Commit graph

1689 commits

Author SHA1 Message Date
5e2fea8497
update to bw4 2020-08-18 15:31:52 +02:00
d7862918a6
bundles/nginx: set default X-Frame-Options to SAMEORIGIN
All checks were successful
bundlewrap/pipeline/head This commit looks good
2020-08-18 15:07:43 +02:00
9f760f9a88
nodes/htz.ex42-1048908: remove grafana
All checks were successful
bundlewrap/pipeline/head This commit looks good
2020-08-18 15:04:39 +02:00
5704fd94a1
nodes/htz-cloud.pirmasens: configure webserver and letsencrypt 2020-08-18 15:03:38 +02:00
72b5b8d880
nodes/htz.ex42-1048908: do not set security headers for webmail 2020-08-18 15:03:07 +02:00
17828a29f8
bundles/nginx: fix hsts header
All checks were successful
bundlewrap/pipeline/head This commit looks good
2020-08-14 08:23:41 +02:00
79a5baa04e
htz.ex42-1048908: increase proxy timeout for matrix-media-repo 2020-08-07 17:50:53 +02:00
460b7d5375
htz.ex42-1048908: remove riot-web permalink prefix
All checks were successful
bundlewrap/pipeline/head This commit looks good
2020-07-30 16:12:48 +02:00
087f4cbad9
htz.ex42-1048908: add buster-backports repo
All checks were successful
bundlewrap/pipeline/head This commit looks good
2020-07-30 15:51:10 +02:00
83ff19f3fb
htz.ex42-1048908: fix matrix .well-known config
All checks were successful
bundlewrap/pipeline/head This commit looks good
2020-07-30 15:37:39 +02:00
7986f6ee7d
bundles/letsencrypt: remove ocsp stapling
All checks were successful
bundlewrap/pipeline/head This commit looks good
This causes problems with weechat and dovecot. Those certificates
are short-lived, so not having OCSP stapling is probably fine.
2020-07-26 18:48:37 +02:00
ae6e590bda
htz.ex42-1048908: add mx0.kunbox.net to letsencrypt 2020-07-26 18:46:08 +02:00
85c0abeb7e
make sure to use bundlewrap<4.0.0
All checks were successful
bundlewrap/pipeline/head This commit looks good
2020-07-19 14:02:40 +02:00
f7eb0cc150
bundles/{letsencrypt,nginx}: fix ocsp stapling
Some checks failed
bundlewrap/pipeline/head There was a failure building this commit
2020-07-19 12:10:19 +02:00
245559ee09
groups/locations: update 2020-07-19 12:09:34 +02:00
de632a7725
htz.ex42-1048908: add missing domains
Some checks failed
bundlewrap/pipeline/head There was a failure building this commit
2020-07-19 11:26:12 +02:00
94c2c644a6
bundles/nginx: support PHP 7.3 2020-07-19 11:09:53 +02:00
0743283763
bundles/letsencrypt: use sorted() in domains.txt 2020-07-19 10:59:19 +02:00
31a1a88d13
bundles/nginx: use DEFAULTS for letsencrypt 2020-07-19 10:58:54 +02:00
ce0af62968
remove legacy nodes
Some checks failed
bundlewrap/pipeline/head There was a failure building this commit
2020-07-05 17:00:35 +02:00
950897324c
bundles/mx-puppet-discord: add dependency on chown 2020-07-05 16:59:30 +02:00
291392d2ba
hostus.ovz-512: is dummy
All checks were successful
bundlewrap/pipeline/head This commit looks good
somehow i'm not able to get this thing to boot reliably.
Will need to be fixed another day
2020-06-12 16:50:42 +02:00
0833b10d69
htz.ex42-1048908: update riot config 2020-06-12 16:48:55 +02:00
f47c9ea0a0
htz-cloud: keep cloud-init
All checks were successful
bundlewrap/pipeline/head This commit looks good
2020-06-08 10:12:48 +02:00
2e92f9851a
bundles/apt: auto reboot after upgrade if needed 2020-06-08 10:08:16 +02:00
9bc4b4c149
nodes/ovh.39528a5b: third nameserver
All checks were successful
bundlewrap/pipeline/head This commit looks good
2020-06-06 10:38:32 +02:00
75aa654f1c
nodes/gce.bind01: add to dns 2020-06-06 10:34:19 +02:00
507e28bc24
bundles/apt: remove cloud-init if found on node 2020-06-06 10:26:05 +02:00
7c53a13483
gce.bind01 / hostus.ovz-512: add 2020-06-06 10:20:58 +02:00
88083bb8c3
dns: update zonefiles
All checks were successful
bundlewrap/pipeline/head This commit looks good
2020-06-06 07:18:41 +02:00
d3c6eb5b7d
add dns group 2020-06-06 06:28:21 +02:00
9d9e33977a
bundles/bind: add
All checks were successful
bundlewrap/pipeline/head This commit looks good
2020-06-05 17:50:45 +02:00
d1236d6e25
bundles/nginx: add stub_status
All checks were successful
bundlewrap/pipeline/head This commit looks good
2020-06-01 13:35:54 +02:00
1e475d8638
nodes/htz.ex42-1048908: more nginx vhosts 2020-06-01 13:33:33 +02:00
5f804ca3be
bundles/letsencrypt: add metadata to reload certificates and services
All checks were successful
bundlewrap/pipeline/head This commit looks good
2020-06-01 12:33:25 +02:00
2a6547dfb7
bundles/cron: add 2020-06-01 11:54:28 +02:00
f0d962ab04
nodes/htz-cloud.sewfile: deploy nginx for seafile
All checks were successful
bundlewrap/pipeline/head This commit looks good
2020-06-01 11:35:56 +02:00
85b3adf671
add proxy feature to nginx 2020-06-01 11:31:13 +02:00
3523edbcb4
bundles/nginx: ensure we're doing letsencrypt, since we're enforcing ssl 2020-06-01 11:17:52 +02:00
54467af6f5
bundles/jenkins-ci: fix metaproc name 2020-06-01 11:14:04 +02:00
943a7c1566
nodes/htz.ex42-1048908: move postgres roles and databases to bundles
All checks were successful
bundlewrap/pipeline/head This commit looks good
2020-06-01 11:09:40 +02:00
033adc1f0b
move nginx and letsencrypt bundle to group "webserver"
All checks were successful
bundlewrap/pipeline/head This commit looks good
2020-06-01 11:04:51 +02:00
36c8b90c4b
bundles/nginx: switch to TLS 1.2 and 1.3 only
Some checks failed
bundlewrap/pipeline/head There was a failure building this commit
2020-06-01 11:01:00 +02:00
871341dd4b
bundles/riot-web: add nginx metadata
Some checks failed
bundlewrap/pipeline/head There was a failure building this commit
2020-06-01 10:53:19 +02:00
c4330f866b
bundles/nginx: add deployment of vhost configs 2020-06-01 10:52:52 +02:00
dc9e8dc679
add letsencrypt bundle 2020-06-01 10:26:37 +02:00
04f2baacf4
nodes/htz.ex42-1048908: metadata apt/packages needs to be a dict
All checks were successful
bundlewrap/pipeline/head This commit looks good
2020-05-29 20:15:04 +02:00
58a9683cfd
nodes/htz.ex42-1048908: more comments
Some checks failed
bundlewrap/pipeline/head There was a failure building this commit
2020-05-29 20:13:34 +02:00
4362b0feb0
nodes/htz.ex42-1048908: add weechat packages 2020-05-29 20:12:06 +02:00
d136e90a3d
bundles/apt: no need to do minimal steps when doing unattended-upgrade
All checks were successful
bundlewrap/pipeline/head This commit looks good
2020-05-29 20:06:33 +02:00