1087 commits

Author	SHA1	Message	Date
Franzi	11969b6064	bundles/travelynx: changing the imprint does not require restarting the worker process	2022-01-29 09:24:23 +01:00
Franzi	8a24af27ee	bundles/openhab: backup-client/pre-hooks must not be a list	2022-01-24 07:29:36 +01:00
Franzi	b14f5aea58	bundles/openhab: also include /usr/share/openhab/addons in backups	2022-01-24 07:28:26 +01:00
Franzi	031d647864	bundles/openhab: do full backup in backup-pre-hooks	2022-01-24 07:26:34 +01:00
Franzi	0ccb983b28	bundles/apt: fix metadata key mess (unattended-upgrades vs unattended_upgrades)	2022-01-23 05:47:42 +01:00
Franzi	b21c8f6dbb	bundles/pacman: fix SyntaxError	2022-01-13 16:04:37 +01:00
Franzi	0dd9b061b9	bundles/scansnap: fix backup metadata	2022-01-13 15:54:49 +01:00
Franzi	5b2e5fc838	bundles/backup-server: do not alert for one missing day of backups	2022-01-09 08:26:08 +01:00
Franzi	5df546754f	bundles/pacman: fix install_gui package definition	2022-01-09 08:23:59 +01:00
Franzi	40a9ac4523	bundles/sshmon: add check if OOM killer was active	2022-01-07 18:07:33 +01:00
Franzi	14e4415e5f	bundles/backup-client: rework backup generation	2022-01-07 08:29:34 +01:00
Franzi	b20e729298	bundles/backup-server: add option to disable "last backup" check	2022-01-05 22:57:30 +01:00
Franzi	c535ce24a4	bundles/backup-client: show timezone in backup check	2022-01-05 22:57:26 +01:00
Franzi	35104cb8ce	bundles/backup-client: add check for last backup of specific client	2022-01-05 22:44:55 +01:00
Franzi	b5f93ceb48	bundles/zfs: fix typo	2022-01-05 10:03:54 +01:00
Franzi	c9054a243a	backups: do backup rotation ourselves instead of relying on zfs-auto-snapshot	2022-01-05 09:59:09 +01:00
Franzi	b6eb12ed90	bundles/zfs: add option to disable snapshots for dataset tree	2022-01-05 09:52:20 +01:00
Franzi	a3300cde98	bundles/paperless: ensure we're doing backups of the actual data, too	2022-01-05 07:50:22 +01:00
Franzi	3e0269ba99	bundles/backup-{client,server}: use node names, only deploy users to correct backup server	2022-01-04 17:15:56 +01:00
Franzi	5a34d9d58c	bundles/systemd-networkd: add option to enable RA for nodes without dhcp	2022-01-04 15:47:05 +01:00
Franzi	245b2219ee	bundles/backup-client: spread backups further apart	2022-01-04 15:34:53 +01:00
Franzi	2c4eb03214	bundles/backup-server: auto-import pool after decrypting	2022-01-04 15:24:22 +01:00
Franzi	fb931df4f0	bundles/apt: add flag to disable automatic rebooting	2022-01-04 15:15:19 +01:00
Franzi	4c59479d5c	bundles/backup-server: add option for encrypted devices	2022-01-04 15:15:16 +01:00
Franzi	d0b8ccef64	add bundle:dm-crypt	2022-01-04 15:15:13 +01:00
Franzi	906b63b123	move hostname stuff to libs.tools.resolve_identifier	2022-01-04 15:15:11 +01:00
Franzi	36a4ebcdd6	bundles/powerdns: also try to use node.hostname for dns generation	2022-01-04 15:15:03 +01:00
Franzi	dc2b2ae86b	bundles/check-mail-received: move check source to icinga2 itself	2022-01-02 14:50:32 +01:00
Franzi	59fd71ac6f	update mautrix-telegram to 0.11.0	2022-01-02 13:38:23 +01:00
Franzi	390f18a3a4	hooks: test zfs metadata consistency	2021-12-29 13:23:07 +01:00
Franzi	0b4f0e142f	bundles/zfs: explicitely set canmount and mountpoint if not specified	2021-12-28 16:58:42 +01:00
Franzi	803e1dc411	bundles/mautrix-whatsapp: no need for regular restarts any more	2021-12-28 16:48:43 +01:00
Franzi	7cfe080e6f	bundles/sshmon: add check_pypi_for_new_release	2021-12-25 11:40:23 +01:00
Franzi	0ac0fe072d	bundles/pretalx: wait for migrations before regenerating css and rebuilding stuff	2021-12-25 10:00:26 +01:00
Franzi	44fcdc7d11	bundles/icinga: set cascade_skip=False for icinga_notification_wrapper	2021-12-24 16:29:18 +01:00
Sophie Schiller	d6ec8de7c6	cleanup duplicated metadata	2021-12-24 15:39:28 +01:00
Franzi	6292dd4c71	bundles/infobeamer-cms: config is toml now, deploy to src/	2021-12-24 15:30:25 +01:00
Sophie Schiller	b39d87f33f	infobeamer-cms: set sensible start time	2021-12-24 14:56:02 +01:00
Franzi	cda1dc2095	bundles/infobeamer-cms: use curl -s	2021-12-24 13:04:31 +01:00
Franzi	7dc584d8cb	bundles/infobeamer-cms: adjust config to new version	2021-12-24 12:17:14 +01:00
Franzi	ba294f6a6c	Merge pull request 'Add new Node and bundle for infobeamer-cms' (#49) from sschi-infobeamer-cms into main ... Reviewed-on: #49	2021-12-24 10:57:58 +00:00
Franzi	caf2ff6a30	update matrix-media-repo to 1.2.10	2021-12-24 09:23:58 +01:00
Franzi	0383fa0a67	bundles/{rspamd,netbox}: update redis database number	2021-12-24 09:09:28 +01:00
Sophie Schiller	678f558f4a	infobeamer-cms: WHITESPACE	2021-12-23 19:45:24 +01:00
Sophie Schiller	18e30178a4	letsencrypt: add openssl package	2021-12-23 19:39:12 +01:00
Sophie Schiller	bac2a369c4	infobeamer-cms: make usable	2021-12-23 19:39:12 +01:00
Sophie Schiller	bf125a73b1	infobeamer-cms: initial commit	2021-12-23 19:39:06 +01:00
Franzi	d288923969	get redis database mapping from libs.defaults	2021-12-23 07:39:08 +01:00
Franzi	b6b5beaa27	bundles/netbox: send update notification mails	2021-12-22 11:12:34 +01:00
Franzi	b8a109efb0	bundles/sshmon: rewrite check_github_for_new_release	2021-12-22 11:09:26 +01:00
Franzi	38b449af35	bundles/letsencrypt: only run dehydrated after installing it	2021-12-19 14:17:41 +01:00
Franzi	de3580a7d3	bundles/letsencrypt: ensure-some-certificate shouldn't create 10-year-certs	2021-12-19 06:36:11 +01:00
Franzi	04450d4b4c	bundles/sudo: disable syslog spam	2021-12-19 06:23:05 +01:00
Franzi	5261375574	bundles/pppd: add systemd-timer to automatically update dyndns	2021-12-19 06:21:04 +01:00
Franzi	376dba347f	bundles/php: allow configuring of memory_limit and clear_env	2021-12-18 18:54:00 +01:00
Franzi	2b06c77439	bundles/pppd: allow dynamic configuration of nftables rules	2021-12-14 16:18:11 +01:00
Franzi	0101e0c92d	bundles/nftables: store rules in dedicated files instead of nftables.conf	2021-12-14 15:27:30 +01:00
Franzi	c6c5d40084	bundles/nftables: add support for restricting to "all ipv6" and "all ipv4"	2021-12-14 12:40:54 +01:00
Franzi	e2efe87308	rx300: update netbox to 3.1.0	2021-12-12 08:36:18 +01:00
Franzi	7eec5c42e3	bundles/icinga2: do not send sms or mail for services when sms/mail was disabled for host	2021-12-04 20:07:36 +01:00
Franzi	0531ecd217	bundles/gitea: downloading gitea does not need restarting ... we're stopping gitea beforehand, then start it again afterwards. No need to restart it again.	2021-12-04 20:01:35 +01:00
Franzi	d44c87e8a7	move SPAM BLOCKLIST check to icinga2 itself ... somehow, we tend to get false positives if we run that check on the node itself.	2021-11-28 07:26:41 +01:00
Franzi	74f5b25f0d	various fixes, remove some TODOs	2021-11-27 10:40:20 +01:00
Franzi	a76c60f881	bundles/nftables: fix shebang	2021-11-26 18:36:16 +01:00
Franzi	632a1f6e75	voc,pretalx: install plugin lower_thirds	2021-11-21 09:42:02 +01:00
Franzi	998b776b9f	bundles/kodi: fix .provides()	2021-11-15 21:45:41 +01:00
Franzi	e4e340e431	bundles/grafana: fix spanning for battery row	2021-11-15 21:36:45 +01:00
Franzi	52fbcfb43e	bundles/grafana: add some filling to battery row	2021-11-15 21:31:15 +01:00
Franzi	7969ae9ebe	bundles/grafana: fix value for battery dashboard row	2021-11-15 21:26:23 +01:00
Franzi	e17d1ab02f	add bundle:telegraf-battery-usage	2021-11-15 21:18:42 +01:00
Franzi	e10ac0e57f	bundles/matrix-{media-repo,synapse}: catch all them metrics into influxdb	2021-11-09 18:26:52 +01:00
Franzi	8f6b8632f5	bundles/{element-web,hedgedoc,powerdnsadmin}: use 'yarn install --ignore-scripts'	2021-11-09 18:10:22 +01:00
Franzi	33b6700848	bundles/mautrix-whatsapp: use precompiled binary	2021-11-09 18:10:17 +01:00
Sophie Schiller	eef463afbd	hedgedoc: forbid access to metrics and stats	2021-11-09 11:58:11 +01:00
Sophie Schiller	55798ac704	hedgedoc: add telegraf config for hedgedoc metrics	2021-11-09 11:48:03 +01:00
Franzi	0398df8f3a	bundles/openhab: fix website_check_string	2021-10-31 10:31:13 +01:00
Franzi	0412c9042a	bundles/wireguard: fix stderr handling of wg_health_check	2021-10-31 09:49:37 +01:00
Franzi	f482874310	home.openhab: install and configure openhab	2021-10-31 09:43:53 +01:00
Franzi	2f885e7bfb	bundles/kodi: allow websocket port in firewall	2021-10-31 09:43:07 +01:00
Franzi	ee86b5a121	bundles/wireguard: less spammy output for wg_health_check	2021-10-30 19:36:20 +02:00
Franzi	0a131b4248	bundles/grafana: add voltages and power usage to ipmitool	2021-10-18 19:48:19 +02:00
Franzi	8300f48541	add bundle:ipmitool, add grafana dashboard row	2021-10-18 19:42:27 +02:00
Franzi	92b2e19e44	bundles/grafana: fix line width for fans	2021-10-18 19:41:16 +02:00
Franzi	3775bcb9db	bundles/telegraf: add cache directory	2021-10-18 19:34:20 +02:00
Franzi	5885e4b043	bundles/users: add lsb_release and local date to status line	2021-10-16 07:42:19 +02:00
Franzi	29eef9ec59	htop: fix sorting	2021-10-16 07:38:57 +02:00
Franzi	94cba4283b	bundles/pretalx: fixup cron	2021-10-15 20:10:46 +02:00
Franzi	86953e60bd	bundles/pretalx: add script to automatically set is_administrator and is_staff based on group membership	2021-10-15 20:03:15 +02:00
Franzi	095d425de1	bundles/wireguard: do not run wg_health_check during bw apply	2021-10-14 09:02:01 +02:00
Franzi	9188b28b7a	bundles/wireguard: add wg_health_check	2021-10-14 08:54:54 +02:00
Franzi	61e5591628	bundles/systemd-networkd: fix bridge-in-bridge-setup on home.nas not working properly	2021-10-11 20:46:07 +02:00
Franzi	8656f99f8e	bundles/wireguard: re-add reconnect script for added resiliency	2021-09-30 06:37:42 +02:00
Franzi	30d4d989fc	add bundle:bird	2021-09-29 19:45:18 +02:00
Franzi	fe44417b14	bundles/systemd-networkd: add dummy interfaces	2021-09-29 19:44:37 +02:00
Franzi	996ef6e115	bundles/nftables: more sorted()	2021-09-29 19:44:13 +02:00
Franzi	5f1f4fd654	bundles/wireguard: add option 'snat_to' for connections	2021-09-29 19:43:29 +02:00
Franzi	902840ee7f	bundles/wireguard: use one wireguard connection per peer instead of one for all	2021-09-29 19:27:13 +02:00
Franzi	2b0e3a4bf0	bundles/powerdns: use only public ips or those attached to physical interfaces to create dns records	2021-09-25 11:08:18 +02:00
Franzi	b81153e957	bundles/netbox: fix upgrade command	2021-09-22 16:43:59 +02:00
Franzi	05d69c1f12	bundles/powerdns: use named-checkzone to verify zone integrity	2021-09-22 16:42:26 +02:00
Franzi	bb8910d15f	bundles/gitea: use metadata.get()	2021-09-22 16:38:27 +02:00
Franzi	b21f7c856a	bundles/gitea: switch to new file type 'download'	2021-09-21 07:55:15 +02:00
Franzi	ed2bb66e3e	bundles/basic: add links to icinga, grafana and nginx vhosts to login message	2021-09-16 19:33:11 +02:00
Franzi	5a7d0b0afd	bundles/icinga2: don't skip everything if check_sipgate_account_balance can't get applied	2021-09-16 19:33:08 +02:00
Sophie Schiller	c9f9a27096	bundle/hedgedoc add new csp defaults	2021-09-14 20:23:01 +02:00
Sophie Schiller	738dbd94a0	bundle/hedgedoc improve dependencies	2021-09-14 20:23:01 +02:00
Sophie Schiller	481c1c85e5	bundle/nginx set instead of HTTPS	2021-09-14 20:23:01 +02:00
Sophie Schiller	77a14a0017	bundle/hedgedoc remove quoting inconsistencies	2021-09-11 20:24:10 +02:00
Sophie Schiller	09da9a8d92	bundle/hedgedoc improve config rendering to not produce errors with faults	2021-09-11 20:07:52 +02:00
Sophie Schiller	3d3994789e	bundle/hedgedoc update wbsite check	2021-09-11 19:56:49 +02:00
Sophie Schiller	478a8da9f4	bundles/hedgedoc add new bundle	2021-09-11 19:47:28 +02:00
Franzi	f77d6df1e5	bundles/matrix-dimension: fix dependencies	2021-09-08 15:16:00 +02:00
Franzi	05f9712b24	bundles/rspamd: change dmarc reporting sender to working address	2021-09-08 14:43:22 +02:00
Franzi	de6249c65d	dns: fix some errors	2021-09-06 16:42:14 +02:00
Franzi	78fda4f9e9	bundles/rspamd: do not try to resolve faults in items.py	2021-09-06 09:28:30 +02:00
Franzi	3039a0900e	bundles/rspamd: add alias for dmarc reports	2021-09-06 09:14:18 +02:00
Franzi	4ca0926546	bundles/rspamd: send dmarc reports	2021-09-06 09:11:36 +02:00
Franzi	43bcd75e87	update netbox to 3.0.1	2021-09-02 07:52:11 +02:00
Franzi	c7fd6ee041	bundles/grafana: make rspamd row more pretty	2021-08-25 15:15:09 +02:00
Franzi	2940bfd3d8	bundles/rspamd: add telegraf metrics	2021-08-23 22:24:59 +02:00
Franzi	3f38497585	bundles/vmhost: add metadata reactor to add all admins to 'libvirt' group	2021-08-22 07:25:46 +02:00
Franzi	65462ca536	bundles/nginx: default redirect mode should be 308	2021-08-22 07:20:45 +02:00
Franzi	d94df613c5	bundles/netbox: fix ADMINS	2021-08-21 12:46:55 +02:00
Franzi	c6fe9d5eb2	bundles/postfix: fix .provides()	2021-08-21 12:32:47 +02:00
Franzi	b0d2503f08	add bundle:netbox	2021-08-21 12:32:40 +02:00
Franzi	4cb89d699c	bundles/grafana: fix missing derivative() in dovecot row	2021-08-21 08:39:39 +02:00
Franzi	12ca6f4ff7	bundles/postfix: open up SMTPS	2021-08-21 08:12:21 +02:00
Franzi	3da3c00310	bundles/rspamd: changing of .map files does not need restarting	2021-08-21 07:48:02 +02:00
Franzi	ea9abc5f73	bundles/grafana: add dashboard row for dovecot	2021-08-21 07:47:24 +02:00
Franzi	96f1604879	bundles/dovecot: some fixes ... - fix postfix/myhostname default - ensure old_stats plugin is enabled - ensure permissions for old_stats plugin - ensure /etc/dovecot/ssl exists - remove unneeded configuration files	2021-08-21 07:31:22 +02:00
Franzi	8301664d9a	bundles/{grafana,influxdb2}: fix more permissions	2021-08-20 13:33:28 +02:00
Franzi	72d91767ec	bundles/influxdb: fix INFLUXDB PROCESS check	2021-08-20 13:25:40 +02:00
Franzi	949e139978	bundles/telegraf: influxdata has bullseye repos now	2021-08-20 13:25:22 +02:00
Franzi	f0987ccb44	bundles/unbound: automatically restart unbound if dns resolution fails for more than five minutes	2021-08-19 20:03:24 +02:00
Franzi	35938ead04	bundles/unbound: less caching of negative results	2021-08-19 20:02:27 +02:00
Franzi	4167d3cb22	update to bw 4.11.2	2021-08-17 18:10:35 +02:00
Franzi	5bbd188b0b	bundles/pretalx: no sudo for rebuilding	2021-08-17 16:46:58 +02:00
Franzi	d507f6794f	bundles/apt: ensure we have ncurses-term ... If that's not installed, we get weird drawing issues in tmux.	2021-08-17 16:42:26 +02:00
Franzi	25ea5af2db	bundles/smartd: add cronjob to schedule a monthly long test	2021-08-15 16:22:34 +02:00
Franzi	bd10dc578f	bundles/pppd: refactor check_dyndns_update ... We don't care about what the DNS provider said when updating the ip address. The only thing we care about is wether the current external ip of the system matches the resolved ip address.	2021-08-14 08:00:43 +02:00
Franzi	bb519adb2c	bundles/backup-client: more logging, fix wrong variable name	2021-08-08 07:47:07 +02:00
Franzi	c14bb43993	bundles/grafana: fix derivative for wireguard last handshake time	2021-08-07 23:32:39 +02:00
Sophie Schiller	e8d1582ed4	bw/nginx i hate whitespace	2021-08-07 22:01:40 +02:00
Sophie Schiller	6e3603553f	bw/nginx retab everything	2021-08-07 21:59:07 +02:00
Sophie Schiller	ab21983a4f	bw/nginx add not found page and deployment of error pages	2021-08-07 21:52:39 +02:00
Franzi	d9d98116e6	bundles/grafana: increase proxy_read_timeout for /api/ds/query	2021-08-07 20:02:57 +02:00
Franzi	0a77b72cd3	update mautrix-whatsapp to 0.1.8	2021-08-07 18:57:31 +02:00
Franzi	05de574471	bundles/backup-client: sleep a bit if backup did finish non-zero to increase chances of success	2021-08-07 10:30:19 +02:00
Franzi	04cee2b4c3	bundles/icinga2: fix file permissions	2021-08-07 07:13:41 +02:00
Franzi	b677eaf187	bundles/grafana: fix file permissions	2021-08-07 07:03:15 +02:00