1512 commits

Author	SHA1	Message	Date
Franziska Kunsmann	906b63b123	move hostname stuff to libs.tools.resolve_identifier	2022-01-04 15:15:11 +01:00
Franziska Kunsmann	36a4ebcdd6	bundles/powerdns: also try to use node.hostname for dns generation	2022-01-04 15:15:03 +01:00
Franziska Kunsmann	dc2b2ae86b	bundles/check-mail-received: move check source to icinga2 itself	2022-01-02 14:50:32 +01:00
Franziska Kunsmann	59fd71ac6f	update mautrix-telegram to 0.11.0	2022-01-02 13:38:23 +01:00
Franziska Kunsmann	390f18a3a4	hooks: test zfs metadata consistency	2021-12-29 13:23:07 +01:00
Franziska Kunsmann	0b4f0e142f	bundles/zfs: explicitely set canmount and mountpoint if not specified	2021-12-28 16:58:42 +01:00
Franziska Kunsmann	803e1dc411	bundles/mautrix-whatsapp: no need for regular restarts any more	2021-12-28 16:48:43 +01:00
Franziska Kunsmann	7cfe080e6f	bundles/sshmon: add check_pypi_for_new_release	2021-12-25 11:40:23 +01:00
Franziska Kunsmann	0ac0fe072d	bundles/pretalx: wait for migrations before regenerating css and rebuilding stuff	2021-12-25 10:00:26 +01:00
Franziska Kunsmann	44fcdc7d11	bundles/icinga: set cascade_skip=False for icinga_notification_wrapper	2021-12-24 16:29:18 +01:00
Sophie Schiller	d6ec8de7c6	cleanup duplicated metadata	2021-12-24 15:39:28 +01:00
Franziska Kunsmann	6292dd4c71	bundles/infobeamer-cms: config is toml now, deploy to src/	2021-12-24 15:30:25 +01:00
Sophie Schiller	b39d87f33f	infobeamer-cms: set sensible start time	2021-12-24 14:56:02 +01:00
Franziska Kunsmann	cda1dc2095	bundles/infobeamer-cms: use curl -s	2021-12-24 13:04:31 +01:00
Franziska Kunsmann	7dc584d8cb	bundles/infobeamer-cms: adjust config to new version	2021-12-24 12:17:14 +01:00
Franzi	ba294f6a6c	Merge pull request 'Add new Node and bundle for infobeamer-cms' (#49) from sschi-infobeamer-cms into main ... Reviewed-on: #49	2021-12-24 10:57:58 +00:00
Franziska Kunsmann	caf2ff6a30	update matrix-media-repo to 1.2.10	2021-12-24 09:23:58 +01:00
Franziska Kunsmann	0383fa0a67	bundles/{rspamd,netbox}: update redis database number	2021-12-24 09:09:28 +01:00
Sophie Schiller	678f558f4a	infobeamer-cms: WHITESPACE	2021-12-23 19:45:24 +01:00
Sophie Schiller	18e30178a4	letsencrypt: add openssl package	2021-12-23 19:39:12 +01:00
Sophie Schiller	bac2a369c4	infobeamer-cms: make usable	2021-12-23 19:39:12 +01:00
Sophie Schiller	bf125a73b1	infobeamer-cms: initial commit	2021-12-23 19:39:06 +01:00
Franziska Kunsmann	d288923969	get redis database mapping from libs.defaults	2021-12-23 07:39:08 +01:00
Franziska Kunsmann	b6b5beaa27	bundles/netbox: send update notification mails	2021-12-22 11:12:34 +01:00
Franziska Kunsmann	b8a109efb0	bundles/sshmon: rewrite check_github_for_new_release	2021-12-22 11:09:26 +01:00
Franziska Kunsmann	38b449af35	bundles/letsencrypt: only run dehydrated after installing it	2021-12-19 14:17:41 +01:00
Franziska Kunsmann	de3580a7d3	bundles/letsencrypt: ensure-some-certificate shouldn't create 10-year-certs	2021-12-19 06:36:11 +01:00
Franziska Kunsmann	04450d4b4c	bundles/sudo: disable syslog spam	2021-12-19 06:23:05 +01:00
Franziska Kunsmann	5261375574	bundles/pppd: add systemd-timer to automatically update dyndns	2021-12-19 06:21:04 +01:00
Franziska Kunsmann	376dba347f	bundles/php: allow configuring of memory_limit and clear_env	2021-12-18 18:54:00 +01:00
Franziska Kunsmann	2b06c77439	bundles/pppd: allow dynamic configuration of nftables rules	2021-12-14 16:18:11 +01:00
Franziska Kunsmann	0101e0c92d	bundles/nftables: store rules in dedicated files instead of nftables.conf	2021-12-14 15:27:30 +01:00
Franziska Kunsmann	c6c5d40084	bundles/nftables: add support for restricting to "all ipv6" and "all ipv4"	2021-12-14 12:40:54 +01:00
Franziska Kunsmann	e2efe87308	rx300: update netbox to 3.1.0	2021-12-12 08:36:18 +01:00
Franziska Kunsmann	7eec5c42e3	bundles/icinga2: do not send sms or mail for services when sms/mail was disabled for host	2021-12-04 20:07:36 +01:00
Franziska Kunsmann	0531ecd217	bundles/gitea: downloading gitea does not need restarting ... we're stopping gitea beforehand, then start it again afterwards. No need to restart it again.	2021-12-04 20:01:35 +01:00
Franziska Kunsmann	d44c87e8a7	move SPAM BLOCKLIST check to icinga2 itself ... somehow, we tend to get false positives if we run that check on the node itself.	2021-11-28 07:26:41 +01:00
Franziska Kunsmann	74f5b25f0d	various fixes, remove some TODOs	2021-11-27 10:40:20 +01:00
Franziska Kunsmann	a76c60f881	bundles/nftables: fix shebang	2021-11-26 18:36:16 +01:00
Franziska Kunsmann	632a1f6e75	voc,pretalx: install plugin lower_thirds	2021-11-21 09:42:02 +01:00
Franziska Kunsmann	998b776b9f	bundles/kodi: fix .provides()	2021-11-15 21:45:41 +01:00
Franziska Kunsmann	e4e340e431	bundles/grafana: fix spanning for battery row	2021-11-15 21:36:45 +01:00
Franziska Kunsmann	52fbcfb43e	bundles/grafana: add some filling to battery row	2021-11-15 21:31:15 +01:00
Franziska Kunsmann	7969ae9ebe	bundles/grafana: fix value for battery dashboard row	2021-11-15 21:26:23 +01:00
Franziska Kunsmann	e17d1ab02f	add bundle:telegraf-battery-usage	2021-11-15 21:18:42 +01:00
Franziska Kunsmann	e10ac0e57f	bundles/matrix-{media-repo,synapse}: catch all them metrics into influxdb	2021-11-09 18:26:52 +01:00
Franziska Kunsmann	8f6b8632f5	bundles/{element-web,hedgedoc,powerdnsadmin}: use 'yarn install --ignore-scripts'	2021-11-09 18:10:22 +01:00
Franziska Kunsmann	33b6700848	bundles/mautrix-whatsapp: use precompiled binary	2021-11-09 18:10:17 +01:00
Sophie Schiller	eef463afbd	hedgedoc: forbid access to metrics and stats	2021-11-09 11:58:11 +01:00
Sophie Schiller	55798ac704	hedgedoc: add telegraf config for hedgedoc metrics	2021-11-09 11:48:03 +01:00
Franziska Kunsmann	0398df8f3a	bundles/openhab: fix website_check_string	2021-10-31 10:31:13 +01:00
Franziska Kunsmann	0412c9042a	bundles/wireguard: fix stderr handling of wg_health_check	2021-10-31 09:49:37 +01:00
Franziska Kunsmann	f482874310	home.openhab: install and configure openhab	2021-10-31 09:43:53 +01:00
Franziska Kunsmann	2f885e7bfb	bundles/kodi: allow websocket port in firewall	2021-10-31 09:43:07 +01:00
Franziska Kunsmann	ee86b5a121	bundles/wireguard: less spammy output for wg_health_check	2021-10-30 19:36:20 +02:00
Franziska Kunsmann	0a131b4248	bundles/grafana: add voltages and power usage to ipmitool	2021-10-18 19:48:19 +02:00
Franziska Kunsmann	8300f48541	add bundle:ipmitool, add grafana dashboard row	2021-10-18 19:42:27 +02:00
Franziska Kunsmann	92b2e19e44	bundles/grafana: fix line width for fans	2021-10-18 19:41:16 +02:00
Franziska Kunsmann	3775bcb9db	bundles/telegraf: add cache directory	2021-10-18 19:34:20 +02:00
Franziska Kunsmann	5885e4b043	bundles/users: add lsb_release and local date to status line	2021-10-16 07:42:19 +02:00
Franziska Kunsmann	29eef9ec59	htop: fix sorting	2021-10-16 07:38:57 +02:00
Franziska Kunsmann	94cba4283b	bundles/pretalx: fixup cron	2021-10-15 20:10:46 +02:00
Franziska Kunsmann	86953e60bd	bundles/pretalx: add script to automatically set is_administrator and is_staff based on group membership	2021-10-15 20:03:15 +02:00
Franziska Kunsmann	095d425de1	bundles/wireguard: do not run wg_health_check during bw apply	2021-10-14 09:02:01 +02:00
Franziska Kunsmann	9188b28b7a	bundles/wireguard: add wg_health_check	2021-10-14 08:54:54 +02:00
Franziska Kunsmann	61e5591628	bundles/systemd-networkd: fix bridge-in-bridge-setup on home.nas not working properly	2021-10-11 20:46:07 +02:00
Franziska Kunsmann	8656f99f8e	bundles/wireguard: re-add reconnect script for added resiliency	2021-09-30 06:37:42 +02:00
Franziska Kunsmann	30d4d989fc	add bundle:bird	2021-09-29 19:45:18 +02:00
Franziska Kunsmann	fe44417b14	bundles/systemd-networkd: add dummy interfaces	2021-09-29 19:44:37 +02:00
Franziska Kunsmann	996ef6e115	bundles/nftables: more sorted()	2021-09-29 19:44:13 +02:00
Franziska Kunsmann	5f1f4fd654	bundles/wireguard: add option 'snat_to' for connections	2021-09-29 19:43:29 +02:00
Franziska Kunsmann	902840ee7f	bundles/wireguard: use one wireguard connection per peer instead of one for all	2021-09-29 19:27:13 +02:00
Franziska Kunsmann	2b0e3a4bf0	bundles/powerdns: use only public ips or those attached to physical interfaces to create dns records	2021-09-25 11:08:18 +02:00
Franziska Kunsmann	b81153e957	bundles/netbox: fix upgrade command	2021-09-22 16:43:59 +02:00
Franziska Kunsmann	05d69c1f12	bundles/powerdns: use named-checkzone to verify zone integrity	2021-09-22 16:42:26 +02:00
Franziska Kunsmann	bb8910d15f	bundles/gitea: use metadata.get()	2021-09-22 16:38:27 +02:00
Franziska Kunsmann	b21f7c856a	bundles/gitea: switch to new file type 'download'	2021-09-21 07:55:15 +02:00
Franziska Kunsmann	ed2bb66e3e	bundles/basic: add links to icinga, grafana and nginx vhosts to login message	2021-09-16 19:33:11 +02:00
Franziska Kunsmann	5a7d0b0afd	bundles/icinga2: don't skip everything if check_sipgate_account_balance can't get applied	2021-09-16 19:33:08 +02:00
Sophie Schiller	c9f9a27096	bundle/hedgedoc add new csp defaults	2021-09-14 20:23:01 +02:00
Sophie Schiller	738dbd94a0	bundle/hedgedoc improve dependencies	2021-09-14 20:23:01 +02:00
Sophie Schiller	481c1c85e5	bundle/nginx set instead of HTTPS	2021-09-14 20:23:01 +02:00
Sophie Schiller	77a14a0017	bundle/hedgedoc remove quoting inconsistencies	2021-09-11 20:24:10 +02:00
Sophie Schiller	09da9a8d92	bundle/hedgedoc improve config rendering to not produce errors with faults	2021-09-11 20:07:52 +02:00
Sophie Schiller	3d3994789e	bundle/hedgedoc update wbsite check	2021-09-11 19:56:49 +02:00
Sophie Schiller	478a8da9f4	bundles/hedgedoc add new bundle	2021-09-11 19:47:28 +02:00
Franziska Kunsmann	f77d6df1e5	bundles/matrix-dimension: fix dependencies	2021-09-08 15:16:00 +02:00
Franziska Kunsmann	05f9712b24	bundles/rspamd: change dmarc reporting sender to working address	2021-09-08 14:43:22 +02:00
Franziska Kunsmann	de6249c65d	dns: fix some errors	2021-09-06 16:42:14 +02:00
Franziska Kunsmann	78fda4f9e9	bundles/rspamd: do not try to resolve faults in items.py	2021-09-06 09:28:30 +02:00
Franziska Kunsmann	3039a0900e	bundles/rspamd: add alias for dmarc reports	2021-09-06 09:14:18 +02:00
Franziska Kunsmann	4ca0926546	bundles/rspamd: send dmarc reports	2021-09-06 09:11:36 +02:00
Franziska Kunsmann	43bcd75e87	update netbox to 3.0.1	2021-09-02 07:52:11 +02:00
Franziska Kunsmann	c7fd6ee041	bundles/grafana: make rspamd row more pretty	2021-08-25 15:15:09 +02:00
Franziska Kunsmann	2940bfd3d8	bundles/rspamd: add telegraf metrics	2021-08-23 22:24:59 +02:00
Franziska Kunsmann	3f38497585	bundles/vmhost: add metadata reactor to add all admins to 'libvirt' group	2021-08-22 07:25:46 +02:00
Franziska Kunsmann	65462ca536	bundles/nginx: default redirect mode should be 308	2021-08-22 07:20:45 +02:00
Franziska Kunsmann	d94df613c5	bundles/netbox: fix ADMINS	2021-08-21 12:46:55 +02:00
Franziska Kunsmann	c6fe9d5eb2	bundles/postfix: fix .provides()	2021-08-21 12:32:47 +02:00
Franziska Kunsmann	b0d2503f08	add bundle:netbox	2021-08-21 12:32:40 +02:00
Franziska Kunsmann	4cb89d699c	bundles/grafana: fix missing derivative() in dovecot row	2021-08-21 08:39:39 +02:00
Franziska Kunsmann	12ca6f4ff7	bundles/postfix: open up SMTPS	2021-08-21 08:12:21 +02:00
Franziska Kunsmann	3da3c00310	bundles/rspamd: changing of .map files does not need restarting	2021-08-21 07:48:02 +02:00
Franziska Kunsmann	ea9abc5f73	bundles/grafana: add dashboard row for dovecot	2021-08-21 07:47:24 +02:00
Franziska Kunsmann	96f1604879	bundles/dovecot: some fixes ... - fix postfix/myhostname default - ensure old_stats plugin is enabled - ensure permissions for old_stats plugin - ensure /etc/dovecot/ssl exists - remove unneeded configuration files	2021-08-21 07:31:22 +02:00
Franziska Kunsmann	8301664d9a	bundles/{grafana,influxdb2}: fix more permissions	2021-08-20 13:33:28 +02:00
Franziska Kunsmann	72d91767ec	bundles/influxdb: fix INFLUXDB PROCESS check	2021-08-20 13:25:40 +02:00
Franziska Kunsmann	949e139978	bundles/telegraf: influxdata has bullseye repos now	2021-08-20 13:25:22 +02:00
Franziska Kunsmann	f0987ccb44	bundles/unbound: automatically restart unbound if dns resolution fails for more than five minutes	2021-08-19 20:03:24 +02:00
Franziska Kunsmann	35938ead04	bundles/unbound: less caching of negative results	2021-08-19 20:02:27 +02:00
Franziska Kunsmann	4167d3cb22	update to bw 4.11.2	2021-08-17 18:10:35 +02:00
Franziska Kunsmann	5bbd188b0b	bundles/pretalx: no sudo for rebuilding	2021-08-17 16:46:58 +02:00
Franziska Kunsmann	d507f6794f	bundles/apt: ensure we have ncurses-term ... If that's not installed, we get weird drawing issues in tmux.	2021-08-17 16:42:26 +02:00
Franziska Kunsmann	25ea5af2db	bundles/smartd: add cronjob to schedule a monthly long test	2021-08-15 16:22:34 +02:00
Franziska Kunsmann	bd10dc578f	bundles/pppd: refactor check_dyndns_update ... We don't care about what the DNS provider said when updating the ip address. The only thing we care about is wether the current external ip of the system matches the resolved ip address.	2021-08-14 08:00:43 +02:00
Franziska Kunsmann	bb519adb2c	bundles/backup-client: more logging, fix wrong variable name	2021-08-08 07:47:07 +02:00
Franziska Kunsmann	c14bb43993	bundles/grafana: fix derivative for wireguard last handshake time	2021-08-07 23:32:39 +02:00
Sophie Schiller	e8d1582ed4	bw/nginx i hate whitespace	2021-08-07 22:01:40 +02:00
Sophie Schiller	6e3603553f	bw/nginx retab everything	2021-08-07 21:59:07 +02:00
Sophie Schiller	ab21983a4f	bw/nginx add not found page and deployment of error pages	2021-08-07 21:52:39 +02:00
Franziska Kunsmann	d9d98116e6	bundles/grafana: increase proxy_read_timeout for /api/ds/query	2021-08-07 20:02:57 +02:00
Franziska Kunsmann	0a77b72cd3	update mautrix-whatsapp to 0.1.8	2021-08-07 18:57:31 +02:00
Franziska Kunsmann	05de574471	bundles/backup-client: sleep a bit if backup did finish non-zero to increase chances of success	2021-08-07 10:30:19 +02:00
Franziska Kunsmann	04cee2b4c3	bundles/icinga2: fix file permissions	2021-08-07 07:13:41 +02:00
Franziska Kunsmann	b677eaf187	bundles/grafana: fix file permissions	2021-08-07 07:03:15 +02:00
Franziska Kunsmann	da49a907f7	bundles/nftables: set RemainAfterExit=yes	2021-08-07 07:01:00 +02:00
Franziska Kunsmann	8eb7cbf6fd	bundles/mautrix-whatsapp: don't restart so often	2021-08-07 07:00:27 +02:00
Franziska Kunsmann	8fd73e09de	bundles/backup-client: retry backups ... rsync just fails too often in the last couple of days. I don't want to babysit this every morning.	2021-08-07 06:59:33 +02:00
Franziska Kunsmann	3c105d3295	bundles/mautrix-*: repository has moved	2021-08-06 16:25:21 +02:00
Franziska Kunsmann	ffefb56f83	bundles/chekc-mail-received: increase sshmon timeout	2021-08-04 16:07:13 +02:00
Franziska Kunsmann	0f425036b2	bundles/backup-client: fix newlines	2021-08-04 15:55:14 +02:00
Franziska Kunsmann	91a527c35a	bundles/mautrix-telegram: change animated stickers to webm	2021-08-01 12:41:47 +02:00
Franziska Kunsmann	b94ab9de9c	bundles/nodejs: fix type for apt repo items	2021-08-01 08:20:06 +02:00
Franziska Kunsmann	58d2576ec9	bundles/backup-server: fix dependencies	2021-08-01 07:57:48 +02:00
Franziska Kunsmann	e596b45344	bundles/backup-client: actually show which rsync call produced which error	2021-08-01 07:57:22 +02:00
Franziska Kunsmann	9f8878ae8f	bundles/pacman: manage pacman.conf	2021-07-30 14:27:30 +02:00
Franziska Kunsmann	407d84a8c6	bundles/matrix-synapse: add option to automatically provision other nginx vhosts with wellknown data	2021-07-29 17:33:48 +02:00
Franziska Kunsmann	2f79f55da5	bundles/mautrix-whatsapp: fix cronjob	2021-07-29 17:13:08 +02:00
Franziska Kunsmann	df137f73a6	bundles/apt: symlink /usr/bin/python to python3	2021-07-25 13:32:59 +02:00
Franziska Kunsmann	e51e1113bb	bundles/sysctl: work around debian bug ... The debian systemd will silently overwrite /etc/sysctl.d/99-sysctl.conf with a symlink to /etc/sysctl.conf. We don't want that.	2021-07-25 13:31:00 +02:00
Franziska Kunsmann	4666f1c923	bundles/users: remove duplicate keys from ssh pubkeys	2021-07-24 12:10:03 +02:00
Franziska Kunsmann	9aa389ea28	bundles/matrix-media-repo: less strict rate limits	2021-07-23 20:17:06 +02:00
Franziska Kunsmann	e7023d087b	bundles/matrix-dimension: add zfs	2021-07-23 19:53:49 +02:00
Franziska Kunsmann	79e6c841a7	bundles/grafana: add dashboard row for unbound	2021-07-23 19:34:55 +02:00
Franziska Kunsmann	d4d353f0b6	move radicale to rx300	2021-07-23 13:03:47 +02:00
Franziska Kunsmann	ff90f8cbca	bundles/radicale: add metadata reactor for nginx vhost	2021-07-23 12:56:29 +02:00
Franziska Kunsmann	905a7917f8	bundles/matrix*: fix directories/repos	2021-07-23 07:58:15 +02:00
Franziska Kunsmann	66fce8e076	bundles/rspamd: fix some dependencies	2021-07-18 07:56:26 +02:00
Franziska Kunsmann	c9a1de5a8e	bundles/postfixadmin: fix backup path to be able to use zfs snapshots	2021-07-18 07:55:52 +02:00
Franziska Kunsmann	6cadf33ae3	bundles/postfix: support having postfixadmin without setting myhostname	2021-07-18 07:55:19 +02:00
Franziska Kunsmann	84d55c246a	items/zfs_dataset: remove automatic dependency detection for now ... This basically reverts commit 1086ed28c3	2021-07-17 19:40:41 +02:00
Franziska Kunsmann	cee2a41771	items/zfs_pool: rewrite item to support all kinds of zfs pools	2021-07-17 18:12:57 +02:00
Franziska Kunsmann	9111d49bf4	bundles: fix missing stuff	2021-07-17 16:59:39 +02:00
Franziska Kunsmann	fc0495f13a	bundles/rspamd: dkim key can be a string, too	2021-07-17 16:18:18 +02:00
Franziska Kunsmann	61062c8312	bundles/matrix-dimension: disable update check until there are releases ... ... we're using 'master' for now.	2021-07-17 13:06:49 +02:00
Franziska Kunsmann	32c0ad3bd6	bundles/matrix-synapse: auto-configure nginx vhost	2021-07-17 12:38:04 +02:00
sophie	ff526a7f7f	Merge pull request 'matrix-dimension' (#44) from matrix-dimension into main ... Reviewed-on: #44	2021-07-17 09:58:18 +00:00
Franziska Kunsmann	6a144cf991	bundles/users: add option to enable lingering	2021-07-17 11:33:43 +02:00
Franziska Kunsmann	ce9f6dd7ba	bundles: add zfs dataset to bundles	2021-07-17 10:17:39 +02:00
Franziska Kunsmann	337b660f5a	bundles/matrix-synapse: ensure matrix-synapse does not mess with our homeserver.yaml	2021-07-17 09:32:49 +02:00
Franziska Kunsmann	cbeb42c8ae	bundles/matrix-media-repo: add zfs	2021-07-17 09:12:11 +02:00
Franziska Kunsmann	1086ed28c3	items/zfs_dataset: add automatic dependency for all files, directories and git_deploy of a dataset	2021-07-17 09:10:56 +02:00
Sophie Schiller	58691904fc	bw/matrix-dimension repair syntax errors	2021-07-17 01:09:33 +02:00
Sophie Schiller	d076384ead	bw/matrix-dimension remove unneeded metadata	2021-07-17 01:09:33 +02:00
Sophie Schiller	6ceb47a92e	bw/matrix-dimension get all the things	2021-07-17 01:09:33 +02:00
Sophie Schiller	2b1c53e47a	bw/matrix-dimension disable logfile	2021-07-17 01:09:33 +02:00
Sophie Schiller	aa639dc913	bw/matrix-dimension switch to generic vhost name	2021-07-17 01:09:33 +02:00
Sophie Schiller	71a1a4d59b	bw/matrix-dimension enable process monitoring	2021-07-17 01:09:33 +02:00
Sophie Schiller	f40036422f	bw/matrix-dimensions fix typos	2021-07-17 01:09:33 +02:00
Sophie Schiller	568a73efaf	bw/matrix-dimension switch listening port	2021-07-17 01:09:33 +02:00
Sophie Schiller	9fb5293c80	bw/matrix-dimension switch to dedicated user	2021-07-17 01:09:33 +02:00
Sophie Schiller	ebee3b3de5	bw/matrix-dimension witespaaaaaaaace	2021-07-17 01:09:33 +02:00
Sophie Schiller	8ee59cd036	bundle/matrix-dimension enable backups	2021-07-17 01:09:33 +02:00
Sophie Schiller	a5b6250c86	bw/bundle matrix-dimension this might actually work	2021-07-17 01:09:33 +02:00
Sophie Schiller	c52482e98b	bw/bundle matrix-dimension add first draft	2021-07-17 01:09:33 +02:00
Franziska Kunsmann	6022bac0ef	have more bundles provide nginx metadata for themselves	2021-07-16 14:20:01 +02:00
Franziska Kunsmann	9e305fc854	bundles/element-web: fix nginx webroot path	2021-07-15 18:44:02 +02:00
Franziska Kunsmann	f7098b0d35	bundles/element-web: move to /opt (and zfs, if we have that)	2021-07-15 18:40:48 +02:00
Franziska Kunsmann	133627ace2	bundles/unbound: prefer ipv4 if using pppoe	2021-07-13 20:51:58 +02:00
Franziska Kunsmann	3c2f245b71	bundles/mx-puppet-discord: remove "Discord" in room name for now	2021-07-11 16:38:59 +02:00
Franziska Kunsmann	72f148425a	bundles/jenkins-ci: add ssh keys and config	2021-07-11 15:47:45 +02:00
Franziska Kunsmann	0a14d46cf2	bundles/jenkins: add zfs dataset	2021-07-11 15:29:42 +02:00
Franziska Kunsmann	8da40eab67	nodes/rx300: add php 8.0	2021-07-11 15:23:49 +02:00
Franziska Kunsmann	a66d9c5765	bundles/mx-puppet-discord: add (Discord) to room and user names	2021-07-11 12:29:05 +02:00
Franziska Kunsmann	b193971625	bundles/postfix: fix some needed files not being present in chroot on arch	2021-07-10 16:16:56 +02:00
Franziska Kunsmann	8f4db6f2ba	bundles/postfix: install pkg_pacman:s-nail	2021-07-10 15:59:03 +02:00
Franziska Kunsmann	3351767d56	add bundle:check-mail-received	2021-07-10 14:22:19 +02:00
Franziska Kunsmann	6c9809b165	bundles/grafana: add guest cpu time to cpu graph	2021-07-10 10:05:26 +02:00
Franziska Kunsmann	6a4b24c0f2	fix git urls in repo	2021-07-09 17:27:12 +02:00
Franziska Kunsmann	1927837205	bundles/gitea: add /var/lib/gitea to backups	2021-07-09 16:22:37 +02:00
Franziska Kunsmann	9bf0b8a0b0	bundles/gitea: use zfs datasets for all data	2021-07-09 16:22:10 +02:00
Franziska Kunsmann	82dd354f92	bundles/gitea: fix permissions for /home/git/.ssh	2021-07-09 16:15:38 +02:00
Franziska Kunsmann	95c5e0b6ea	bundles/gitea: use generic vhost name	2021-07-09 15:55:31 +02:00
Franziska Kunsmann	3c23de4dfa	bundles/grafana: fix nginx vhost config	2021-07-04 20:10:19 +02:00
Franziska Kunsmann	9021c6f853	bundles/grafana: fix permissions for some files and directories	2021-07-04 20:06:35 +02:00
Franziska Kunsmann	cbc0a1a927	nodes/htz.ex42-1048908: fix X-Forwarded-For header for matrix-media-repo	2021-07-04 20:03:22 +02:00
Franziska Kunsmann	b5ab21549d	bundles/nginx: rename 'proxy' metadata to 'locations', support more generic options, move extras files to metadata	2021-07-04 19:28:03 +02:00
Franziska Kunsmann	c87a8e2f15	bundles/pretalx: use pip install -e for locally existing code	2021-07-02 18:45:59 +02:00
Franziska Kunsmann	e091adaa64	bundles/nginx: increase buffer sizes	2021-07-02 18:21:57 +02:00
Franziska Kunsmann	9c1b4f5dbe	move travelynx.franzi.business to rx300	2021-07-02 16:15:31 +02:00
Franziska Kunsmann	8ef6522ead	bundles/travelynx: needs directory to git_deploy into	2021-07-02 15:48:48 +02:00
Franziska Kunsmann	f9e2715b30	bundles/systemd-networkd: removal of unmanaged files must also trigger restart of systemd-networkd	2021-07-02 15:03:47 +02:00
Franziska Kunsmann	7ac7c1a2b7	bundles/cron: ensure cron is installed and running	2021-07-02 06:36:51 +02:00
Franziska Kunsmann	9816da4f85	bundles/postgresql: only install postgresql-server-dev-* if needed	2021-07-01 18:22:38 +02:00
Franziska Kunsmann	210ae8dd2e	bundles/zfs: debian bullseye does not need zfs from backports	2021-07-01 18:19:24 +02:00
Franziska Kunsmann	686aa533e8	bundles/grafana: change logBase for nginx timing dashboard	2021-07-01 16:34:17 +02:00
Franziska Kunsmann	d32f675de7	bundles/miniflux: use vhost with generic name	2021-07-01 16:04:56 +02:00
Franziska Kunsmann	68e79b4883	bundles/nginx: only add well-known alias for vhosts which use letsencrypt	2021-07-01 16:04:46 +02:00
Franziska Kunsmann	20f4c182ad	bundles/pacman: ensure we have run-parts	2021-06-30 06:22:06 +02:00
Franziska Kunsmann	7f27762054	bundles/zfs: report *used*, not free storage space	2021-06-29 15:18:31 +02:00
Franziska Kunsmann	f01e24f995	bundles/postgresql: wait 10s after restarting	2021-06-29 14:23:51 +02:00
Franziska Kunsmann	7b00e7484e	fix monitoring for arch linux hosts	2021-06-28 19:59:54 +02:00
Franziska Kunsmann	dfbdbe73bd	bundles/icinga2: only nodes which have bundle:apt have unattended-upgrades (for now)	2021-06-28 19:48:05 +02:00
Franziska Kunsmann	450fb3f87a	bundles/kodi: do not install libcec4 ... It's not available in bullseye (but libcec6), but we don't need it anyway, because we're not using cec here.	2021-06-27 07:17:05 +02:00
Franziska Kunsmann	cd6e4b9767	bundles/influxdb2: disable atime for zfs dataset	2021-06-26 08:19:55 +02:00
Franziska Kunsmann	2193e0ca53	bundles/grafana: fix units for zfs panels	2021-06-25 20:16:13 +02:00
Franziska Kunsmann	7d4a99344b	bundles/zfs: enable autotrim on debian bullseye and above	2021-06-25 20:05:35 +02:00
Franziska Kunsmann	1c10be5cdc	bundles/zfs: add per-dataset metrics	2021-06-25 20:04:30 +02:00
Franziska Kunsmann	9cc324f84c	bundles/backup-server: enable compression for backups	2021-06-25 20:04:10 +02:00
Franziska Kunsmann	a793bb5fc1	bundles/zfs: rename zfs_arc_max_mb to zfs_arc_max_gb	2021-06-25 18:39:06 +02:00
Sophie Schiller	b949ba3e72	bw/home.kodi-wohnzimmer update to bullseye	2021-06-23 18:07:43 +02:00
Franziska Kunsmann	68865895e5	bundles/grafana: set decimals=0 for fan speed info	2021-06-19 14:18:30 +02:00
Franziska Kunsmann	8d331b0086	bundles/nginx: always use first of month for security.txt expiry	2021-06-19 08:49:10 +02:00
Franziska Kunsmann	fc5e163fb9	bundles/miniflux: use health check endpoint	2021-06-12 10:11:17 +02:00
Franziska Kunsmann	05670ac2bb	bundles/icinga2: less code for icinga statusmonitor	2021-06-11 16:49:12 +02:00
Franziska Kunsmann	455d4d7551	bundles/sshmon: fix occasional KeyErrors in check_cpu_stats	2021-06-06 17:59:58 +02:00
Franziska Kunsmann	94dba9139b	bundles/mosquitto: rewrite tasmota-telegraf-plugin using paho-mqtt library	2021-06-06 15:17:34 +02:00
Franziska Kunsmann	fa4fe51155	bundles/backup-client: do logging	2021-06-06 08:05:41 +02:00
Franziska Kunsmann	82d2e5b416	bundles/grafana: hide empty/zero values in lm-sensors dashboard row	2021-06-05 21:39:48 +02:00
Franziska Kunsmann	840d8228ed	bundles/grafana: fix line width for lm-sensors dashboard row	2021-06-05 15:58:00 +02:00
Franziska Kunsmann	db83b1614b	bundles/nginx: add anonymous timing logging for http requests	2021-06-05 15:53:02 +02:00
Franziska Kunsmann	72d4826dbb	remove bundle:netdata - we have telegraf and grafana now	2021-06-05 13:28:25 +02:00
Franziska Kunsmann	91cf6cd1e5	move lm-sensors to its own bundle, add to hardware systems	2021-06-05 12:23:09 +02:00
Franziska Kunsmann	5dde5d1642	bundles/apt: no --force-confdef in unattended upgrades	2021-06-05 11:13:51 +02:00
Franziska Kunsmann	6138db1089	bundles/matrix-synapse: no statistics	2021-06-05 11:13:19 +02:00
Franziska Kunsmann	ff85191bbe	bundles/radvd: fix typo	2021-06-04 07:28:40 +02:00
Franziska Kunsmann	95856a2c2d	add bundle:sysctl	2021-06-04 07:28:26 +02:00
Franziska Kunsmann	8d21e15106	bundles/pppd: restart nftables if it isn't running	2021-06-04 07:20:59 +02:00
Franziska Kunsmann	1fbc08f74b	bundles/nginx: add a default security.txt to all vhosts	2021-06-03 18:57:25 +02:00
Franziska Kunsmann	0a7e5bcdcd	move default values to libs/defaults	2021-06-03 18:27:45 +02:00
Franziska Kunsmann	5369490b79	bundles/postfix: fix spam blocklist timeout	2021-06-03 14:31:03 +02:00
Franziska Kunsmann	5c83287057	EOL bundle:iptables	2021-06-03 13:59:50 +02:00
Franziska Kunsmann	d569b00960	modify nodes and bundles for new nftables syntax	2021-06-03 13:59:36 +02:00
Franziska Kunsmann	ecb67d012b	bundles/nftables: introduce	2021-06-03 13:57:50 +02:00
Franziska Kunsmann	faf27a3940	bundles/nfs-server: support using node names for shares	2021-06-03 07:45:56 +02:00
Franziska Kunsmann	09397e2597	bundles/users: fix adding of non-admin users	2021-06-01 16:53:29 +02:00
Franziska Kunsmann	47c18913ca	bundles/pacman: install htop	2021-06-01 16:53:14 +02:00
Franziska Kunsmann	fba83415c7	bundles/letsencrypt: prepare for arch linux	2021-06-01 16:52:52 +02:00
Franziska Kunsmann	cf3c45fdd5	bundles/nginx: prepare for arch linux	2021-06-01 16:52:03 +02:00
Franziska Kunsmann	6b90d568cf	bundles/postfix: use dig in check_spam_blocklist instead of a python library ... The library isn't available as a debian package, so we would have to manually install that every time the python package updates its minor version number.	2021-05-29 09:29:40 +02:00
Franziska Kunsmann	3468b719ed	bundles/nginx: default vhost always supports letsencrypt	2021-05-24 19:19:10 +02:00
Sophie Schiller	1461cf2827	bw/home.paperless-sophie add sophie's paperless host	2021-05-24 19:04:59 +02:00
Franziska Kunsmann	6bfcd87976	bundles/paperless-ng: ensure we have static files	2021-05-24 15:02:04 +02:00
Sophie Schiller	9a60d36a03	scan bright colors	2021-05-24 11:01:13 +02:00
Franziska Kunsmann	5d4ca086e6	bundles/scansnap: do ocr in a separate process to speed up scanning	2021-05-24 10:24:01 +02:00
Franziska Kunsmann	d193ec8ef3	bundles/paperless: set some options	2021-05-24 10:23:19 +02:00
Franziska Kunsmann	df3e18b476	bundles/paperless: fix media path	2021-05-23 18:41:56 +02:00
Franziska Kunsmann	22c98a4206	nodes/home.paperless: introduce	2021-05-23 17:41:19 +02:00
Franziska Kunsmann	3a44a9fbfb	bundles/vmhost: only install qemu-kvm for debian buster and older	2021-05-23 14:54:47 +02:00
Franziska Kunsmann	46f7aa93ef	bundles: fix dependencies	2021-05-23 14:54:24 +02:00
Franziska Kunsmann	8dc66421c0	bundles/basic: don't rewrite /etc/locale.gen every time	2021-05-23 14:53:45 +02:00
Franziska Kunsmann	5a182fadef	make some bundles arch-compatible, more default packages for arch	2021-05-23 14:36:16 +02:00
Franziska Kunsmann	97cbef06a2	bundles/grafana: remove derivative from temperature and fan graphs	2021-05-20 06:51:10 +02:00
Franziska Kunsmann	8568298a4e	bundles/grafana: make sure we have backups of the grafana database	2021-05-19 20:56:34 +02:00
Franziska Kunsmann	e54135b014	bundles/telegraf: it's "command" for execd, not "commands", because ... who knows	2021-05-19 20:50:18 +02:00
Franziska Kunsmann	df192e543b	bundles/transmission: add telegraf statistics	2021-05-19 20:12:52 +02:00
Franziska Kunsmann	3b3bdeecab	bundles/pacman: add lm_sensors to telegraf, add dashboard row	2021-05-19 18:46:22 +02:00
Franziska Kunsmann	9e07af289e	bundles/scansnap: don't try to delete output directory	2021-05-19 06:35:18 +02:00
Franziska Kunsmann	3e9c28b8ae	bundles/zfs: no 'set -e' in backup-pre-hook	2021-05-16 07:53:27 +02:00
Franziska Kunsmann	976aa251d1	bundles/zfs: actually unmount snapshots before trying to destroy them	2021-05-16 07:43:31 +02:00
Franziska Kunsmann	479b730be4	bundles/zfs: introduce zfs-snapshot-backups, enable backups for nodes which need zfs-snapshot-backups	2021-05-15 20:32:23 +02:00
Franziska Kunsmann	25b305bddf	bundles/mosquitto: fix .provides()	2021-05-15 08:58:15 +02:00
Franziska Kunsmann	32826ed131	bundles/mosquitto: add telegraf stats for tasmota devices	2021-05-15 08:52:37 +02:00
Franziska Kunsmann	eb6ae208cb	bundles/grafana: fix file system permissions	2021-05-15 07:33:21 +02:00
Franziska Kunsmann	d9595ad8e6	bundles/icinga2: fix typo in check_usv_snmp	2021-05-15 07:28:15 +02:00
Franziska Kunsmann	07c3d93e7d	bundles/miniflux: make sure to restart process if it crashes	2021-05-15 06:50:11 +02:00
Franziska Kunsmann	8e45b93b78	bundles/powerdnsadmin: yarn isn't installed globally any more	2021-05-14 20:15:49 +02:00
Sophie Schiller	d3c9550463	bundle/postgresql add dependencies, remove redundant config	2021-05-14 20:06:42 +02:00
Sophie Schiller	a656eb7eb3	bundle/nodejs remove yarn install	2021-05-14 20:05:04 +02:00
Sophie Schiller	88cfbc0699	bundle/matrix-synapse update dependencies, improve postgres database ... creation	2021-05-14 20:03:56 +02:00
Sophie Schiller	bd19749971	bundle/matrix-media-repo update dependencies and needs	2021-05-14 20:02:39 +02:00
Sophie Schiller	3c5e778016	bundle:/element-web install yarn from npm instead of apt	2021-05-14 20:01:19 +02:00
Franziska Kunsmann	459c7731cb	bundles/backup-client: use --compress-level=1 instead of -z	2021-05-14 10:47:58 +02:00
Franziska Kunsmann	7775f33679	bundles/apt: move patchday to 21:00 UTC	2021-05-13 09:10:33 +02:00
Franziska Kunsmann	fab9a41024	bundles/c3voc-addons: use new way of doing updates, too	2021-05-11 06:21:42 +02:00
Franziska Kunsmann	276bd6ae8d	bundles/apt: rework upgrade-and-reboot mechanics to be more robust	2021-05-08 08:31:04 +02:00
Franziska Kunsmann	c976be62d7	bundles/grafana: only refresh managed dashboards every minute ... After all, we're only getting data every minute, so there's no point in refreshing more often.	2021-05-02 19:57:32 +02:00
Franziska Kunsmann	c1b1dc1a29	bundles/grafana: add support for custom managed dashboards	2021-05-02 17:49:40 +02:00
Franziska Kunsmann	fe668fd5d4	bundles/grafana: add "traffic per interface" graphs, fix naming of values	2021-05-02 15:01:22 +02:00
Franziska Kunsmann	0f387102b3	bundles/postgresql: do not collect metrics for telegraf database	2021-05-02 14:01:26 +02:00
Franziska Kunsmann	ada87897a4	bundles/grafana: add wireguard graphs	2021-05-02 13:55:41 +02:00
Franziska Kunsmann	40160fb25a	bundles: remove telegraf metrics from systemd-networkd and icinga2	2021-05-02 13:18:35 +02:00
Franziska Kunsmann	3b1d1f7e94	add postgresql metrics to telegraf/grafana	2021-05-02 13:09:01 +02:00
Franziska Kunsmann	1bc47fa231	bundles/grafana: fix y axis for disk iops graph	2021-05-02 12:07:49 +02:00
Franziska Kunsmann	ae0bb8ed58	bundles/postfix: rework exporter for better usability	2021-05-02 12:06:53 +02:00
Franziska Kunsmann	9b9465502a	bundles/grafana: add postfix graph	2021-05-02 11:55:34 +02:00
Franziska Kunsmann	0b972bc464	bundles/grafana: add nginx	2021-05-02 11:34:55 +02:00
Franziska Kunsmann	b299edbef4	bundles/grafana: add "free" to memory row	2021-05-02 11:05:01 +02:00
Franziska Kunsmann	68fed2439d	bundles/apt: fix "set -x" call	2021-05-02 10:45:21 +02:00
Franziska Kunsmann	c548a88ee7	bundles/grafana: introduce, add to htz-cloud.influxdb	2021-05-02 10:44:50 +02:00
Franziska Kunsmann	1a1ea721d9	bundles/telegraf: also work for arch linux systems	2021-05-02 07:32:54 +02:00
Franziska Kunsmann	8c276b53a6	nodes/home.nas: enable x11 forwarding for admins	2021-05-01 15:18:21 +02:00
Franziska Kunsmann	75fea7aa34	bundles/gitea: add a ssh key, enable git hooks for htz.ex42-1048908	2021-05-01 14:27:31 +02:00
Franziska Kunsmann	8a95dfa90a	nodes/home.downloadhelper: restrict lldp to vlan 42	2021-05-01 10:05:24 +02:00
Franziska Kunsmann	3de85e6717	bundles/webfs: introduce	2021-04-30 19:40:45 +02:00
Franziska Kunsmann	30efde6eb3	bundles/apt: remove unneeded if	2021-04-30 13:30:10 +02:00
Franziska Kunsmann	b235519ecf	bundles/apt: "set -xeuo pipefail" for upgrade-and-reboot	2021-04-30 12:51:09 +02:00
Franziska Kunsmann	8fd83241ca	bundles: ensure apt/repos/*/items is a set	2021-04-30 12:49:59 +02:00
Franziska Kunsmann	44d42de81c	bundles/nginx: only redirect to ssl for sites which actually have ssl enabled	2021-04-25 09:20:16 +02:00
Franziska Kunsmann	d98a1adfd9	bundles/ssl: support using a preexisting ssl certificate	2021-04-25 09:09:23 +02:00
Franziska Kunsmann	019d658442	bundles/icinga2: add check_usv_snmp	2021-04-25 08:02:04 +02:00
Franziska Kunsmann	ffd899534a	bundles/telegraf: use node.metadate.get() everywhere	2021-04-24 14:51:01 +02:00
Franziska Kunsmann	e9ce0ce869	bundles/systemd-networkd: add missing key to .provides()	2021-04-24 12:38:51 +02:00
Franziska Kunsmann	966ee7dae9	bundles/unbound: set correct statistics interval	2021-04-24 12:00:09 +02:00
Franziska Kunsmann	a9692317d2	bundles/telegraf: temporarily hardcode a repo path	2021-04-24 11:47:28 +02:00
Franziska Kunsmann	6772b3b5d0	bundles: various fixes for telegraf plugins	2021-04-24 11:45:58 +02:00
Franziska Kunsmann	a980e22ecb	bundles/telegraf: support requesting additional capabilities and/or groups	2021-04-24 11:44:55 +02:00
Franziska Kunsmann	dc0695e38f	bundles/influxdb: introduce	2021-04-24 10:17:56 +02:00
Franziska Kunsmann	c97d9ab948	bundles/postfix: use own postqueue exporter	2021-04-24 10:17:05 +02:00
Franziska Kunsmann	76f46ca7d5	bundles/telegraf: add sudoers file	2021-04-24 10:12:56 +02:00
Franziska Kunsmann	2432075f9a	bundles/telegraf: ensure telegraf is running, restart on config changes	2021-04-24 10:05:52 +02:00
Franziska Kunsmann	f58e66f701	bundles/c3voc-addons: make sure we're not accidentially overwriting c3voc telegraf config	2021-04-24 09:44:31 +02:00
Franziska Kunsmann	2667a2c00d	libs: replace libs.toml.dict_to_toml with libs.faults.resolve_faults	2021-04-24 09:39:08 +02:00
Franziska Kunsmann	a37d31973a	bundles: add some telegraf plugins	2021-04-24 09:14:25 +02:00
Franziska Kunsmann	5e0541aef8	bundles/telegraf: introduce	2021-04-24 09:14:21 +02:00
Franziska Kunsmann	ebb6d287b2	bundles/icinga2: add node name to automatic downtime comment	2021-04-23 14:30:34 +02:00
Franziska Kunsmann	8b14575657	bundles/postgresql: add metadata keys for some performance related config options	2021-04-23 14:02:04 +02:00
Franziska Kunsmann	616feb54b2	bundles/sshmon: fix an issue where check_mounts couldn't properly detect systemd mount units	2021-04-23 14:01:24 +02:00
Franziska Kunsmann	c0ff320281	bundles/scansnap: set proper permissions for /srv/scansnap	2021-04-21 18:25:37 +02:00
Franziska Kunsmann	c79b3f77c2	bundles/scansnap: cleanup old scans	2021-04-21 18:20:47 +02:00
Franziska Kunsmann	0c0a8e6263	bundles/scansnap: chown files to nobody-nogroup	2021-04-21 18:18:27 +02:00
Franziska Kunsmann	b5fb5dd6c2	bundles/scansnap: introduce, add to home.nas	2021-04-21 17:58:16 +02:00
Franziska Kunsmann	5e49e3204b	bundles/nfs-server: sort shares	2021-04-21 17:56:53 +02:00
Franziska Kunsmann	24362768fb	bundles/dhcpd: rework metadata	2021-04-20 18:18:17 +02:00
Franziska Kunsmann	12c04cf3be	bundles/users: some more bash config	2021-04-19 20:39:57 +02:00
Franziska Kunsmann	8536e87475	bundles/systemd-networkd: some more dhcp settings	2021-04-18 11:05:42 +02:00
Franziska Kunsmann	51ee9be424	bundles/radvd: advertise atleast every 30 seconds	2021-04-18 11:05:10 +02:00
Franziska Kunsmann	4973c63e62	bundles/icinga2: remove icinga_options/downtime_also_for, add host dependencies via icinga_options/also_affected_by	2021-04-17 09:21:51 +02:00
Franziska Kunsmann	4d5e75df68	bundles/icinga2: introduce icinga_options/downtime_also_for	2021-04-17 03:43:08 +02:00
Franziska Kunsmann	6a88040826	bundles/nginx: disable Federated Learning of Cohorts for all hosts	2021-04-16 18:36:50 +02:00
Franziska Kunsmann	bc8050cd3c	bundles/postfix: fix connection limits for smtpd	2021-04-11 21:56:37 +02:00
Franziska Kunsmann	b04a207262	nodes/htz.ex42-1048908: add some blocked email domains	2021-04-11 18:20:16 +02:00
Franziska Kunsmann	f0eb6f0d1b	bundles/vnstat: add favicon to web dashboard ... As requested by sophie	2021-04-11 14:35:49 +02:00
Franziska Kunsmann	e809ed4859	bundles/vnstat: changes in systemd unit files must trigger daemon-reload	2021-04-11 11:18:42 +02:00
Franziska Kunsmann	dca56140aa	bundles/simple-icinga-dashboard: use systemd-timers, use virtualenv	2021-04-11 11:17:09 +02:00
Franziska Kunsmann	26c2be07cf	bundles/vnstat: adjust vnstati calls for debian bullseye	2021-04-11 09:01:58 +02:00
Franziska Kunsmann	69279ba34f	bundles/postfix: be a bit more relaxed when checking for smtp errors	2021-04-10 16:50:16 +02:00
Franziska Kunsmann	018bdb2f83	bundles/matrix*: better monitoring	2021-04-10 16:40:44 +02:00
Franziska Kunsmann	9618e388c3	bundles/simple-icinga-dashboard: only resolve faults when rendering the template, not earlier	2021-04-10 16:33:32 +02:00
Franziska Kunsmann	36bd6f5755	bundles/simple-icinga-dashboard: config is a toml file now	2021-04-10 16:08:52 +02:00
Franziska Kunsmann	b33ddaadb5	bundles/simple-icinga-dashboard: add replacements	2021-04-10 15:43:37 +02:00
Franziska Kunsmann	fc7655469f	icinga2: add pretty_name for status page	2021-04-10 15:05:29 +02:00
Franziska Kunsmann	efd2875b17	bundles/c3voc-addons: add sms to NGINX VHOST checks	2021-04-10 15:04:34 +02:00
Franziska Kunsmann	8b2771cd63	Revert "bundles/systemd-networkd: fix vlan support for bridges and bonds" ... This reverts commit 02146a81d6.	2021-04-10 13:34:49 +02:00
Franziska Kunsmann	ef84b3f889	Revert "bundles/systemd-networkd: no need for a specific order in /etc/systemd/network/" ... This reverts commit b679f568eb. Documentation says order is irrelevant, but it is not. If we do not use ordering, vlan interfaces are defined before the parent interfaces, which leads to systemd-networkd not applying config for the parent interfaces.	2021-04-10 12:22:08 +02:00
Franziska Kunsmann	0d1a220b7b	bundles/systemd-networkd: generate unique mac address for vlan interfaces	2021-04-10 12:18:23 +02:00
Franziska Kunsmann	197ebe2e38	bundles/systemd-networkd: add BindCarrier to bridges	2021-04-10 11:41:23 +02:00
Franziska Kunsmann	00d46cb1b1	bundles/pppd: fix typo in restart-pppoe-if-no-public-ip	2021-04-10 09:49:40 +02:00
Franziska Kunsmann	af6b16cc35	bundles/pppd: fix KeyError in restart-pppoe-if-no-public-ip	2021-04-10 09:38:47 +02:00
Franziska Kunsmann	02146a81d6	bundles/systemd-networkd: fix vlan support for bridges and bonds	2021-04-10 09:18:45 +02:00
Franziska Kunsmann	24f04e59aa	nodes/voc.pretalx: work around content-security-policy issues	2021-04-05 08:18:21 +02:00
Franziska Kunsmann	aad27851bb	bundles/miniflux: proxy all images	2021-04-04 22:16:14 +02:00
Franziska Kunsmann	e36a352a42	bundles: fix usage of set() vs {}	2021-04-04 10:34:55 +02:00
Franziska Kunsmann	c418102000	bundles/netdata: fix iptables default	2021-04-04 10:30:45 +02:00
Franziska Kunsmann	513eb4bed6	bundles/mosquitto: add monitoring	2021-04-03 09:43:24 +02:00
Franziska Kunsmann	2027308249	bundles/zfs: fix typo in check_zpool_space	2021-04-03 09:41:17 +02:00
Franziska Kunsmann	9cbf866de7	bundles/mosquitto: introduce, add to node home.nas	2021-04-03 09:36:47 +02:00
Franziska Kunsmann	f8bbe00d47	overall better handling and usage of exceptions	2021-04-02 18:57:13 +02:00
Franziska Kunsmann	5d5930265a	bundles/postfix: remove print statement	2021-04-02 18:29:33 +02:00
Franziska Kunsmann	61cf881a03	bundles/pretalx: add bash_alias for manage.py	2021-04-02 14:59:56 +02:00
Franziska Kunsmann	4a3be10add	bundles/apt: fix if in upgrade-and-reboot	2021-04-02 13:40:55 +02:00
Franziska Kunsmann	a24fb12c21	bundles/apt: introduce restart_triggers (restart services if another service has been upgraded)	2021-04-02 08:12:51 +02:00
Franziska Kunsmann	7ca24d27d3	bundles/apt: add a bit of code to remove old, unused kernel images	2021-04-02 08:11:17 +02:00
Franziska Kunsmann	8a0c8f32ae	bundles: less Restart=on-failure, more Restart=always	2021-04-02 08:05:33 +02:00
Franziska Kunsmann	5b276368b8	bundles/wireguard: iptables/bundle_rules should be a list	2021-04-01 17:13:24 +02:00
Franziska Kunsmann	17f9aa9c3e	bundles/icinga2: disable command module	2021-04-01 17:12:35 +02:00
Franziska Kunsmann	c5eb2f4f70	bundles/icinga2: do not send recovery emails	2021-04-01 17:11:42 +02:00
Franziska Kunsmann	957cac5ebc	bundles/postfix: disable SPAM BLOCKLIST check if relayhost is set	2021-04-01 17:00:53 +02:00
Franziska Kunsmann	61c6188454	bundles/postfix: mynetworks now supports identifiers	2021-04-01 16:59:49 +02:00
Franziska Kunsmann	b7222e2cd1	bundles/systemd-networkd: fix typo in routes	2021-04-01 16:31:57 +02:00
Franziska Kunsmann	6e423c24fb	bundles/wireguard: rework metadata.py	2021-04-01 16:27:31 +02:00
Franziska Kunsmann	b679f568eb	bundles/systemd-networkd: no need for a specific order in /etc/systemd/network/	2021-04-01 16:26:06 +02:00
Franziska Kunsmann	d787f8b0a3	bundles/systemd-networkd: rework routes	2021-04-01 16:25:24 +02:00
Franziska Kunsmann	b52a196c73	bundles/nginx: add configuration option for client_max_body_size	2021-03-30 21:26:25 +02:00
Franziska Kunsmann	da9fe36646	bundles/pretalx: support installing plugins	2021-03-30 19:52:03 +02:00
Franziska Kunsmann	7345543fa2	bundles/mx-puppet-discord: remove logging to files, disable presence logging	2021-03-28 11:29:16 +02:00
Franziska Kunsmann	c388d5ea1e	bundles/postgresql: fix restart dependencies	2021-03-28 09:39:08 +02:00
Franziska Kunsmann	35e4bbf04b	bundles/postfix: remove postscreen usage ... postscreen isn't able to share its cache file between instances, which leads to the server simply accepting mails for the port on which postscreen starts up later. Since we can't predict which port this will be, we simply remove postscreen alltogether. Yes, i know i could just remove postscreen for port 2525.	2021-03-28 09:00:37 +02:00
Franziska Kunsmann	ce39850bda	bundles/postfix: fix .provides() for iptables reactor	2021-03-28 08:56:22 +02:00
Franziska Kunsmann	9fe4e2933d	bundles/postfix: add firewalling for port 2525	2021-03-28 08:37:51 +02:00
Franziska Kunsmann	a4b2dc29a9	bundles/miniflux: don't clean up old entries	2021-03-28 08:04:41 +02:00
Franziska Kunsmann	39c1d34bbb	bundles/sshmon: fix disk space usage limits	2021-03-27 12:07:49 +01:00
Franziska Kunsmann	8f0f635484	bundles/basic: change load graph for cpu graph	2021-03-27 12:06:12 +01:00
Franziska Kunsmann	568a31586f	bundles/apt: fix permissions for /etc/kernel/postinst.d/unattended-upgrades	2021-03-27 08:31:29 +01:00
Franziska Kunsmann	f514e200f0	bundles/mautrix-whatsapp: restart bridge daily again ... It seems neither WhatsApp nor WhatsApp Web are designed for 24/7 connections, thus leading to all kinds of weird side effects like "Bridge thinks it's connected, but no messages get through at all" or "WhatsApp is running, but the Bridge can't connect to it"	2021-03-27 08:21:41 +01:00
Franziska Kunsmann	f98720b57b	bundles/dhcpd: sort dchp leases by ip in bash alias	2021-03-26 09:27:52 +01:00
Franziska Kunsmann	65490b1d20	bundles/apt: log stdout and stderr separately in upgrade-and-reboot	2021-03-26 09:02:48 +01:00
Franziska Kunsmann	27753d50c4	bundles/postfix: use threading in check_spam_blocklist	2021-03-25 17:42:59 +01:00
Franziska Kunsmann	fdcec012f3	bundles/postfix: add SPAM BLOCKLIST check for every non-private IP attached to the server	2021-03-22 20:24:14 +01:00
Franziska Kunsmann	b99176be49	bundles/kodi: add iptables rules	2021-03-21 19:10:49 +01:00
Franziska Kunsmann	28dd9694af	add bundle:oidentd	2021-03-21 17:40:58 +01:00
Franziska Kunsmann	6a6198c9b9	bundles/wireguard: move iptables rules to metadata reactor	2021-03-21 15:26:29 +01:00
Franziska Kunsmann	3bc5e55400	bundles/iptables: don't apply iptables rules if a rules file is missing	2021-03-21 11:44:27 +01:00
Franziska Kunsmann	4b00c8b55a	bundles/unbound: do not bind to 0.0.0.0 if qemu is installed	2021-03-21 11:43:53 +01:00
Franziska Kunsmann	5a0aa82ec9	bundles/powerdns: fix missing imports	2021-03-21 11:43:17 +01:00
Franziska Kunsmann	62f7080db9	bundles/nfs-server: add iptables config	2021-03-21 11:24:21 +01:00
Franziska Kunsmann	850d860d59	bundles/powerdns: add iptables config	2021-03-21 11:12:18 +01:00
Franziska Kunsmann	31ddea7649	bundles/dovecot: add iptables config	2021-03-21 11:12:03 +01:00
Franziska Kunsmann	5775001301	bundles/postfix: add iptables config	2021-03-21 11:11:49 +01:00
Franziska Kunsmann	c9f008ad82	bundles/openssh: move iptables rules to metadata reactor	2021-03-21 10:37:28 +01:00
Franziska Kunsmann	b943d2d465	rework iptables configuration	2021-03-21 10:30:04 +01:00
Franziska Kunsmann	3fcd81960e	bundles/postfix: allow configuring mynetworks	2021-03-15 11:41:35 +01:00
Franziska Kunsmann	52cab71fec	bundles/wireguard: also allow outgoing traffic ... How did this ever work without this rule?	2021-03-15 09:00:35 +01:00
Franziska Kunsmann	adb808a683	bundles/users: more colourful bash for everyone	2021-03-14 17:14:08 +01:00
Franziska Kunsmann	f6ecf2a465	bundles/nfs-client: support arch linux	2021-03-11 15:24:06 +01:00
Sophie Schiller	c87611c2e2	bw/kodi add backports repo	2021-03-08 21:06:25 +01:00
Franziska Kunsmann	8b07fce738	bundles/unbound: decrease statistics-interval until debian has 1.19 and we're actually able to use them	2021-03-06 10:03:22 +01:00
Franziska Kunsmann	f214f70cd4	bundles/basic: add textual cpu stats to htop	2021-03-06 09:58:22 +01:00
Franziska Kunsmann	7e57c0f03e	bundles/basic: current htop version in debian does not support DiskIO nor NetworkIO	2021-03-06 09:56:05 +01:00
Franziska Kunsmann	ebcf8e4445	bundles/matrix-media-repo: also restart matrix-media-repo after updating	2021-03-05 07:21:23 +01:00
Franziska Kunsmann	2adf3c6a72	bundles/sshmon: increase acceptable amount of cpu steal	2021-03-01 15:52:55 +01:00
Franziska Kunsmann	e435ae582a	bundles/icinga2: add monitoring for IdoPgsqlConnection	2021-03-01 15:36:29 +01:00
Franziska Kunsmann	3adfb9779a	bundles/molly-guard: introduce, add to systems	2021-02-26 17:58:20 +01:00
Franziska Kunsmann	51ca74549e	bundles/basic: add htoprc	2021-02-24 19:24:56 +01:00
Franziska Kunsmann	836f065382	bundles/pleroma: add website content check	2021-02-20 22:11:19 +01:00
Franziska Kunsmann	b470fddc12	bundles/nginx: add gdpr-compatible log format	2021-02-20 21:11:12 +01:00
Franziska Kunsmann	8cb172a1c1	bundles/pleroma: remove NoNewPrivileges=true, interferes with mail delivery	2021-02-20 20:57:00 +01:00
Franziska Kunsmann	017c2c3421	bundles/pleroma: allow database configuration	2021-02-20 20:18:34 +01:00
Franziska Kunsmann	f8c157ce50	bundles/pleroma: get it working	2021-02-20 19:37:33 +01:00
Franziska Kunsmann	1f3e7afb2c	bundles/pleroma: initial NON-WORKING version	2021-02-20 19:14:20 +01:00
Franziska Kunsmann	5433859a86	bundles/letsencrypt: also check for chain.pem, nginx needs this	2021-02-20 17:38:11 +01:00
Franziska Kunsmann	e2d7d05783	bundles/systemd-networkd: manage apt packages via bundle:apt	2021-02-20 17:35:45 +01:00
Franziska Kunsmann	ad5c8cc0ab	bundles/postfix: only get certificate if actually needed	2021-02-20 17:30:38 +01:00
Franziska Kunsmann	97a1b3ae85	bundles/zfs: add comment to action:modprobe-zfs	2021-02-20 16:51:34 +01:00
Franziska Kunsmann	1c0a3ee8e7	bundles/postgresql: fix postgresql config path	2021-02-20 16:50:38 +01:00
Franziska Kunsmann	194de9ef2d	bundles/letsencrypt: fix some errors in letsencrypt-ensure-some-certificate	2021-02-20 15:48:17 +01:00
Franziska Kunsmann	3fa81ddc85	bundles/gitea: use canned stop action	2021-02-20 15:47:35 +01:00
Franziska Kunsmann	74d81eb7ba	bundles/nginx: support disabling ssl for each vhost individually	2021-02-20 14:25:27 +01:00
Franziska Kunsmann	228786f6aa	bundles/letsencrypt: generate a dummy certificate, if no certificate already exists	2021-02-20 13:52:40 +01:00
Franziska Kunsmann	014b6029c5	nodes/htz.ex42-1048908: update element-web config	2021-02-20 11:10:08 +01:00
Franziska Kunsmann	1ac6559b9f	bundles/postgresql: add pg_query_mon	2021-02-20 10:56:20 +01:00
Franziska Kunsmann	c0b8d35a47	bundles/icinga2: fix double emoji for WARNING state	2021-02-19 14:03:00 +01:00
Franziska Kunsmann	2bccbf9ded	bundles/icinga2: add some emoji to sent SMS, don't send output via SMS if everything is fine	2021-02-19 14:01:45 +01:00
Franziska Kunsmann	8ac9b2f204	bundles/matrix-synapse: add scripts/synapse-purge-unused-rooms	2021-02-19 11:56:21 +01:00
Franziska Kunsmann	b06532241b	bundles: use metastack syntax for metadata.get()	2021-02-18 18:12:25 +01:00
Franziska Kunsmann	6e9fb7044a	bundles/systemd-networkd: add "enable-resolved" flag	2021-02-18 17:56:43 +01:00
Franziska Kunsmann	fbf0371371	bundles/systemd: support different timezones	2021-02-18 17:56:06 +01:00
Franziska Kunsmann	1abc0153f5	bundles/openssh: do not add deleted users to ssh config	2021-02-18 15:12:30 +01:00
Franziska Kunsmann	75224f0d5c	bundles/lldp: support arch linux	2021-02-18 15:10:50 +01:00
Franziska Kunsmann	f4a644795e	bundles/basic: support setting a different default locale	2021-02-18 14:51:33 +01:00
Franziska Kunsmann	32d129015e	bundles/pacman: introduce, support pkg_pacman in some other bundles	2021-02-18 14:24:57 +01:00
Franziska Kunsmann	9bf7f856af	bundles/users: allow setting another shell	2021-02-18 14:24:09 +01:00
Franziska Kunsmann	8a2bef9b77	bundles/apt: move vim to default packages	2021-02-18 14:23:43 +01:00
Franziska Kunsmann	03840fd152	bundles/systemd: more options in journald.conf	2021-02-18 10:29:38 +01:00
Franziska Kunsmann	fbb8840dff	add .editorconfig, format files correctly	2021-02-17 10:56:18 +01:00
Franziska Kunsmann	b42e39ed0a	get rid of check_rbl	2021-02-17 10:51:49 +01:00
Franziska Kunsmann	9d5d80457f	bundles/element-web: rename from riot-web, use tagged releases	2021-02-16 12:49:02 +01:00
Franziska Kunsmann	abb99ed58a	bundles/raspberrypi: remove isc-dhcp-client	2021-02-16 08:41:37 +01:00
Franziska Kunsmann	d2260b4699	bundles/wireguard: use PersistentKeepalive to work around intermittent connection issues	2021-02-15 15:16:44 +01:00
Franziska Kunsmann	5c1eba0d58	bundles: use a common metadata key for firewall restrictions, use repo.libs.tools.resolve_identifier()	2021-02-15 14:16:35 +01:00
Franziska Kunsmann	56fce7d460	bundles/wireguard: add exclude_from_monitoring option for wireguard peers	2021-02-14 21:35:37 +01:00
Franziska Kunsmann	65e6b8d053	bundles/backup-client: use a bash function to do backups instead of repeating the same code over and over	2021-02-13 09:18:00 +01:00
Franziska Kunsmann	adeb8eff88	bundles/postgresql: only do database dumps if we're actually doing backups	2021-02-13 09:04:59 +01:00
Franziska Kunsmann	724537558e	bundles/postgresql: do a database dump before backing up the database	2021-02-13 08:56:35 +01:00
Franziska Kunsmann	3d1468b214	bundles/backup-client: backup-pre-hooks should have numeric sorting	2021-02-13 08:37:49 +01:00
Franziska Kunsmann	7aeb46382d	bundles/zfs: move icinga2_api to metadata defaults	2021-02-13 08:37:00 +01:00
Franziska Kunsmann	2fbbaa1586	bundles/zfs: remove support for snapshot_only and snapshot_never (unused)	2021-02-13 08:36:10 +01:00
Franziska Kunsmann	b20f369ea8	bundles/backup-client: metadata backup-pre-hooks now use /bin/sh by default	2021-02-13 08:26:46 +01:00
Franziska Kunsmann	077eaa265c	bundles/radicale: use Fault.as_htpasswd_entry() instead of pre-encrypting passwords	2021-02-13 08:17:31 +01:00
Franziska Kunsmann	978285bf32	bundles/matrix-media-repo: add backup/paths metadata	2021-02-13 08:09:48 +01:00
Franziska Kunsmann	f52df58517	bundles: code style improvements	2021-02-12 20:45:41 +01:00
Franziska Kunsmann	c0353d2911	bundles/apt: add option to configure patch-hour, not only patchday	2021-02-12 18:53:25 +01:00
Franziska Kunsmann	767db8efdd	bundles/apt: add /etc/kernel/postinst.d/unattended-upgrades to ensure a reboot on kernel updates	2021-02-12 18:12:24 +01:00
Franziska Kunsmann	d4b110087f	bundles/matrix-media-repo: introduce, add to htz.ex42-1048908	2021-02-12 16:01:35 +01:00
Franziska Kunsmann	638e37c05f	bundles: add Requires=postgresql.service to some services which require postgresql	2021-02-12 13:28:52 +01:00
Franziska Kunsmann	9f8cbde7d7	bundles/transmission: always try to restart transmission	2021-02-11 09:06:20 +01:00
Franziska Kunsmann	a86e04683a	bundles/backup-client: fix missing space in generate-backup	2021-02-09 07:17:25 +01:00
Franziska Kunsmann	c25233b991	nodes: replace pkg_apt:redis with bundle:redis	2021-02-07 21:09:39 +01:00
Franziska Kunsmann	0d1e987a6f	bundles/backup-client: add backup-pre-hooks (fixes #24)	2021-02-07 20:47:22 +01:00
Franziska Kunsmann	a8690b13b8	bundles/rspamd: add "unless" to action:rspamd_assure_dkim_key_permissions	2021-02-06 19:10:16 +01:00
Franziska Kunsmann	eb431d8da8	bundles/postfix: also set alias_maps ... fixes "warning: dict_nis_init: NIS domain name not set - NIS lookups disabled"	2021-02-06 10:24:19 +01:00
Franziska Kunsmann	457052d42b	bundles/gitea: downloading gitea updates needs stopping it first	2021-02-06 09:43:54 +01:00
Franziska Kunsmann	b6d23aaed4	bundles/sshmon: use own check_cpu_stats script ... Old script only checked iowait, which is not enough.	2021-02-06 09:38:50 +01:00
Franziska Kunsmann	c185a5bacd	bundles/backup-client: do backups at 23:xx, so it won't interfere with upgrade-and-reboot ... There were still problems with systems starting their backups late in the hour, but backup servers did upgrade-and-reboot early it the hour. This leads to incomplete backups, if the machine is rebooting, too.	2021-02-06 09:36:44 +01:00
Franziska Kunsmann	7e15f8adc3	bundles/octoprint: multi-line-output for check_octoprint_update	2021-02-02 20:20:11 +01:00
Franziska Kunsmann	8523754935	bundles/users: add vim-keybindings for pane navigation to tmux.conf	2021-01-31 07:59:19 +01:00
Franziska Kunsmann	bdc5b4de33	bundles/transmission: don't overwrite configs managed by transmission	2021-01-30 17:39:34 +01:00
Franziska Kunsmann	71f033b7c2	bundles/icinga2: fix dependencies for svc_systemd:icinga2 ... icinga2 runs fine without any checks, so we now only depend on the other configuration files managed by bw. This will also fix unwanted dependencies, because 'file:' means *all* files, not only those provided by this bundle. In the past, it wasn't possible to skip any file, because that would result in icinga not properly restarting.	2021-01-30 17:31:05 +01:00
Franziska Kunsmann	569275329c	bundles/sshmon: remove INTERNET check ... We're using the internet to check these hosts, so if those hosts wouldn't have an internet connection, the whole host would be down, atleast as far as icinga can tell.	2021-01-30 11:47:55 +01:00
Franziska Kunsmann	161aec9314	bundles/powerdnsadmin: use tagged release	2021-01-29 18:13:16 +01:00
Franziska Kunsmann	f56852c27d	bundles/postfixadmin: use tagged release	2021-01-29 18:07:57 +01:00
Franziska Kunsmann	fa462fbd0f	bundles/sshmon: use tag_name instead of human-readable name in check_github_for_new_release	2021-01-29 18:04:35 +01:00
Franziska Kunsmann	b3e6063596	bundles/unbound: silence refresh-root-hints cronjob	2021-01-29 17:58:24 +01:00
Franziska Kunsmann	c31066fea8	bundles/mautrix-whatsapp: restart weekly to work around 24/7 connection issues	2021-01-29 17:27:33 +01:00
Franziska Kunsmann	fd421bf6f8	add bundle:redis, add redis support to pretalx	2021-01-29 15:58:54 +01:00
Franziska Kunsmann	ce76430b4d	bundles/mautrix-whatsapp: decrease log level to info	2021-01-28 15:05:04 +01:00
Franziska Kunsmann	4efcc73f55	bundles/mautrix-whatsapp: ensure we're not using ssl for postgres	2021-01-25 22:27:11 +01:00
Franziska Kunsmann	f3d8a1412c	bundles/dovecot: better ssl	2021-01-24 18:44:25 +01:00
Franziska Kunsmann	2aaf7cf8f8	bundles/nginx: better ssl	2021-01-24 18:44:13 +01:00
Franziska Kunsmann	614bdf9dec	bundles/basic: support creating additional locales	2021-01-24 07:49:49 +01:00
Franziska Kunsmann	d344664fa1	bundles/basic: fix format for /etc/locale.gen	2021-01-23 12:25:32 +01:00
Franziska Kunsmann	6b720c6c75	bundles/postgresql: only deploy packages if we have locales installed	2021-01-23 12:06:38 +01:00
Franziska Kunsmann	4a9463db5f	bundles/basic: ensure a proper locale is installed	2021-01-23 12:05:59 +01:00
Franziska Kunsmann	a160e7cf46	bundles/postgresql: improvements ... - support other postgresql versions - manage configs using bw	2021-01-23 11:35:03 +01:00
Franziska Kunsmann	c41ee0f806	bundles/apt: fix logging for upgrade-and-reboot	2021-01-23 11:32:35 +01:00
Franziska Kunsmann	51101fc615	bundles/sudo: fix mode for /etc/sudoers	2021-01-23 09:28:50 +01:00
Franziska Kunsmann	c5109fbfe3	bundles/icinga2: no need to do metadata.copy() here	2021-01-23 09:11:18 +01:00
Franziska Kunsmann	717159b61f	bundles/seafile: no need for sms for seafile process, we're already doing http content checks	2021-01-23 09:09:30 +01:00
Franziska Kunsmann	63cdd470cf	bundles/c3voc-addons: support cron definition	2021-01-19 13:34:23 +01:00
Franziska Kunsmann	0893156723	bundles/c3voc-addons: add upgrade-and-reboot to bundle	2021-01-17 18:43:30 +01:00
Franziska Kunsmann	0f0ee046b1	bundles/c3voc-addons: some assertions to make sure we don't conflict with ansible	2021-01-17 10:16:23 +01:00
Franziska Kunsmann	1041e092b1	bundles/dhcpd: add bash alias for lease list	2021-01-17 09:12:32 +01:00
Franziska Kunsmann	4f62e25d5e	bundles/c3voc-addons: add nginx vhost monitoring	2021-01-17 08:07:21 +01:00
Franziska Kunsmann	3b90426b4d	bundles/pretalx: fix needs for systemd units	2021-01-17 08:01:15 +01:00
Franziska Kunsmann	2b0678063c	bundles/pretalx: new version needs to trigger regenerate_css, too	2021-01-17 07:59:57 +01:00
Franziska Kunsmann	b5cc8c2c57	bundles/pretalx: add to PORT_MAP.md, allocate a port	2021-01-17 07:55:08 +01:00
Franziska Kunsmann	35abb92daf	bundles/icinga2: do not schedule downtimes for hosts which do not do unattended-upgrades	2021-01-16 22:31:51 +01:00
Franziska Kunsmann	173746fe9c	bundles/sshmon: ensure sshmon user is able to log in	2021-01-16 22:31:18 +01:00
Franziska Kunsmann	39aabd0546	bundles/backup-server: of course, we need to ignore hosts which have exclude_from_backups set	2021-01-16 22:22:51 +01:00
Franziska Kunsmann	ad84f62c0d	bundles/sshmon: do not rely on bundle:users to create sshmon user	2021-01-16 22:21:27 +01:00
Franziska Kunsmann	ec8802dd4a	bundles/backup-server: ignore all nodes which don't have bundle:backup-client	2021-01-16 22:12:49 +01:00
Franziska Kunsmann	9f0fc90679	bundles/pretalx: fix wrong metadata key	2021-01-16 22:12:16 +01:00
Franziska Kunsmann	70944d7065	bundles/pretalx: introduce	2021-01-16 22:03:38 +01:00
Franziska Kunsmann	0b9056bd2b	add pseudo-bundle to add configs to c3voc ansible managed hosts	2021-01-16 22:03:03 +01:00
Franziska Kunsmann	8fc0017378	bundles/backup-client: do backups at 00:xx, so it won't interfere with upgrade-and-reboot	2021-01-15 15:31:36 +01:00
Franziska Kunsmann	9854fc9dbc	bundles/hostname: also set motd	2021-01-15 15:29:49 +01:00
Franziska Kunsmann	db3a15310c	bundles/letsencrypt: fix concat_and_deploy comment	2021-01-10 10:48:19 +01:00
Franziska Kunsmann	659e35686e	bundles/iptables: removing rule files should also trigger iptables-enforce	2021-01-09 14:02:50 +01:00
Franziska Kunsmann	4f6b57676a	bundles/systemd-networkd: LACPTransmitRate=fast	2021-01-09 12:52:03 +01:00
Franziska Kunsmann	00fd1df67a	bundles/wide-dhcp6c: stop, then start, instead of restart	2021-01-09 12:51:37 +01:00
Franziska Kunsmann	8e54d6eb23	add monitoring for freifunk nodes	2021-01-09 11:03:23 +01:00
Franziska Kunsmann	19dd29e847	bundles/transmission: also allow tcp peer-port	2021-01-08 17:06:26 +01:00
Franziska Kunsmann	33b85ff0de	bundles/transmission: add bundle, add to home.downloadhelper	2021-01-08 17:00:08 +01:00
Franziska Kunsmann	dca13263e2	bundles/systemd-networkd: add option for setting static routes	2021-01-08 16:09:59 +01:00
Franziska Kunsmann	17510b783c	bundles/nfs-client: do start automount units. Previous comment was wrong.	2021-01-07 22:15:57 +01:00
Franziska Kunsmann	fb42f9e667	bundles/dhcpd: catch keyerrors for nodes which do dhcp in unmanaged networks	2021-01-07 22:14:17 +01:00
Franziska Kunsmann	2d42e5f7dd	update bw to 4.3, add .provides() to metadata reactors	2021-01-07 18:44:38 +01:00
Franziska Kunsmann	7f0fb7a6e2	bundles/influxdb: remove	2021-01-07 18:28:08 +01:00
Sophie Schiller	2ba4946975	update letsencrypt hashes	2021-01-06 13:18:44 +01:00
Franziska Kunsmann	ec13a1edaa	bundles/simple-icinga-dashboard: repo is public now	2021-01-03 09:56:51 +01:00
Franziska Kunsmann	03d3ab6e9d	bundles/{netdata,nginx,unbound}: fix iptables rules (should also create ip6tables rules)	2021-01-02 16:19:55 +01:00
Franziska Kunsmann	e8d131b041	add simple-icinga-dashboard on status.franzi.business ... fixes #20	2021-01-02 14:47:11 +01:00
Franziska Kunsmann	2ebf7ec32b	bundles/mautrix-whatsapp: disable log timestamps, journal takes care of that	2021-01-02 14:01:26 +01:00
Franziska Kunsmann	b8bcc6c499	bundles/mautrix-whatsapp: only log to journal	2021-01-02 13:59:47 +01:00
Franziska Kunsmann	8752299e61	bundles/icinga2: add hostgroup for hosts which send SMS	2021-01-02 12:58:52 +01:00
Franziska Kunsmann	4f57a6c0e3	icinga2: more checks should send sms	2021-01-02 12:26:37 +01:00
Franziska Kunsmann	10fd67a0fd	bundles/systemd-networkd: fix LACP options ... fixes #25, hopefully	2021-01-02 11:00:10 +01:00
Franziska Kunsmann	f329373a4a	bundles/systemd-networkd: remove settings from bond.netdev ... Why the fuck doesn't this work like it's written in the documentation?	2021-01-01 22:00:50 +01:00
Franziska Kunsmann	16ea6ce0d5	bundles/systemd-networkd: disable STP on bridges	2021-01-01 21:59:21 +01:00
Franziska Kunsmann	48fc341137	bundles/backup-client: add monitoring for backups	2021-01-01 13:59:42 +01:00
Franziska Kunsmann	3e1d3b483e	bundles/mautrix-whatsapp: use -a for check_procs	2020-12-31 12:31:14 +01:00
Franziska Kunsmann	fede30c2cc	bundles/mautrix-whatsapp: introduce	2020-12-31 12:18:34 +01:00
Franziska Kunsmann	914889da6c	bundles/vmhost: add option to exclude VM from monitoring	2020-12-29 10:18:16 +01:00
Franziska Kunsmann	62d7baa3ec	bundles/icinga2: admins shall receive all notifications	2020-12-27 09:09:40 +01:00
Franziska Kunsmann	d72c43083d	nodes/rx300: set proper lldp hostname	2020-12-25 14:45:41 +01:00
Franziska Kunsmann	ca7f3ed4a6	bundles/octoprint: fix typo in check_octoprint_update	2020-12-23 12:38:44 +01:00
Franziska Kunsmann	e40f88aa69	bundles/unbound: only start unbound after pppoe.service has been started (fixes #23)	2020-12-23 10:50:54 +01:00
Franziska Kunsmann	275249481f	bundles/octoprint: display version in update check, remove error states (we're monitoring this separately)	2020-12-23 10:43:13 +01:00
Franziska Kunsmann	d2be654206	bundles/unbound: enable prefetching	2020-12-22 09:24:10 +01:00
Franziska Kunsmann	5e45efb7ae	bundles/unbound: better caching	2020-12-22 09:22:37 +01:00
Franziska Kunsmann	5935aed0db	bundles/{netdata,pppd,radvd,vmhost,vnstat,wide-dhcp6c}: add monitoring	2020-12-21 09:50:15 +01:00
Franziska Kunsmann	0b52f8e7e6	bundles/icinga2: allow limiting permissions for api users	2020-12-20 09:33:17 +01:00
Franziska Kunsmann	da4b139095	bundles/{radvd,wide-dhcp6c}: remove metadata key integrate-with-pppd	2020-12-18 16:30:17 +01:00
Franziska Kunsmann	6045debe9e	bundles/nginx: check ssl certificates	2020-12-18 13:28:08 +01:00
Franziska Kunsmann	5f5c3d5207	bundles/icinga2: admins shall receive more notifications	2020-12-18 08:24:19 +01:00
Franziska Kunsmann	958f5893e6	bundles/zfs: adjust warning period for check_zfs_old_snapshots	2020-12-18 08:23:42 +01:00
Franziska Kunsmann	487e4d0df6	bundles/rspamd: add missing }	2020-12-18 08:21:56 +01:00
Franziska Kunsmann	e81fcafe7a	bundles/powerdns: fix dependencies	2020-12-18 06:41:24 +01:00
Franziska Kunsmann	63d455d242	bundles/rspamd: fix dependencies	2020-12-18 06:41:05 +01:00
Franziska Kunsmann	65db8b1625	bundles/systemd-networkd: faster miimon	2020-12-18 06:33:05 +01:00
Franziska Kunsmann	ecb7a93073	bundles/pppd: silence restart-pppoe-if-no-public-ip	2020-12-18 06:32:18 +01:00
Franziska Kunsmann	e33af1c845	bundles/unbound: refresh root-hint.txt once a week	2020-12-13 15:22:19 +01:00
Franziska Kunsmann	9c6fe48859	bundles/unbound: add netdata config	2020-12-13 15:17:19 +01:00
Franziska Kunsmann	3eeb253e55	bundles/unbound: introduce, add to nodes	2020-12-13 14:59:44 +01:00
Franziska Kunsmann	c5e43188ca	bundles/radvd: support not announcing a nameserver	2020-12-13 14:59:10 +01:00
Franziska Kunsmann	057d4f0c4c	bundles/dovecot: autoexpunge Trash older than 360 days	2020-12-13 11:55:28 +01:00
Franziska Kunsmann	18c56cce9a	bundles/dovecot: do not auto-subscribe to junk mailbox	2020-12-13 11:54:55 +01:00
Franziska Kunsmann	58d99eb402	bundles/systemd: configure journald	2020-12-12 10:39:57 +01:00
Franziska Kunsmann	cf4d0c1ca6	bundles/powerdnsadmin: ensure permissions of powerdnsadmin static directory	2020-12-10 22:18:04 +01:00
Franziska Kunsmann	8be6f9b78d	bundles/apt: fix date call in check_unattended_upgrades	2020-12-10 22:15:31 +01:00
Franziska Kunsmann	be15458e1e	bundles/powerdnsadmin: fix database upgrade	2020-12-10 22:07:26 +01:00
Franziska Kunsmann	1d06d86205	bundles/wireguard: fix early fault resolve in metadata.py	2020-12-10 16:39:26 +01:00
Franziska Kunsmann	bd217f0666	bundles/pppd: automatically restart pppoe (once per hour) if no public ip address can be found	2020-12-10 16:14:17 +01:00
Franziska Kunsmann	b80c0b12fe	home.router: add c3voc vpn	2020-12-08 17:45:30 +01:00
Franziska Kunsmann	9398649db0	bundles/seafile: add icinga checks	2020-12-05 09:28:54 +01:00
Franziska Kunsmann	febcacdfe3	icinga2: enable mails for update checks	2020-12-05 09:17:21 +01:00
Franziska Kunsmann	67d8293201	bundles/wireguard: one icinga2 check per peer	2020-11-30 06:43:46 +01:00
Franziska Kunsmann	295ff72b4b	bundles/smartd: introduce, add to hosts where *we* need to keep track of disk health	2020-11-29 12:07:27 +01:00
Franziska Kunsmann	8456ac43c6	bundles/nfs-client: don't try to start automount units	2020-11-29 12:06:34 +01:00
Franziska Kunsmann	1bfeead5e8	nodes/home.nas: change nfs-mount options for /storage/nas	2020-11-29 12:05:51 +01:00
Franziska Kunsmann	a549936e09	bundles/nfs-server: ensure nfs-kernel-server is started	2020-11-28 15:48:27 +01:00
Franziska Kunsmann	014b37082c	bundles/wireguard: send pings over vpn, if pppd reconnects	2020-11-27 03:09:37 +01:00
Franziska Kunsmann	c1885e20b6	nodes/home.octoprint-vielschichtigkeit: fix ifnames, fix vhost	2020-11-25 21:26:21 +01:00
Franziska Kunsmann	dc9e378908	bundles/icinga2: add icinga statusmonitor	2020-11-22 18:56:04 +01:00
Franziska Kunsmann	12ce8d8f6e	bundles/icinga2: add automatic downtime for upgrade-and-reboot	2020-11-22 13:28:14 +01:00
Franziska Kunsmann	3a56b0425c	bundles/icinga2: add default for vars.notification.mail, enable mail for check_sipgate_account_balance	2020-11-22 11:44:09 +01:00
Franziska Kunsmann	9651d740ae	bundles/icinga2: add check_sipgate_account_balance, adjust check_interval	2020-11-22 11:38:53 +01:00
Franziska Kunsmann	9cace7dace	bundles/icinga2: only include service_name in sms if it actually is a service	2020-11-22 11:09:44 +01:00
Franziska Kunsmann	54219928e4	bundles/icinga2: only add user to on-call group if they have atleast one of (email, phone) set	2020-11-22 11:07:02 +01:00
Franziska Kunsmann	8c6c691e5e	bundles/icinga2: implement SMS notifications	2020-11-22 10:34:49 +01:00