247 commits

Author	SHA1	Message	Date
Franzi	a58c5877bf	bundles/gce-workaround: uninstall gce-disk-expand, too	2020-11-09 16:48:28 +01:00
Franzi	4921e0b74f	bundles/systemd-networkd: use correct syntax for resolv.conf	2020-11-09 16:47:56 +01:00
Franzi	6f87a1d240	bundles/systemd-networkd: also deploy resolv.conf	2020-11-09 16:38:59 +01:00
Franzi	394424951f	bundles/systemd-networkd: fix naming of GatewayOnlink	2020-11-09 16:38:35 +01:00
Franzi	78047da04a	bundles/postgresql: only install packages after we have a zfs dataset	2020-11-09 16:37:00 +01:00
Franzi	5bd642236c	bundles/postfix: only call newaliases if we already have postfix installed	2020-11-09 16:36:26 +01:00
Franzi	607da9d39b	bundles/powerdns: user resolve_identifier() for node-dns-entries	2020-11-09 15:37:48 +01:00
Franzi	91fd33cfa0	bundles/systemd-networkd: better dhcp support	2020-11-09 14:58:09 +01:00
Franzi	5e7c7671e0	bundles/systemd-networkd: proper config	2020-11-09 14:48:19 +01:00
Franzi	fbb4e2f7a5	systemd-networkd: first draft	2020-11-09 14:08:32 +01:00
Franzi	c3c510c609	bundles/mautrix-telegram: disable parallel file transfers for now	2020-11-09 13:17:38 +01:00
Franzi	af97226512	nodes/htz.ex42-1048908: update mautrix-telegram to 0.9.2-rc2	2020-11-09 12:16:06 +01:00
Franzi	06e30cf23c	bundles/mautrix-telegram: also upgrade pip when upgrading bridge	2020-11-09 12:15:37 +01:00
Franzi	90e3bb7fb2	bundles/mautrix-telegram: no need to provide our own alembic.ini	2020-11-09 12:12:04 +01:00
Franzi	c0986eb956	bundles/mautrix-telegram: fix database migration	2020-11-09 12:09:17 +01:00
Franzi	614b920890	bundles/mautrix-telegram: pin version until database migration is fixed	2020-11-09 11:27:34 +01:00
Franzi	3ff5d8a7dd	bundles/postfix: add alias database	2020-11-09 10:52:24 +01:00
Franzi	64cffad6a7	bundles/rspamd: silence clamav cronjob	2020-11-08 15:03:26 +01:00
Franzi	0eca42d188	bundles/dovecot: fix home directory for virtual mailboxes	2020-11-08 13:00:44 +01:00
Franzi	b4b988e5f2	bundles/postfix: disable TLS1.0 and 1.1, disable weak ciphers	2020-11-08 12:24:37 +01:00
Franzi	f85349f0c5	bundles/postfixadmin: fix apt packages	2020-11-08 11:53:51 +01:00
Franzi	15428b03be	bundles/rspamd: introduce, add to htz.ex42-1048908	2020-11-08 10:43:51 +01:00
Franzi	a236444fe5	bundles/dovecot: make sure to reload dovecot after letsencrypt	2020-11-08 10:42:08 +01:00
Franzi	b00b2aa245	bundles/dovecot: autoexpunge Junk folder	2020-11-07 22:46:15 +01:00
Franzi	7080b0d89e	bundles/rspamd: create dummy bundle	2020-11-07 22:32:08 +01:00
Franzi	18b573a9c6	bundles/dovecot: introduce	2020-11-07 22:31:47 +01:00
Franzi	f42dda5961	bundles/postfixadmin: introduce	2020-11-07 22:31:29 +01:00
Franzi	5550d2cc56	bundles/postfix: introduce	2020-11-07 22:31:18 +01:00
Franzi	88afba9ce9	bundles/mx-puppet-discord: add RestartSec= to systemd unit file	2020-11-07 09:40:22 +01:00
Franzi	7ab121e7e5	bundles/mautrix-telegram: install bridge from git repository	2020-11-07 09:39:57 +01:00
Franzi	d7f578742b	bundles/mx-puppet-discord: put bridge repo into subdirectory ... this avoids recreating config and registration on every update, which in turn avoids restarting synapse	2020-11-07 09:08:10 +01:00
Franzi	c481fc1327	nodes/htz.ex42-1048908: add php	2020-11-07 09:06:11 +01:00
Franzi	f8bc4b2ad9	bundles/php: introduce	2020-10-31 13:00:38 +01:00
Franzi	e2d8923dee	bundles/nginx: use metadata reactor to determine index files	2020-10-31 10:41:48 +01:00
Franzi	f1f7086aab	bundles/postgresql: make sure we have postgres_role before adding postgres_db	2020-10-31 10:30:48 +01:00
Franzi	67c5c23194	bundles/nginx: support non-domain vhost names	2020-10-31 10:30:07 +01:00
Franzi	113221a9b2	bundles/nginx: make sure we have dhparam.pem	2020-10-31 10:18:40 +01:00
Franzi	9cc5c07466	bundles/letsencrypt: do not try to do authorizations without a webserver	2020-10-31 10:11:58 +01:00
Franzi	76fe68a3d1	bundles/zfs: fix dependencies, auto-load zfs module if not loaded	2020-10-31 10:11:15 +01:00
Franzi	8eeaabf615	bundles/nginx: use http 308 for https redirect ... basically "go away. nothing's here. use https forever."	2020-10-30 15:24:24 +01:00
Franzi	50372572f4	bundles/zfs: improvements	2020-10-25 16:41:18 +01:00
Franzi	3077d74318	bundles/users: alias s='sudo -i'	2020-10-25 13:21:04 +01:00
Franzi	351d779f20	bundles/users: add metadata entry for bash aliases	2020-10-25 13:19:46 +01:00
Franzi	2a992773f3	bundles/users: fish shell is gone everywhere	2020-10-25 13:17:26 +01:00
Franzi	831545d8b1	introduce node.metadata['hostname'] to other bundles, update nodefiles to reflect changes	2020-10-25 11:14:46 +01:00
Franzi	b70f9c9c9d	bundles/powerdns: make sure every dns server is able to resolve every other dns server	2020-10-25 10:58:11 +01:00
Franzi	a33d8e4201	bundles/powerdns: decrease RETRY time	2020-10-25 10:57:26 +01:00
Franzi	29f488c082	bundles/powerdns: put ip addresses of secondary nameservers into allow-axfer-ips	2020-10-25 10:56:55 +01:00
Franzi	152bb56fdd	bundles/powerdns: remove superslave setting ... debian currently does ship an older version, in which this setting is enabled by default.	2020-10-25 10:55:17 +01:00
Franzi	7a3e3ad68f	bundles/powerdns: we don't need the node names of primary nameservers	2020-10-25 10:53:55 +01:00