566 commits

Author	SHA1	Message	Date
Franzi	65490b1d20	bundles/apt: log stdout and stderr separately in upgrade-and-reboot	2021-03-26 09:02:48 +01:00
Franzi	27753d50c4	bundles/postfix: use threading in check_spam_blocklist	2021-03-25 17:42:59 +01:00
Franzi	fdcec012f3	bundles/postfix: add SPAM BLOCKLIST check for every non-private IP attached to the server	2021-03-22 20:24:14 +01:00
Franzi	b99176be49	bundles/kodi: add iptables rules	2021-03-21 19:10:49 +01:00
Franzi	28dd9694af	add bundle:oidentd	2021-03-21 17:40:58 +01:00
Franzi	6a6198c9b9	bundles/wireguard: move iptables rules to metadata reactor	2021-03-21 15:26:29 +01:00
Franzi	3bc5e55400	bundles/iptables: don't apply iptables rules if a rules file is missing	2021-03-21 11:44:27 +01:00
Franzi	4b00c8b55a	bundles/unbound: do not bind to 0.0.0.0 if qemu is installed	2021-03-21 11:43:53 +01:00
Franzi	5a0aa82ec9	bundles/powerdns: fix missing imports	2021-03-21 11:43:17 +01:00
Franzi	62f7080db9	bundles/nfs-server: add iptables config	2021-03-21 11:24:21 +01:00
Franzi	850d860d59	bundles/powerdns: add iptables config	2021-03-21 11:12:18 +01:00
Franzi	31ddea7649	bundles/dovecot: add iptables config	2021-03-21 11:12:03 +01:00
Franzi	5775001301	bundles/postfix: add iptables config	2021-03-21 11:11:49 +01:00
Franzi	c9f008ad82	bundles/openssh: move iptables rules to metadata reactor	2021-03-21 10:37:28 +01:00
Franzi	b943d2d465	rework iptables configuration	2021-03-21 10:30:04 +01:00
Franzi	3fcd81960e	bundles/postfix: allow configuring mynetworks	2021-03-15 11:41:35 +01:00
Franzi	52cab71fec	bundles/wireguard: also allow outgoing traffic ... How did this ever work without this rule?	2021-03-15 09:00:35 +01:00
Franzi	adb808a683	bundles/users: more colourful bash for everyone	2021-03-14 17:14:08 +01:00
Franzi	f6ecf2a465	bundles/nfs-client: support arch linux	2021-03-11 15:24:06 +01:00
Sophie Schiller	c87611c2e2	bw/kodi add backports repo	2021-03-08 21:06:25 +01:00
Franzi	8b07fce738	bundles/unbound: decrease statistics-interval until debian has 1.19 and we're actually able to use them	2021-03-06 10:03:22 +01:00
Franzi	f214f70cd4	bundles/basic: add textual cpu stats to htop	2021-03-06 09:58:22 +01:00
Franzi	7e57c0f03e	bundles/basic: current htop version in debian does not support DiskIO nor NetworkIO	2021-03-06 09:56:05 +01:00
Franzi	ebcf8e4445	bundles/matrix-media-repo: also restart matrix-media-repo after updating	2021-03-05 07:21:23 +01:00
Franzi	2adf3c6a72	bundles/sshmon: increase acceptable amount of cpu steal	2021-03-01 15:52:55 +01:00
Franzi	e435ae582a	bundles/icinga2: add monitoring for IdoPgsqlConnection	2021-03-01 15:36:29 +01:00
Franzi	3adfb9779a	bundles/molly-guard: introduce, add to systems	2021-02-26 17:58:20 +01:00
Franzi	51ca74549e	bundles/basic: add htoprc	2021-02-24 19:24:56 +01:00
Franzi	836f065382	bundles/pleroma: add website content check	2021-02-20 22:11:19 +01:00
Franzi	b470fddc12	bundles/nginx: add gdpr-compatible log format	2021-02-20 21:11:12 +01:00
Franzi	8cb172a1c1	bundles/pleroma: remove NoNewPrivileges=true, interferes with mail delivery	2021-02-20 20:57:00 +01:00
Franzi	017c2c3421	bundles/pleroma: allow database configuration	2021-02-20 20:18:34 +01:00
Franzi	f8c157ce50	bundles/pleroma: get it working	2021-02-20 19:37:33 +01:00
Franzi	1f3e7afb2c	bundles/pleroma: initial NON-WORKING version	2021-02-20 19:14:20 +01:00
Franzi	5433859a86	bundles/letsencrypt: also check for chain.pem, nginx needs this	2021-02-20 17:38:11 +01:00
Franzi	e2d7d05783	bundles/systemd-networkd: manage apt packages via bundle:apt	2021-02-20 17:35:45 +01:00
Franzi	ad5c8cc0ab	bundles/postfix: only get certificate if actually needed	2021-02-20 17:30:38 +01:00
Franzi	97a1b3ae85	bundles/zfs: add comment to action:modprobe-zfs	2021-02-20 16:51:34 +01:00
Franzi	1c0a3ee8e7	bundles/postgresql: fix postgresql config path	2021-02-20 16:50:38 +01:00
Franzi	194de9ef2d	bundles/letsencrypt: fix some errors in letsencrypt-ensure-some-certificate	2021-02-20 15:48:17 +01:00
Franzi	3fa81ddc85	bundles/gitea: use canned stop action	2021-02-20 15:47:35 +01:00
Franzi	74d81eb7ba	bundles/nginx: support disabling ssl for each vhost individually	2021-02-20 14:25:27 +01:00
Franzi	228786f6aa	bundles/letsencrypt: generate a dummy certificate, if no certificate already exists	2021-02-20 13:52:40 +01:00
Franzi	014b6029c5	nodes/htz.ex42-1048908: update element-web config	2021-02-20 11:10:08 +01:00
Franzi	1ac6559b9f	bundles/postgresql: add pg_query_mon	2021-02-20 10:56:20 +01:00
Franzi	c0b8d35a47	bundles/icinga2: fix double emoji for WARNING state	2021-02-19 14:03:00 +01:00
Franzi	2bccbf9ded	bundles/icinga2: add some emoji to sent SMS, don't send output via SMS if everything is fine	2021-02-19 14:01:45 +01:00
Franzi	8ac9b2f204	bundles/matrix-synapse: add scripts/synapse-purge-unused-rooms	2021-02-19 11:56:21 +01:00
Franzi	b06532241b	bundles: use metastack syntax for metadata.get()	2021-02-18 18:12:25 +01:00
Franzi	6e9fb7044a	bundles/systemd-networkd: add "enable-resolved" flag	2021-02-18 17:56:43 +01:00