567 commits

Author	SHA1	Message	Date
Franzi	1e026c1769	nodes/rx300: update gitea to 1.14.4	2021-07-09 18:19:15 +02:00
Franzi	1f25d0052e	add legacy redirect for git.kunsmann.eu	2021-07-09 17:26:54 +02:00
Franzi	d0bdcacc94	nodes/rx300: install correct dependencies for franzi.business deployment	2021-07-09 16:38:26 +02:00
Franzi	bd77f8da93	move franzi.business to rx300	2021-07-09 16:11:53 +02:00
Franzi	c2cb5a2546	move gitea to rx300	2021-07-09 15:57:39 +02:00
Franzi	4a30aeaab6	nodes/htz.ex42-1048908: fix matrix server wellknown stuff	2021-07-05 20:05:47 +02:00
Franzi	cbc0a1a927	nodes/htz.ex42-1048908: fix X-Forwarded-For header for matrix-media-repo	2021-07-04 20:03:22 +02:00
Franzi	b5ab21549d	bundles/nginx: rename 'proxy' metadata to 'locations', support more generic options, move extras files to metadata	2021-07-04 19:28:03 +02:00
Sophie Schiller	a3a228fc2d	bw/htz-cloud.miniserver bump element-web version	2021-07-04 13:32:18 +02:00
Franzi	af53a610bb	use bundlewrap-pass for human-used passwords	2021-07-02 19:29:52 +02:00
Franzi	9c1b4f5dbe	move travelynx.franzi.business to rx300	2021-07-02 16:15:31 +02:00
Franzi	b7935e59e7	nodes/home.paperless: increase max_body_size	2021-07-02 15:49:17 +02:00
Franzi	a2501ed2cb	nodes/rx300: update to debian bullseye	2021-07-01 18:23:30 +02:00
Franzi	6d5085c1e7	move unicornsden.franzi.business to rx300	2021-07-01 17:40:07 +02:00
Franzi	ba30015f7f	nodes/rx300: set pretty name for status page	2021-07-01 16:15:03 +02:00
Franzi	0f383cfb2c	move miniflux to rx300, change domain to rss.franzi.business	2021-07-01 16:10:06 +02:00
Franzi	d4dabc90c5	nodes/aurto: also backup aurto database	2021-06-29 16:39:05 +02:00
Franzi	73ebf746f9	nodes/{aurto,rx300}: add backups	2021-06-29 14:58:14 +02:00
Franzi	da6a607033	nodes/rx300: add nginx, letsencrypt, postgresql	2021-06-29 14:24:10 +02:00
Franzi	faae70bbb1	nodes/aurto: add ssl to nginx vhost	2021-06-29 14:14:18 +02:00
Franzi	a594337965	nodes/{aurto,rx300}: lives in a data center now	2021-06-28 19:42:51 +02:00
Franzi	bb15d1217f	nodes/home.nas: more ram	2021-06-26 06:18:01 +02:00
Franzi	a793bb5fc1	bundles/zfs: rename zfs_arc_max_mb to zfs_arc_max_gb	2021-06-25 18:39:06 +02:00
Franzi	b36018f36b	nodes/htz.ex42-1048908: update travelynx to 1.20.1	2021-06-25 18:37:07 +02:00
Sophie Schiller	b949ba3e72	bw/home.kodi-wohnzimmer update to bullseye	2021-06-23 18:07:43 +02:00
Franzi	7f290dfce6	nodes/htz.ex42-1048908: pkg_apt:oidentd is managed by bundle:oidentd	2021-06-20 21:44:32 +02:00
Franzi	d4659fd189	update gitea to 1.14.3	2021-06-19 08:47:32 +02:00
Franzi	8c47b74ec3	update travelynx to 1.20.0	2021-06-18 13:09:38 +02:00
Franzi	5a8f7f4075	update mautrix-telegram, update mautrix-whatsapp	2021-06-16 07:15:20 +02:00
Franzi	e3578e669c	nodes/home.nas: add cronjob	2021-06-12 08:56:38 +02:00
Franzi	1e13e632c9	nodes/rx300: remove lldp, set correct ip	2021-06-11 15:02:43 +02:00
Franzi	611954e199	nodes/kunsi-t470: add a bridge on ethernet to be able to use vms	2021-06-11 15:02:03 +02:00
Franzi	1b70a4247c	upgrade element-web to 1.7.30	2021-06-11 12:58:37 +02:00
Franzi	3fc51d9eba	nodes/home.nas: move scrub to where it does not interfere with backups	2021-06-06 08:03:16 +02:00
Franzi	72d4826dbb	remove bundle:netdata - we have telegraf and grafana now	2021-06-05 13:28:25 +02:00
Franzi	91cf6cd1e5	move lm-sensors to its own bundle, add to hardware systems	2021-06-05 12:23:09 +02:00
Franzi	95856a2c2d	add bundle:sysctl	2021-06-04 07:28:26 +02:00
Franzi	1fbc08f74b	bundles/nginx: add a default security.txt to all vhosts	2021-06-03 18:57:25 +02:00
Franzi	d569b00960	modify nodes and bundles for new nftables syntax	2021-06-03 13:59:36 +02:00
Franzi	faf27a3940	bundles/nfs-server: support using node names for shares	2021-06-03 07:45:56 +02:00
Franzi	f84e9c533f	nodes/aurto: add nginx, move aurto to dedicated user	2021-06-01 17:00:09 +02:00
Franzi	a6434bd8d0	create dedicated user for kunsi work laptop	2021-06-01 16:55:16 +02:00
Franzi	d756e3daf8	nodes/kunsi-t470: fix scansnap mount path	2021-05-29 09:21:18 +02:00
Franzi	79facf2409	nodes/home.paperless: set backup target	2021-05-24 19:19:24 +02:00
Sophie Schiller	c395438a41	update element-web	2021-05-24 19:12:33 +02:00
Sophie Schiller	1461cf2827	bw/home.paperless-sophie add sophie's paperless host	2021-05-24 19:04:59 +02:00
Franzi	d193ec8ef3	bundles/paperless: set some options	2021-05-24 10:23:19 +02:00
Franzi	fa59c547a9	nodes/home.paperless: add vhost extras for static files	2021-05-23 18:11:57 +02:00
Franzi	22c98a4206	nodes/home.paperless: introduce	2021-05-23 17:41:19 +02:00
Franzi	aaf937a89f	nodes/kunsi-t470: add automount for scansnap	2021-05-23 15:24:21 +02:00
Franzi	46f7aa93ef	bundles: fix dependencies	2021-05-23 14:54:24 +02:00
Franzi	24066d89a2	nodes/aurto: add vm	2021-05-23 14:36:22 +02:00
Franzi	17f3537d74	nodes/kunsi-*: use new groups	2021-05-23 14:36:19 +02:00
Franzi	5a182fadef	make some bundles arch-compatible, more default packages for arch	2021-05-23 14:36:16 +02:00
Sophie Schiller	c200e4002e	add dimension	2021-05-21 23:37:11 +02:00
Franzi	e7dce1c36b	nodes/rx300: monitoring	2021-05-20 18:24:35 +02:00
Franzi	522cecb9fb	nodes/rx300: add smartd	2021-05-20 18:24:23 +02:00
Franzi	78498b5a46	nodes/rx300: a bit less ram	2021-05-20 17:51:50 +02:00
Franzi	c74a249a00	nodes/kunsi-seibert-x1: don't try to manage networking	2021-05-19 18:35:45 +02:00
Sophie Schiller	4d33539a63	bump element-web to 1.7.28	2021-05-17 17:27:40 +02:00
Sophie Schiller	d307bc0556	bw/htz-cloud.miniserver enable backups	2021-05-16 19:54:18 +02:00
Franzi	479b730be4	bundles/zfs: introduce zfs-snapshot-backups, enable backups for nodes which need zfs-snapshot-backups	2021-05-15 20:32:23 +02:00
Franzi	32826ed131	bundles/mosquitto: add telegraf stats for tasmota devices	2021-05-15 08:52:37 +02:00
Franzi	d51cded72d	nodes/home.router: use debian buster nginx repo for now	2021-05-15 06:58:42 +02:00
Sophie Schiller	8bde57be4b	bw/htz-cloud.miniserver install matrix and other components	2021-05-14 20:07:55 +02:00
Sophie Schiller	ea73de81e5	remove dummy from miniserver	2021-05-14 15:00:37 +02:00
Franzi	f92eb37bfc	nodes/htz-cloud.influxdb: increase login timeout	2021-05-14 12:27:58 +02:00
Franzi	1fce93ad30	update postfixadmin setup password	2021-05-13 09:15:55 +02:00
Franzi	dccdd4d97f	nodes/home.octoprint-vielschichtigkeit: remove node	2021-05-13 09:11:33 +02:00
Franzi	7775f33679	bundles/apt: move patchday to 21:00 UTC	2021-05-13 09:10:33 +02:00
Franzi	835726f3a7	nodes: update postfixadmin to 3.3.9	2021-05-13 09:01:45 +02:00
Franzi	762a4d34c1	nodes/htz.ex42-1048908: update gitea and element-web	2021-05-11 17:44:35 +02:00
Franzi	c41c43cd5c	nodes/home.nas: more snapshot for storage/nas	2021-05-08 11:07:12 +02:00
Franzi	f33f638d88	nodes/htz-cloud.miniserver: set dummy=True	2021-05-04 17:34:22 +02:00
Franzi	2bcc0bd22a	nodes/ovh.icinga2: install unbound ... seems quad9 isn't as stable as we'd want them to be :(	2021-05-03 19:36:47 +02:00
Franzi	a971bf5d3b	nodes: add work laptop	2021-05-02 20:53:10 +02:00
Franzi	7d9ce7aed9	add pretty name for status page to some nodes	2021-05-02 10:54:27 +02:00
Franzi	c548a88ee7	bundles/grafana: introduce, add to htz-cloud.influxdb	2021-05-02 10:44:50 +02:00
Franzi	1a1ea721d9	bundles/telegraf: also work for arch linux systems	2021-05-02 07:32:54 +02:00
Franzi	8c276b53a6	nodes/home.nas: enable x11 forwarding for admins	2021-05-01 15:18:21 +02:00
Franzi	75fea7aa34	bundles/gitea: add a ssh key, enable git hooks for htz.ex42-1048908	2021-05-01 14:27:31 +02:00
Franzi	8f4023c1c5	nodes/htz.ex42-1048908: update matrix-media-repo to 1.2.8	2021-05-01 12:25:00 +02:00
Franzi	8a95dfa90a	nodes/home.downloadhelper: restrict lldp to vlan 42	2021-05-01 10:05:24 +02:00
Franzi	8fd83241ca	bundles: ensure apt/repos/*/items is a set	2021-04-30 12:49:59 +02:00
Franzi	bac0ac0b00	nodes/htz.ex42-1048908: update element-web to 1.7.26	2021-04-27 19:05:26 +02:00
Franzi	c2c59892fe	nodes/htz.ex42-1048908: add die-brontosaurier-waren-es.org to nginx	2021-04-25 12:06:38 +02:00
Franzi	671b460855	nodes/htz.ex42-1048908: add unicornsden.franzi.business	2021-04-25 10:04:56 +02:00
Franzi	a8e07c62c3	nodes/home.router: add ssl to vnstat nginx vhost	2021-04-25 09:10:05 +02:00
Franzi	019d658442	bundles/icinga2: add check_usv_snmp	2021-04-25 08:02:04 +02:00
Franzi	1360a36a95	nodes/home.router: poll switch and usv more often	2021-04-24 14:58:09 +02:00
Franzi	e5c49ab172	nodes/home.router: add snmp plugin to telegraf	2021-04-24 14:32:27 +02:00
Franzi	5b32ae836d	nodes/htz.ex42-1048908: update travelynx to 1.19.13	2021-04-24 13:45:37 +02:00
Franzi	2f222371c3	nodes/htz-cloud.influxdb: add influxdb2 to node	2021-04-24 10:35:41 +02:00
Franzi	4e175e998e	nodes/htz-cloud.influxdb: add node	2021-04-24 09:14:28 +02:00
Franzi	90a84fc9da	htz-cloud: add wireguard node, add internal network to nodes	2021-04-24 08:53:20 +02:00
Franzi	0a3210c703	nodes/htz.ex42-1048908: update travelynx to 1.19.12	2021-04-24 08:09:31 +02:00
Sophie Schiller	883caac939	add new wireguard keys	2021-04-23 21:23:43 +02:00
Franzi	8687cd6bfa	nodes/home.nas: set zfs snapshot settings for storage/scan	2021-04-21 18:26:10 +02:00
Franzi	0c0a8e6263	bundles/scansnap: chown files to nobody-nogroup	2021-04-21 18:18:27 +02:00
Franzi	b5fb5dd6c2	bundles/scansnap: introduce, add to home.nas	2021-04-21 17:58:16 +02:00
Franzi	24362768fb	bundles/dhcpd: rework metadata	2021-04-20 18:18:17 +02:00
Franzi	3bd851aae5	nodes/htz.ex42-1048908: add new entropia IPs to rspamd/ignore_spam_check_for_ips	2021-04-19 20:59:55 +02:00
Franzi	0028e0fcd0	nodes/home.downloadhelper: do not send hostname via dhcp	2021-04-19 20:42:15 +02:00
Franzi	7738736120	nodes/htz.ex42-1048908: update matrix-media-repo to 1.2.7	2021-04-19 18:12:26 +02:00
Franzi	8536e87475	bundles/systemd-networkd: some more dhcp settings	2021-04-18 11:05:42 +02:00
Franzi	0c59af2fdc	nodes/home.octoprint-vielschichtigkeit: set exclude_from_monitoring	2021-04-17 09:40:02 +02:00
Franzi	4973c63e62	bundles/icinga2: remove icinga_options/downtime_also_for, add host dependencies via icinga_options/also_affected_by	2021-04-17 09:21:51 +02:00
Franzi	4d5e75df68	bundles/icinga2: introduce icinga_options/downtime_also_for	2021-04-17 03:43:08 +02:00
Franzi	ad5e628957	nodes/htz.ex42-1048908: update gitea to 1.14.1	2021-04-16 16:33:46 +02:00
Franzi	c3e3fc75bf	nodes/htz.ex42-1048908: update element-web to 1.7.25	2021-04-12 17:33:43 +02:00
Franzi	b04a207262	nodes/htz.ex42-1048908: add some blocked email domains	2021-04-11 18:20:16 +02:00
Franzi	9e1e3acfea	nodes/htz.ex42-1048908: update gitea to 1.14.0	2021-04-11 18:12:23 +02:00
Franzi	b68726c413	nodes/ovh.icinga2: add custom page title to status.franzi.business	2021-04-11 11:27:49 +02:00
Franzi	36bd6f5755	bundles/simple-icinga-dashboard: config is a toml file now	2021-04-10 16:08:52 +02:00
Franzi	b33ddaadb5	bundles/simple-icinga-dashboard: add replacements	2021-04-10 15:43:37 +02:00
Franzi	9587bae4fe	nodes/gce.*: fix typo in metadata	2021-04-10 15:11:48 +02:00
Franzi	fc7655469f	icinga2: add pretty_name for status page	2021-04-10 15:05:29 +02:00
Franzi	8c292ff8e0	nodes/htz.ex42-1048908: update gitea to 1.13.7	2021-04-10 14:40:48 +02:00
Franzi	ac58f2a10c	nodes/home.router: fix dhcp config for dmz	2021-04-10 12:09:24 +02:00
Franzi	3a7d612c7a	nodes/home.router: update to bullseye	2021-04-10 09:20:34 +02:00
Sophie Schiller	913f2cde8f	switch to new kodi with old name	2021-04-09 21:13:24 +02:00
Sophie Schiller	995ae2f55f	add new kodi minion	2021-04-09 20:54:53 +02:00
Franzi	28eb3f023c	nodes/home.openwebrx: reuse pi for home.octoprint-leapfrog	2021-04-05 19:50:36 +02:00
Franzi	7bb5179b4f	nodes/htz.ex42-1048908: update travelynx to 1.19.10	2021-04-05 15:28:55 +02:00
Franzi	fd63d3d857	nodes/voc.pretalx: only set content-security-policy for requests to django itself, not for media and static endpoints	2021-04-05 10:16:06 +02:00
Franzi	68b8cf28d3	nodes/home.{nas,router}: fix firewall for netdata and nginx	2021-04-04 11:30:50 +02:00
Franzi	c418102000	bundles/netdata: fix iptables default	2021-04-04 10:30:45 +02:00
Franzi	9cbf866de7	bundles/mosquitto: introduce, add to node home.nas	2021-04-03 09:36:47 +02:00
Franzi	6712d98040	nodes/htz-cloud.miniserver: remove dummy metadata, add monitoring	2021-04-02 13:40:10 +02:00
Franzi	763a071acc	nodes/htz.ex42-1048908: update mautrix-whatsapp to 0.1.6	2021-04-01 17:03:42 +02:00
Franzi	3481d4e13c	have ovh systems relay mail via htz.ex42-1048908, too	2021-04-01 17:00:23 +02:00
Franzi	6e423c24fb	bundles/wireguard: rework metadata.py	2021-04-01 16:27:31 +02:00
Franzi	d787f8b0a3	bundles/systemd-networkd: rework routes	2021-04-01 16:25:24 +02:00
Franzi	b52a196c73	bundles/nginx: add configuration option for client_max_body_size	2021-03-30 21:26:25 +02:00
Franzi	b7583bc8cc	nodes/voc.pretalx: install some plugins	2021-03-30 19:52:31 +02:00
Franzi	8503a4a946	nodes/htz.ex42-1048908: update travelynx to 1.19.9	2021-03-30 18:22:35 +02:00
Franzi	e924cc1322	nodes/htz.ex42-1048908: update element-web to 1.7.24	2021-03-30 18:22:19 +02:00
Franzi	72831ee386	nodes/home.nas: one cronjob for permissions instead of three	2021-03-28 16:44:01 +02:00
Franzi	85d9b9fdac	nodes/htz-cloud.sewfile: move seafile data to zfs	2021-03-27 14:03:33 +01:00
Franzi	0ca57e8e24	nodes/htz-cloud.sewfile: also backup mysql database	2021-03-27 13:49:23 +01:00
Franzi	83db4ba886	nodes/home.nas: add firewalling for yate sip server	2021-03-26 18:55:20 +01:00
Franzi	8d7e5d3f66	nodes/htz.ex42-1048908: update matrix-media-repo to 1.2.6	2021-03-26 09:06:35 +01:00
Franzi	4bd61fedde	nodes/htz.ex42-1048908: update gitea to 1.13.6	2021-03-25 17:44:55 +01:00
Franzi	50438d940e	nodes/htz.ex42-1048908: update gitea to 1.13.5	2021-03-21 17:55:43 +01:00
Franzi	28dd9694af	add bundle:oidentd	2021-03-21 17:40:58 +01:00
Franzi	6a6198c9b9	bundles/wireguard: move iptables rules to metadata reactor	2021-03-21 15:26:29 +01:00
Franzi	559f743ce2	nodes/voc.pretalx: no localized strings in website_check_string	2021-03-21 12:59:08 +01:00
Franzi	691c3e7bc2	iptables: add some missing rules	2021-03-21 12:27:03 +01:00
Franzi	087bc4c669	nodes: iptables for all	2021-03-21 11:44:52 +01:00
Franzi	626075ee94	nodes/htz.ex42-1048908: add some iptables rules for unmanaged services	2021-03-21 11:12:42 +01:00