I HATE GOOGLE (v2)
All checks were successful
bundlewrap/pipeline/head This commit looks good
2020-08-21 14:41:34 +02:00
Franzi 0d8332ec7e
bundles/gitea: auto-configure nginx vhost
All checks were successful
bundlewrap/pipeline/head This commit looks good
2020-08-20 15:49:11 +02:00
Franzi 1fb5787807
htz.ex42-1048908: can haz gitea?
All checks were successful
bundlewrap/pipeline/head This commit looks good
2020-08-20 15:34:27 +02:00
Franzi 55d6257243
bundles/users: only remove ssh key if we're managing configs 2020-08-20 15:34:05 +02:00
Franzi 21343f6213
get rid of cloud-init
All checks were successful
bundlewrap/pipeline/head This commit looks good
2020-08-20 11:07:18 +02:00
Franzi ad620396f5
bundles/apt: rework gpg key handling 2020-08-20 10:59:45 +02:00
Franzi 54371cf289
I HATE GOOGLE
All checks were successful
bundlewrap/pipeline/head This commit looks good
2020-08-20 10:01:34 +02:00
Franzi 4974494ee0
bundles/travelynx: make version configurable via metadata
All checks were successful
bundlewrap/pipeline/head This commit looks good
2020-08-20 09:44:01 +02:00
Franzi b7f377816f
htz.ex42-1048908: fix travelynx static files
All checks were successful
bundlewrap/pipeline/head This commit looks good
2020-08-19 22:01:54 +02:00
Franzi 15dbc4307f
bundles/travelynx: use worker service instead of cronjob
All checks were successful
bundlewrap/pipeline/head This commit looks good
2020-08-19 21:53:19 +02:00
Franzi 8547948ce6
bundles/nginx: also set host header for proxy connections 2020-08-19 21:43:37 +02:00
Franzi 15eda05074
bundles/travelynx: hard-code displayed version
All checks were successful
bundlewrap/pipeline/head This commit looks good
2020-08-19 20:09:21 +02:00
Franzi 71b604c5af
bundles/travelynx: use github mirror
All checks were successful
bundlewrap/pipeline/head This commit looks good
git.finalrewind.org seems slow sometimes, which breaks our CI pipeline
2020-08-19 19:06:59 +02:00
Franzi 277c259e05
bundles/travelynx: hard-code displayed version
Some checks failed
bundlewrap/pipeline/head There was a failure building this commit
2020-08-19 18:52:20 +02:00
Franzi 9f4f19cdc5
bundles/travelynx: make sure config changes are reflected in production 2020-08-19 18:51:27 +02:00
Franzi 5797d790aa
bundles/travelynx: add cron 2020-08-19 18:48:05 +02:00
Franzi 0dd2a4b985
htz.ex42-1048908: can haz travelynx?
Some checks failed
bundlewrap/pipeline/head There was a failure building this commit
2020-08-19 18:43:32 +02:00
Franzi 20f3f566ac
bundles/mx-puppet-discord: fix postgres database 2020-08-19 18:39:07 +02:00
Franzi 0ebcf9762e
add gce workaround
All checks were successful
bundlewrap/pipeline/head This commit looks good
those daemons keep messing with our settings, get rid of them
2020-08-18 15:51:24 +02:00
Franzi 11468cd1e7
bundles/apt: more default packages 2020-08-18 15:46:42 +02:00
Franzi 7d911ce835
bundles/matrix-synapse: remove conf.d, fix server name
Some checks failed
bundlewrap/pipeline/head There was a failure building this commit
2020-08-18 15:34:20 +02:00
Franzi 5e2fea8497
update to bw4 2020-08-18 15:31:52 +02:00
Franzi d7862918a6
bundles/nginx: set default X-Frame-Options to SAMEORIGIN
All checks were successful
bundlewrap/pipeline/head This commit looks good
2020-08-18 15:07:43 +02:00
Franzi 17828a29f8
bundles/nginx: fix hsts header
All checks were successful
bundlewrap/pipeline/head This commit looks good
2020-08-14 08:23:41 +02:00
Franzi 7986f6ee7d
bundles/letsencrypt: remove ocsp stapling
All checks were successful
bundlewrap/pipeline/head This commit looks good
This causes problems with weechat and dovecot. Those certificates
are short-lived, so not having OCSP stapling is probably fine.
2020-07-26 18:48:37 +02:00
Franzi f7eb0cc150
bundles/{letsencrypt,nginx}: fix ocsp stapling
Some checks failed
bundlewrap/pipeline/head There was a failure building this commit
2020-07-19 12:10:19 +02:00
Franzi de632a7725
htz.ex42-1048908: add missing domains
Some checks failed
bundlewrap/pipeline/head There was a failure building this commit
2020-07-19 11:26:12 +02:00
Franzi 94c2c644a6
bundles/nginx: support PHP 7.3 2020-07-19 11:09:53 +02:00
Franzi 0743283763
bundles/letsencrypt: use sorted() in domains.txt 2020-07-19 10:59:19 +02:00
Franzi 31a1a88d13
bundles/nginx: use DEFAULTS for letsencrypt 2020-07-19 10:58:54 +02:00
Franzi 950897324c
bundles/mx-puppet-discord: add dependency on chown 2020-07-05 16:59:30 +02:00
Franzi f47c9ea0a0
htz-cloud: keep cloud-init
All checks were successful
bundlewrap/pipeline/head This commit looks good
2020-06-08 10:12:48 +02:00
Franzi 2e92f9851a
bundles/apt: auto reboot after upgrade if needed 2020-06-08 10:08:16 +02:00
Franzi 507e28bc24
bundles/apt: remove cloud-init if found on node 2020-06-06 10:26:05 +02:00
Franzi 9d9e33977a
bundles/bind: add
All checks were successful
bundlewrap/pipeline/head This commit looks good
2020-06-05 17:50:45 +02:00
Franzi d1236d6e25
bundles/nginx: add stub_status
All checks were successful
bundlewrap/pipeline/head This commit looks good
2020-06-01 13:35:54 +02:00
Franzi 5f804ca3be
bundles/letsencrypt: add metadata to reload certificates and services
All checks were successful
bundlewrap/pipeline/head This commit looks good
2020-06-01 12:33:25 +02:00
Franzi 2a6547dfb7
bundles/cron: add 2020-06-01 11:54:28 +02:00
Franzi 85b3adf671
add proxy feature to nginx 2020-06-01 11:31:13 +02:00
Franzi 3523edbcb4
bundles/nginx: ensure we're doing letsencrypt, since we're enforcing ssl 2020-06-01 11:17:52 +02:00
Franzi 54467af6f5
bundles/jenkins-ci: fix metaproc name 2020-06-01 11:14:04 +02:00
Franzi 943a7c1566
nodes/htz.ex42-1048908: move postgres roles and databases to bundles
All checks were successful
bundlewrap/pipeline/head This commit looks good
2020-06-01 11:09:40 +02:00
Franzi 36c8b90c4b
bundles/nginx: switch to TLS 1.2 and 1.3 only
Some checks failed
bundlewrap/pipeline/head There was a failure building this commit
2020-06-01 11:01:00 +02:00
Franzi 871341dd4b
bundles/riot-web: add nginx metadata
Some checks failed
bundlewrap/pipeline/head There was a failure building this commit
2020-06-01 10:53:19 +02:00
Franzi c4330f866b
bundles/nginx: add deployment of vhost configs 2020-06-01 10:52:52 +02:00
Franzi dc9e8dc679
add letsencrypt bundle 2020-06-01 10:26:37 +02:00
Franzi d136e90a3d
bundles/apt: no need to do minimal steps when doing unattended-upgrade
All checks were successful
bundlewrap/pipeline/head This commit looks good
2020-05-29 20:06:33 +02:00
Franzi 6d9e62e653
bundles/apt: fix typo 2020-05-29 19:58:21 +02:00
Franzi 86d88a4355
fix apt unattended-upgrades 2020-05-23 17:01:30 +02:00
Franzi bd48c45553
bundles/users: edit tmux.conf 2020-05-23 11:36:03 +02:00
Franzi 7a04c7182e
bundles/users: fix typo
All checks were successful
bundlewrap/pipeline/head This commit looks good
2020-05-16 10:32:44 +02:00
Franzi 4e72b41971
bundles/mx-puppet-discord: config tweaks
All checks were successful
bundlewrap/pipeline/head This commit looks good
2020-05-16 10:06:40 +02:00
Franzi dddb387e58
display login name in tmux status bar
All checks were successful
bundlewrap/pipeline/head This commit looks good
2020-05-09 15:36:32 +02:00
Franzi 34703b6eba
add bundle jenkins-ci 2020-05-09 13:14:49 +02:00
Franzi 3765189450
bundles/voc-loudness-monitor: remove sloop 2020-05-09 11:35:40 +02:00
Franzi 7b3d3567de
bundles/voc-loudness-monitor: use h264 instead 2020-05-09 10:23:50 +02:00
Franzi fa50f8b248
bundles/seafile: fix mode of /opt/seafile 2020-04-13 09:59:02 +02:00
Franzi f701110654
bundles/users: fix deletion of unneded home directories 2020-04-13 09:57:33 +02:00
Franzi 004422c060
bundles/seafile: initial commit
seafile installation itself is not managed
2020-04-13 09:53:10 +02:00
Franzi ffb962b108
bundles/nginx: add nginx config 2020-04-13 09:52:26 +02:00
Franzi 411d22d404
bundles/users: add vim 2020-04-11 12:26:02 +02:00
Franzi 2990216a8b
bundles/users: add fish_variables 2020-04-11 12:06:57 +02:00
Franzi 4c79fdf997
bundles/voc-loudness-monitor: add s23 and s89 2020-04-11 11:29:04 +02:00
Franzi f1a693d0d6
bundles: only install apt packages via apt bundle to avoid double defining packages 2020-04-11 11:25:24 +02:00
Franzi 8a26def21c
add matrix-synapse bundle 2020-04-05 11:38:31 +02:00
Franzi 29eeffbdc3
bundles/mx-puppet-discord: restart bridge if config or registration changed 2020-04-04 18:33:05 +02:00
Franzi 78bae4f77b
bundles/postgresql: fix database creation 2020-04-04 18:28:38 +02:00
Franzi 1dfa5c457c
bundles/mx-puppet-discord: specify path to registration file in systemd unit 2020-04-04 18:28:15 +02:00
Franzi 081fafc64e
bundles/mx-puppet-discord: add systemd unit file 2020-04-04 18:21:40 +02:00
Franzi 629c38230c
bundles/users: add option to change home directory mode 2020-04-04 18:15:08 +02:00
Franzi a8a3bcdb83
bundles/mx-puppet-discord: remove registration.yaml before generating new one 2020-04-04 18:10:37 +02:00
Franzi 5910d825c0
bundles/mx-puppet-discord: set default listen-addr to IPv4 2020-04-04 18:07:27 +02:00
Franzi 4c5a88f734
add bundle for mx-puppet-discord 2020-04-04 18:01:58 +02:00
Franzi 1856f4749c
bundles/users: add option to not automatically deploy configs 2020-04-04 17:54:26 +02:00
Franzi 4da792f522
bundles/postgresql: add bundle 2020-04-04 17:53:59 +02:00
Franzi 234604cd0c
bundles/sudo: add secure_path to sudoers file 2020-04-04 16:53:25 +02:00
Franzi f3dc5c8325
bundles/nodejs: move to own bundle 2020-04-04 16:31:50 +02:00
Franzi a1e05108c1
bundles/apt: change origins to sites 2020-04-04 11:21:30 +02:00
Franzi 0750610ccc
bundles/users: fix user-specific tmux config 2020-03-28 13:32:39 +01:00
Franzi 719d41a557
bundles/users: add readme 2020-03-28 13:12:45 +01:00
Franzi 0b51c9dae4
bundles/users: deploy standard tmux config to /etc/tmux.conf instead of ~/.tmux.conf 2020-03-28 13:03:35 +01:00
Franzi eddb8ca70a
bundles/users: add option for custom tmux/bash/fish configs 2020-03-28 12:56:45 +01:00
Franzi 810c2cfcf8
bundles/users: also deploy tmux config 2020-03-28 12:40:37 +01:00
Franzi d7ca23d57e
bundles/apt: autoclean unused packages 2020-03-28 12:36:40 +01:00
Franzi 32bdcae23f
bundles/hostname: add node name to hosts file 2020-03-28 09:47:43 +00:00
Franzi 841b49cd18
bundles/users: also deploy shell config 2020-03-27 13:33:37 +00:00
Franzi 6656a0864f
bundles/{systemd,hostname}: add hostname control 2020-03-27 12:46:10 +00:00
Franzi 067b498bf2
bundles/sudo: add bundle 2020-03-27 11:52:17 +00:00
Franzi 9a956e832a
bundles/voc-loudness-monitor: no need to start the loudness units on every run 2020-03-27 11:50:50 +00:00
Franzi 7406ed7522
bundles/apt: fix additional origins for unattended-users 2020-03-27 11:30:11 +00:00
Franzi a3c0e6a08e
bundles/users: regular users don't need a password 2020-03-27 11:28:44 +00:00
Franzi 8e681e4c39
bundles/voc-loudness-monitor: sources need ffmpeg installed 2020-03-21 11:42:33 +00:00
Franzi e351c508f2
bundles/systemd: add daemon-reload action 2020-03-21 11:31:56 +00:00
Franzi 8abfe74c2b
bundles/voc-loudness-monitor: inital commit of sources units 2020-03-21 11:31:27 +00:00
Franzi 9556e423bd
bundles/nginx: initial commit 2020-03-14 09:56:19 +00:00
Franzi b4808d54e9
bundles/riot-web: add metadata to write config.json 2020-03-14 09:38:12 +00:00
Franzi 589965b58b
bundles/apt: fix unattended-upgrades 2020-03-14 09:37:31 +00:00
Franzi d0ba89a1f3
default shell is bash, not fish
... sadly :(
2020-02-29 14:47:41 +00:00
Franzi a27fd619a2
add riot-web bundle 2020-02-29 14:42:54 +00:00
Franzi ad7b164533
add apt bundle 2020-02-29 14:42:29 +00:00
Franzi e5539d508b
bundles/users: remove authorized_keys if not set by bundle 2020-02-29 13:09:14 +00:00
Franzi a47bdcfb39
fixup groups 2020-02-29 12:38:27 +00:00
Franzi ebf7f7ada9
add users bundle 2020-02-29 12:30:21 +00:00
Franzi 3934414140
initial version of vmhost bundle 2020-02-29 12:30:06 +00:00