606 commits

Author	SHA1	Message	Date
Franziska Kunsmann	850d860d59	bundles/powerdns: add iptables config	2021-03-21 11:12:18 +01:00
Franziska Kunsmann	31ddea7649	bundles/dovecot: add iptables config	2021-03-21 11:12:03 +01:00
Franziska Kunsmann	5775001301	bundles/postfix: add iptables config	2021-03-21 11:11:49 +01:00
Franziska Kunsmann	c9f008ad82	bundles/openssh: move iptables rules to metadata reactor	2021-03-21 10:37:28 +01:00
Franziska Kunsmann	b943d2d465	rework iptables configuration	2021-03-21 10:30:04 +01:00
Franziska Kunsmann	3fcd81960e	bundles/postfix: allow configuring mynetworks	2021-03-15 11:41:35 +01:00
Franziska Kunsmann	52cab71fec	bundles/wireguard: also allow outgoing traffic ... How did this ever work without this rule?	2021-03-15 09:00:35 +01:00
Franziska Kunsmann	adb808a683	bundles/users: more colourful bash for everyone	2021-03-14 17:14:08 +01:00
Franziska Kunsmann	f6ecf2a465	bundles/nfs-client: support arch linux	2021-03-11 15:24:06 +01:00
Sophie Schiller	c87611c2e2	bw/kodi add backports repo	2021-03-08 21:06:25 +01:00
Franziska Kunsmann	8b07fce738	bundles/unbound: decrease statistics-interval until debian has 1.19 and we're actually able to use them	2021-03-06 10:03:22 +01:00
Franziska Kunsmann	f214f70cd4	bundles/basic: add textual cpu stats to htop	2021-03-06 09:58:22 +01:00
Franziska Kunsmann	7e57c0f03e	bundles/basic: current htop version in debian does not support DiskIO nor NetworkIO	2021-03-06 09:56:05 +01:00
Franziska Kunsmann	ebcf8e4445	bundles/matrix-media-repo: also restart matrix-media-repo after updating	2021-03-05 07:21:23 +01:00
Franziska Kunsmann	2adf3c6a72	bundles/sshmon: increase acceptable amount of cpu steal	2021-03-01 15:52:55 +01:00
Franziska Kunsmann	e435ae582a	bundles/icinga2: add monitoring for IdoPgsqlConnection	2021-03-01 15:36:29 +01:00
Franziska Kunsmann	3adfb9779a	bundles/molly-guard: introduce, add to systems	2021-02-26 17:58:20 +01:00
Franziska Kunsmann	51ca74549e	bundles/basic: add htoprc	2021-02-24 19:24:56 +01:00
Franziska Kunsmann	836f065382	bundles/pleroma: add website content check	2021-02-20 22:11:19 +01:00
Franziska Kunsmann	b470fddc12	bundles/nginx: add gdpr-compatible log format	2021-02-20 21:11:12 +01:00
Franziska Kunsmann	8cb172a1c1	bundles/pleroma: remove NoNewPrivileges=true, interferes with mail delivery	2021-02-20 20:57:00 +01:00
Franziska Kunsmann	017c2c3421	bundles/pleroma: allow database configuration	2021-02-20 20:18:34 +01:00
Franziska Kunsmann	f8c157ce50	bundles/pleroma: get it working	2021-02-20 19:37:33 +01:00
Franziska Kunsmann	1f3e7afb2c	bundles/pleroma: initial NON-WORKING version	2021-02-20 19:14:20 +01:00
Franziska Kunsmann	5433859a86	bundles/letsencrypt: also check for chain.pem, nginx needs this	2021-02-20 17:38:11 +01:00
Franziska Kunsmann	e2d7d05783	bundles/systemd-networkd: manage apt packages via bundle:apt	2021-02-20 17:35:45 +01:00
Franziska Kunsmann	ad5c8cc0ab	bundles/postfix: only get certificate if actually needed	2021-02-20 17:30:38 +01:00
Franziska Kunsmann	97a1b3ae85	bundles/zfs: add comment to action:modprobe-zfs	2021-02-20 16:51:34 +01:00
Franziska Kunsmann	1c0a3ee8e7	bundles/postgresql: fix postgresql config path	2021-02-20 16:50:38 +01:00
Franziska Kunsmann	194de9ef2d	bundles/letsencrypt: fix some errors in letsencrypt-ensure-some-certificate	2021-02-20 15:48:17 +01:00
Franziska Kunsmann	3fa81ddc85	bundles/gitea: use canned stop action	2021-02-20 15:47:35 +01:00
Franziska Kunsmann	74d81eb7ba	bundles/nginx: support disabling ssl for each vhost individually	2021-02-20 14:25:27 +01:00
Franziska Kunsmann	228786f6aa	bundles/letsencrypt: generate a dummy certificate, if no certificate already exists	2021-02-20 13:52:40 +01:00
Franziska Kunsmann	014b6029c5	nodes/htz.ex42-1048908: update element-web config	2021-02-20 11:10:08 +01:00
Franziska Kunsmann	1ac6559b9f	bundles/postgresql: add pg_query_mon	2021-02-20 10:56:20 +01:00
Franziska Kunsmann	c0b8d35a47	bundles/icinga2: fix double emoji for WARNING state	2021-02-19 14:03:00 +01:00
Franziska Kunsmann	2bccbf9ded	bundles/icinga2: add some emoji to sent SMS, don't send output via SMS if everything is fine	2021-02-19 14:01:45 +01:00
Franziska Kunsmann	8ac9b2f204	bundles/matrix-synapse: add scripts/synapse-purge-unused-rooms	2021-02-19 11:56:21 +01:00
Franziska Kunsmann	b06532241b	bundles: use metastack syntax for metadata.get()	2021-02-18 18:12:25 +01:00
Franziska Kunsmann	6e9fb7044a	bundles/systemd-networkd: add "enable-resolved" flag	2021-02-18 17:56:43 +01:00
Franziska Kunsmann	fbf0371371	bundles/systemd: support different timezones	2021-02-18 17:56:06 +01:00
Franziska Kunsmann	1abc0153f5	bundles/openssh: do not add deleted users to ssh config	2021-02-18 15:12:30 +01:00
Franziska Kunsmann	75224f0d5c	bundles/lldp: support arch linux	2021-02-18 15:10:50 +01:00
Franziska Kunsmann	f4a644795e	bundles/basic: support setting a different default locale	2021-02-18 14:51:33 +01:00
Franziska Kunsmann	32d129015e	bundles/pacman: introduce, support pkg_pacman in some other bundles	2021-02-18 14:24:57 +01:00
Franziska Kunsmann	9bf7f856af	bundles/users: allow setting another shell	2021-02-18 14:24:09 +01:00
Franziska Kunsmann	8a2bef9b77	bundles/apt: move vim to default packages	2021-02-18 14:23:43 +01:00
Franziska Kunsmann	03840fd152	bundles/systemd: more options in journald.conf	2021-02-18 10:29:38 +01:00
Franziska Kunsmann	fbb8840dff	add .editorconfig, format files correctly	2021-02-17 10:56:18 +01:00
Franziska Kunsmann	b42e39ed0a	get rid of check_rbl	2021-02-17 10:51:49 +01:00
Franziska Kunsmann	9d5d80457f	bundles/element-web: rename from riot-web, use tagged releases	2021-02-16 12:49:02 +01:00
Franziska Kunsmann	abb99ed58a	bundles/raspberrypi: remove isc-dhcp-client	2021-02-16 08:41:37 +01:00
Franziska Kunsmann	d2260b4699	bundles/wireguard: use PersistentKeepalive to work around intermittent connection issues	2021-02-15 15:16:44 +01:00
Franziska Kunsmann	5c1eba0d58	bundles: use a common metadata key for firewall restrictions, use repo.libs.tools.resolve_identifier()	2021-02-15 14:16:35 +01:00
Franziska Kunsmann	56fce7d460	bundles/wireguard: add exclude_from_monitoring option for wireguard peers	2021-02-14 21:35:37 +01:00
Franziska Kunsmann	65e6b8d053	bundles/backup-client: use a bash function to do backups instead of repeating the same code over and over	2021-02-13 09:18:00 +01:00
Franziska Kunsmann	adeb8eff88	bundles/postgresql: only do database dumps if we're actually doing backups	2021-02-13 09:04:59 +01:00
Franziska Kunsmann	724537558e	bundles/postgresql: do a database dump before backing up the database	2021-02-13 08:56:35 +01:00
Franziska Kunsmann	3d1468b214	bundles/backup-client: backup-pre-hooks should have numeric sorting	2021-02-13 08:37:49 +01:00
Franziska Kunsmann	7aeb46382d	bundles/zfs: move icinga2_api to metadata defaults	2021-02-13 08:37:00 +01:00
Franziska Kunsmann	2fbbaa1586	bundles/zfs: remove support for snapshot_only and snapshot_never (unused)	2021-02-13 08:36:10 +01:00
Franziska Kunsmann	b20f369ea8	bundles/backup-client: metadata backup-pre-hooks now use /bin/sh by default	2021-02-13 08:26:46 +01:00
Franziska Kunsmann	077eaa265c	bundles/radicale: use Fault.as_htpasswd_entry() instead of pre-encrypting passwords	2021-02-13 08:17:31 +01:00
Franziska Kunsmann	978285bf32	bundles/matrix-media-repo: add backup/paths metadata	2021-02-13 08:09:48 +01:00
Franziska Kunsmann	f52df58517	bundles: code style improvements	2021-02-12 20:45:41 +01:00
Franziska Kunsmann	c0353d2911	bundles/apt: add option to configure patch-hour, not only patchday	2021-02-12 18:53:25 +01:00
Franziska Kunsmann	767db8efdd	bundles/apt: add /etc/kernel/postinst.d/unattended-upgrades to ensure a reboot on kernel updates	2021-02-12 18:12:24 +01:00
Franziska Kunsmann	d4b110087f	bundles/matrix-media-repo: introduce, add to htz.ex42-1048908	2021-02-12 16:01:35 +01:00
Franziska Kunsmann	638e37c05f	bundles: add Requires=postgresql.service to some services which require postgresql	2021-02-12 13:28:52 +01:00
Franziska Kunsmann	9f8cbde7d7	bundles/transmission: always try to restart transmission	2021-02-11 09:06:20 +01:00
Franziska Kunsmann	a86e04683a	bundles/backup-client: fix missing space in generate-backup	2021-02-09 07:17:25 +01:00
Franziska Kunsmann	c25233b991	nodes: replace pkg_apt:redis with bundle:redis	2021-02-07 21:09:39 +01:00
Franziska Kunsmann	0d1e987a6f	bundles/backup-client: add backup-pre-hooks (fixes #24)	2021-02-07 20:47:22 +01:00
Franziska Kunsmann	a8690b13b8	bundles/rspamd: add "unless" to action:rspamd_assure_dkim_key_permissions	2021-02-06 19:10:16 +01:00
Franziska Kunsmann	eb431d8da8	bundles/postfix: also set alias_maps ... fixes "warning: dict_nis_init: NIS domain name not set - NIS lookups disabled"	2021-02-06 10:24:19 +01:00
Franziska Kunsmann	457052d42b	bundles/gitea: downloading gitea updates needs stopping it first	2021-02-06 09:43:54 +01:00
Franziska Kunsmann	b6d23aaed4	bundles/sshmon: use own check_cpu_stats script ... Old script only checked iowait, which is not enough.	2021-02-06 09:38:50 +01:00
Franziska Kunsmann	c185a5bacd	bundles/backup-client: do backups at 23:xx, so it won't interfere with upgrade-and-reboot ... There were still problems with systems starting their backups late in the hour, but backup servers did upgrade-and-reboot early it the hour. This leads to incomplete backups, if the machine is rebooting, too.	2021-02-06 09:36:44 +01:00
Franziska Kunsmann	7e15f8adc3	bundles/octoprint: multi-line-output for check_octoprint_update	2021-02-02 20:20:11 +01:00
Franziska Kunsmann	8523754935	bundles/users: add vim-keybindings for pane navigation to tmux.conf	2021-01-31 07:59:19 +01:00
Franziska Kunsmann	bdc5b4de33	bundles/transmission: don't overwrite configs managed by transmission	2021-01-30 17:39:34 +01:00
Franziska Kunsmann	71f033b7c2	bundles/icinga2: fix dependencies for svc_systemd:icinga2 ... icinga2 runs fine without any checks, so we now only depend on the other configuration files managed by bw. This will also fix unwanted dependencies, because 'file:' means *all* files, not only those provided by this bundle. In the past, it wasn't possible to skip any file, because that would result in icinga not properly restarting.	2021-01-30 17:31:05 +01:00
Franziska Kunsmann	569275329c	bundles/sshmon: remove INTERNET check ... We're using the internet to check these hosts, so if those hosts wouldn't have an internet connection, the whole host would be down, atleast as far as icinga can tell.	2021-01-30 11:47:55 +01:00
Franziska Kunsmann	161aec9314	bundles/powerdnsadmin: use tagged release	2021-01-29 18:13:16 +01:00
Franziska Kunsmann	f56852c27d	bundles/postfixadmin: use tagged release	2021-01-29 18:07:57 +01:00
Franziska Kunsmann	fa462fbd0f	bundles/sshmon: use tag_name instead of human-readable name in check_github_for_new_release	2021-01-29 18:04:35 +01:00
Franziska Kunsmann	b3e6063596	bundles/unbound: silence refresh-root-hints cronjob	2021-01-29 17:58:24 +01:00
Franziska Kunsmann	c31066fea8	bundles/mautrix-whatsapp: restart weekly to work around 24/7 connection issues	2021-01-29 17:27:33 +01:00
Franziska Kunsmann	fd421bf6f8	add bundle:redis, add redis support to pretalx	2021-01-29 15:58:54 +01:00
Franziska Kunsmann	ce76430b4d	bundles/mautrix-whatsapp: decrease log level to info	2021-01-28 15:05:04 +01:00
Franziska Kunsmann	4efcc73f55	bundles/mautrix-whatsapp: ensure we're not using ssl for postgres	2021-01-25 22:27:11 +01:00
Franziska Kunsmann	f3d8a1412c	bundles/dovecot: better ssl	2021-01-24 18:44:25 +01:00
Franziska Kunsmann	2aaf7cf8f8	bundles/nginx: better ssl	2021-01-24 18:44:13 +01:00
Franziska Kunsmann	614bdf9dec	bundles/basic: support creating additional locales	2021-01-24 07:49:49 +01:00
Franziska Kunsmann	d344664fa1	bundles/basic: fix format for /etc/locale.gen	2021-01-23 12:25:32 +01:00
Franziska Kunsmann	6b720c6c75	bundles/postgresql: only deploy packages if we have locales installed	2021-01-23 12:06:38 +01:00
Franziska Kunsmann	4a9463db5f	bundles/basic: ensure a proper locale is installed	2021-01-23 12:05:59 +01:00
Franziska Kunsmann	a160e7cf46	bundles/postgresql: improvements ... - support other postgresql versions - manage configs using bw	2021-01-23 11:35:03 +01:00
Franziska Kunsmann	c41ee0f806	bundles/apt: fix logging for upgrade-and-reboot	2021-01-23 11:32:35 +01:00
Franziska Kunsmann	51101fc615	bundles/sudo: fix mode for /etc/sudoers	2021-01-23 09:28:50 +01:00