5c1eba0d58
bundles: use a common metadata key for firewall restrictions, use repo.libs.tools.resolve_identifier()
bundlewrap/pipeline/head This commit looks good
2021-02-15 14:16:35 +01:00
9a2f9038c4
libs/tools: resolve_identifier supports ip networks, not ip addresses
2021-02-15 13:53:53 +01:00
6527c985a7
nodes/home.router: add wg0 to allowed interfaces for netdata and nginx
bundlewrap/pipeline/head This commit looks good
2021-02-14 21:42:50 +01:00
9d0a602b49
nodes/ovh.wireguard: add config for kunsi-oneplus3
2021-02-14 21:41:01 +01:00
56fce7d460
bundles/wireguard: add exclude_from_monitoring option for wireguard peers
2021-02-14 21:35:37 +01:00
69605acfc9
dns: queere.eskalation.jetzt IN NS ns{1..4}.athena7.eu
bundlewrap/pipeline/head This commit looks good
2021-02-14 17:32:43 +01:00
2b7704630c
dns: add eskalation.jetzt
2021-02-14 17:22:25 +01:00
12d47ea0bc
libs/tools: fix output of resolve_identifier() for bare ip addresses
bundlewrap/pipeline/head This commit looks good
2021-02-14 17:04:52 +01:00
358a1869f4
script/update-ssh-client-config: s/post-receive/post-checkout/
bundlewrap/pipeline/head This commit looks good
2021-02-13 17:09:27 +01:00
cfd0863671
create script/update-ssh-client-config
bundlewrap/pipeline/head This commit looks good
2021-02-13 16:39:55 +01:00
65e6b8d053
bundles/backup-client: use a bash function to do backups instead of repeating the same code over and over
2021-02-13 09:18:00 +01:00
adeb8eff88
bundles/postgresql: only do database dumps if we're actually doing backups
2021-02-13 09:04:59 +01:00
724537558e
bundles/postgresql: do a database dump before backing up the database
bundlewrap/pipeline/head This commit looks good
2021-02-13 08:56:35 +01:00
3d1468b214
bundles/backup-client: backup-pre-hooks should have numeric sorting
2021-02-13 08:37:49 +01:00
7aeb46382d
bundles/zfs: move icinga2_api to metadata defaults
2021-02-13 08:37:00 +01:00
2fbbaa1586
bundles/zfs: remove support for snapshot_only and snapshot_never (unused)
2021-02-13 08:36:10 +01:00
b20f369ea8
bundles/backup-client: metadata backup-pre-hooks now use /bin/sh by default
2021-02-13 08:26:46 +01:00
077eaa265c
bundles/radicale: use Fault.as_htpasswd_entry() instead of pre-encrypting passwords
2021-02-13 08:17:31 +01:00
978285bf32
bundles/matrix-media-repo: add backup/paths metadata
2021-02-13 08:09:48 +01:00
f52df58517
bundles: code style improvements
bundlewrap/pipeline/head This commit looks good
2021-02-12 20:45:41 +01:00
2af911c29f
nodes/voc.pretalx: move patchday to monday
bundlewrap/pipeline/head This commit looks good
2021-02-12 18:53:34 +01:00
c0353d2911
bundles/apt: add option to configure patch-hour, not only patchday
2021-02-12 18:53:25 +01:00
17dbba2c94
data/backup: remove unneeded keys for voc.pretalx
bundlewrap/pipeline/head This commit looks good
2021-02-12 18:45:43 +01:00
62e1d29617
nodes/voc.pretalx: backups are handled by voc now
bundlewrap/pipeline/head This commit looks good
2021-02-12 18:41:50 +01:00
767db8efdd
bundles/apt: add /etc/kernel/postinst.d/unattended-upgrades to ensure a reboot on kernel updates
bundlewrap/pipeline/head This commit looks good
2021-02-12 18:12:24 +01:00
d4b110087f
bundles/matrix-media-repo: introduce, add to htz.ex42-1048908
bundlewrap/pipeline/head This commit looks good
2021-02-12 16:01:35 +01:00
638e37c05f
bundles: add Requires=postgresql.service to some services which require postgresql
bundlewrap/pipeline/head This commit looks good
2021-02-12 13:28:52 +01:00
493d7957fd
nodes/htz.ex42-1048908: install en_DK.UTF-8 locale
...
bundlewrap/pipeline/head This commit looks good
apparently past me did weird stuff, so this locale is required for
some postgresql databases.
2021-02-12 04:06:51 +01:00
9f8cbde7d7
bundles/transmission: always try to restart transmission
bundlewrap/pipeline/head This commit looks good
2021-02-11 09:06:20 +01:00
a86e04683a
bundles/backup-client: fix missing space in generate-backup
bundlewrap/pipeline/head This commit looks good
2021-02-09 07:17:25 +01:00
c25233b991
nodes: replace pkg_apt:redis with bundle:redis
bundlewrap/pipeline/head This commit looks good
2021-02-07 21:09:39 +01:00
a09f565c78
nodes/htz.ex42-1048908: add backup-pre-hook to save weechat configs
bundlewrap/pipeline/head This commit looks good
2021-02-07 20:47:57 +01:00
0d1e987a6f
bundles/backup-client: add backup-pre-hooks ( fixes #24 )
2021-02-07 20:47:22 +01:00
a8690b13b8
bundles/rspamd: add "unless" to action:rspamd_assure_dkim_key_permissions
bundlewrap/pipeline/head This commit looks good
2021-02-06 19:10:16 +01:00
ed04aebc4b
nodes/htz.ex42-1048908: update travelynx to 1.19.6
bundlewrap/pipeline/head This commit looks good
2021-02-06 18:57:37 +01:00
a3d52d026e
nodes/htz.ex42-1048908: allocate more space to journal
bundlewrap/pipeline/head This commit looks good
2021-02-06 12:49:58 +01:00
988cf905d4
nodes/htz.ex42-1048908: update travelynx to 1.19.4
bundlewrap/pipeline/head This commit looks good
2021-02-06 10:43:36 +01:00
eb431d8da8
bundles/postfix: also set alias_maps
...
bundlewrap/pipeline/head This commit looks good
fixes "warning: dict_nis_init: NIS domain name not set - NIS lookups disabled"
2021-02-06 10:24:19 +01:00
db317ec355
nodes/htz.ex42-1048908: update gitea to 1.13.2
bundlewrap/pipeline/head This commit looks good
2021-02-06 09:44:23 +01:00
457052d42b
bundles/gitea: downloading gitea updates needs stopping it first
2021-02-06 09:43:54 +01:00
d7398135d1
nodes/home.wled-wohnzimmer: add node
2021-02-06 09:39:36 +01:00
b6d23aaed4
bundles/sshmon: use own check_cpu_stats script
...
Old script only checked iowait, which is not enough.
2021-02-06 09:38:50 +01:00
c185a5bacd
bundles/backup-client: do backups at 23:xx, so it won't interfere with upgrade-and-reboot
...
bundlewrap/pipeline/head This commit looks good
There were still problems with systems starting their backups late in the hour,
but backup servers did upgrade-and-reboot early it the hour. This leads to
incomplete backups, if the machine is rebooting, too.
2021-02-06 09:36:44 +01:00
7e15f8adc3
bundles/octoprint: multi-line-output for check_octoprint_update
bundlewrap/pipeline/head This commit looks good
2021-02-02 20:20:11 +01:00
d0c0425b65
nodes/htz-cloud.pirmasens: fix website check for salonkatrin.de
2021-01-31 11:38:45 +01:00
8523754935
bundles/users: add vim-keybindings for pane navigation to tmux.conf
2021-01-31 07:59:19 +01:00
bdc5b4de33
bundles/transmission: don't overwrite configs managed by transmission
2021-01-30 17:39:34 +01:00
71f033b7c2
bundles/icinga2: fix dependencies for svc_systemd:icinga2
...
bundlewrap/pipeline/head This commit looks good
icinga2 runs fine without any checks, so we now only depend on the other
configuration files managed by bw. This will also fix unwanted
dependencies, because 'file:' means *all* files, not only those provided
by this bundle. In the past, it wasn't possible to skip any file,
because that would result in icinga not properly restarting.
2021-01-30 17:31:05 +01:00
569275329c
bundles/sshmon: remove INTERNET check
...
bundlewrap/pipeline/head This commit looks good
We're using the internet to check these hosts, so if those hosts
wouldn't have an internet connection, the whole host would be
down, atleast as far as icinga can tell.
2021-01-30 11:47:55 +01:00
161aec9314
bundles/powerdnsadmin: use tagged release
bundlewrap/pipeline/head This commit looks good
2021-01-29 18:13:16 +01:00
