602 commits

Author	SHA1	Message	Date
Franzi	24f04e59aa	nodes/voc.pretalx: work around content-security-policy issues	2021-04-05 08:18:21 +02:00
Franzi	aad27851bb	bundles/miniflux: proxy all images	2021-04-04 22:16:14 +02:00
Franzi	e36a352a42	bundles: fix usage of set() vs {}	2021-04-04 10:34:55 +02:00
Franzi	c418102000	bundles/netdata: fix iptables default	2021-04-04 10:30:45 +02:00
Franzi	513eb4bed6	bundles/mosquitto: add monitoring	2021-04-03 09:43:24 +02:00
Franzi	2027308249	bundles/zfs: fix typo in check_zpool_space	2021-04-03 09:41:17 +02:00
Franzi	9cbf866de7	bundles/mosquitto: introduce, add to node home.nas	2021-04-03 09:36:47 +02:00
Franzi	f8bbe00d47	overall better handling and usage of exceptions	2021-04-02 18:57:13 +02:00
Franzi	5d5930265a	bundles/postfix: remove print statement	2021-04-02 18:29:33 +02:00
Franzi	61cf881a03	bundles/pretalx: add bash_alias for manage.py	2021-04-02 14:59:56 +02:00
Franzi	4a3be10add	bundles/apt: fix if in upgrade-and-reboot	2021-04-02 13:40:55 +02:00
Franzi	a24fb12c21	bundles/apt: introduce restart_triggers (restart services if another service has been upgraded)	2021-04-02 08:12:51 +02:00
Franzi	7ca24d27d3	bundles/apt: add a bit of code to remove old, unused kernel images	2021-04-02 08:11:17 +02:00
Franzi	8a0c8f32ae	bundles: less Restart=on-failure, more Restart=always	2021-04-02 08:05:33 +02:00
Franzi	5b276368b8	bundles/wireguard: iptables/bundle_rules should be a list	2021-04-01 17:13:24 +02:00
Franzi	17f9aa9c3e	bundles/icinga2: disable command module	2021-04-01 17:12:35 +02:00
Franzi	c5eb2f4f70	bundles/icinga2: do not send recovery emails	2021-04-01 17:11:42 +02:00
Franzi	957cac5ebc	bundles/postfix: disable SPAM BLOCKLIST check if relayhost is set	2021-04-01 17:00:53 +02:00
Franzi	61c6188454	bundles/postfix: mynetworks now supports identifiers	2021-04-01 16:59:49 +02:00
Franzi	b7222e2cd1	bundles/systemd-networkd: fix typo in routes	2021-04-01 16:31:57 +02:00
Franzi	6e423c24fb	bundles/wireguard: rework metadata.py	2021-04-01 16:27:31 +02:00
Franzi	b679f568eb	bundles/systemd-networkd: no need for a specific order in /etc/systemd/network/	2021-04-01 16:26:06 +02:00
Franzi	d787f8b0a3	bundles/systemd-networkd: rework routes	2021-04-01 16:25:24 +02:00
Franzi	b52a196c73	bundles/nginx: add configuration option for client_max_body_size	2021-03-30 21:26:25 +02:00
Franzi	da9fe36646	bundles/pretalx: support installing plugins	2021-03-30 19:52:03 +02:00
Franzi	7345543fa2	bundles/mx-puppet-discord: remove logging to files, disable presence logging	2021-03-28 11:29:16 +02:00
Franzi	c388d5ea1e	bundles/postgresql: fix restart dependencies	2021-03-28 09:39:08 +02:00
Franzi	35e4bbf04b	bundles/postfix: remove postscreen usage ... postscreen isn't able to share its cache file between instances, which leads to the server simply accepting mails for the port on which postscreen starts up later. Since we can't predict which port this will be, we simply remove postscreen alltogether. Yes, i know i could just remove postscreen for port 2525.	2021-03-28 09:00:37 +02:00
Franzi	ce39850bda	bundles/postfix: fix .provides() for iptables reactor	2021-03-28 08:56:22 +02:00
Franzi	9fe4e2933d	bundles/postfix: add firewalling for port 2525	2021-03-28 08:37:51 +02:00
Franzi	a4b2dc29a9	bundles/miniflux: don't clean up old entries	2021-03-28 08:04:41 +02:00
Franzi	39c1d34bbb	bundles/sshmon: fix disk space usage limits	2021-03-27 12:07:49 +01:00
Franzi	8f0f635484	bundles/basic: change load graph for cpu graph	2021-03-27 12:06:12 +01:00
Franzi	568a31586f	bundles/apt: fix permissions for /etc/kernel/postinst.d/unattended-upgrades	2021-03-27 08:31:29 +01:00
Franzi	f514e200f0	bundles/mautrix-whatsapp: restart bridge daily again ... It seems neither WhatsApp nor WhatsApp Web are designed for 24/7 connections, thus leading to all kinds of weird side effects like "Bridge thinks it's connected, but no messages get through at all" or "WhatsApp is running, but the Bridge can't connect to it"	2021-03-27 08:21:41 +01:00
Franzi	f98720b57b	bundles/dhcpd: sort dchp leases by ip in bash alias	2021-03-26 09:27:52 +01:00
Franzi	65490b1d20	bundles/apt: log stdout and stderr separately in upgrade-and-reboot	2021-03-26 09:02:48 +01:00
Franzi	27753d50c4	bundles/postfix: use threading in check_spam_blocklist	2021-03-25 17:42:59 +01:00
Franzi	fdcec012f3	bundles/postfix: add SPAM BLOCKLIST check for every non-private IP attached to the server	2021-03-22 20:24:14 +01:00
Franzi	b99176be49	bundles/kodi: add iptables rules	2021-03-21 19:10:49 +01:00
Franzi	28dd9694af	add bundle:oidentd	2021-03-21 17:40:58 +01:00
Franzi	6a6198c9b9	bundles/wireguard: move iptables rules to metadata reactor	2021-03-21 15:26:29 +01:00
Franzi	3bc5e55400	bundles/iptables: don't apply iptables rules if a rules file is missing	2021-03-21 11:44:27 +01:00
Franzi	4b00c8b55a	bundles/unbound: do not bind to 0.0.0.0 if qemu is installed	2021-03-21 11:43:53 +01:00
Franzi	5a0aa82ec9	bundles/powerdns: fix missing imports	2021-03-21 11:43:17 +01:00
Franzi	62f7080db9	bundles/nfs-server: add iptables config	2021-03-21 11:24:21 +01:00
Franzi	850d860d59	bundles/powerdns: add iptables config	2021-03-21 11:12:18 +01:00
Franzi	31ddea7649	bundles/dovecot: add iptables config	2021-03-21 11:12:03 +01:00
Franzi	5775001301	bundles/postfix: add iptables config	2021-03-21 11:11:49 +01:00
Franzi	c9f008ad82	bundles/openssh: move iptables rules to metadata reactor	2021-03-21 10:37:28 +01:00