Commit graph

554 commits

Author SHA1 Message Date
64cffad6a7
bundles/rspamd: silence clamav cronjob 2020-11-08 15:03:26 +01:00
0eca42d188
bundles/dovecot: fix home directory for virtual mailboxes
All checks were successful
bundlewrap/pipeline/head This commit looks good
2020-11-08 13:00:44 +01:00
b4b988e5f2
bundles/postfix: disable TLS1.0 and 1.1, disable weak ciphers
All checks were successful
bundlewrap/pipeline/head This commit looks good
2020-11-08 12:24:37 +01:00
eddabb0043
dns: activate DMARC 2020-11-08 12:23:41 +01:00
f85349f0c5
bundles/postfixadmin: fix apt packages
All checks were successful
bundlewrap/pipeline/head This commit looks good
2020-11-08 11:53:51 +01:00
0647a8203d
nodes/htz.ex42-1048908: add another ip to spamcheck bypass 2020-11-08 11:06:30 +01:00
4ef9b119ef
nodes/htz.ex42-1048908: bump php to 7.4
Some checks failed
bundlewrap/pipeline/head There was a failure building this commit
2020-11-08 10:57:01 +01:00
15428b03be
bundles/rspamd: introduce, add to htz.ex42-1048908
Some checks failed
bundlewrap/pipeline/head There was a failure building this commit
2020-11-08 10:43:51 +01:00
a236444fe5
bundles/dovecot: make sure to reload dovecot after letsencrypt 2020-11-08 10:42:08 +01:00
e36dbf0222
libs/tools: fix missing default in resolve_identifier() 2020-11-08 10:41:41 +01:00
b00b2aa245
bundles/dovecot: autoexpunge Junk folder
Some checks failed
bundlewrap/pipeline/head There was a failure building this commit
2020-11-07 22:46:15 +01:00
1b5ac55033
install postfix on all nodes, configure ex42-1048908 for incoming mail 2020-11-07 22:32:47 +01:00
7080b0d89e
bundles/rspamd: create dummy bundle 2020-11-07 22:32:08 +01:00
18b573a9c6
bundles/dovecot: introduce 2020-11-07 22:31:47 +01:00
f42dda5961
bundles/postfixadmin: introduce 2020-11-07 22:31:29 +01:00
5550d2cc56
bundles/postfix: introduce 2020-11-07 22:31:18 +01:00
88afba9ce9
bundles/mx-puppet-discord: add RestartSec= to systemd unit file 2020-11-07 09:40:22 +01:00
7ab121e7e5
bundles/mautrix-telegram: install bridge from git repository 2020-11-07 09:39:57 +01:00
d7f578742b
bundles/mx-puppet-discord: put bridge repo into subdirectory
this avoids recreating config and registration on every update, which in turn
avoids restarting synapse
2020-11-07 09:08:10 +01:00
c481fc1327
nodes/htz.ex42-1048908: add php
All checks were successful
bundlewrap/pipeline/head This commit looks good
2020-11-07 09:06:11 +01:00
3dc5962627
nodes/htz-cloud.luther: add needed config and packages for drupal
All checks were successful
bundlewrap/pipeline/head This commit looks good
2020-10-31 13:01:15 +01:00
f8bc4b2ad9
bundles/php: introduce 2020-10-31 13:00:38 +01:00
e2d8923dee
bundles/nginx: use metadata reactor to determine index files 2020-10-31 10:41:48 +01:00
3ee570a47a
nodes/htz-cloud.luther: add postgresql config 2020-10-31 10:31:10 +01:00
f1f7086aab
bundles/postgresql: make sure we have postgres_role before adding postgres_db 2020-10-31 10:30:48 +01:00
67c5c23194
bundles/nginx: support non-domain vhost names 2020-10-31 10:30:07 +01:00
4873ec053e
nodes/htz-cloud.luther: add node
All checks were successful
bundlewrap/pipeline/head This commit looks good
2020-10-31 10:19:03 +01:00
113221a9b2
bundles/nginx: make sure we have dhparam.pem 2020-10-31 10:18:40 +01:00
9cc5c07466
bundles/letsencrypt: do not try to do authorizations without a webserver 2020-10-31 10:11:58 +01:00
76fe68a3d1
bundles/zfs: fix dependencies, auto-load zfs module if not loaded 2020-10-31 10:11:15 +01:00
8eeaabf615
bundles/nginx: use http 308 for https redirect
All checks were successful
bundlewrap/pipeline/head This commit looks good
basically "go away. nothing's here. use https forever."
2020-10-30 15:24:24 +01:00
3c1361a2eb
nodes/htz-cloud.sewfile: fix ip addresses
All checks were successful
bundlewrap/pipeline/head This commit looks good
2020-10-27 18:15:01 +01:00
1fd452b006
nodes/htz.ex42-1048908: fix permissions for paste.kunsmann.eu
All checks were successful
bundlewrap/pipeline/head This commit looks good
2020-10-27 18:03:52 +01:00
20abb53260
nodes/htz.ex42-1048908: update travelynx to 1.18.7 2020-10-27 17:57:00 +01:00
6c937e547d
nodes/rx300: increase ARC size to 16GB
All checks were successful
bundlewrap/pipeline/head This commit looks good
2020-10-25 16:49:36 +01:00
554e7947ea
nodes/rx300: raidz for data disks 2020-10-25 16:46:45 +01:00
50372572f4
bundles/zfs: improvements 2020-10-25 16:41:18 +01:00
1c5e97a10f
nodes/rx300: introduce
All checks were successful
bundlewrap/pipeline/head This commit looks good
2020-10-25 13:54:19 +01:00
3077d74318
bundles/users: alias s='sudo -i' 2020-10-25 13:21:04 +01:00
351d779f20
bundles/users: add metadata entry for bash aliases 2020-10-25 13:19:46 +01:00
2a992773f3
bundles/users: fish shell is gone everywhere 2020-10-25 13:17:26 +01:00
831545d8b1
introduce node.metadata['hostname'] to other bundles, update nodefiles to reflect changes
All checks were successful
bundlewrap/pipeline/head This commit looks good
2020-10-25 11:14:46 +01:00
de73552700
nodes: add gce.dns02 and gce.dns03, remove AutoDNS nameservers
All checks were successful
bundlewrap/pipeline/head This commit looks good
2020-10-25 10:59:01 +01:00
b70f9c9c9d
bundles/powerdns: make sure every dns server is able to resolve every other dns server 2020-10-25 10:58:11 +01:00
a33d8e4201
bundles/powerdns: decrease RETRY time 2020-10-25 10:57:26 +01:00
29f488c082
bundles/powerdns: put ip addresses of secondary nameservers into allow-axfer-ips
Some checks failed
bundlewrap/pipeline/head There was a failure building this commit
2020-10-25 10:56:55 +01:00
152bb56fdd
bundles/powerdns: remove superslave setting
Some checks failed
bundlewrap/pipeline/head There was a failure building this commit
debian currently does ship an older version, in which this
setting is enabled by default.
2020-10-25 10:55:17 +01:00
7a3e3ad68f
bundles/powerdns: we don't need the node names of primary nameservers 2020-10-25 10:53:55 +01:00
43bd6b4774
bundles/powerdns: only enable webserver and api on primary nameservers 2020-10-25 10:52:51 +01:00
78c553faf9
bundles/nodejs: update to 14.x
All checks were successful
bundlewrap/pipeline/head This commit looks good
2020-10-24 17:20:50 +02:00