1429 commits

Author	SHA1	Message	Date
Franzi	ca1646d394	bundles/powerdns: add support for zone transfers	2020-10-16 23:02:47 +02:00
Franzi	31cc74951b	bundles/powerdns: only reload pdns on zone changes, don't restart	2020-10-16 20:40:05 +02:00
Franzi	7c1c0f5e80	bundles/powerdns: increase default TTL to 1 day	2020-10-16 20:16:34 +02:00
Franzi	0a115d2372	EOL bundles/bind	2020-10-16 20:12:47 +02:00
Franzi	155c93f739	bundles/powerdns: fix schema import for pgsql	2020-10-16 20:10:55 +02:00
Franzi	9bba18d13e	bundles/powerdnsadmin: introduce	2020-10-16 20:10:34 +02:00
Franzi	0533e4087a	bundles/postgresql: install dev packages	2020-10-16 19:24:40 +02:00
Franzi	d442ab399e	bundles/powerdns: support pgsql	2020-10-16 19:24:12 +02:00
Franzi	2c1a825b7d	bundles/apt: make sure we have python3-dev	2020-10-16 19:14:15 +02:00
Franzi	8acc0a7bb1	bundles/apt: make sure we have build-essential and git	2020-10-16 19:12:26 +02:00
Franzi	a553e736d1	bundles/powerdns: fix dependencies	2020-10-16 17:59:46 +02:00
Franzi	df852e8ef9	bundles/powerdns: more config, add bind backend	2020-10-16 17:44:31 +02:00
Franzi	fa67bd13f4	bundles/powerdns: minimal pdns.conf	2020-10-16 13:19:44 +02:00
Franzi	d029af554c	bundles/travelynx: make sure to restart worker service, too	2020-10-16 13:03:52 +02:00
Franzi	c5c0c923d1	home.kodi-wohnzimmer: switch to debian-multimedia repository to have kodi 18	2020-10-15 19:34:22 +02:00
Franzi	a08f483ac5	bundles/powerdns: introduce	2020-10-13 19:06:22 +02:00
Franzi	591d3fb947	bundles/nfs-client: fix installation of automount units	2020-10-10 17:25:39 +02:00
Franzi	6a8768fb2f	bundles/nfs-client: introduce	2020-10-10 16:37:33 +02:00
Sophie Schiller	3170e75bbe	update kodi to unstable	2020-10-09 18:12:56 +02:00
Franzi	a955a7b84d	bundles/raspberrypi: do not set empty default for config.txt	2020-10-09 17:46:36 +02:00
Franzi	c953d138ee	bundles/kodi: fix dependencies for alsa	2020-10-09 17:46:07 +02:00
Franzi	5e8489a74c	bundles/kodi: add missing dependencies	2020-10-03 18:36:48 +02:00
Franzi	c2bcd1f0d9	bundles/apt: add raspbian to supported OSes	2020-10-03 18:36:29 +02:00
Franzi	2387b196b2	bundles/kodi: use alsa instead of pulseaudio	2020-10-03 17:00:13 +02:00
Franzi	018bdd1d00	bundles/kodi: also install addon repository	2020-10-03 15:54:03 +02:00
Franzi	9b8c5450ec	bundles/raspberrypi: make sure dphys-swapfile is uninstalled	2020-10-03 15:10:28 +02:00
Franzi	60cfe90a1d	bundles/raspberrypi: force maximum cpu frequency	2020-10-03 13:52:34 +02:00
Franzi	32fd2f7a7b	bundles/kodi: introduce	2020-10-03 13:36:12 +02:00
Franzi	fc44a9cd69	bundles/raspberrypi: enable audio, force hdmi mode	2020-10-03 13:35:44 +02:00
Franzi	675f8beea9	bundles/raspberrypi: improvements	2020-09-27 17:18:05 +02:00
Franzi	c2c9913514	allow setting hostname in metadata	2020-09-27 16:46:54 +02:00
Franzi	5d1e71e83e	bundles/raspberrypi: introduce	2020-09-27 16:46:26 +02:00
Franzi	0784b85fbb	bundles/mx-puppet-discord: create registration.yaml using bw	2020-09-26 15:34:12 +02:00
Franzi	bf7e982fdb	bundles/bind: change zonefile header	2020-09-26 15:20:37 +02:00
Franzi	4b41a00ac4	bundles/matrix-synapse: don't remove conf.d directory ... We're taking care of that by deploying a override.conf instead	2020-09-26 15:20:08 +02:00
Franzi	a67353e24f	Merge branch 'pending-new-bw-release' into main	2020-09-26 15:18:29 +02:00
Franzi	c8adfcabf1	bundles/octoprint: add octoprint to dialout group	2020-09-26 15:16:09 +02:00
Franzi	91c4846129	bundles/mjpg-streamer: introduce	2020-09-22 19:59:36 +02:00
Franzi	176a41e2f3	bundles/octoprint: add octoprint to gpio group	2020-09-22 19:16:38 +02:00
Franzi	d02538368a	bundles/octoprint: add systemd-wrapper script	2020-09-22 18:52:11 +02:00
Franzi	7ea85247e0	bundles/nginx: proxy is a dict now, add some more configuration options	2020-09-22 18:39:38 +02:00
Franzi	d1672a9a45	bundles/octoprint: restart octoprint after changing unit file	2020-09-22 18:11:42 +02:00
Franzi	eee9b00f10	bundles/systemd: fix daemon-reload command	2020-09-22 18:11:09 +02:00
Franzi	44a6e8292a	bundles/bind: add node-dns-auto-generator	2020-09-20 18:56:53 +02:00
Franzi	151d8e92c3	bundles/nginx: do not set X-Forwarded-Proto if https is disabled, do not use http2 without ssl	2020-09-20 15:46:39 +02:00
Franzi	84a78f5fec	bundles/octoprint: allow 'sudo /usr/bin/vcgencmd'	2020-09-20 15:12:18 +02:00
Franzi	577c3c7c49	bundles/sudo: change metadata key to 'sudo_commands'	2020-09-20 15:11:52 +02:00
Franzi	04c632953d	bundles/octoprint: introduce	2020-09-20 15:05:17 +02:00
Franzi	d6799088c4	bundles/nginx: add metadata option to disable https	2020-09-20 14:36:43 +02:00
Franzi	bb0b6f2079	shuffle some ports around	2020-09-20 13:16:08 +02:00
Franzi	3242d97cfa	bundles/mautrix-telegram: use pkg_pip	2020-09-20 10:30:13 +02:00
Franzi	eede422e9a	shuffle some ports around	2020-09-20 10:29:19 +02:00
Franzi	d1bbb5a855	bundles/travelynx: restart service when changing imprint	2020-09-12 17:08:18 +02:00
Franzi	dd082d45e9	bundles/matrix-synapse: set suppress_key_server_warning if using matrix.org as trusted key server	2020-09-12 13:22:16 +02:00
Franzi	6adc4a675f	bundles/mautrix-telegram: reload systemd when changing service file	2020-09-12 13:03:15 +02:00
Franzi	2361466c84	bundles/mautrix-telegram: handle registration.yaml ourselves	2020-09-12 12:59:34 +02:00
Franzi	f6ecaf3c29	bundles/mautrix-telegram: also deploy alembic.ini, make sure alembic ini gets called if alembic scripts dir does not exist	2020-09-12 12:09:20 +02:00
Franzi	cf2920f284	bundles/mautrix-telegram: introduce	2020-09-06 12:15:37 +02:00
Franzi	180802a669	bundles/apt: make sure we do have pip3 and virtualenv	2020-09-06 12:04:56 +02:00
Franzi	1744596296	bundles/matrix-synapse: deploy override.conf to make sure synapse doesn't try to load config from there	2020-09-05 20:06:35 +02:00
Franzi	a443272e02	bundles/gitea: make sure to restart gitea after downloading binary	2020-09-04 21:06:13 +02:00
Franzi	e35f41c6dc	bundles/letsencrypt: change cronjob times	2020-08-30 21:26:33 +02:00
Franzi	27d6c1880a	bundles/influxdb: introduce	2020-08-30 12:07:06 +02:00
Franzi	ccd4a09183	bundles/apt: allow variables {os} and {os_release} in sources.list entries	2020-08-30 12:06:19 +02:00
Franzi	77051c0a0e	bundles/nginx: clean up unmanaged nginx vhosts	2020-08-30 11:36:48 +02:00
Franzi	626355178a	bundles/apt: make sure popularity-contest is uninstalled	2020-08-30 11:14:31 +02:00
Franzi	f22b30e4fa	bundles/cron: purge unwanted data from /etc/cron.d	2020-08-30 11:14:10 +02:00
Franzi	c8ae22da8a	I HATE GOOGLE (v3)	2020-08-30 10:44:13 +02:00
Franzi	b24253a64b	bundles/nginx: determine worker processes by cpu count by default	2020-08-30 10:32:29 +02:00
Franzi	049b77e702	bundles/postgresql: use zfs if possible	2020-08-29 21:30:12 +02:00
Franzi	4934eb46fb	bundles/zfs: import bundle from work repository	2020-08-29 21:10:59 +02:00
Franzi	b690ae25b0	bundles/apt: use node.os and node.os_version to determine settings	2020-08-29 21:10:22 +02:00
Franzi	007a617785	bundles/users: rework	2020-08-29 19:21:35 +02:00
Franzi	0de62a0afa	bundles/postgresql: add apt packages, create root user	2020-08-21 16:21:46 +02:00
Franzi	b4122bf3f9	travelynx: add imprint	2020-08-21 15:06:04 +02:00
Franzi	4a81c05f6d	I HATE GOOGLE (v2)	2020-08-21 14:41:34 +02:00
Franzi	0d8332ec7e	bundles/gitea: auto-configure nginx vhost	2020-08-20 15:49:11 +02:00
Franzi	1fb5787807	htz.ex42-1048908: can haz gitea?	2020-08-20 15:34:27 +02:00
Franzi	55d6257243	bundles/users: only remove ssh key if we're managing configs	2020-08-20 15:34:05 +02:00
Franzi	21343f6213	get rid of cloud-init	2020-08-20 11:07:18 +02:00
Franzi	ad620396f5	bundles/apt: rework gpg key handling	2020-08-20 10:59:45 +02:00
Franzi	54371cf289	I HATE GOOGLE	2020-08-20 10:01:34 +02:00
Franzi	4974494ee0	bundles/travelynx: make version configurable via metadata	2020-08-20 09:44:01 +02:00
Franzi	b7f377816f	htz.ex42-1048908: fix travelynx static files	2020-08-19 22:01:54 +02:00
Franzi	15dbc4307f	bundles/travelynx: use worker service instead of cronjob	2020-08-19 21:53:19 +02:00
Franzi	8547948ce6	bundles/nginx: also set host header for proxy connections	2020-08-19 21:43:37 +02:00
Franzi	15eda05074	bundles/travelynx: hard-code displayed version	2020-08-19 20:09:21 +02:00
Franzi	71b604c5af	bundles/travelynx: use github mirror ... git.finalrewind.org seems slow sometimes, which breaks our CI pipeline	2020-08-19 19:06:59 +02:00
Franzi	277c259e05	bundles/travelynx: hard-code displayed version	2020-08-19 18:52:20 +02:00
Franzi	9f4f19cdc5	bundles/travelynx: make sure config changes are reflected in production	2020-08-19 18:51:27 +02:00
Franzi	5797d790aa	bundles/travelynx: add cron	2020-08-19 18:48:05 +02:00
Franzi	0dd2a4b985	htz.ex42-1048908: can haz travelynx?	2020-08-19 18:43:32 +02:00
Franzi	20f3f566ac	bundles/mx-puppet-discord: fix postgres database	2020-08-19 18:39:07 +02:00
Franzi	0ebcf9762e	add gce workaround ... those daemons keep messing with our settings, get rid of them	2020-08-18 15:51:24 +02:00
Franzi	11468cd1e7	bundles/apt: more default packages	2020-08-18 15:46:42 +02:00
Franzi	7d911ce835	bundles/matrix-synapse: remove conf.d, fix server name	2020-08-18 15:34:20 +02:00
Franzi	5e2fea8497	update to bw4	2020-08-18 15:31:52 +02:00
Franzi	d7862918a6	bundles/nginx: set default X-Frame-Options to SAMEORIGIN	2020-08-18 15:07:43 +02:00
Franzi	17828a29f8	bundles/nginx: fix hsts header	2020-08-14 08:23:41 +02:00
Franzi	7986f6ee7d	bundles/letsencrypt: remove ocsp stapling ... This causes problems with weechat and dovecot. Those certificates are short-lived, so not having OCSP stapling is probably fine.	2020-07-26 18:48:37 +02:00
Franzi	f7eb0cc150	bundles/{letsencrypt,nginx}: fix ocsp stapling	2020-07-19 12:10:19 +02:00
Franzi	de632a7725	htz.ex42-1048908: add missing domains	2020-07-19 11:26:12 +02:00
Franzi	94c2c644a6	bundles/nginx: support PHP 7.3	2020-07-19 11:09:53 +02:00
Franzi	0743283763	bundles/letsencrypt: use sorted() in domains.txt	2020-07-19 10:59:19 +02:00
Franzi	31a1a88d13	bundles/nginx: use DEFAULTS for letsencrypt	2020-07-19 10:58:54 +02:00
Franzi	950897324c	bundles/mx-puppet-discord: add dependency on chown	2020-07-05 16:59:30 +02:00
Franzi	f47c9ea0a0	htz-cloud: keep cloud-init	2020-06-08 10:12:48 +02:00
Franzi	2e92f9851a	bundles/apt: auto reboot after upgrade if needed	2020-06-08 10:08:16 +02:00
Franzi	507e28bc24	bundles/apt: remove cloud-init if found on node	2020-06-06 10:26:05 +02:00
Franzi	9d9e33977a	bundles/bind: add	2020-06-05 17:50:45 +02:00
Franzi	d1236d6e25	bundles/nginx: add stub_status	2020-06-01 13:35:54 +02:00
Franzi	5f804ca3be	bundles/letsencrypt: add metadata to reload certificates and services	2020-06-01 12:33:25 +02:00
Franzi	2a6547dfb7	bundles/cron: add	2020-06-01 11:54:28 +02:00
Franzi	85b3adf671	add proxy feature to nginx	2020-06-01 11:31:13 +02:00
Franzi	3523edbcb4	bundles/nginx: ensure we're doing letsencrypt, since we're enforcing ssl	2020-06-01 11:17:52 +02:00
Franzi	54467af6f5	bundles/jenkins-ci: fix metaproc name	2020-06-01 11:14:04 +02:00
Franzi	943a7c1566	nodes/htz.ex42-1048908: move postgres roles and databases to bundles	2020-06-01 11:09:40 +02:00
Franzi	36c8b90c4b	bundles/nginx: switch to TLS 1.2 and 1.3 only	2020-06-01 11:01:00 +02:00
Franzi	871341dd4b	bundles/riot-web: add nginx metadata	2020-06-01 10:53:19 +02:00
Franzi	c4330f866b	bundles/nginx: add deployment of vhost configs	2020-06-01 10:52:52 +02:00
Franzi	dc9e8dc679	add letsencrypt bundle	2020-06-01 10:26:37 +02:00
Franzi	d136e90a3d	bundles/apt: no need to do minimal steps when doing unattended-upgrade	2020-05-29 20:06:33 +02:00
Franzi	6d9e62e653	bundles/apt: fix typo	2020-05-29 19:58:21 +02:00
Franzi	86d88a4355	fix apt unattended-upgrades	2020-05-23 17:01:30 +02:00
Franzi	bd48c45553	bundles/users: edit tmux.conf	2020-05-23 11:36:03 +02:00
Franzi	7a04c7182e	bundles/users: fix typo	2020-05-16 10:32:44 +02:00
Franzi	4e72b41971	bundles/mx-puppet-discord: config tweaks	2020-05-16 10:06:40 +02:00
Franzi	dddb387e58	display login name in tmux status bar	2020-05-09 15:36:32 +02:00
Franzi	34703b6eba	add bundle jenkins-ci	2020-05-09 13:14:49 +02:00
Franzi	3765189450	bundles/voc-loudness-monitor: remove sloop	2020-05-09 11:35:40 +02:00
Franzi	7b3d3567de	bundles/voc-loudness-monitor: use h264 instead	2020-05-09 10:23:50 +02:00
Franzi	fa50f8b248	bundles/seafile: fix mode of /opt/seafile	2020-04-13 09:59:02 +02:00
Franzi	f701110654	bundles/users: fix deletion of unneded home directories	2020-04-13 09:57:33 +02:00
Franzi	004422c060	bundles/seafile: initial commit ... seafile installation itself is not managed	2020-04-13 09:53:10 +02:00
Franzi	ffb962b108	bundles/nginx: add nginx config	2020-04-13 09:52:26 +02:00
Franzi	411d22d404	bundles/users: add vim	2020-04-11 12:26:02 +02:00
Franzi	2990216a8b	bundles/users: add fish_variables	2020-04-11 12:06:57 +02:00
Franzi	4c79fdf997	bundles/voc-loudness-monitor: add s23 and s89	2020-04-11 11:29:04 +02:00
Franzi	f1a693d0d6	bundles: only install apt packages via apt bundle to avoid double defining packages	2020-04-11 11:25:24 +02:00
Franzi	8a26def21c	add matrix-synapse bundle	2020-04-05 11:38:31 +02:00
Franzi	29eeffbdc3	bundles/mx-puppet-discord: restart bridge if config or registration changed	2020-04-04 18:33:05 +02:00
Franzi	78bae4f77b	bundles/postgresql: fix database creation	2020-04-04 18:28:38 +02:00
Franzi	1dfa5c457c	bundles/mx-puppet-discord: specify path to registration file in systemd unit	2020-04-04 18:28:15 +02:00
Franzi	081fafc64e	bundles/mx-puppet-discord: add systemd unit file	2020-04-04 18:21:40 +02:00
Franzi	629c38230c	bundles/users: add option to change home directory mode	2020-04-04 18:15:08 +02:00
Franzi	a8a3bcdb83	bundles/mx-puppet-discord: remove registration.yaml before generating new one	2020-04-04 18:10:37 +02:00
Franzi	5910d825c0	bundles/mx-puppet-discord: set default listen-addr to IPv4	2020-04-04 18:07:27 +02:00
Franzi	4c5a88f734	add bundle for mx-puppet-discord	2020-04-04 18:01:58 +02:00
Franzi	1856f4749c	bundles/users: add option to not automatically deploy configs	2020-04-04 17:54:26 +02:00
Franzi	4da792f522	bundles/postgresql: add bundle	2020-04-04 17:53:59 +02:00
Franzi	234604cd0c	bundles/sudo: add secure_path to sudoers file	2020-04-04 16:53:25 +02:00
Franzi	f3dc5c8325	bundles/nodejs: move to own bundle	2020-04-04 16:31:50 +02:00
Franzi	a1e05108c1	bundles/apt: change origins to sites	2020-04-04 11:21:30 +02:00
Franzi	0750610ccc	bundles/users: fix user-specific tmux config	2020-03-28 13:32:39 +01:00
Franzi	719d41a557	bundles/users: add readme	2020-03-28 13:12:45 +01:00
Franzi	0b51c9dae4	bundles/users: deploy standard tmux config to /etc/tmux.conf instead of ~/.tmux.conf	2020-03-28 13:03:35 +01:00
Franzi	eddb8ca70a	bundles/users: add option for custom tmux/bash/fish configs	2020-03-28 12:56:45 +01:00
Franzi	810c2cfcf8	bundles/users: also deploy tmux config	2020-03-28 12:40:37 +01:00
Franzi	d7ca23d57e	bundles/apt: autoclean unused packages	2020-03-28 12:36:40 +01:00
Franzi	32bdcae23f	bundles/hostname: add node name to hosts file	2020-03-28 09:47:43 +00:00
Franzi	841b49cd18	bundles/users: also deploy shell config	2020-03-27 13:33:37 +00:00
Franzi	6656a0864f	bundles/{systemd,hostname}: add hostname control	2020-03-27 12:46:10 +00:00
Franzi	067b498bf2	bundles/sudo: add bundle	2020-03-27 11:52:17 +00:00
Franzi	9a956e832a	bundles/voc-loudness-monitor: no need to start the loudness units on every run	2020-03-27 11:50:50 +00:00
Franzi	7406ed7522	bundles/apt: fix additional origins for unattended-users	2020-03-27 11:30:11 +00:00
Franzi	a3c0e6a08e	bundles/users: regular users don't need a password	2020-03-27 11:28:44 +00:00
Franzi	8e681e4c39	bundles/voc-loudness-monitor: sources need ffmpeg installed	2020-03-21 11:42:33 +00:00
Franzi	e351c508f2	bundles/systemd: add daemon-reload action	2020-03-21 11:31:56 +00:00
Franzi	8abfe74c2b	bundles/voc-loudness-monitor: inital commit of sources units	2020-03-21 11:31:27 +00:00
Franzi	9556e423bd	bundles/nginx: initial commit	2020-03-14 09:56:19 +00:00
Franzi	b4808d54e9	bundles/riot-web: add metadata to write config.json	2020-03-14 09:38:12 +00:00
Franzi	589965b58b	bundles/apt: fix unattended-upgrades	2020-03-14 09:37:31 +00:00
Franzi	d0ba89a1f3	default shell is bash, not fish ... ... sadly :(	2020-02-29 14:47:41 +00:00
Franzi	a27fd619a2	add riot-web bundle	2020-02-29 14:42:54 +00:00
Franzi	ad7b164533	add apt bundle	2020-02-29 14:42:29 +00:00
Franzi	e5539d508b	bundles/users: remove authorized_keys if not set by bundle	2020-02-29 13:09:14 +00:00
Franzi	a47bdcfb39	fixup groups	2020-02-29 12:38:27 +00:00
Franzi	ebf7f7ada9	add users bundle	2020-02-29 12:30:21 +00:00
Franzi	3934414140	initial version of vmhost bundle	2020-02-29 12:30:06 +00:00