Commit graph

2613 commits

Author SHA1 Message Date
Franzi fdcec012f3
bundles/postfix: add SPAM BLOCKLIST check for every non-private IP attached to the server
All checks were successful
bundlewrap/pipeline/head This commit looks good
2021-03-22 20:24:14 +01:00
Franzi b99176be49
bundles/kodi: add iptables rules
All checks were successful
bundlewrap/pipeline/head This commit looks good
2021-03-21 19:10:49 +01:00
Franzi 75f5c58764
dns/franzi.business: fix matrix federation port in SRV record
All checks were successful
bundlewrap/pipeline/head This commit looks good
2021-03-21 18:12:27 +01:00
Franzi 50438d940e
nodes/htz.ex42-1048908: update gitea to 1.13.5
All checks were successful
bundlewrap/pipeline/head This commit looks good
2021-03-21 17:55:43 +01:00
Franzi 28dd9694af
add bundle:oidentd
All checks were successful
bundlewrap/pipeline/head This commit looks good
2021-03-21 17:40:58 +01:00
Franzi 6a6198c9b9
bundles/wireguard: move iptables rules to metadata reactor
All checks were successful
bundlewrap/pipeline/head This commit looks good
2021-03-21 15:26:29 +01:00
Franzi 559f743ce2
nodes/voc.pretalx: no localized strings in website_check_string
All checks were successful
bundlewrap/pipeline/head This commit looks good
2021-03-21 12:59:08 +01:00
Franzi 691c3e7bc2
iptables: add some missing rules
All checks were successful
bundlewrap/pipeline/head This commit looks good
2021-03-21 12:27:03 +01:00
Franzi 087bc4c669
nodes: iptables for all
All checks were successful
bundlewrap/pipeline/head This commit looks good
2021-03-21 11:44:52 +01:00
Franzi 3bc5e55400
bundles/iptables: don't apply iptables rules if a rules file is missing 2021-03-21 11:44:27 +01:00
Franzi 4b00c8b55a
bundles/unbound: do not bind to 0.0.0.0 if qemu is installed 2021-03-21 11:43:53 +01:00
Franzi 5a0aa82ec9
bundles/powerdns: fix missing imports 2021-03-21 11:43:17 +01:00
Franzi 62f7080db9
bundles/nfs-server: add iptables config 2021-03-21 11:24:21 +01:00
Franzi 626075ee94
nodes/htz.ex42-1048908: add some iptables rules for unmanaged services
Some checks failed
bundlewrap/pipeline/head There was a failure building this commit
2021-03-21 11:12:42 +01:00
Franzi 850d860d59
bundles/powerdns: add iptables config 2021-03-21 11:12:18 +01:00
Franzi 31ddea7649
bundles/dovecot: add iptables config 2021-03-21 11:12:03 +01:00
Franzi 5775001301
bundles/postfix: add iptables config 2021-03-21 11:11:49 +01:00
Franzi c9f008ad82
bundles/openssh: move iptables rules to metadata reactor
All checks were successful
bundlewrap/pipeline/head This commit looks good
2021-03-21 10:37:28 +01:00
Franzi b943d2d465
rework iptables configuration
All checks were successful
bundlewrap/pipeline/head This commit looks good
2021-03-21 10:30:04 +01:00
Franzi d3ea06c3e8
nodes/htz.ex42-1048908: update matrix-media-repo to 1.2.5
All checks were successful
bundlewrap/pipeline/head This commit looks good
2021-03-19 15:00:00 +01:00
Franzi 41dac92e1a
nodes/htz.ex42-1048908: update element-web to 1.7.23
All checks were successful
bundlewrap/pipeline/head This commit looks good
2021-03-17 14:15:38 +01:00
Franzi 841a86aa61
dns/kunbox.net: remove duplicate entries, disable dmarc
All checks were successful
bundlewrap/pipeline/head This commit looks good
2021-03-15 11:59:21 +01:00
Franzi 9e1685531c
nodes/home.router: add iptables rule for mail
All checks were successful
bundlewrap/pipeline/head This commit looks good
2021-03-15 11:48:35 +01:00
Franzi 3fcd81960e
bundles/postfix: allow configuring mynetworks
All checks were successful
bundlewrap/pipeline/head This commit looks good
2021-03-15 11:41:35 +01:00
Franzi 52cab71fec
bundles/wireguard: also allow outgoing traffic
How did this ever work without this rule?
2021-03-15 09:00:35 +01:00
Franzi adb808a683
bundles/users: more colourful bash for everyone
All checks were successful
bundlewrap/pipeline/head This commit looks good
2021-03-14 17:14:08 +01:00
Franzi 70665abb0b
nodes/htz.ex42-1048908: allow http traffic to radicale web without authentication
All checks were successful
bundlewrap/pipeline/head This commit looks good
2021-03-14 17:04:00 +01:00
Franzi d596d46783
nodes/htz.ex42-1048908: update travelynx to 1.19.8 2021-03-14 17:03:34 +01:00
Franzi 6f80303782
add scripts/generate-wireguard-client-certificate
All checks were successful
bundlewrap/pipeline/head This commit looks good
2021-03-14 14:32:49 +01:00
sophie 6ae0d31840 Merge pull request 'sophies-stuff' (#36) from sophies-stuff into main
All checks were successful
bundlewrap/pipeline/head This commit looks good
Reviewed-on: https://git.kunsmann.eu/kunsi/bundlewrap/pulls/36
2021-03-13 12:43:44 +00:00
Sophie Schiller 800a4fc956 remove trailing whitespace
All checks were successful
bundlewrap/pipeline/head This commit looks good
2021-03-13 13:39:59 +01:00
Sophie Schiller c062c38971 remove trailing whitespace
Some checks failed
bundlewrap/pipeline/head There was a failure building this commit
2021-03-13 13:38:24 +01:00
Sophie Schiller e8e513e6d4 bw/miniserver new vhost
Some checks failed
bundlewrap/pipeline/head There was a failure building this commit
2021-03-13 13:31:41 +01:00
Sophie Schiller a8fd397a3d add work ssh key
All checks were successful
bundlewrap/pipeline/head This commit looks good
2021-03-11 22:27:30 +01:00
Sophie Schiller 718b7a9ce8 add firewall
All checks were successful
bundlewrap/pipeline/head This commit looks good
2021-03-11 22:18:03 +01:00
Sophie Schiller 36b6e801e5 update bashrc 2021-03-11 22:18:03 +01:00
Sophie Schiller f8bea96752 plagiarize weechat setup 2021-03-11 22:18:03 +01:00
Sophie Schiller 33be3a90d2 bw/htz-miniserver initial nodefile 2021-03-11 22:18:03 +01:00
Franzi f6ecf2a465
bundles/nfs-client: support arch linux
All checks were successful
bundlewrap/pipeline/head This commit looks good
2021-03-11 15:24:06 +01:00
Sophie Schiller c87611c2e2 bw/kodi add backports repo
All checks were successful
bundlewrap/pipeline/head This commit looks good
2021-03-08 21:06:25 +01:00
Franzi bac372ae67
nodes/htz.ex42-1048908: update gitea to 1.13.4
All checks were successful
bundlewrap/pipeline/head This commit looks good
2021-03-07 18:58:33 +01:00
Franzi f57681b098
nodes: move wireguard stuff to 172.19.136.0/25
All checks were successful
bundlewrap/pipeline/head This commit looks good
2021-03-07 14:39:04 +01:00
Franzi 8b07fce738
bundles/unbound: decrease statistics-interval until debian has 1.19 and we're actually able to use them 2021-03-06 10:03:22 +01:00
Franzi f214f70cd4
bundles/basic: add textual cpu stats to htop 2021-03-06 09:58:22 +01:00
Franzi 7e57c0f03e
bundles/basic: current htop version in debian does not support DiskIO nor NetworkIO
All checks were successful
bundlewrap/pipeline/head This commit looks good
2021-03-06 09:56:05 +01:00
Franzi 08d34b0e09
nodes/kunsi-t470: change mode of /home/kunsi 2021-03-06 09:55:32 +01:00
Franzi 629922626b
nodes/htz.ex42-1048908: update matrix-media-repo to 1.2.4
All checks were successful
bundlewrap/pipeline/head This commit looks good
2021-03-06 09:45:54 +01:00
Franzi ebcf8e4445
bundles/matrix-media-repo: also restart matrix-media-repo after updating
All checks were successful
bundlewrap/pipeline/head This commit looks good
2021-03-05 07:21:23 +01:00
Franzi 84ece2731c
did anyone say updates?
All checks were successful
bundlewrap/pipeline/head This commit looks good
2021-03-05 07:20:08 +01:00
Franzi 2adf3c6a72
bundles/sshmon: increase acceptable amount of cpu steal
All checks were successful
bundlewrap/pipeline/head This commit looks good
2021-03-01 15:52:55 +01:00