1209 commits

Author	SHA1	Message	Date
Franzi	5dc60eb24e	bundles/openvpn-client: do not manage config directory group	2022-12-16 15:10:03 +01:00
Franzi	f790e2cee0	bundles/vnstat: rework bundle	2022-12-12 07:56:23 +01:00
Franzi	c8dd809057	bundles/wireguard: better nftables rules	2022-12-11 17:42:39 +01:00
Franzi	e8d24bc363	bundles/pppd: automatically add interface entry for ignored interface	2022-12-11 17:42:08 +01:00
Franzi	d86dc32f51	bundles/mixcloud-downloader: improvements	2022-12-07 18:06:44 +01:00
Franzi	15ea875742	home.nas: add bundle:mixcloud-downloader	2022-12-07 04:24:38 +01:00
Franzi	615f6107bc	bundles/element-web: only set --openssl-legacy-provider if using nodejs >= 17	2022-11-27 19:56:36 +01:00
Franzi	ca18a8d231	bundles/pretalx: ignore update check if no version was specified	2022-11-27 19:48:13 +01:00
Franzi	d64657feef	bundles/openvpn-client: fix permissions for /etc/openvpn/client	2022-11-22 18:45:19 +01:00
Franzi	b7de8b3a4d	bundles/grafana: new repo, who dis?	2022-11-21 19:32:47 +01:00
Franzi	bc589011d2	add c3voc vpn to kunsi-p14s	2022-11-21 19:31:49 +01:00
Franzi	72cbe56b5f	bundles/nodejs: make nodejs version configurable	2022-11-16 18:54:52 +01:00
Franzi	2ea914dc0b	bundles/minecraft: collect metrics more often	2022-11-13 18:13:18 +01:00
Franzi	7a14084417	bundles/minecraft: add monitoring via icinga2	2022-11-13 17:48:22 +01:00
Franzi	019d5ce2b6	bundles/minecraft: add monitoring via telegraf	2022-11-13 17:47:19 +01:00
Franzi	52e36f7ae1	bundles/redis: use a lot less snapshots	2022-11-06 19:08:35 +01:00
Franzi	e6e563fb33	bundles/systemd-timers: use bash, because we're using bash if	2022-11-06 19:08:13 +01:00
Franzi	3dce0fb6ac	add bundle:minecraft to rx300	2022-11-06 18:52:38 +01:00
Franzi	fba5d6a782	bundles/{jenkins-ci,openhab}: bump openjdk version	2022-11-06 18:52:14 +01:00
Franzi	b0a43fb128	bundles/users: enable color output in ipb	2022-11-06 14:27:35 +01:00
Franzi	73e6ba0872	bundles/{matrix-dimension,mx-puppet-discord}: nodejs-dependency-hölle, once again	2022-11-05 07:47:07 +01:00
Franzi	ee9f7b8875	bundles/element-web: requires legacy openssl provider for now	2022-11-04 07:29:11 +01:00
Franzi	aa01329dbf	bundles/nodejs: update to nodejs 18	2022-11-04 07:28:53 +01:00
Franzi	e1fe424df9	bundles/basic: support configuring /etc/environment	2022-11-04 07:28:14 +01:00
Franzi	8b1ccb760a	bundles/ntfy: fix formatting errors	2022-11-04 07:27:38 +01:00
Franzi	3db6078d9b	bundles/postfix: set tls ciphers to medium to increase compatibility with centos	2022-11-04 07:08:33 +01:00
Sophie Schiller	bd3c92aac9	bundles/ntfy fix various typos	2022-10-19 17:23:57 +02:00
Sophie Schiller	014c7e5be8	bundles/ntfy add more nginx options	2022-10-19 16:33:36 +02:00
Sophie Schiller	6e23f84a39	bundles/ntfy various fixes	2022-10-19 15:38:10 +02:00
Sophie Schiller	a8cf858d44	bundles/ntfy: first draft	2022-10-19 15:24:39 +02:00
Franzi	2095696131	bundles/mautrix-telegram: disable backfilling	2022-10-16 21:29:53 +02:00
Franzi	8c77e5824a	bundles/grafana: disable metrics	2022-10-02 11:00:06 +02:00
Franzi	988d7e08a0	bundles/travelynx: use carton instead of cpanm	2022-09-22 06:03:51 +02:00
Franzi	edaa22dab6	bundles/infobeamer-cms: fix nginx config	2022-09-11 11:38:13 +02:00
Franzi	038f19ea5e	bundles/unbound: use systemd-timers	2022-09-11 11:32:26 +02:00
Franzi	d9be69d3a9	bundles/systemd-timers: don't auto-reset alerts	2022-09-11 11:26:57 +02:00
Franzi	f004591e98	bundles/letsencrypt: use systemd-timers	2022-09-11 11:26:24 +02:00
Franzi	944c66354b	bundles/mx-puppet-discord: github is archived, gitlab is the new hotness	2022-09-10 18:10:14 +02:00
Franzi	2fd94c2a4b	bundles/hedgedoc: fix nginx config	2022-08-29 19:24:33 +02:00
Franzi	aa5c7ff8b4	block access to the go /debug/pprof/ endpoint	2022-08-19 07:26:01 +02:00
Franzi	84917649dd	bundles/arch-with-gui: have pytz available in i3pystatus	2022-08-14 12:47:52 +02:00
Franzi	6b641890c3	bundles/grafana: replace the useless builtin of telegraf with something more useful	2022-08-07 10:16:07 +02:00
Franzi	a1ce8bf91a	bundles/sudo: purge directory after package installation	2022-07-25 10:08:26 +02:00
Franzi	5539957eb6	bundles/molly-guard: empty directories after package has been installed	2022-07-25 10:07:54 +02:00
Franzi	86cc900d74	rx300: update gitea to 1.16.9	2022-07-17 10:30:05 +02:00
Franzi	2a938d19f1	bundles/gitea: disable registration by default	2022-07-12 20:28:59 +02:00
Franzi	dd5a97eced	bundles: add dependency to systemd-networkd	2022-07-10 13:32:11 +02:00
Franzi	1d58955ced	bundles/zfs: increase timeout for ZFS OLD SNAPSHOTS check	2022-06-05 09:30:44 +02:00
Franzi	51c9506a19	move pacman/no_extract to bundle metadata defaults	2022-05-16 10:52:14 +02:00
Franzi	9730a2be13	bundles/wireguard: fix permissions for wireguard netdev files	2022-05-16 10:48:26 +02:00
Franzi	8cc116c0c4	bundles/zfs: respect pacman/linux-lts option	2022-04-30 12:30:32 +02:00
Franzi	7fffdbab32	bundles/voc-tracker-worker: improve bundle	2022-04-27 05:40:20 +02:00
Franzi	a38b66a7c5	bundles/nfs-client: minor fixes	2022-04-27 05:39:34 +02:00
Franzi	74b3a513f6	bundles/pacman: make NoExtract user-configurable	2022-04-22 15:47:47 +02:00
Franzi	8145fb22e8	add bundle:voc-tracker-worker	2022-04-22 15:43:34 +02:00
Franzi	fc2a69fc2c	rx300: update netbox to 3.2.1	2022-04-15 06:37:09 +02:00
Sophie Schiller	5979d8a1f9	hedgedoc: use global yarn in systemd unit	2022-04-11 00:34:56 +02:00
Franzi	ca69969dad	bundles/backup-server: disable ZFS OLD SNAPSHOTS check	2022-04-06 18:13:23 +02:00
Franzi	4390256abc	bundles/zfs: add metadata option to disable ZFS OLD SNAPSHOTS check	2022-04-06 18:13:01 +02:00
Franzi	5640556ad9	bundles/zfs: run scrub for each pool separately	2022-04-03 09:48:28 +02:00
Franzi	4823653214	bundles/systemd-networkd: remove usage of systemd-resolved ... Something in the combination of arch+zfs+netctl+resolved+ipv6 leads to hanging dns, which in turn leads to hanging everything.	2022-04-03 09:01:10 +02:00
Franzi	891823376f	bundles: add missing dependency to yarn	2022-04-03 08:38:20 +02:00
Franzi	a340071ad8	bundles/oidentd: provide our own systemd unit file	2022-04-03 08:32:07 +02:00
Franzi	ddd29bef3b	bundles: install yarn globally instead of in each individual bundle	2022-04-03 08:16:35 +02:00
Franzi	4ecf7ccb46	bundles/matrix-media-repo: download prebuilt executable instead of building ourselves	2022-04-03 08:05:46 +02:00
Franzi	d8f8f1377f	bundles/arch-with-gui: install sipcalc and inkscape	2022-03-30 18:28:46 +02:00
Franzi	ac48462043	bundles/icinga2: icingaweb2 roles.ini needs another option	2022-03-30 17:29:27 +02:00
Franzi	7b9686977d	bundles/backup-client: do backups between 00:00 and 02:59	2022-03-30 17:23:10 +02:00
Franzi	7c49ac59f5	more packages, please	2022-03-24 18:14:50 +01:00
Franzi	2f8306a14a	bundles/pacman: fix archzfs-kernels repo name	2022-03-23 21:04:12 +01:00
Franzi	950c88aab2	bundles/pacman: install archzfs repo and archzfs-kernels repo if node has bundle:zfs	2022-03-23 19:19:21 +01:00
Franzi	489c2386de	voc.infobeamer-cms: prepare for divoc	2022-03-20 12:35:26 +01:00
Franzi	3e7e355dd6	rx300: update mautrix-whatsapp to 0.3.0	2022-03-19 07:02:54 +01:00
Franzi	c983c50d21	bundles/icinga2: fix timeperiods	2022-03-19 07:02:48 +01:00
Franzi	206cdfe128	bundles/systemd: fix dependencies	2022-03-13 15:19:01 +01:00
Franzi	7604fef734	bundles/icinga2: use ip addresses for monitoring instead of hostnames	2022-03-13 15:15:47 +01:00
Franzi	5179edb458	bundles/wireguard: fix forwarding firewall rules	2022-03-13 15:15:08 +01:00
Franzi	c0ebd25ffc	bundles/systemd: systemd-timesyncd gets started automatically	2022-03-13 15:14:40 +01:00
Franzi	212ba72b30	bundles/nftables: workaround does not work for debian buster	2022-03-13 14:13:59 +01:00
Franzi	aa3ce32a7c	bundles/systemd: systemd-timesyncd package requires debian bullseye	2022-03-13 14:12:05 +01:00
Franzi	c71d827691	bundles/icinga2: add some missing config	2022-03-13 14:07:28 +01:00
Franzi	690c0b7050	bundles/nftables: restart on failure	2022-03-13 14:07:08 +01:00
Franzi	a9d4cc73c1	bundles/systemd: ensure we have systemd-timesyncd installed and running	2022-03-13 14:06:40 +01:00
Franzi	28b235514a	bundles/zfs: fix compatibility to older zfs versions	2022-03-13 12:58:07 +01:00
Franzi	8397739634	bundles/backup-server: fix bug in retaining	2022-03-13 09:24:45 +01:00
Franzi	008940d75f	bundles/users: add journalctl bash alias	2022-03-13 09:21:10 +01:00
Franzi	cd1a33ccbb	bundles/zfs: refactor zfs-auto-snapshot	2022-03-13 09:18:14 +01:00
Franzi	dab6065b89	bundles/vmhost: svc_systemd:virtlogd gets triggered by socket, too	2022-03-13 08:42:51 +01:00
Franzi	65efdc2e2c	bundles/pacman: disable pam_faillock	2022-03-13 08:42:48 +01:00
Franzi	a4fb9a15b5	bundles/backup-server: increase timeout for monitoring checks	2022-03-13 08:42:44 +01:00
Franzi	f56703df2e	bundles/dovecot: filter X-Spam-Status, not X-Spam-Flag ... The latter is YES even if the overall score is very low because of IP allowlisting.	2022-03-12 10:24:06 +01:00
Franzi	759a711dc5	bundles/rspamd: remove from_name from dmarc reporting config	2022-03-12 10:08:04 +01:00
Franzi	6a9da7efa5	bundles/arch-with-gui: add workaround for broken bw test	2022-03-12 09:03:45 +01:00
Franzi	72cf616114	bundles/zfs: use zfs-import-scan instead of zfs-import-cache ... Last night, rx300 rebooted. After a reboot, the disks were detected in another order (but still, all were detected!), so the cachefile did no longer match, leading to breaking the import. Running `zpool import` manually worked, because that will ignore the cachefile. So, why do we depend on the cache file on boot up? The added reliability of zfs-import-scan beats the speed of zfs-import-cache in any way.	2022-03-12 09:03:42 +01:00
Franzi	42a66751e1	bundles/vmhost: don't try to start libvirtd on every apply	2022-03-12 09:03:38 +01:00
Franzi	4a03a9f89c	bundles/icinga2: fix directory permissions for /etc/icingaweb2	2022-03-12 09:03:35 +01:00
Franzi	d7b47d2560	bundles/jenkins: jenkins.war has moved	2022-03-12 09:03:32 +01:00
Franzi	403b67ee48	bundles/vmhost: install pkg_pacman:edk2-ovmf	2022-03-12 09:03:28 +01:00
Franzi	757f1cb3cd	bundles/vmhost: prepare for arch linux	2022-03-11 13:58:38 +01:00
Franzi	93351340d0	move thermald package back to fkusei-locutus	2022-03-10 21:09:26 +01:00