Commit graph

487 commits

Author SHA1 Message Date
56f1b1a6c6
bundles/rspamd: first draft for automatically-rotating dkim keys 2020-11-13 13:09:34 +01:00
52c36ae3fa
dns: add icinga.kunsmann.eu
All checks were successful
bundlewrap/pipeline/head This commit looks good
2020-11-13 13:04:53 +01:00
f04dac11e5
Merge branch 'kunsi-icinga2' into main
All checks were successful
bundlewrap/pipeline/head This commit looks good
2020-11-13 13:03:16 +01:00
cec8a14dfd
groups/all: do backups
All checks were successful
bundlewrap/pipeline/head This commit looks good
.. except for a couple of nodes which hold no important data
2020-11-13 12:59:06 +01:00
45723a4c8a
nodes/home.nas: configure for backups 2020-11-13 12:58:23 +01:00
741f3b0032
bundles/backup-client: fix cronjob 2020-11-13 12:57:50 +01:00
0749fc75c5
bundles: add backup paths 2020-11-13 12:37:26 +01:00
f71653e3ce
bundles/backup-{client,server}: introduce 2020-11-13 12:36:52 +01:00
59c1cb8551
items/zfs_pool: support raidz2 and raidz3 2020-11-13 11:24:30 +01:00
05e8d83ebf
nodes/htz.ex42-1048908: update mautrix-telegram to 0.9.0-rc3
All checks were successful
bundlewrap/pipeline/head This commit looks good
2020-11-13 09:27:02 +01:00
30ee0c8bdf
bundles/mx-puppet-discord: restart service after building new version 2020-11-13 09:26:34 +01:00
56fd0049f7
nodes/htz-cloud.luther: add zfs dataset for website root
All checks were successful
bundlewrap/pipeline/head This commit looks good
2020-11-12 23:00:10 +01:00
e5c12f0628
bundles/nginx: create webroot directories after bundle:zfs is done 2020-11-12 22:59:46 +01:00
2274e7aa37
bundles/nfs-server: introduce
All checks were successful
bundlewrap/pipeline/head This commit looks good
2020-11-12 19:59:02 +01:00
5b1b7241b7
nodes/home.nas: introduce
All checks were successful
bundlewrap/pipeline/head This commit looks good
2020-11-12 19:40:41 +01:00
f2a0f0b46a
bundles/systemd-networkd: support bond and bridge interfaces 2020-11-12 19:38:10 +01:00
633ccb97fd
bundles/zfs: rename zed -> zfs-zed 2020-11-12 19:36:28 +01:00
d01d89d432
bundles/apt: support debian 11 2020-11-12 18:40:19 +01:00
e395a42160
bundles/apt: no need to have apt-daily.timer running
All checks were successful
bundlewrap/pipeline/head This commit looks good
2020-11-12 15:10:59 +01:00
e82b4ba78b
nodes/htz.ex42-1048908: install oidentd 2020-11-11 16:32:51 +01:00
504c4f2314
nodes/{htz.ex42-1048908,htz-cloud.pirmasens}: make sure we have redis installed 2020-11-11 16:29:27 +01:00
087f4bb74d
groups/{gce,home}: send mail via mx0.kunbox.net
All checks were successful
bundlewrap/pipeline/head This commit looks good
2020-11-11 13:31:01 +01:00
11701a67c8
dns: deploy MTA-STS
All checks were successful
bundlewrap/pipeline/head This commit looks good
2020-11-11 11:41:06 +01:00
e0f02ef0f7
Jenkinsfile: send mail to committer on failing build
All checks were successful
bundlewrap/pipeline/head This commit looks good
2020-11-11 09:13:10 +01:00
d47c39185b
bundles/php: no need to restart php if just installing the base packages
All checks were successful
bundlewrap/pipeline/head This commit looks good
2020-11-11 08:37:29 +01:00
652fb72ccc
bundles/postfix: fix metadata reactor for letsencrypt 2020-11-11 08:35:36 +01:00
ea55a02215
nodes/htz-cloud.pirmasens: configure postfix, dovecot, rspamd, postfixadmin
Some checks failed
bundlewrap/pipeline/head There was a failure building this commit
2020-11-10 20:35:35 +01:00
9dd7589f12
bundles/postfix: add submission_header_cleanup file 2020-11-10 20:34:27 +01:00
8180769120
bundles/postfix: add postmaster alias 2020-11-10 20:32:39 +01:00
f9bd2d695d
bundles/postfix: add SPAM BLOCKLISt for every non-private IP attached to the server
All checks were successful
bundlewrap/pipeline/head This commit looks good
2020-11-10 14:28:12 +01:00
aad1a742b7
bundles/icinga2: add ipv6-capable check_rbl script 2020-11-10 14:26:07 +01:00
f30aa48eca
bundles/icinga2: add sshmon private key
All checks were successful
bundlewrap/pipeline/head This commit looks good
2020-11-10 13:43:46 +01:00
a176a1aa65
bundles/icinga2: introduce, install checks, install sources.list, create postgres database
All checks were successful
bundlewrap/pipeline/head This commit looks good
2020-11-10 13:37:27 +01:00
a9c00409b4
bundles/mautrix-telegram: fix item dependency error
All checks were successful
bundlewrap/pipeline/head This commit looks good
2020-11-10 13:26:03 +01:00
6cd02dc563
bundles: move non-login users to items.py
Some checks failed
bundlewrap/pipeline/head There was a failure building this commit
2020-11-10 13:24:07 +01:00
d0647b2e3c
nodes/htz.ex42-1048908: remove legacy users 2020-11-10 13:13:44 +01:00
cca4fec761
bundles/users: get default user data from users.json 2020-11-10 13:12:36 +01:00
c090a9c2c2
bundles/users: move root user to metadata 2020-11-10 12:50:08 +01:00
16e8c4fd00
scripts/passwords-for: sort metadata 2020-11-10 12:49:47 +01:00
3fbe32518a
bundles/postgresql: rename users -> roles
All checks were successful
bundlewrap/pipeline/head This commit looks good
2020-11-10 12:37:58 +01:00
d087cea869
bundles/gitea: add monitoring 2020-11-10 11:32:59 +01:00
985f47ca99
bundles/miniflux: add monitoring 2020-11-10 11:28:40 +01:00
a185e027f8
nodes: add website checks to nginx vhosts 2020-11-10 11:26:49 +01:00
8cb997133a
bundles/nginx: add monitoring
All checks were successful
bundlewrap/pipeline/head This commit looks good
2020-11-10 10:57:04 +01:00
65a8efc97f
bundles/zfs: fix monitoring metadata
All checks were successful
bundlewrap/pipeline/head This commit looks good
2020-11-10 10:35:01 +01:00
f80896fa3b
bundles/postfix: add monitoring 2020-11-10 10:21:37 +01:00
420cea15d2
bundles/apt: add monitoring for unattended upgrades 2020-11-10 09:50:20 +01:00
3088ae0ba0
bundles/sshmon: add key, add to all nodes 2020-11-10 09:15:51 +01:00
ca922ef5f7
scripts: add encrypt_file and passwords-for 2020-11-10 09:15:28 +01:00
2e2c504111
groups/ovh: make sure default user is gone 2020-11-10 08:59:54 +01:00