675 commits

Author	SHA1	Message	Date
Franziska Kunsmann	4973c63e62	bundles/icinga2: remove icinga_options/downtime_also_for, add host dependencies via icinga_options/also_affected_by	2021-04-17 09:21:51 +02:00
Franziska Kunsmann	4d5e75df68	bundles/icinga2: introduce icinga_options/downtime_also_for	2021-04-17 03:43:08 +02:00
Franziska Kunsmann	6a88040826	bundles/nginx: disable Federated Learning of Cohorts for all hosts	2021-04-16 18:36:50 +02:00
Franziska Kunsmann	bc8050cd3c	bundles/postfix: fix connection limits for smtpd	2021-04-11 21:56:37 +02:00
Franziska Kunsmann	b04a207262	nodes/htz.ex42-1048908: add some blocked email domains	2021-04-11 18:20:16 +02:00
Franziska Kunsmann	f0eb6f0d1b	bundles/vnstat: add favicon to web dashboard ... As requested by sophie	2021-04-11 14:35:49 +02:00
Franziska Kunsmann	e809ed4859	bundles/vnstat: changes in systemd unit files must trigger daemon-reload	2021-04-11 11:18:42 +02:00
Franziska Kunsmann	dca56140aa	bundles/simple-icinga-dashboard: use systemd-timers, use virtualenv	2021-04-11 11:17:09 +02:00
Franziska Kunsmann	26c2be07cf	bundles/vnstat: adjust vnstati calls for debian bullseye	2021-04-11 09:01:58 +02:00
Franziska Kunsmann	69279ba34f	bundles/postfix: be a bit more relaxed when checking for smtp errors	2021-04-10 16:50:16 +02:00
Franziska Kunsmann	018bdb2f83	bundles/matrix*: better monitoring	2021-04-10 16:40:44 +02:00
Franziska Kunsmann	9618e388c3	bundles/simple-icinga-dashboard: only resolve faults when rendering the template, not earlier	2021-04-10 16:33:32 +02:00
Franziska Kunsmann	36bd6f5755	bundles/simple-icinga-dashboard: config is a toml file now	2021-04-10 16:08:52 +02:00
Franziska Kunsmann	b33ddaadb5	bundles/simple-icinga-dashboard: add replacements	2021-04-10 15:43:37 +02:00
Franziska Kunsmann	fc7655469f	icinga2: add pretty_name for status page	2021-04-10 15:05:29 +02:00
Franziska Kunsmann	efd2875b17	bundles/c3voc-addons: add sms to NGINX VHOST checks	2021-04-10 15:04:34 +02:00
Franziska Kunsmann	8b2771cd63	Revert "bundles/systemd-networkd: fix vlan support for bridges and bonds" ... This reverts commit 02146a81d6.	2021-04-10 13:34:49 +02:00
Franziska Kunsmann	ef84b3f889	Revert "bundles/systemd-networkd: no need for a specific order in /etc/systemd/network/" ... This reverts commit b679f568eb. Documentation says order is irrelevant, but it is not. If we do not use ordering, vlan interfaces are defined before the parent interfaces, which leads to systemd-networkd not applying config for the parent interfaces.	2021-04-10 12:22:08 +02:00
Franziska Kunsmann	0d1a220b7b	bundles/systemd-networkd: generate unique mac address for vlan interfaces	2021-04-10 12:18:23 +02:00
Franziska Kunsmann	197ebe2e38	bundles/systemd-networkd: add BindCarrier to bridges	2021-04-10 11:41:23 +02:00
Franziska Kunsmann	00d46cb1b1	bundles/pppd: fix typo in restart-pppoe-if-no-public-ip	2021-04-10 09:49:40 +02:00
Franziska Kunsmann	af6b16cc35	bundles/pppd: fix KeyError in restart-pppoe-if-no-public-ip	2021-04-10 09:38:47 +02:00
Franziska Kunsmann	02146a81d6	bundles/systemd-networkd: fix vlan support for bridges and bonds	2021-04-10 09:18:45 +02:00
Franziska Kunsmann	24f04e59aa	nodes/voc.pretalx: work around content-security-policy issues	2021-04-05 08:18:21 +02:00
Franziska Kunsmann	aad27851bb	bundles/miniflux: proxy all images	2021-04-04 22:16:14 +02:00
Franziska Kunsmann	e36a352a42	bundles: fix usage of set() vs {}	2021-04-04 10:34:55 +02:00
Franziska Kunsmann	c418102000	bundles/netdata: fix iptables default	2021-04-04 10:30:45 +02:00
Franziska Kunsmann	513eb4bed6	bundles/mosquitto: add monitoring	2021-04-03 09:43:24 +02:00
Franziska Kunsmann	2027308249	bundles/zfs: fix typo in check_zpool_space	2021-04-03 09:41:17 +02:00
Franziska Kunsmann	9cbf866de7	bundles/mosquitto: introduce, add to node home.nas	2021-04-03 09:36:47 +02:00
Franziska Kunsmann	f8bbe00d47	overall better handling and usage of exceptions	2021-04-02 18:57:13 +02:00
Franziska Kunsmann	5d5930265a	bundles/postfix: remove print statement	2021-04-02 18:29:33 +02:00
Franziska Kunsmann	61cf881a03	bundles/pretalx: add bash_alias for manage.py	2021-04-02 14:59:56 +02:00
Franziska Kunsmann	4a3be10add	bundles/apt: fix if in upgrade-and-reboot	2021-04-02 13:40:55 +02:00
Franziska Kunsmann	a24fb12c21	bundles/apt: introduce restart_triggers (restart services if another service has been upgraded)	2021-04-02 08:12:51 +02:00
Franziska Kunsmann	7ca24d27d3	bundles/apt: add a bit of code to remove old, unused kernel images	2021-04-02 08:11:17 +02:00
Franziska Kunsmann	8a0c8f32ae	bundles: less Restart=on-failure, more Restart=always	2021-04-02 08:05:33 +02:00
Franziska Kunsmann	5b276368b8	bundles/wireguard: iptables/bundle_rules should be a list	2021-04-01 17:13:24 +02:00
Franziska Kunsmann	17f9aa9c3e	bundles/icinga2: disable command module	2021-04-01 17:12:35 +02:00
Franziska Kunsmann	c5eb2f4f70	bundles/icinga2: do not send recovery emails	2021-04-01 17:11:42 +02:00
Franziska Kunsmann	957cac5ebc	bundles/postfix: disable SPAM BLOCKLIST check if relayhost is set	2021-04-01 17:00:53 +02:00
Franziska Kunsmann	61c6188454	bundles/postfix: mynetworks now supports identifiers	2021-04-01 16:59:49 +02:00
Franziska Kunsmann	b7222e2cd1	bundles/systemd-networkd: fix typo in routes	2021-04-01 16:31:57 +02:00
Franziska Kunsmann	6e423c24fb	bundles/wireguard: rework metadata.py	2021-04-01 16:27:31 +02:00
Franziska Kunsmann	b679f568eb	bundles/systemd-networkd: no need for a specific order in /etc/systemd/network/	2021-04-01 16:26:06 +02:00
Franziska Kunsmann	d787f8b0a3	bundles/systemd-networkd: rework routes	2021-04-01 16:25:24 +02:00
Franziska Kunsmann	b52a196c73	bundles/nginx: add configuration option for client_max_body_size	2021-03-30 21:26:25 +02:00
Franziska Kunsmann	da9fe36646	bundles/pretalx: support installing plugins	2021-03-30 19:52:03 +02:00
Franziska Kunsmann	7345543fa2	bundles/mx-puppet-discord: remove logging to files, disable presence logging	2021-03-28 11:29:16 +02:00
Franziska Kunsmann	c388d5ea1e	bundles/postgresql: fix restart dependencies	2021-03-28 09:39:08 +02:00
Franziska Kunsmann	35e4bbf04b	bundles/postfix: remove postscreen usage ... postscreen isn't able to share its cache file between instances, which leads to the server simply accepting mails for the port on which postscreen starts up later. Since we can't predict which port this will be, we simply remove postscreen alltogether. Yes, i know i could just remove postscreen for port 2525.	2021-03-28 09:00:37 +02:00
Franziska Kunsmann	ce39850bda	bundles/postfix: fix .provides() for iptables reactor	2021-03-28 08:56:22 +02:00
Franziska Kunsmann	9fe4e2933d	bundles/postfix: add firewalling for port 2525	2021-03-28 08:37:51 +02:00
Franziska Kunsmann	a4b2dc29a9	bundles/miniflux: don't clean up old entries	2021-03-28 08:04:41 +02:00
Franziska Kunsmann	39c1d34bbb	bundles/sshmon: fix disk space usage limits	2021-03-27 12:07:49 +01:00
Franziska Kunsmann	8f0f635484	bundles/basic: change load graph for cpu graph	2021-03-27 12:06:12 +01:00
Franziska Kunsmann	568a31586f	bundles/apt: fix permissions for /etc/kernel/postinst.d/unattended-upgrades	2021-03-27 08:31:29 +01:00
Franziska Kunsmann	f514e200f0	bundles/mautrix-whatsapp: restart bridge daily again ... It seems neither WhatsApp nor WhatsApp Web are designed for 24/7 connections, thus leading to all kinds of weird side effects like "Bridge thinks it's connected, but no messages get through at all" or "WhatsApp is running, but the Bridge can't connect to it"	2021-03-27 08:21:41 +01:00
Franziska Kunsmann	f98720b57b	bundles/dhcpd: sort dchp leases by ip in bash alias	2021-03-26 09:27:52 +01:00
Franziska Kunsmann	65490b1d20	bundles/apt: log stdout and stderr separately in upgrade-and-reboot	2021-03-26 09:02:48 +01:00
Franziska Kunsmann	27753d50c4	bundles/postfix: use threading in check_spam_blocklist	2021-03-25 17:42:59 +01:00
Franziska Kunsmann	fdcec012f3	bundles/postfix: add SPAM BLOCKLIST check for every non-private IP attached to the server	2021-03-22 20:24:14 +01:00
Franziska Kunsmann	b99176be49	bundles/kodi: add iptables rules	2021-03-21 19:10:49 +01:00
Franziska Kunsmann	28dd9694af	add bundle:oidentd	2021-03-21 17:40:58 +01:00
Franziska Kunsmann	6a6198c9b9	bundles/wireguard: move iptables rules to metadata reactor	2021-03-21 15:26:29 +01:00
Franziska Kunsmann	3bc5e55400	bundles/iptables: don't apply iptables rules if a rules file is missing	2021-03-21 11:44:27 +01:00
Franziska Kunsmann	4b00c8b55a	bundles/unbound: do not bind to 0.0.0.0 if qemu is installed	2021-03-21 11:43:53 +01:00
Franziska Kunsmann	5a0aa82ec9	bundles/powerdns: fix missing imports	2021-03-21 11:43:17 +01:00
Franziska Kunsmann	62f7080db9	bundles/nfs-server: add iptables config	2021-03-21 11:24:21 +01:00
Franziska Kunsmann	850d860d59	bundles/powerdns: add iptables config	2021-03-21 11:12:18 +01:00
Franziska Kunsmann	31ddea7649	bundles/dovecot: add iptables config	2021-03-21 11:12:03 +01:00
Franziska Kunsmann	5775001301	bundles/postfix: add iptables config	2021-03-21 11:11:49 +01:00
Franziska Kunsmann	c9f008ad82	bundles/openssh: move iptables rules to metadata reactor	2021-03-21 10:37:28 +01:00
Franziska Kunsmann	b943d2d465	rework iptables configuration	2021-03-21 10:30:04 +01:00
Franziska Kunsmann	3fcd81960e	bundles/postfix: allow configuring mynetworks	2021-03-15 11:41:35 +01:00
Franziska Kunsmann	52cab71fec	bundles/wireguard: also allow outgoing traffic ... How did this ever work without this rule?	2021-03-15 09:00:35 +01:00
Franziska Kunsmann	adb808a683	bundles/users: more colourful bash for everyone	2021-03-14 17:14:08 +01:00
Franziska Kunsmann	f6ecf2a465	bundles/nfs-client: support arch linux	2021-03-11 15:24:06 +01:00
Sophie Schiller	c87611c2e2	bw/kodi add backports repo	2021-03-08 21:06:25 +01:00
Franziska Kunsmann	8b07fce738	bundles/unbound: decrease statistics-interval until debian has 1.19 and we're actually able to use them	2021-03-06 10:03:22 +01:00
Franziska Kunsmann	f214f70cd4	bundles/basic: add textual cpu stats to htop	2021-03-06 09:58:22 +01:00
Franziska Kunsmann	7e57c0f03e	bundles/basic: current htop version in debian does not support DiskIO nor NetworkIO	2021-03-06 09:56:05 +01:00
Franziska Kunsmann	ebcf8e4445	bundles/matrix-media-repo: also restart matrix-media-repo after updating	2021-03-05 07:21:23 +01:00
Franziska Kunsmann	2adf3c6a72	bundles/sshmon: increase acceptable amount of cpu steal	2021-03-01 15:52:55 +01:00
Franziska Kunsmann	e435ae582a	bundles/icinga2: add monitoring for IdoPgsqlConnection	2021-03-01 15:36:29 +01:00
Franziska Kunsmann	3adfb9779a	bundles/molly-guard: introduce, add to systems	2021-02-26 17:58:20 +01:00
Franziska Kunsmann	51ca74549e	bundles/basic: add htoprc	2021-02-24 19:24:56 +01:00
Franziska Kunsmann	836f065382	bundles/pleroma: add website content check	2021-02-20 22:11:19 +01:00
Franziska Kunsmann	b470fddc12	bundles/nginx: add gdpr-compatible log format	2021-02-20 21:11:12 +01:00
Franziska Kunsmann	8cb172a1c1	bundles/pleroma: remove NoNewPrivileges=true, interferes with mail delivery	2021-02-20 20:57:00 +01:00
Franziska Kunsmann	017c2c3421	bundles/pleroma: allow database configuration	2021-02-20 20:18:34 +01:00
Franziska Kunsmann	f8c157ce50	bundles/pleroma: get it working	2021-02-20 19:37:33 +01:00
Franziska Kunsmann	1f3e7afb2c	bundles/pleroma: initial NON-WORKING version	2021-02-20 19:14:20 +01:00
Franziska Kunsmann	5433859a86	bundles/letsencrypt: also check for chain.pem, nginx needs this	2021-02-20 17:38:11 +01:00
Franziska Kunsmann	e2d7d05783	bundles/systemd-networkd: manage apt packages via bundle:apt	2021-02-20 17:35:45 +01:00
Franziska Kunsmann	ad5c8cc0ab	bundles/postfix: only get certificate if actually needed	2021-02-20 17:30:38 +01:00
Franziska Kunsmann	97a1b3ae85	bundles/zfs: add comment to action:modprobe-zfs	2021-02-20 16:51:34 +01:00
Franziska Kunsmann	1c0a3ee8e7	bundles/postgresql: fix postgresql config path	2021-02-20 16:50:38 +01:00
Franziska Kunsmann	194de9ef2d	bundles/letsencrypt: fix some errors in letsencrypt-ensure-some-certificate	2021-02-20 15:48:17 +01:00
Franziska Kunsmann	3fa81ddc85	bundles/gitea: use canned stop action	2021-02-20 15:47:35 +01:00