Commit graph

1302 commits

Author SHA1 Message Date
d2260b4699
bundles/wireguard: use PersistentKeepalive to work around intermittent connection issues
All checks were successful
bundlewrap/pipeline/head This commit looks good
2021-02-15 15:16:44 +01:00
5c1eba0d58
bundles: use a common metadata key for firewall restrictions, use repo.libs.tools.resolve_identifier()
All checks were successful
bundlewrap/pipeline/head This commit looks good
2021-02-15 14:16:35 +01:00
9a2f9038c4
libs/tools: resolve_identifier supports ip networks, not ip addresses 2021-02-15 13:53:53 +01:00
6527c985a7
nodes/home.router: add wg0 to allowed interfaces for netdata and nginx
All checks were successful
bundlewrap/pipeline/head This commit looks good
2021-02-14 21:42:50 +01:00
9d0a602b49
nodes/ovh.wireguard: add config for kunsi-oneplus3 2021-02-14 21:41:01 +01:00
56fce7d460
bundles/wireguard: add exclude_from_monitoring option for wireguard peers 2021-02-14 21:35:37 +01:00
69605acfc9
dns: queere.eskalation.jetzt IN NS ns{1..4}.athena7.eu
All checks were successful
bundlewrap/pipeline/head This commit looks good
2021-02-14 17:32:43 +01:00
2b7704630c
dns: add eskalation.jetzt 2021-02-14 17:22:25 +01:00
12d47ea0bc
libs/tools: fix output of resolve_identifier() for bare ip addresses
All checks were successful
bundlewrap/pipeline/head This commit looks good
2021-02-14 17:04:52 +01:00
358a1869f4
script/update-ssh-client-config: s/post-receive/post-checkout/
All checks were successful
bundlewrap/pipeline/head This commit looks good
2021-02-13 17:09:27 +01:00
cfd0863671
create script/update-ssh-client-config
All checks were successful
bundlewrap/pipeline/head This commit looks good
2021-02-13 16:39:55 +01:00
65e6b8d053
bundles/backup-client: use a bash function to do backups instead of repeating the same code over and over 2021-02-13 09:18:00 +01:00
adeb8eff88
bundles/postgresql: only do database dumps if we're actually doing backups 2021-02-13 09:04:59 +01:00
724537558e
bundles/postgresql: do a database dump before backing up the database
All checks were successful
bundlewrap/pipeline/head This commit looks good
2021-02-13 08:56:35 +01:00
3d1468b214
bundles/backup-client: backup-pre-hooks should have numeric sorting 2021-02-13 08:37:49 +01:00
7aeb46382d
bundles/zfs: move icinga2_api to metadata defaults 2021-02-13 08:37:00 +01:00
2fbbaa1586
bundles/zfs: remove support for snapshot_only and snapshot_never (unused) 2021-02-13 08:36:10 +01:00
b20f369ea8
bundles/backup-client: metadata backup-pre-hooks now use /bin/sh by default 2021-02-13 08:26:46 +01:00
077eaa265c
bundles/radicale: use Fault.as_htpasswd_entry() instead of pre-encrypting passwords 2021-02-13 08:17:31 +01:00
978285bf32
bundles/matrix-media-repo: add backup/paths metadata 2021-02-13 08:09:48 +01:00
f52df58517
bundles: code style improvements
All checks were successful
bundlewrap/pipeline/head This commit looks good
2021-02-12 20:45:41 +01:00
2af911c29f
nodes/voc.pretalx: move patchday to monday
All checks were successful
bundlewrap/pipeline/head This commit looks good
2021-02-12 18:53:34 +01:00
c0353d2911
bundles/apt: add option to configure patch-hour, not only patchday 2021-02-12 18:53:25 +01:00
17dbba2c94
data/backup: remove unneeded keys for voc.pretalx
All checks were successful
bundlewrap/pipeline/head This commit looks good
2021-02-12 18:45:43 +01:00
62e1d29617
nodes/voc.pretalx: backups are handled by voc now
All checks were successful
bundlewrap/pipeline/head This commit looks good
2021-02-12 18:41:50 +01:00
767db8efdd
bundles/apt: add /etc/kernel/postinst.d/unattended-upgrades to ensure a reboot on kernel updates
All checks were successful
bundlewrap/pipeline/head This commit looks good
2021-02-12 18:12:24 +01:00
d4b110087f
bundles/matrix-media-repo: introduce, add to htz.ex42-1048908
All checks were successful
bundlewrap/pipeline/head This commit looks good
2021-02-12 16:01:35 +01:00
638e37c05f
bundles: add Requires=postgresql.service to some services which require postgresql
All checks were successful
bundlewrap/pipeline/head This commit looks good
2021-02-12 13:28:52 +01:00
493d7957fd
nodes/htz.ex42-1048908: install en_DK.UTF-8 locale
All checks were successful
bundlewrap/pipeline/head This commit looks good
apparently past me did weird stuff, so this locale is required for
some postgresql databases.
2021-02-12 04:06:51 +01:00
9f8cbde7d7
bundles/transmission: always try to restart transmission
All checks were successful
bundlewrap/pipeline/head This commit looks good
2021-02-11 09:06:20 +01:00
a86e04683a
bundles/backup-client: fix missing space in generate-backup
All checks were successful
bundlewrap/pipeline/head This commit looks good
2021-02-09 07:17:25 +01:00
c25233b991
nodes: replace pkg_apt:redis with bundle:redis
All checks were successful
bundlewrap/pipeline/head This commit looks good
2021-02-07 21:09:39 +01:00
a09f565c78
nodes/htz.ex42-1048908: add backup-pre-hook to save weechat configs
All checks were successful
bundlewrap/pipeline/head This commit looks good
2021-02-07 20:47:57 +01:00
0d1e987a6f
bundles/backup-client: add backup-pre-hooks (fixes #24) 2021-02-07 20:47:22 +01:00
a8690b13b8
bundles/rspamd: add "unless" to action:rspamd_assure_dkim_key_permissions
All checks were successful
bundlewrap/pipeline/head This commit looks good
2021-02-06 19:10:16 +01:00
ed04aebc4b
nodes/htz.ex42-1048908: update travelynx to 1.19.6
All checks were successful
bundlewrap/pipeline/head This commit looks good
2021-02-06 18:57:37 +01:00
a3d52d026e
nodes/htz.ex42-1048908: allocate more space to journal
All checks were successful
bundlewrap/pipeline/head This commit looks good
2021-02-06 12:49:58 +01:00
988cf905d4
nodes/htz.ex42-1048908: update travelynx to 1.19.4
All checks were successful
bundlewrap/pipeline/head This commit looks good
2021-02-06 10:43:36 +01:00
eb431d8da8
bundles/postfix: also set alias_maps
All checks were successful
bundlewrap/pipeline/head This commit looks good
fixes "warning: dict_nis_init: NIS domain name not set - NIS lookups disabled"
2021-02-06 10:24:19 +01:00
db317ec355
nodes/htz.ex42-1048908: update gitea to 1.13.2
All checks were successful
bundlewrap/pipeline/head This commit looks good
2021-02-06 09:44:23 +01:00
457052d42b
bundles/gitea: downloading gitea updates needs stopping it first 2021-02-06 09:43:54 +01:00
d7398135d1
nodes/home.wled-wohnzimmer: add node 2021-02-06 09:39:36 +01:00
b6d23aaed4
bundles/sshmon: use own check_cpu_stats script
Old script only checked iowait, which is not enough.
2021-02-06 09:38:50 +01:00
c185a5bacd
bundles/backup-client: do backups at 23:xx, so it won't interfere with upgrade-and-reboot
All checks were successful
bundlewrap/pipeline/head This commit looks good
There were still problems with systems starting their backups late in the hour,
but backup servers did upgrade-and-reboot early it the hour. This leads to
incomplete backups, if the machine is rebooting, too.
2021-02-06 09:36:44 +01:00
7e15f8adc3
bundles/octoprint: multi-line-output for check_octoprint_update
All checks were successful
bundlewrap/pipeline/head This commit looks good
2021-02-02 20:20:11 +01:00
d0c0425b65
nodes/htz-cloud.pirmasens: fix website check for salonkatrin.de 2021-01-31 11:38:45 +01:00
8523754935
bundles/users: add vim-keybindings for pane navigation to tmux.conf 2021-01-31 07:59:19 +01:00
bdc5b4de33
bundles/transmission: don't overwrite configs managed by transmission 2021-01-30 17:39:34 +01:00
71f033b7c2
bundles/icinga2: fix dependencies for svc_systemd:icinga2
All checks were successful
bundlewrap/pipeline/head This commit looks good
icinga2 runs fine without any checks, so we now only depend on the other
configuration files managed by bw. This will also fix unwanted
dependencies, because 'file:' means *all* files, not only those provided
by this bundle. In the past, it wasn't possible to skip any file,
because that would result in icinga not properly restarting.
2021-01-30 17:31:05 +01:00
569275329c
bundles/sshmon: remove INTERNET check
All checks were successful
bundlewrap/pipeline/head This commit looks good
We're using the internet to check these hosts, so if those hosts
wouldn't have an internet connection, the whole host would be
down, atleast as far as icinga can tell.
2021-01-30 11:47:55 +01:00