80 commits

Author	SHA1	Message	Date
Sophie Schiller	481c1c85e5	bundle/nginx set instead of HTTPS	2021-09-14 20:23:01 +02:00
Franzi	65462ca536	bundles/nginx: default redirect mode should be 308	2021-08-22 07:20:45 +02:00
Sophie Schiller	e8d1582ed4	bw/nginx i hate whitespace	2021-08-07 22:01:40 +02:00
Sophie Schiller	6e3603553f	bw/nginx retab everything	2021-08-07 21:59:07 +02:00
Sophie Schiller	ab21983a4f	bw/nginx add not found page and deployment of error pages	2021-08-07 21:52:39 +02:00
Franzi	d9d98116e6	bundles/grafana: increase proxy_read_timeout for /api/ds/query	2021-08-07 20:02:57 +02:00
Franzi	1086ed28c3	items/zfs_dataset: add automatic dependency for all files, directories and git_deploy of a dataset	2021-07-17 09:10:56 +02:00
Franzi	cbc0a1a927	nodes/htz.ex42-1048908: fix X-Forwarded-For header for matrix-media-repo	2021-07-04 20:03:22 +02:00
Franzi	b5ab21549d	bundles/nginx: rename 'proxy' metadata to 'locations', support more generic options, move extras files to metadata	2021-07-04 19:28:03 +02:00
Franzi	e091adaa64	bundles/nginx: increase buffer sizes	2021-07-02 18:21:57 +02:00
Franzi	68e79b4883	bundles/nginx: only add well-known alias for vhosts which use letsencrypt	2021-07-01 16:04:46 +02:00
Franzi	8d331b0086	bundles/nginx: always use first of month for security.txt expiry	2021-06-19 08:49:10 +02:00
Franzi	db83b1614b	bundles/nginx: add anonymous timing logging for http requests	2021-06-05 15:53:02 +02:00
Franzi	1fbc08f74b	bundles/nginx: add a default security.txt to all vhosts	2021-06-03 18:57:25 +02:00
Franzi	d569b00960	modify nodes and bundles for new nftables syntax	2021-06-03 13:59:36 +02:00
Franzi	cf3c45fdd5	bundles/nginx: prepare for arch linux	2021-06-01 16:52:03 +02:00
Franzi	3468b719ed	bundles/nginx: default vhost always supports letsencrypt	2021-05-24 19:19:10 +02:00
Franzi	22c98a4206	nodes/home.paperless: introduce	2021-05-23 17:41:19 +02:00
Franzi	8fd83241ca	bundles: ensure apt/repos/*/items is a set	2021-04-30 12:49:59 +02:00
Franzi	44d42de81c	bundles/nginx: only redirect to ssl for sites which actually have ssl enabled	2021-04-25 09:20:16 +02:00
Franzi	d98a1adfd9	bundles/ssl: support using a preexisting ssl certificate	2021-04-25 09:09:23 +02:00
Franzi	a37d31973a	bundles: add some telegraf plugins	2021-04-24 09:14:25 +02:00
Franzi	6a88040826	bundles/nginx: disable Federated Learning of Cohorts for all hosts	2021-04-16 18:36:50 +02:00
Franzi	e36a352a42	bundles: fix usage of set() vs {}	2021-04-04 10:34:55 +02:00
Franzi	b52a196c73	bundles/nginx: add configuration option for client_max_body_size	2021-03-30 21:26:25 +02:00
Franzi	b943d2d465	rework iptables configuration	2021-03-21 10:30:04 +01:00
Franzi	b470fddc12	bundles/nginx: add gdpr-compatible log format	2021-02-20 21:11:12 +01:00
Franzi	74d81eb7ba	bundles/nginx: support disabling ssl for each vhost individually	2021-02-20 14:25:27 +01:00
Franzi	228786f6aa	bundles/letsencrypt: generate a dummy certificate, if no certificate already exists	2021-02-20 13:52:40 +01:00
Franzi	b06532241b	bundles: use metastack syntax for metadata.get()	2021-02-18 18:12:25 +01:00
Franzi	fbb8840dff	add .editorconfig, format files correctly	2021-02-17 10:56:18 +01:00
Franzi	5c1eba0d58	bundles: use a common metadata key for firewall restrictions, use repo.libs.tools.resolve_identifier()	2021-02-15 14:16:35 +01:00
Franzi	f52df58517	bundles: code style improvements	2021-02-12 20:45:41 +01:00
Franzi	2aaf7cf8f8	bundles/nginx: better ssl	2021-01-24 18:44:13 +01:00
Franzi	2d42e5f7dd	update bw to 4.3, add .provides() to metadata reactors	2021-01-07 18:44:38 +01:00
Franzi	03d3ab6e9d	bundles/{netdata,nginx,unbound}: fix iptables rules (should also create ip6tables rules)	2021-01-02 16:19:55 +01:00
Franzi	6045debe9e	bundles/nginx: check ssl certificates	2020-12-18 13:28:08 +01:00
Franzi	4a57926577	bundles/icinga2: set some notification options for checks	2020-11-22 08:24:44 +01:00
Franzi	5419bf31fb	bundles: fix some icinga checks	2020-11-21 10:30:05 +01:00
Franzi	2d856a1e9a	bundles/nginx: add iptables rules	2020-11-16 16:43:57 +01:00
Franzi	df63f8c732	bundles/nginx: make sure /var/www exists	2020-11-13 13:35:02 +01:00
Franzi	0749fc75c5	bundles: add backup paths	2020-11-13 12:37:26 +01:00
Franzi	e5c12f0628	bundles/nginx: create webroot directories after bundle:zfs is done	2020-11-12 22:59:46 +01:00
Franzi	11701a67c8	dns: deploy MTA-STS	2020-11-11 11:41:06 +01:00
Franzi	8cb997133a	bundles/nginx: add monitoring	2020-11-10 10:57:04 +01:00
Franzi	f8bc4b2ad9	bundles/php: introduce	2020-10-31 13:00:38 +01:00
Franzi	e2d8923dee	bundles/nginx: use metadata reactor to determine index files	2020-10-31 10:41:48 +01:00
Franzi	67c5c23194	bundles/nginx: support non-domain vhost names	2020-10-31 10:30:07 +01:00
Franzi	113221a9b2	bundles/nginx: make sure we have dhparam.pem	2020-10-31 10:18:40 +01:00
Franzi	8eeaabf615	bundles/nginx: use http 308 for https redirect ... basically "go away. nothing's here. use https forever."	2020-10-30 15:24:24 +01:00