1157 commits

Author	SHA1	Message	Date
Franzi	a38b66a7c5	bundles/nfs-client: minor fixes	2022-04-27 05:39:34 +02:00
Franzi	74b3a513f6	bundles/pacman: make NoExtract user-configurable	2022-04-22 15:47:47 +02:00
Franzi	8145fb22e8	add bundle:voc-tracker-worker	2022-04-22 15:43:34 +02:00
Franzi	fc2a69fc2c	rx300: update netbox to 3.2.1	2022-04-15 06:37:09 +02:00
Sophie Schiller	5979d8a1f9	hedgedoc: use global yarn in systemd unit	2022-04-11 00:34:56 +02:00
Franzi	ca69969dad	bundles/backup-server: disable ZFS OLD SNAPSHOTS check	2022-04-06 18:13:23 +02:00
Franzi	4390256abc	bundles/zfs: add metadata option to disable ZFS OLD SNAPSHOTS check	2022-04-06 18:13:01 +02:00
Franzi	5640556ad9	bundles/zfs: run scrub for each pool separately	2022-04-03 09:48:28 +02:00
Franzi	4823653214	bundles/systemd-networkd: remove usage of systemd-resolved ... Something in the combination of arch+zfs+netctl+resolved+ipv6 leads to hanging dns, which in turn leads to hanging everything.	2022-04-03 09:01:10 +02:00
Franzi	891823376f	bundles: add missing dependency to yarn	2022-04-03 08:38:20 +02:00
Franzi	a340071ad8	bundles/oidentd: provide our own systemd unit file	2022-04-03 08:32:07 +02:00
Franzi	ddd29bef3b	bundles: install yarn globally instead of in each individual bundle	2022-04-03 08:16:35 +02:00
Franzi	4ecf7ccb46	bundles/matrix-media-repo: download prebuilt executable instead of building ourselves	2022-04-03 08:05:46 +02:00
Franzi	d8f8f1377f	bundles/arch-with-gui: install sipcalc and inkscape	2022-03-30 18:28:46 +02:00
Franzi	ac48462043	bundles/icinga2: icingaweb2 roles.ini needs another option	2022-03-30 17:29:27 +02:00
Franzi	7b9686977d	bundles/backup-client: do backups between 00:00 and 02:59	2022-03-30 17:23:10 +02:00
Franzi	7c49ac59f5	more packages, please	2022-03-24 18:14:50 +01:00
Franzi	2f8306a14a	bundles/pacman: fix archzfs-kernels repo name	2022-03-23 21:04:12 +01:00
Franzi	950c88aab2	bundles/pacman: install archzfs repo and archzfs-kernels repo if node has bundle:zfs	2022-03-23 19:19:21 +01:00
Franzi	489c2386de	voc.infobeamer-cms: prepare for divoc	2022-03-20 12:35:26 +01:00
Franzi	3e7e355dd6	rx300: update mautrix-whatsapp to 0.3.0	2022-03-19 07:02:54 +01:00
Franzi	c983c50d21	bundles/icinga2: fix timeperiods	2022-03-19 07:02:48 +01:00
Franzi	206cdfe128	bundles/systemd: fix dependencies	2022-03-13 15:19:01 +01:00
Franzi	7604fef734	bundles/icinga2: use ip addresses for monitoring instead of hostnames	2022-03-13 15:15:47 +01:00
Franzi	5179edb458	bundles/wireguard: fix forwarding firewall rules	2022-03-13 15:15:08 +01:00
Franzi	c0ebd25ffc	bundles/systemd: systemd-timesyncd gets started automatically	2022-03-13 15:14:40 +01:00
Franzi	212ba72b30	bundles/nftables: workaround does not work for debian buster	2022-03-13 14:13:59 +01:00
Franzi	aa3ce32a7c	bundles/systemd: systemd-timesyncd package requires debian bullseye	2022-03-13 14:12:05 +01:00
Franzi	c71d827691	bundles/icinga2: add some missing config	2022-03-13 14:07:28 +01:00
Franzi	690c0b7050	bundles/nftables: restart on failure	2022-03-13 14:07:08 +01:00
Franzi	a9d4cc73c1	bundles/systemd: ensure we have systemd-timesyncd installed and running	2022-03-13 14:06:40 +01:00
Franzi	28b235514a	bundles/zfs: fix compatibility to older zfs versions	2022-03-13 12:58:07 +01:00
Franzi	8397739634	bundles/backup-server: fix bug in retaining	2022-03-13 09:24:45 +01:00
Franzi	008940d75f	bundles/users: add journalctl bash alias	2022-03-13 09:21:10 +01:00
Franzi	cd1a33ccbb	bundles/zfs: refactor zfs-auto-snapshot	2022-03-13 09:18:14 +01:00
Franzi	dab6065b89	bundles/vmhost: svc_systemd:virtlogd gets triggered by socket, too	2022-03-13 08:42:51 +01:00
Franzi	65efdc2e2c	bundles/pacman: disable pam_faillock	2022-03-13 08:42:48 +01:00
Franzi	a4fb9a15b5	bundles/backup-server: increase timeout for monitoring checks	2022-03-13 08:42:44 +01:00
Franzi	f56703df2e	bundles/dovecot: filter X-Spam-Status, not X-Spam-Flag ... The latter is YES even if the overall score is very low because of IP allowlisting.	2022-03-12 10:24:06 +01:00
Franzi	759a711dc5	bundles/rspamd: remove from_name from dmarc reporting config	2022-03-12 10:08:04 +01:00
Franzi	6a9da7efa5	bundles/arch-with-gui: add workaround for broken bw test	2022-03-12 09:03:45 +01:00
Franzi	72cf616114	bundles/zfs: use zfs-import-scan instead of zfs-import-cache ... Last night, rx300 rebooted. After a reboot, the disks were detected in another order (but still, all were detected!), so the cachefile did no longer match, leading to breaking the import. Running `zpool import` manually worked, because that will ignore the cachefile. So, why do we depend on the cache file on boot up? The added reliability of zfs-import-scan beats the speed of zfs-import-cache in any way.	2022-03-12 09:03:42 +01:00
Franzi	42a66751e1	bundles/vmhost: don't try to start libvirtd on every apply	2022-03-12 09:03:38 +01:00
Franzi	4a03a9f89c	bundles/icinga2: fix directory permissions for /etc/icingaweb2	2022-03-12 09:03:35 +01:00
Franzi	d7b47d2560	bundles/jenkins: jenkins.war has moved	2022-03-12 09:03:32 +01:00
Franzi	403b67ee48	bundles/vmhost: install pkg_pacman:edk2-ovmf	2022-03-12 09:03:28 +01:00
Franzi	757f1cb3cd	bundles/vmhost: prepare for arch linux	2022-03-11 13:58:38 +01:00
Franzi	93351340d0	move thermald package back to fkusei-locutus	2022-03-10 21:09:26 +01:00
Franzi	15ae3b7a0b	move some configuration from nodes to bundle:arch-with-gui	2022-03-10 21:00:45 +01:00
Franzi	e181be3fc6	bundles/wireguard: better dependency management	2022-03-10 21:00:42 +01:00
Franzi	64448af027	add node fkusei-locutus	2022-03-09 13:07:55 +01:00
Franzi	0082d3e014	bundles/zfs: ensure some targets are started on arch linux	2022-03-09 13:05:57 +01:00
Franzi	c7e5002f17	bundles/wireguard: support arch linux and other netmasks than /31	2022-03-09 13:05:01 +01:00
Franzi	05a2e501ce	bundles/bird: support arch linux	2022-03-09 13:04:34 +01:00
Franzi	c023c144c3	bundles/arch-with-gui: install firefox	2022-03-09 13:03:56 +01:00
Franzi	f969b05468	bundles/arch-with-gui: i3pystatus requires python-virtualenv	2022-03-09 13:02:35 +01:00
Franzi	b351703953	bundles/c3voc-addons: implement addidional_update_commands	2022-03-06 12:57:48 +01:00
Franzi	a693e90aa3	bundles/nodejs: auto-upgrade npm	2022-03-06 12:50:04 +01:00
Franzi	50ea6a92a5	bundles/apt: introduce additional_update_commands for updating other stuff	2022-03-06 12:49:46 +01:00
Franzi	56bafd73be	bundles/nginx: refine fastcgi config	2022-03-05 18:55:51 +01:00
Franzi	ca861a78fb	bundles/grafana: do not auto-refresh dashboards	2022-03-05 13:49:17 +01:00
Franzi	8ed4aa3751	bundles/pacman: don't extract systemd-homed pam module	2022-03-05 13:45:28 +01:00
Franzi	14e7fff081	bundles/grafana: improve config	2022-03-05 13:45:16 +01:00
Franzi	65ba43525f	bundles/icinga2: introduce new notification period 'daytime'	2022-03-05 08:29:10 +01:00
Franzi	98cd2df8ff	bundles/nginx: add certificate name to icinga check	2022-03-02 07:19:15 +01:00
Franzi	be3dd6662e	kunsi-p14s: more packages	2022-03-02 07:12:38 +01:00
Franzi	0ba3df7385	bundles/zfs: unmount backup-snapshots recursively	2022-03-01 06:32:23 +01:00
Franzi	931d566736	bundles/backup-server: fix stupid in check_backup_for_node	2022-02-28 21:09:04 +01:00
Franzi	e909144544	bw/bundles/postgresql: do not auto-detect postgresql version from debian version	2022-02-27 12:51:53 +01:00
Franzi	e1f7c691c3	bundles/nfs-server: fix trailing whitespace	2022-02-20 19:45:40 +01:00
Franzi	83fb1a5e11	bundles/nfs-client: decrease timeout, set some default mount options	2022-02-20 19:44:05 +01:00
Franzi	dcb563b31e	bundles/systemd-networkd: remove BindCarrier	2022-02-20 12:36:21 +01:00
Franzi	88891b44be	bundles/nfs-server: ensure nfs runs on managed ports, fix firewall rules	2022-02-20 08:24:38 +01:00
Franzi	6267b4c33d	bundles/nfs-server: fix package name	2022-02-19 20:09:53 +01:00
Franzi	0a4da160fd	bundles/matrix-media-repo: add RestartSec	2022-02-19 20:02:08 +01:00
Franzi	945e349d61	bundles/jenkins-ci: add systemd unit file	2022-02-19 18:53:49 +01:00
Franzi	bd45def053	bundles/{lldpd,nfs-server}: fix dependencies	2022-02-19 17:49:53 +01:00
Franzi	18674a1a4a	bundles/icinga2: always print status line in check_usv_snmp	2022-02-19 17:44:46 +01:00
Franzi	07d5a8cdae	bundles/systemd-networkd: add BindCarrier to bonds	2022-02-19 11:29:29 +01:00
Franzi	7e58e9c667	bundles/icinga2: simplify template	2022-02-19 09:23:00 +01:00
Franzi	8434eacd94	bundles/{lldp,nfs-server,smartd}: move package dependencies to metadata	2022-02-18 22:37:07 +01:00
Sophie Schiller	a01c28da21	various bundles: fix dependencies	2022-02-18 22:18:44 +01:00
Franzi	14fed8bc6e	bundles/zfs: move scrub to systemd-timer	2022-02-18 21:10:50 +01:00
Franzi	19dee89039	rx300: pin version of mx-puppet-discord for now	2022-02-18 19:02:57 +01:00
Franzi	94eff087a0	bundles/users: remove PROMPT_COMMAND from bashrc	2022-02-18 17:03:54 +01:00
Franzi	468a0b0023	bundles/icinga2: remove unused code in hosts_template	2022-02-18 16:25:59 +01:00
Franzi	d35770c122	bundles/icinga2: rework config generation - use one file per host instead of one per bundle	2022-02-18 12:25:34 +01:00
Franzi	1f6520ac02	bundles/sshmon: ignore prereleases and drafts	2022-02-17 18:08:02 +01:00
Franzi	22759ca52a	bundles/postfix: enable smtps	2022-02-15 18:21:12 +01:00
Franzi	83d58791bb	bundles/postgresql: set recordsize=8K for zfs	2022-02-14 22:05:09 +01:00
Franzi	e51ad5993a	bundles/users: ensure we have kitty terminfo	2022-02-14 20:45:57 +01:00
Franzi	6944da6769	fix syntaxerrors	2022-02-14 07:56:51 +01:00
Franzi	33d2d5beff	bundles/pacman: fix unattended-upgrades	2022-02-14 07:54:44 +01:00
Franzi	1ee0b38133	bundles/telegraf: properly support arch linux	2022-02-14 07:11:14 +01:00
Franzi	e45237d70e	bundles/icinga2: do not check scam blocklists	2022-02-13 09:51:03 +01:00
Franzi	3c4700eb6d	bundles/openhab: clean up old backups before doing new ones	2022-02-13 09:48:37 +01:00
Franzi	60c31d2d11	bundles/pacman: add opt-in unattended-upgrades	2022-02-13 09:43:52 +01:00
Franzi	14b402cdf3	bundles/backup-server: fix TypeError in check_backup_for_node	2022-02-13 09:42:59 +01:00
Franzi	e4c317f677	add bundle:systemd-boot	2022-02-13 09:24:11 +01:00
Franzi	3c763820ed	bundles/pacman: ensure we have man	2022-02-13 09:23:30 +01:00