577 commits

Author	SHA1	Message	Date
Franzi	7345543fa2	bundles/mx-puppet-discord: remove logging to files, disable presence logging	2021-03-28 11:29:16 +02:00
Franzi	c388d5ea1e	bundles/postgresql: fix restart dependencies	2021-03-28 09:39:08 +02:00
Franzi	35e4bbf04b	bundles/postfix: remove postscreen usage ... postscreen isn't able to share its cache file between instances, which leads to the server simply accepting mails for the port on which postscreen starts up later. Since we can't predict which port this will be, we simply remove postscreen alltogether. Yes, i know i could just remove postscreen for port 2525.	2021-03-28 09:00:37 +02:00
Franzi	ce39850bda	bundles/postfix: fix .provides() for iptables reactor	2021-03-28 08:56:22 +02:00
Franzi	9fe4e2933d	bundles/postfix: add firewalling for port 2525	2021-03-28 08:37:51 +02:00
Franzi	a4b2dc29a9	bundles/miniflux: don't clean up old entries	2021-03-28 08:04:41 +02:00
Franzi	39c1d34bbb	bundles/sshmon: fix disk space usage limits	2021-03-27 12:07:49 +01:00
Franzi	8f0f635484	bundles/basic: change load graph for cpu graph	2021-03-27 12:06:12 +01:00
Franzi	568a31586f	bundles/apt: fix permissions for /etc/kernel/postinst.d/unattended-upgrades	2021-03-27 08:31:29 +01:00
Franzi	f514e200f0	bundles/mautrix-whatsapp: restart bridge daily again ... It seems neither WhatsApp nor WhatsApp Web are designed for 24/7 connections, thus leading to all kinds of weird side effects like "Bridge thinks it's connected, but no messages get through at all" or "WhatsApp is running, but the Bridge can't connect to it"	2021-03-27 08:21:41 +01:00
Franzi	f98720b57b	bundles/dhcpd: sort dchp leases by ip in bash alias	2021-03-26 09:27:52 +01:00
Franzi	65490b1d20	bundles/apt: log stdout and stderr separately in upgrade-and-reboot	2021-03-26 09:02:48 +01:00
Franzi	27753d50c4	bundles/postfix: use threading in check_spam_blocklist	2021-03-25 17:42:59 +01:00
Franzi	fdcec012f3	bundles/postfix: add SPAM BLOCKLIST check for every non-private IP attached to the server	2021-03-22 20:24:14 +01:00
Franzi	b99176be49	bundles/kodi: add iptables rules	2021-03-21 19:10:49 +01:00
Franzi	28dd9694af	add bundle:oidentd	2021-03-21 17:40:58 +01:00
Franzi	6a6198c9b9	bundles/wireguard: move iptables rules to metadata reactor	2021-03-21 15:26:29 +01:00
Franzi	3bc5e55400	bundles/iptables: don't apply iptables rules if a rules file is missing	2021-03-21 11:44:27 +01:00
Franzi	4b00c8b55a	bundles/unbound: do not bind to 0.0.0.0 if qemu is installed	2021-03-21 11:43:53 +01:00
Franzi	5a0aa82ec9	bundles/powerdns: fix missing imports	2021-03-21 11:43:17 +01:00
Franzi	62f7080db9	bundles/nfs-server: add iptables config	2021-03-21 11:24:21 +01:00
Franzi	850d860d59	bundles/powerdns: add iptables config	2021-03-21 11:12:18 +01:00
Franzi	31ddea7649	bundles/dovecot: add iptables config	2021-03-21 11:12:03 +01:00
Franzi	5775001301	bundles/postfix: add iptables config	2021-03-21 11:11:49 +01:00
Franzi	c9f008ad82	bundles/openssh: move iptables rules to metadata reactor	2021-03-21 10:37:28 +01:00
Franzi	b943d2d465	rework iptables configuration	2021-03-21 10:30:04 +01:00
Franzi	3fcd81960e	bundles/postfix: allow configuring mynetworks	2021-03-15 11:41:35 +01:00
Franzi	52cab71fec	bundles/wireguard: also allow outgoing traffic ... How did this ever work without this rule?	2021-03-15 09:00:35 +01:00
Franzi	adb808a683	bundles/users: more colourful bash for everyone	2021-03-14 17:14:08 +01:00
Franzi	f6ecf2a465	bundles/nfs-client: support arch linux	2021-03-11 15:24:06 +01:00
Sophie Schiller	c87611c2e2	bw/kodi add backports repo	2021-03-08 21:06:25 +01:00
Franzi	8b07fce738	bundles/unbound: decrease statistics-interval until debian has 1.19 and we're actually able to use them	2021-03-06 10:03:22 +01:00
Franzi	f214f70cd4	bundles/basic: add textual cpu stats to htop	2021-03-06 09:58:22 +01:00
Franzi	7e57c0f03e	bundles/basic: current htop version in debian does not support DiskIO nor NetworkIO	2021-03-06 09:56:05 +01:00
Franzi	ebcf8e4445	bundles/matrix-media-repo: also restart matrix-media-repo after updating	2021-03-05 07:21:23 +01:00
Franzi	2adf3c6a72	bundles/sshmon: increase acceptable amount of cpu steal	2021-03-01 15:52:55 +01:00
Franzi	e435ae582a	bundles/icinga2: add monitoring for IdoPgsqlConnection	2021-03-01 15:36:29 +01:00
Franzi	3adfb9779a	bundles/molly-guard: introduce, add to systems	2021-02-26 17:58:20 +01:00
Franzi	51ca74549e	bundles/basic: add htoprc	2021-02-24 19:24:56 +01:00
Franzi	836f065382	bundles/pleroma: add website content check	2021-02-20 22:11:19 +01:00
Franzi	b470fddc12	bundles/nginx: add gdpr-compatible log format	2021-02-20 21:11:12 +01:00
Franzi	8cb172a1c1	bundles/pleroma: remove NoNewPrivileges=true, interferes with mail delivery	2021-02-20 20:57:00 +01:00
Franzi	017c2c3421	bundles/pleroma: allow database configuration	2021-02-20 20:18:34 +01:00
Franzi	f8c157ce50	bundles/pleroma: get it working	2021-02-20 19:37:33 +01:00
Franzi	1f3e7afb2c	bundles/pleroma: initial NON-WORKING version	2021-02-20 19:14:20 +01:00
Franzi	5433859a86	bundles/letsencrypt: also check for chain.pem, nginx needs this	2021-02-20 17:38:11 +01:00
Franzi	e2d7d05783	bundles/systemd-networkd: manage apt packages via bundle:apt	2021-02-20 17:35:45 +01:00
Franzi	ad5c8cc0ab	bundles/postfix: only get certificate if actually needed	2021-02-20 17:30:38 +01:00
Franzi	97a1b3ae85	bundles/zfs: add comment to action:modprobe-zfs	2021-02-20 16:51:34 +01:00
Franzi	1c0a3ee8e7	bundles/postgresql: fix postgresql config path	2021-02-20 16:50:38 +01:00