1334 commits

Author	SHA1	Message	Date
Sophie Schiller	a656eb7eb3	bundle/nodejs remove yarn install	2021-05-14 20:05:04 +02:00
Sophie Schiller	88cfbc0699	bundle/matrix-synapse update dependencies, improve postgres database ... creation	2021-05-14 20:03:56 +02:00
Sophie Schiller	bd19749971	bundle/matrix-media-repo update dependencies and needs	2021-05-14 20:02:39 +02:00
Sophie Schiller	3c5e778016	bundle:/element-web install yarn from npm instead of apt	2021-05-14 20:01:19 +02:00
Franziska Kunsmann	459c7731cb	bundles/backup-client: use --compress-level=1 instead of -z	2021-05-14 10:47:58 +02:00
Franziska Kunsmann	7775f33679	bundles/apt: move patchday to 21:00 UTC	2021-05-13 09:10:33 +02:00
Franziska Kunsmann	fab9a41024	bundles/c3voc-addons: use new way of doing updates, too	2021-05-11 06:21:42 +02:00
Franziska Kunsmann	276bd6ae8d	bundles/apt: rework upgrade-and-reboot mechanics to be more robust	2021-05-08 08:31:04 +02:00
Franziska Kunsmann	c976be62d7	bundles/grafana: only refresh managed dashboards every minute ... After all, we're only getting data every minute, so there's no point in refreshing more often.	2021-05-02 19:57:32 +02:00
Franziska Kunsmann	c1b1dc1a29	bundles/grafana: add support for custom managed dashboards	2021-05-02 17:49:40 +02:00
Franziska Kunsmann	fe668fd5d4	bundles/grafana: add "traffic per interface" graphs, fix naming of values	2021-05-02 15:01:22 +02:00
Franziska Kunsmann	0f387102b3	bundles/postgresql: do not collect metrics for telegraf database	2021-05-02 14:01:26 +02:00
Franziska Kunsmann	ada87897a4	bundles/grafana: add wireguard graphs	2021-05-02 13:55:41 +02:00
Franziska Kunsmann	40160fb25a	bundles: remove telegraf metrics from systemd-networkd and icinga2	2021-05-02 13:18:35 +02:00
Franziska Kunsmann	3b1d1f7e94	add postgresql metrics to telegraf/grafana	2021-05-02 13:09:01 +02:00
Franziska Kunsmann	1bc47fa231	bundles/grafana: fix y axis for disk iops graph	2021-05-02 12:07:49 +02:00
Franziska Kunsmann	ae0bb8ed58	bundles/postfix: rework exporter for better usability	2021-05-02 12:06:53 +02:00
Franziska Kunsmann	9b9465502a	bundles/grafana: add postfix graph	2021-05-02 11:55:34 +02:00
Franziska Kunsmann	0b972bc464	bundles/grafana: add nginx	2021-05-02 11:34:55 +02:00
Franziska Kunsmann	b299edbef4	bundles/grafana: add "free" to memory row	2021-05-02 11:05:01 +02:00
Franziska Kunsmann	68fed2439d	bundles/apt: fix "set -x" call	2021-05-02 10:45:21 +02:00
Franziska Kunsmann	c548a88ee7	bundles/grafana: introduce, add to htz-cloud.influxdb	2021-05-02 10:44:50 +02:00
Franziska Kunsmann	1a1ea721d9	bundles/telegraf: also work for arch linux systems	2021-05-02 07:32:54 +02:00
Franziska Kunsmann	8c276b53a6	nodes/home.nas: enable x11 forwarding for admins	2021-05-01 15:18:21 +02:00
Franziska Kunsmann	75fea7aa34	bundles/gitea: add a ssh key, enable git hooks for htz.ex42-1048908	2021-05-01 14:27:31 +02:00
Franziska Kunsmann	8a95dfa90a	nodes/home.downloadhelper: restrict lldp to vlan 42	2021-05-01 10:05:24 +02:00
Franziska Kunsmann	3de85e6717	bundles/webfs: introduce	2021-04-30 19:40:45 +02:00
Franziska Kunsmann	30efde6eb3	bundles/apt: remove unneeded if	2021-04-30 13:30:10 +02:00
Franziska Kunsmann	b235519ecf	bundles/apt: "set -xeuo pipefail" for upgrade-and-reboot	2021-04-30 12:51:09 +02:00
Franziska Kunsmann	8fd83241ca	bundles: ensure apt/repos/*/items is a set	2021-04-30 12:49:59 +02:00
Franziska Kunsmann	44d42de81c	bundles/nginx: only redirect to ssl for sites which actually have ssl enabled	2021-04-25 09:20:16 +02:00
Franziska Kunsmann	d98a1adfd9	bundles/ssl: support using a preexisting ssl certificate	2021-04-25 09:09:23 +02:00
Franziska Kunsmann	019d658442	bundles/icinga2: add check_usv_snmp	2021-04-25 08:02:04 +02:00
Franziska Kunsmann	ffd899534a	bundles/telegraf: use node.metadate.get() everywhere	2021-04-24 14:51:01 +02:00
Franziska Kunsmann	e9ce0ce869	bundles/systemd-networkd: add missing key to .provides()	2021-04-24 12:38:51 +02:00
Franziska Kunsmann	966ee7dae9	bundles/unbound: set correct statistics interval	2021-04-24 12:00:09 +02:00
Franziska Kunsmann	a9692317d2	bundles/telegraf: temporarily hardcode a repo path	2021-04-24 11:47:28 +02:00
Franziska Kunsmann	6772b3b5d0	bundles: various fixes for telegraf plugins	2021-04-24 11:45:58 +02:00
Franziska Kunsmann	a980e22ecb	bundles/telegraf: support requesting additional capabilities and/or groups	2021-04-24 11:44:55 +02:00
Franziska Kunsmann	dc0695e38f	bundles/influxdb: introduce	2021-04-24 10:17:56 +02:00
Franziska Kunsmann	c97d9ab948	bundles/postfix: use own postqueue exporter	2021-04-24 10:17:05 +02:00
Franziska Kunsmann	76f46ca7d5	bundles/telegraf: add sudoers file	2021-04-24 10:12:56 +02:00
Franziska Kunsmann	2432075f9a	bundles/telegraf: ensure telegraf is running, restart on config changes	2021-04-24 10:05:52 +02:00
Franziska Kunsmann	f58e66f701	bundles/c3voc-addons: make sure we're not accidentially overwriting c3voc telegraf config	2021-04-24 09:44:31 +02:00
Franziska Kunsmann	2667a2c00d	libs: replace libs.toml.dict_to_toml with libs.faults.resolve_faults	2021-04-24 09:39:08 +02:00
Franziska Kunsmann	a37d31973a	bundles: add some telegraf plugins	2021-04-24 09:14:25 +02:00
Franziska Kunsmann	5e0541aef8	bundles/telegraf: introduce	2021-04-24 09:14:21 +02:00
Franziska Kunsmann	ebb6d287b2	bundles/icinga2: add node name to automatic downtime comment	2021-04-23 14:30:34 +02:00
Franziska Kunsmann	8b14575657	bundles/postgresql: add metadata keys for some performance related config options	2021-04-23 14:02:04 +02:00
Franziska Kunsmann	616feb54b2	bundles/sshmon: fix an issue where check_mounts couldn't properly detect systemd mount units	2021-04-23 14:01:24 +02:00
Franziska Kunsmann	c0ff320281	bundles/scansnap: set proper permissions for /srv/scansnap	2021-04-21 18:25:37 +02:00
Franziska Kunsmann	c79b3f77c2	bundles/scansnap: cleanup old scans	2021-04-21 18:20:47 +02:00
Franziska Kunsmann	0c0a8e6263	bundles/scansnap: chown files to nobody-nogroup	2021-04-21 18:18:27 +02:00
Franziska Kunsmann	b5fb5dd6c2	bundles/scansnap: introduce, add to home.nas	2021-04-21 17:58:16 +02:00
Franziska Kunsmann	5e49e3204b	bundles/nfs-server: sort shares	2021-04-21 17:56:53 +02:00
Franziska Kunsmann	24362768fb	bundles/dhcpd: rework metadata	2021-04-20 18:18:17 +02:00
Franziska Kunsmann	12c04cf3be	bundles/users: some more bash config	2021-04-19 20:39:57 +02:00
Franziska Kunsmann	8536e87475	bundles/systemd-networkd: some more dhcp settings	2021-04-18 11:05:42 +02:00
Franziska Kunsmann	51ee9be424	bundles/radvd: advertise atleast every 30 seconds	2021-04-18 11:05:10 +02:00
Franziska Kunsmann	4973c63e62	bundles/icinga2: remove icinga_options/downtime_also_for, add host dependencies via icinga_options/also_affected_by	2021-04-17 09:21:51 +02:00
Franziska Kunsmann	4d5e75df68	bundles/icinga2: introduce icinga_options/downtime_also_for	2021-04-17 03:43:08 +02:00
Franziska Kunsmann	6a88040826	bundles/nginx: disable Federated Learning of Cohorts for all hosts	2021-04-16 18:36:50 +02:00
Franziska Kunsmann	bc8050cd3c	bundles/postfix: fix connection limits for smtpd	2021-04-11 21:56:37 +02:00
Franziska Kunsmann	b04a207262	nodes/htz.ex42-1048908: add some blocked email domains	2021-04-11 18:20:16 +02:00
Franziska Kunsmann	f0eb6f0d1b	bundles/vnstat: add favicon to web dashboard ... As requested by sophie	2021-04-11 14:35:49 +02:00
Franziska Kunsmann	e809ed4859	bundles/vnstat: changes in systemd unit files must trigger daemon-reload	2021-04-11 11:18:42 +02:00
Franziska Kunsmann	dca56140aa	bundles/simple-icinga-dashboard: use systemd-timers, use virtualenv	2021-04-11 11:17:09 +02:00
Franziska Kunsmann	26c2be07cf	bundles/vnstat: adjust vnstati calls for debian bullseye	2021-04-11 09:01:58 +02:00
Franziska Kunsmann	69279ba34f	bundles/postfix: be a bit more relaxed when checking for smtp errors	2021-04-10 16:50:16 +02:00
Franziska Kunsmann	018bdb2f83	bundles/matrix*: better monitoring	2021-04-10 16:40:44 +02:00
Franziska Kunsmann	9618e388c3	bundles/simple-icinga-dashboard: only resolve faults when rendering the template, not earlier	2021-04-10 16:33:32 +02:00
Franziska Kunsmann	36bd6f5755	bundles/simple-icinga-dashboard: config is a toml file now	2021-04-10 16:08:52 +02:00
Franziska Kunsmann	b33ddaadb5	bundles/simple-icinga-dashboard: add replacements	2021-04-10 15:43:37 +02:00
Franziska Kunsmann	fc7655469f	icinga2: add pretty_name for status page	2021-04-10 15:05:29 +02:00
Franziska Kunsmann	efd2875b17	bundles/c3voc-addons: add sms to NGINX VHOST checks	2021-04-10 15:04:34 +02:00
Franziska Kunsmann	8b2771cd63	Revert "bundles/systemd-networkd: fix vlan support for bridges and bonds" ... This reverts commit 02146a81d6.	2021-04-10 13:34:49 +02:00
Franziska Kunsmann	ef84b3f889	Revert "bundles/systemd-networkd: no need for a specific order in /etc/systemd/network/" ... This reverts commit b679f568eb. Documentation says order is irrelevant, but it is not. If we do not use ordering, vlan interfaces are defined before the parent interfaces, which leads to systemd-networkd not applying config for the parent interfaces.	2021-04-10 12:22:08 +02:00
Franziska Kunsmann	0d1a220b7b	bundles/systemd-networkd: generate unique mac address for vlan interfaces	2021-04-10 12:18:23 +02:00
Franziska Kunsmann	197ebe2e38	bundles/systemd-networkd: add BindCarrier to bridges	2021-04-10 11:41:23 +02:00
Franziska Kunsmann	00d46cb1b1	bundles/pppd: fix typo in restart-pppoe-if-no-public-ip	2021-04-10 09:49:40 +02:00
Franziska Kunsmann	af6b16cc35	bundles/pppd: fix KeyError in restart-pppoe-if-no-public-ip	2021-04-10 09:38:47 +02:00
Franziska Kunsmann	02146a81d6	bundles/systemd-networkd: fix vlan support for bridges and bonds	2021-04-10 09:18:45 +02:00
Franziska Kunsmann	24f04e59aa	nodes/voc.pretalx: work around content-security-policy issues	2021-04-05 08:18:21 +02:00
Franziska Kunsmann	aad27851bb	bundles/miniflux: proxy all images	2021-04-04 22:16:14 +02:00
Franziska Kunsmann	e36a352a42	bundles: fix usage of set() vs {}	2021-04-04 10:34:55 +02:00
Franziska Kunsmann	c418102000	bundles/netdata: fix iptables default	2021-04-04 10:30:45 +02:00
Franziska Kunsmann	513eb4bed6	bundles/mosquitto: add monitoring	2021-04-03 09:43:24 +02:00
Franziska Kunsmann	2027308249	bundles/zfs: fix typo in check_zpool_space	2021-04-03 09:41:17 +02:00
Franziska Kunsmann	9cbf866de7	bundles/mosquitto: introduce, add to node home.nas	2021-04-03 09:36:47 +02:00
Franziska Kunsmann	f8bbe00d47	overall better handling and usage of exceptions	2021-04-02 18:57:13 +02:00
Franziska Kunsmann	5d5930265a	bundles/postfix: remove print statement	2021-04-02 18:29:33 +02:00
Franziska Kunsmann	61cf881a03	bundles/pretalx: add bash_alias for manage.py	2021-04-02 14:59:56 +02:00
Franziska Kunsmann	4a3be10add	bundles/apt: fix if in upgrade-and-reboot	2021-04-02 13:40:55 +02:00
Franziska Kunsmann	a24fb12c21	bundles/apt: introduce restart_triggers (restart services if another service has been upgraded)	2021-04-02 08:12:51 +02:00
Franziska Kunsmann	7ca24d27d3	bundles/apt: add a bit of code to remove old, unused kernel images	2021-04-02 08:11:17 +02:00
Franziska Kunsmann	8a0c8f32ae	bundles: less Restart=on-failure, more Restart=always	2021-04-02 08:05:33 +02:00
Franziska Kunsmann	5b276368b8	bundles/wireguard: iptables/bundle_rules should be a list	2021-04-01 17:13:24 +02:00
Franziska Kunsmann	17f9aa9c3e	bundles/icinga2: disable command module	2021-04-01 17:12:35 +02:00
Franziska Kunsmann	c5eb2f4f70	bundles/icinga2: do not send recovery emails	2021-04-01 17:11:42 +02:00
Franziska Kunsmann	957cac5ebc	bundles/postfix: disable SPAM BLOCKLIST check if relayhost is set	2021-04-01 17:00:53 +02:00
Franziska Kunsmann	61c6188454	bundles/postfix: mynetworks now supports identifiers	2021-04-01 16:59:49 +02:00
Franziska Kunsmann	b7222e2cd1	bundles/systemd-networkd: fix typo in routes	2021-04-01 16:31:57 +02:00
Franziska Kunsmann	6e423c24fb	bundles/wireguard: rework metadata.py	2021-04-01 16:27:31 +02:00
Franziska Kunsmann	b679f568eb	bundles/systemd-networkd: no need for a specific order in /etc/systemd/network/	2021-04-01 16:26:06 +02:00
Franziska Kunsmann	d787f8b0a3	bundles/systemd-networkd: rework routes	2021-04-01 16:25:24 +02:00
Franziska Kunsmann	b52a196c73	bundles/nginx: add configuration option for client_max_body_size	2021-03-30 21:26:25 +02:00
Franziska Kunsmann	da9fe36646	bundles/pretalx: support installing plugins	2021-03-30 19:52:03 +02:00
Franziska Kunsmann	7345543fa2	bundles/mx-puppet-discord: remove logging to files, disable presence logging	2021-03-28 11:29:16 +02:00
Franziska Kunsmann	c388d5ea1e	bundles/postgresql: fix restart dependencies	2021-03-28 09:39:08 +02:00
Franziska Kunsmann	35e4bbf04b	bundles/postfix: remove postscreen usage ... postscreen isn't able to share its cache file between instances, which leads to the server simply accepting mails for the port on which postscreen starts up later. Since we can't predict which port this will be, we simply remove postscreen alltogether. Yes, i know i could just remove postscreen for port 2525.	2021-03-28 09:00:37 +02:00
Franziska Kunsmann	ce39850bda	bundles/postfix: fix .provides() for iptables reactor	2021-03-28 08:56:22 +02:00
Franziska Kunsmann	9fe4e2933d	bundles/postfix: add firewalling for port 2525	2021-03-28 08:37:51 +02:00
Franziska Kunsmann	a4b2dc29a9	bundles/miniflux: don't clean up old entries	2021-03-28 08:04:41 +02:00
Franziska Kunsmann	39c1d34bbb	bundles/sshmon: fix disk space usage limits	2021-03-27 12:07:49 +01:00
Franziska Kunsmann	8f0f635484	bundles/basic: change load graph for cpu graph	2021-03-27 12:06:12 +01:00
Franziska Kunsmann	568a31586f	bundles/apt: fix permissions for /etc/kernel/postinst.d/unattended-upgrades	2021-03-27 08:31:29 +01:00
Franziska Kunsmann	f514e200f0	bundles/mautrix-whatsapp: restart bridge daily again ... It seems neither WhatsApp nor WhatsApp Web are designed for 24/7 connections, thus leading to all kinds of weird side effects like "Bridge thinks it's connected, but no messages get through at all" or "WhatsApp is running, but the Bridge can't connect to it"	2021-03-27 08:21:41 +01:00
Franziska Kunsmann	f98720b57b	bundles/dhcpd: sort dchp leases by ip in bash alias	2021-03-26 09:27:52 +01:00
Franziska Kunsmann	65490b1d20	bundles/apt: log stdout and stderr separately in upgrade-and-reboot	2021-03-26 09:02:48 +01:00
Franziska Kunsmann	27753d50c4	bundles/postfix: use threading in check_spam_blocklist	2021-03-25 17:42:59 +01:00
Franziska Kunsmann	fdcec012f3	bundles/postfix: add SPAM BLOCKLIST check for every non-private IP attached to the server	2021-03-22 20:24:14 +01:00
Franziska Kunsmann	b99176be49	bundles/kodi: add iptables rules	2021-03-21 19:10:49 +01:00
Franziska Kunsmann	28dd9694af	add bundle:oidentd	2021-03-21 17:40:58 +01:00
Franziska Kunsmann	6a6198c9b9	bundles/wireguard: move iptables rules to metadata reactor	2021-03-21 15:26:29 +01:00
Franziska Kunsmann	3bc5e55400	bundles/iptables: don't apply iptables rules if a rules file is missing	2021-03-21 11:44:27 +01:00
Franziska Kunsmann	4b00c8b55a	bundles/unbound: do not bind to 0.0.0.0 if qemu is installed	2021-03-21 11:43:53 +01:00
Franziska Kunsmann	5a0aa82ec9	bundles/powerdns: fix missing imports	2021-03-21 11:43:17 +01:00
Franziska Kunsmann	62f7080db9	bundles/nfs-server: add iptables config	2021-03-21 11:24:21 +01:00
Franziska Kunsmann	850d860d59	bundles/powerdns: add iptables config	2021-03-21 11:12:18 +01:00
Franziska Kunsmann	31ddea7649	bundles/dovecot: add iptables config	2021-03-21 11:12:03 +01:00
Franziska Kunsmann	5775001301	bundles/postfix: add iptables config	2021-03-21 11:11:49 +01:00
Franziska Kunsmann	c9f008ad82	bundles/openssh: move iptables rules to metadata reactor	2021-03-21 10:37:28 +01:00
Franziska Kunsmann	b943d2d465	rework iptables configuration	2021-03-21 10:30:04 +01:00
Franziska Kunsmann	3fcd81960e	bundles/postfix: allow configuring mynetworks	2021-03-15 11:41:35 +01:00
Franziska Kunsmann	52cab71fec	bundles/wireguard: also allow outgoing traffic ... How did this ever work without this rule?	2021-03-15 09:00:35 +01:00
Franziska Kunsmann	adb808a683	bundles/users: more colourful bash for everyone	2021-03-14 17:14:08 +01:00
Franziska Kunsmann	f6ecf2a465	bundles/nfs-client: support arch linux	2021-03-11 15:24:06 +01:00
Sophie Schiller	c87611c2e2	bw/kodi add backports repo	2021-03-08 21:06:25 +01:00
Franziska Kunsmann	8b07fce738	bundles/unbound: decrease statistics-interval until debian has 1.19 and we're actually able to use them	2021-03-06 10:03:22 +01:00
Franziska Kunsmann	f214f70cd4	bundles/basic: add textual cpu stats to htop	2021-03-06 09:58:22 +01:00
Franziska Kunsmann	7e57c0f03e	bundles/basic: current htop version in debian does not support DiskIO nor NetworkIO	2021-03-06 09:56:05 +01:00
Franziska Kunsmann	ebcf8e4445	bundles/matrix-media-repo: also restart matrix-media-repo after updating	2021-03-05 07:21:23 +01:00
Franziska Kunsmann	2adf3c6a72	bundles/sshmon: increase acceptable amount of cpu steal	2021-03-01 15:52:55 +01:00
Franziska Kunsmann	e435ae582a	bundles/icinga2: add monitoring for IdoPgsqlConnection	2021-03-01 15:36:29 +01:00
Franziska Kunsmann	3adfb9779a	bundles/molly-guard: introduce, add to systems	2021-02-26 17:58:20 +01:00
Franziska Kunsmann	51ca74549e	bundles/basic: add htoprc	2021-02-24 19:24:56 +01:00
Franziska Kunsmann	836f065382	bundles/pleroma: add website content check	2021-02-20 22:11:19 +01:00
Franziska Kunsmann	b470fddc12	bundles/nginx: add gdpr-compatible log format	2021-02-20 21:11:12 +01:00
Franziska Kunsmann	8cb172a1c1	bundles/pleroma: remove NoNewPrivileges=true, interferes with mail delivery	2021-02-20 20:57:00 +01:00
Franziska Kunsmann	017c2c3421	bundles/pleroma: allow database configuration	2021-02-20 20:18:34 +01:00
Franziska Kunsmann	f8c157ce50	bundles/pleroma: get it working	2021-02-20 19:37:33 +01:00
Franziska Kunsmann	1f3e7afb2c	bundles/pleroma: initial NON-WORKING version	2021-02-20 19:14:20 +01:00
Franziska Kunsmann	5433859a86	bundles/letsencrypt: also check for chain.pem, nginx needs this	2021-02-20 17:38:11 +01:00
Franziska Kunsmann	e2d7d05783	bundles/systemd-networkd: manage apt packages via bundle:apt	2021-02-20 17:35:45 +01:00
Franziska Kunsmann	ad5c8cc0ab	bundles/postfix: only get certificate if actually needed	2021-02-20 17:30:38 +01:00
Franziska Kunsmann	97a1b3ae85	bundles/zfs: add comment to action:modprobe-zfs	2021-02-20 16:51:34 +01:00
Franziska Kunsmann	1c0a3ee8e7	bundles/postgresql: fix postgresql config path	2021-02-20 16:50:38 +01:00
Franziska Kunsmann	194de9ef2d	bundles/letsencrypt: fix some errors in letsencrypt-ensure-some-certificate	2021-02-20 15:48:17 +01:00
Franziska Kunsmann	3fa81ddc85	bundles/gitea: use canned stop action	2021-02-20 15:47:35 +01:00
Franziska Kunsmann	74d81eb7ba	bundles/nginx: support disabling ssl for each vhost individually	2021-02-20 14:25:27 +01:00
Franziska Kunsmann	228786f6aa	bundles/letsencrypt: generate a dummy certificate, if no certificate already exists	2021-02-20 13:52:40 +01:00
Franziska Kunsmann	014b6029c5	nodes/htz.ex42-1048908: update element-web config	2021-02-20 11:10:08 +01:00
Franziska Kunsmann	1ac6559b9f	bundles/postgresql: add pg_query_mon	2021-02-20 10:56:20 +01:00
Franziska Kunsmann	c0b8d35a47	bundles/icinga2: fix double emoji for WARNING state	2021-02-19 14:03:00 +01:00
Franziska Kunsmann	2bccbf9ded	bundles/icinga2: add some emoji to sent SMS, don't send output via SMS if everything is fine	2021-02-19 14:01:45 +01:00
Franziska Kunsmann	8ac9b2f204	bundles/matrix-synapse: add scripts/synapse-purge-unused-rooms	2021-02-19 11:56:21 +01:00
Franziska Kunsmann	b06532241b	bundles: use metastack syntax for metadata.get()	2021-02-18 18:12:25 +01:00
Franziska Kunsmann	6e9fb7044a	bundles/systemd-networkd: add "enable-resolved" flag	2021-02-18 17:56:43 +01:00
Franziska Kunsmann	fbf0371371	bundles/systemd: support different timezones	2021-02-18 17:56:06 +01:00
Franziska Kunsmann	1abc0153f5	bundles/openssh: do not add deleted users to ssh config	2021-02-18 15:12:30 +01:00
Franziska Kunsmann	75224f0d5c	bundles/lldp: support arch linux	2021-02-18 15:10:50 +01:00
Franziska Kunsmann	f4a644795e	bundles/basic: support setting a different default locale	2021-02-18 14:51:33 +01:00
Franziska Kunsmann	32d129015e	bundles/pacman: introduce, support pkg_pacman in some other bundles	2021-02-18 14:24:57 +01:00
Franziska Kunsmann	9bf7f856af	bundles/users: allow setting another shell	2021-02-18 14:24:09 +01:00
Franziska Kunsmann	8a2bef9b77	bundles/apt: move vim to default packages	2021-02-18 14:23:43 +01:00
Franziska Kunsmann	03840fd152	bundles/systemd: more options in journald.conf	2021-02-18 10:29:38 +01:00
Franziska Kunsmann	fbb8840dff	add .editorconfig, format files correctly	2021-02-17 10:56:18 +01:00
Franziska Kunsmann	b42e39ed0a	get rid of check_rbl	2021-02-17 10:51:49 +01:00
Franziska Kunsmann	9d5d80457f	bundles/element-web: rename from riot-web, use tagged releases	2021-02-16 12:49:02 +01:00
Franziska Kunsmann	abb99ed58a	bundles/raspberrypi: remove isc-dhcp-client	2021-02-16 08:41:37 +01:00
Franziska Kunsmann	d2260b4699	bundles/wireguard: use PersistentKeepalive to work around intermittent connection issues	2021-02-15 15:16:44 +01:00
Franziska Kunsmann	5c1eba0d58	bundles: use a common metadata key for firewall restrictions, use repo.libs.tools.resolve_identifier()	2021-02-15 14:16:35 +01:00
Franziska Kunsmann	56fce7d460	bundles/wireguard: add exclude_from_monitoring option for wireguard peers	2021-02-14 21:35:37 +01:00
Franziska Kunsmann	65e6b8d053	bundles/backup-client: use a bash function to do backups instead of repeating the same code over and over	2021-02-13 09:18:00 +01:00
Franziska Kunsmann	adeb8eff88	bundles/postgresql: only do database dumps if we're actually doing backups	2021-02-13 09:04:59 +01:00
Franziska Kunsmann	724537558e	bundles/postgresql: do a database dump before backing up the database	2021-02-13 08:56:35 +01:00
Franziska Kunsmann	3d1468b214	bundles/backup-client: backup-pre-hooks should have numeric sorting	2021-02-13 08:37:49 +01:00
Franziska Kunsmann	7aeb46382d	bundles/zfs: move icinga2_api to metadata defaults	2021-02-13 08:37:00 +01:00
Franziska Kunsmann	2fbbaa1586	bundles/zfs: remove support for snapshot_only and snapshot_never (unused)	2021-02-13 08:36:10 +01:00
Franziska Kunsmann	b20f369ea8	bundles/backup-client: metadata backup-pre-hooks now use /bin/sh by default	2021-02-13 08:26:46 +01:00
Franziska Kunsmann	077eaa265c	bundles/radicale: use Fault.as_htpasswd_entry() instead of pre-encrypting passwords	2021-02-13 08:17:31 +01:00
Franziska Kunsmann	978285bf32	bundles/matrix-media-repo: add backup/paths metadata	2021-02-13 08:09:48 +01:00
Franziska Kunsmann	f52df58517	bundles: code style improvements	2021-02-12 20:45:41 +01:00
Franziska Kunsmann	c0353d2911	bundles/apt: add option to configure patch-hour, not only patchday	2021-02-12 18:53:25 +01:00
Franziska Kunsmann	767db8efdd	bundles/apt: add /etc/kernel/postinst.d/unattended-upgrades to ensure a reboot on kernel updates	2021-02-12 18:12:24 +01:00
Franziska Kunsmann	d4b110087f	bundles/matrix-media-repo: introduce, add to htz.ex42-1048908	2021-02-12 16:01:35 +01:00
Franziska Kunsmann	638e37c05f	bundles: add Requires=postgresql.service to some services which require postgresql	2021-02-12 13:28:52 +01:00
Franziska Kunsmann	9f8cbde7d7	bundles/transmission: always try to restart transmission	2021-02-11 09:06:20 +01:00
Franziska Kunsmann	a86e04683a	bundles/backup-client: fix missing space in generate-backup	2021-02-09 07:17:25 +01:00
Franziska Kunsmann	c25233b991	nodes: replace pkg_apt:redis with bundle:redis	2021-02-07 21:09:39 +01:00
Franziska Kunsmann	0d1e987a6f	bundles/backup-client: add backup-pre-hooks (fixes #24)	2021-02-07 20:47:22 +01:00
Franziska Kunsmann	a8690b13b8	bundles/rspamd: add "unless" to action:rspamd_assure_dkim_key_permissions	2021-02-06 19:10:16 +01:00
Franziska Kunsmann	eb431d8da8	bundles/postfix: also set alias_maps ... fixes "warning: dict_nis_init: NIS domain name not set - NIS lookups disabled"	2021-02-06 10:24:19 +01:00
Franziska Kunsmann	457052d42b	bundles/gitea: downloading gitea updates needs stopping it first	2021-02-06 09:43:54 +01:00
Franziska Kunsmann	b6d23aaed4	bundles/sshmon: use own check_cpu_stats script ... Old script only checked iowait, which is not enough.	2021-02-06 09:38:50 +01:00
Franziska Kunsmann	c185a5bacd	bundles/backup-client: do backups at 23:xx, so it won't interfere with upgrade-and-reboot ... There were still problems with systems starting their backups late in the hour, but backup servers did upgrade-and-reboot early it the hour. This leads to incomplete backups, if the machine is rebooting, too.	2021-02-06 09:36:44 +01:00
Franziska Kunsmann	7e15f8adc3	bundles/octoprint: multi-line-output for check_octoprint_update	2021-02-02 20:20:11 +01:00
Franziska Kunsmann	8523754935	bundles/users: add vim-keybindings for pane navigation to tmux.conf	2021-01-31 07:59:19 +01:00
Franziska Kunsmann	bdc5b4de33	bundles/transmission: don't overwrite configs managed by transmission	2021-01-30 17:39:34 +01:00
Franziska Kunsmann	71f033b7c2	bundles/icinga2: fix dependencies for svc_systemd:icinga2 ... icinga2 runs fine without any checks, so we now only depend on the other configuration files managed by bw. This will also fix unwanted dependencies, because 'file:' means *all* files, not only those provided by this bundle. In the past, it wasn't possible to skip any file, because that would result in icinga not properly restarting.	2021-01-30 17:31:05 +01:00
Franziska Kunsmann	569275329c	bundles/sshmon: remove INTERNET check ... We're using the internet to check these hosts, so if those hosts wouldn't have an internet connection, the whole host would be down, atleast as far as icinga can tell.	2021-01-30 11:47:55 +01:00
Franziska Kunsmann	161aec9314	bundles/powerdnsadmin: use tagged release	2021-01-29 18:13:16 +01:00
Franziska Kunsmann	f56852c27d	bundles/postfixadmin: use tagged release	2021-01-29 18:07:57 +01:00
Franziska Kunsmann	fa462fbd0f	bundles/sshmon: use tag_name instead of human-readable name in check_github_for_new_release	2021-01-29 18:04:35 +01:00
Franziska Kunsmann	b3e6063596	bundles/unbound: silence refresh-root-hints cronjob	2021-01-29 17:58:24 +01:00
Franziska Kunsmann	c31066fea8	bundles/mautrix-whatsapp: restart weekly to work around 24/7 connection issues	2021-01-29 17:27:33 +01:00
Franziska Kunsmann	fd421bf6f8	add bundle:redis, add redis support to pretalx	2021-01-29 15:58:54 +01:00
Franziska Kunsmann	ce76430b4d	bundles/mautrix-whatsapp: decrease log level to info	2021-01-28 15:05:04 +01:00
Franziska Kunsmann	4efcc73f55	bundles/mautrix-whatsapp: ensure we're not using ssl for postgres	2021-01-25 22:27:11 +01:00
Franziska Kunsmann	f3d8a1412c	bundles/dovecot: better ssl	2021-01-24 18:44:25 +01:00
Franziska Kunsmann	2aaf7cf8f8	bundles/nginx: better ssl	2021-01-24 18:44:13 +01:00
Franziska Kunsmann	614bdf9dec	bundles/basic: support creating additional locales	2021-01-24 07:49:49 +01:00
Franziska Kunsmann	d344664fa1	bundles/basic: fix format for /etc/locale.gen	2021-01-23 12:25:32 +01:00
Franziska Kunsmann	6b720c6c75	bundles/postgresql: only deploy packages if we have locales installed	2021-01-23 12:06:38 +01:00
Franziska Kunsmann	4a9463db5f	bundles/basic: ensure a proper locale is installed	2021-01-23 12:05:59 +01:00
Franziska Kunsmann	a160e7cf46	bundles/postgresql: improvements ... - support other postgresql versions - manage configs using bw	2021-01-23 11:35:03 +01:00
Franziska Kunsmann	c41ee0f806	bundles/apt: fix logging for upgrade-and-reboot	2021-01-23 11:32:35 +01:00
Franziska Kunsmann	51101fc615	bundles/sudo: fix mode for /etc/sudoers	2021-01-23 09:28:50 +01:00
Franziska Kunsmann	c5109fbfe3	bundles/icinga2: no need to do metadata.copy() here	2021-01-23 09:11:18 +01:00
Franziska Kunsmann	717159b61f	bundles/seafile: no need for sms for seafile process, we're already doing http content checks	2021-01-23 09:09:30 +01:00
Franziska Kunsmann	63cdd470cf	bundles/c3voc-addons: support cron definition	2021-01-19 13:34:23 +01:00
Franziska Kunsmann	0893156723	bundles/c3voc-addons: add upgrade-and-reboot to bundle	2021-01-17 18:43:30 +01:00
Franziska Kunsmann	0f0ee046b1	bundles/c3voc-addons: some assertions to make sure we don't conflict with ansible	2021-01-17 10:16:23 +01:00
Franziska Kunsmann	1041e092b1	bundles/dhcpd: add bash alias for lease list	2021-01-17 09:12:32 +01:00
Franziska Kunsmann	4f62e25d5e	bundles/c3voc-addons: add nginx vhost monitoring	2021-01-17 08:07:21 +01:00
Franziska Kunsmann	3b90426b4d	bundles/pretalx: fix needs for systemd units	2021-01-17 08:01:15 +01:00
Franziska Kunsmann	2b0678063c	bundles/pretalx: new version needs to trigger regenerate_css, too	2021-01-17 07:59:57 +01:00
Franziska Kunsmann	b5cc8c2c57	bundles/pretalx: add to PORT_MAP.md, allocate a port	2021-01-17 07:55:08 +01:00
Franziska Kunsmann	35abb92daf	bundles/icinga2: do not schedule downtimes for hosts which do not do unattended-upgrades	2021-01-16 22:31:51 +01:00
Franziska Kunsmann	173746fe9c	bundles/sshmon: ensure sshmon user is able to log in	2021-01-16 22:31:18 +01:00
Franziska Kunsmann	39aabd0546	bundles/backup-server: of course, we need to ignore hosts which have exclude_from_backups set	2021-01-16 22:22:51 +01:00
Franziska Kunsmann	ad84f62c0d	bundles/sshmon: do not rely on bundle:users to create sshmon user	2021-01-16 22:21:27 +01:00
Franziska Kunsmann	ec8802dd4a	bundles/backup-server: ignore all nodes which don't have bundle:backup-client	2021-01-16 22:12:49 +01:00
Franziska Kunsmann	9f0fc90679	bundles/pretalx: fix wrong metadata key	2021-01-16 22:12:16 +01:00
Franziska Kunsmann	70944d7065	bundles/pretalx: introduce	2021-01-16 22:03:38 +01:00
Franziska Kunsmann	0b9056bd2b	add pseudo-bundle to add configs to c3voc ansible managed hosts	2021-01-16 22:03:03 +01:00
Franziska Kunsmann	8fc0017378	bundles/backup-client: do backups at 00:xx, so it won't interfere with upgrade-and-reboot	2021-01-15 15:31:36 +01:00
Franziska Kunsmann	9854fc9dbc	bundles/hostname: also set motd	2021-01-15 15:29:49 +01:00
Franziska Kunsmann	db3a15310c	bundles/letsencrypt: fix concat_and_deploy comment	2021-01-10 10:48:19 +01:00
Franziska Kunsmann	659e35686e	bundles/iptables: removing rule files should also trigger iptables-enforce	2021-01-09 14:02:50 +01:00
Franziska Kunsmann	4f6b57676a	bundles/systemd-networkd: LACPTransmitRate=fast	2021-01-09 12:52:03 +01:00
Franziska Kunsmann	00fd1df67a	bundles/wide-dhcp6c: stop, then start, instead of restart	2021-01-09 12:51:37 +01:00
Franziska Kunsmann	8e54d6eb23	add monitoring for freifunk nodes	2021-01-09 11:03:23 +01:00
Franziska Kunsmann	19dd29e847	bundles/transmission: also allow tcp peer-port	2021-01-08 17:06:26 +01:00
Franziska Kunsmann	33b85ff0de	bundles/transmission: add bundle, add to home.downloadhelper	2021-01-08 17:00:08 +01:00
Franziska Kunsmann	dca13263e2	bundles/systemd-networkd: add option for setting static routes	2021-01-08 16:09:59 +01:00
Franziska Kunsmann	17510b783c	bundles/nfs-client: do start automount units. Previous comment was wrong.	2021-01-07 22:15:57 +01:00
Franziska Kunsmann	fb42f9e667	bundles/dhcpd: catch keyerrors for nodes which do dhcp in unmanaged networks	2021-01-07 22:14:17 +01:00
Franziska Kunsmann	2d42e5f7dd	update bw to 4.3, add .provides() to metadata reactors	2021-01-07 18:44:38 +01:00
Franziska Kunsmann	7f0fb7a6e2	bundles/influxdb: remove	2021-01-07 18:28:08 +01:00
Sophie Schiller	2ba4946975	update letsencrypt hashes	2021-01-06 13:18:44 +01:00
Franziska Kunsmann	ec13a1edaa	bundles/simple-icinga-dashboard: repo is public now	2021-01-03 09:56:51 +01:00
Franziska Kunsmann	03d3ab6e9d	bundles/{netdata,nginx,unbound}: fix iptables rules (should also create ip6tables rules)	2021-01-02 16:19:55 +01:00
Franziska Kunsmann	e8d131b041	add simple-icinga-dashboard on status.franzi.business ... fixes #20	2021-01-02 14:47:11 +01:00
Franziska Kunsmann	2ebf7ec32b	bundles/mautrix-whatsapp: disable log timestamps, journal takes care of that	2021-01-02 14:01:26 +01:00
Franziska Kunsmann	b8bcc6c499	bundles/mautrix-whatsapp: only log to journal	2021-01-02 13:59:47 +01:00
Franziska Kunsmann	8752299e61	bundles/icinga2: add hostgroup for hosts which send SMS	2021-01-02 12:58:52 +01:00
Franziska Kunsmann	4f57a6c0e3	icinga2: more checks should send sms	2021-01-02 12:26:37 +01:00
Franziska Kunsmann	10fd67a0fd	bundles/systemd-networkd: fix LACP options ... fixes #25, hopefully	2021-01-02 11:00:10 +01:00
Franziska Kunsmann	f329373a4a	bundles/systemd-networkd: remove settings from bond.netdev ... Why the fuck doesn't this work like it's written in the documentation?	2021-01-01 22:00:50 +01:00
Franziska Kunsmann	16ea6ce0d5	bundles/systemd-networkd: disable STP on bridges	2021-01-01 21:59:21 +01:00
Franziska Kunsmann	48fc341137	bundles/backup-client: add monitoring for backups	2021-01-01 13:59:42 +01:00
Franziska Kunsmann	3e1d3b483e	bundles/mautrix-whatsapp: use -a for check_procs	2020-12-31 12:31:14 +01:00
Franziska Kunsmann	fede30c2cc	bundles/mautrix-whatsapp: introduce	2020-12-31 12:18:34 +01:00
Franziska Kunsmann	914889da6c	bundles/vmhost: add option to exclude VM from monitoring	2020-12-29 10:18:16 +01:00
Franziska Kunsmann	62d7baa3ec	bundles/icinga2: admins shall receive all notifications	2020-12-27 09:09:40 +01:00
Franziska Kunsmann	d72c43083d	nodes/rx300: set proper lldp hostname	2020-12-25 14:45:41 +01:00
Franziska Kunsmann	ca7f3ed4a6	bundles/octoprint: fix typo in check_octoprint_update	2020-12-23 12:38:44 +01:00
Franziska Kunsmann	e40f88aa69	bundles/unbound: only start unbound after pppoe.service has been started (fixes #23)	2020-12-23 10:50:54 +01:00
Franziska Kunsmann	275249481f	bundles/octoprint: display version in update check, remove error states (we're monitoring this separately)	2020-12-23 10:43:13 +01:00
Franziska Kunsmann	d2be654206	bundles/unbound: enable prefetching	2020-12-22 09:24:10 +01:00
Franziska Kunsmann	5e45efb7ae	bundles/unbound: better caching	2020-12-22 09:22:37 +01:00
Franziska Kunsmann	5935aed0db	bundles/{netdata,pppd,radvd,vmhost,vnstat,wide-dhcp6c}: add monitoring	2020-12-21 09:50:15 +01:00
Franziska Kunsmann	0b52f8e7e6	bundles/icinga2: allow limiting permissions for api users	2020-12-20 09:33:17 +01:00
Franziska Kunsmann	da4b139095	bundles/{radvd,wide-dhcp6c}: remove metadata key integrate-with-pppd	2020-12-18 16:30:17 +01:00
Franziska Kunsmann	6045debe9e	bundles/nginx: check ssl certificates	2020-12-18 13:28:08 +01:00
Franziska Kunsmann	5f5c3d5207	bundles/icinga2: admins shall receive more notifications	2020-12-18 08:24:19 +01:00
Franziska Kunsmann	958f5893e6	bundles/zfs: adjust warning period for check_zfs_old_snapshots	2020-12-18 08:23:42 +01:00
Franziska Kunsmann	487e4d0df6	bundles/rspamd: add missing }	2020-12-18 08:21:56 +01:00
Franziska Kunsmann	e81fcafe7a	bundles/powerdns: fix dependencies	2020-12-18 06:41:24 +01:00
Franziska Kunsmann	63d455d242	bundles/rspamd: fix dependencies	2020-12-18 06:41:05 +01:00
Franziska Kunsmann	65db8b1625	bundles/systemd-networkd: faster miimon	2020-12-18 06:33:05 +01:00
Franziska Kunsmann	ecb7a93073	bundles/pppd: silence restart-pppoe-if-no-public-ip	2020-12-18 06:32:18 +01:00
Franziska Kunsmann	e33af1c845	bundles/unbound: refresh root-hint.txt once a week	2020-12-13 15:22:19 +01:00
Franziska Kunsmann	9c6fe48859	bundles/unbound: add netdata config	2020-12-13 15:17:19 +01:00
Franziska Kunsmann	3eeb253e55	bundles/unbound: introduce, add to nodes	2020-12-13 14:59:44 +01:00
Franziska Kunsmann	c5e43188ca	bundles/radvd: support not announcing a nameserver	2020-12-13 14:59:10 +01:00
Franziska Kunsmann	057d4f0c4c	bundles/dovecot: autoexpunge Trash older than 360 days	2020-12-13 11:55:28 +01:00
Franziska Kunsmann	18c56cce9a	bundles/dovecot: do not auto-subscribe to junk mailbox	2020-12-13 11:54:55 +01:00
Franziska Kunsmann	58d99eb402	bundles/systemd: configure journald	2020-12-12 10:39:57 +01:00
Franziska Kunsmann	cf4d0c1ca6	bundles/powerdnsadmin: ensure permissions of powerdnsadmin static directory	2020-12-10 22:18:04 +01:00
Franziska Kunsmann	8be6f9b78d	bundles/apt: fix date call in check_unattended_upgrades	2020-12-10 22:15:31 +01:00
Franziska Kunsmann	be15458e1e	bundles/powerdnsadmin: fix database upgrade	2020-12-10 22:07:26 +01:00
Franziska Kunsmann	1d06d86205	bundles/wireguard: fix early fault resolve in metadata.py	2020-12-10 16:39:26 +01:00
Franziska Kunsmann	bd217f0666	bundles/pppd: automatically restart pppoe (once per hour) if no public ip address can be found	2020-12-10 16:14:17 +01:00
Franziska Kunsmann	b80c0b12fe	home.router: add c3voc vpn	2020-12-08 17:45:30 +01:00
Franziska Kunsmann	9398649db0	bundles/seafile: add icinga checks	2020-12-05 09:28:54 +01:00
Franziska Kunsmann	febcacdfe3	icinga2: enable mails for update checks	2020-12-05 09:17:21 +01:00
Franziska Kunsmann	67d8293201	bundles/wireguard: one icinga2 check per peer	2020-11-30 06:43:46 +01:00
Franziska Kunsmann	295ff72b4b	bundles/smartd: introduce, add to hosts where *we* need to keep track of disk health	2020-11-29 12:07:27 +01:00
Franziska Kunsmann	8456ac43c6	bundles/nfs-client: don't try to start automount units	2020-11-29 12:06:34 +01:00
Franziska Kunsmann	1bfeead5e8	nodes/home.nas: change nfs-mount options for /storage/nas	2020-11-29 12:05:51 +01:00
Franziska Kunsmann	a549936e09	bundles/nfs-server: ensure nfs-kernel-server is started	2020-11-28 15:48:27 +01:00
Franziska Kunsmann	014b37082c	bundles/wireguard: send pings over vpn, if pppd reconnects	2020-11-27 03:09:37 +01:00
Franziska Kunsmann	c1885e20b6	nodes/home.octoprint-vielschichtigkeit: fix ifnames, fix vhost	2020-11-25 21:26:21 +01:00
Franziska Kunsmann	dc9e378908	bundles/icinga2: add icinga statusmonitor	2020-11-22 18:56:04 +01:00
Franziska Kunsmann	12ce8d8f6e	bundles/icinga2: add automatic downtime for upgrade-and-reboot	2020-11-22 13:28:14 +01:00
Franziska Kunsmann	3a56b0425c	bundles/icinga2: add default for vars.notification.mail, enable mail for check_sipgate_account_balance	2020-11-22 11:44:09 +01:00
Franziska Kunsmann	9651d740ae	bundles/icinga2: add check_sipgate_account_balance, adjust check_interval	2020-11-22 11:38:53 +01:00
Franziska Kunsmann	9cace7dace	bundles/icinga2: only include service_name in sms if it actually is a service	2020-11-22 11:09:44 +01:00
Franziska Kunsmann	54219928e4	bundles/icinga2: only add user to on-call group if they have atleast one of (email, phone) set	2020-11-22 11:07:02 +01:00
Franziska Kunsmann	8c6c691e5e	bundles/icinga2: implement SMS notifications	2020-11-22 10:34:49 +01:00
Franziska Kunsmann	22d5ba12ee	bundles/octoprint: don't try to resolve faults in metadata.py	2020-11-22 09:07:28 +01:00
Franziska Kunsmann	15826c73b0	bundles/icinga2: send notifications	2020-11-22 09:04:24 +01:00
Franziska Kunsmann	d26b8ade45	remove some comments	2020-11-22 08:27:37 +01:00
Franziska Kunsmann	4a57926577	bundles/icinga2: set some notification options for checks	2020-11-22 08:24:44 +01:00
Franziska Kunsmann	b114ba3ff8	bundles/postgresql: fix typo	2020-11-22 07:40:34 +01:00
Franziska Kunsmann	d428572461	bundles/icinga2: add servicegroup for every service which has checks	2020-11-21 23:04:15 +01:00
Franziska Kunsmann	0bc4b5439c	bundles/icinga2: add hostgroup for every bw group	2020-11-21 22:46:29 +01:00
Franziska Kunsmann	12cf03e03f	bundles/icinga2: generate icinga_users from users.json	2020-11-21 21:46:41 +01:00
Franziska Kunsmann	c77856f97a	bundles/vmhost: add info line to QEMU VM STATUS	2020-11-21 21:01:37 +01:00
Franziska Kunsmann	5639da4954	bundles/vmhost: add QEMU VM STATUS check	2020-11-21 20:58:55 +01:00
Franziska Kunsmann	325f483a26	bundles/{gitea,mautrix-telegram}: add update check	2020-11-21 20:35:51 +01:00
Franziska Kunsmann	4f5e462c94	bundles/octoprint: add update check	2020-11-21 20:35:29 +01:00
Franziska Kunsmann	91f2fd839b	bundles/sshmon: add check_github_for_new_release	2020-11-21 20:03:50 +01:00
Franziska Kunsmann	a4ca98e79e	bundles/rspamd: add monitoring	2020-11-21 18:55:45 +01:00
Franziska Kunsmann	e6acda1f52	bundles/powerdns: add monitoring	2020-11-21 18:55:34 +01:00
Franziska Kunsmann	2fdeeca9c3	bundles/postgresql: add monitoring	2020-11-21 18:55:21 +01:00
Franziska Kunsmann	2f7f35c85a	bundles/matrix*: add monitoring	2020-11-21 18:55:06 +01:00
Franziska Kunsmann	1d450b9829	bundles/apt: fix statusfile output of unattended upgrades	2020-11-21 18:07:01 +01:00
Franziska Kunsmann	35025b40f6	bundles/sshmon: increase timeout for INTERNET check	2020-11-21 16:17:16 +01:00
Franziska Kunsmann	5aee050c5d	bundles/wireguard: add icinga check	2020-11-21 16:15:34 +01:00
Franziska Kunsmann	58ca3fa9ae	bundles/wireguard: add netdev and network files, add iptables rules	2020-11-21 15:38:38 +01:00
Franziska Kunsmann	63fd31c226	bundles/icinga2: support specifying an alternative host for checks	2020-11-21 10:58:57 +01:00
Franziska Kunsmann	5419bf31fb	bundles: fix some icinga checks	2020-11-21 10:30:05 +01:00
Franziska Kunsmann	11071914e0	bundles/icinga2: initial working draft	2020-11-21 10:29:36 +01:00
Franziska Kunsmann	d3de7a27be	bundles/icinga2: add dependencies for icingaweb2 setup	2020-11-21 08:57:46 +01:00
Franziska Kunsmann	6ad28bb375	bundles/vnstat: add graph for "yesterday"	2020-11-19 16:52:45 +01:00
Franziska Kunsmann	fd99334a66	bundles/vnstat: improve usability of web dashboard for mobile devices	2020-11-16 21:43:51 +01:00
Franziska Kunsmann	6b11a7b2a8	bundles/vnstat: redirect cron output to /dev/null	2020-11-16 17:10:14 +01:00
Franziska Kunsmann	7d78ac9db8	bundles/vnstat: add flag to generate statistics images, add to home.router	2020-11-16 17:07:05 +01:00
Franziska Kunsmann	2d856a1e9a	bundles/nginx: add iptables rules	2020-11-16 16:43:57 +01:00
Franziska Kunsmann	88dd587fb4	bundles/vnstat: introduce, add to home.router	2020-11-16 16:33:26 +01:00
Franziska Kunsmann	8343838dc6	bundles/nfs-client: don't touch permissions of mount directory by default	2020-11-15 13:37:13 +01:00
sophie	75e199ae0d	Merge pull request 'bundle/dhcpd: improvements' (#19) from kunsi-dhcpd-improvements into main ... Reviewed-on: https://git.kunsmann.eu/kunsi/bundlewrap/pulls/19	2020-11-15 12:34:41 +00:00
Franziska Kunsmann	c9e5ae87a1	bundles/users: sort ssh keys	2020-11-15 13:26:10 +01:00
Franziska Kunsmann	121dfb692c	bundles/netdata: use correct metadatum name	2020-11-15 13:25:15 +01:00
Franziska Kunsmann	9df5cb1f16	bundles/dhcpd: remove hardcoded group in metadata reactor get_static_allocations()	2020-11-15 13:23:24 +01:00
Franziska Kunsmann	c597244a9d	bundles/dhcpd: adjust spacing in metadata processor for static leases	2020-11-15 12:07:02 +01:00
Franziska Kunsmann	d5bca495e0	bundles/dhcpd: remove some .get()	2020-11-15 12:06:03 +01:00
Franziska Kunsmann	ad569f073e	bundles/dhcpd: add iptables rules	2020-11-15 12:01:14 +01:00
Franziska Kunsmann	cdef8cdb13	bundles/dhcpd: adjust indentation in dhcpd.conf	2020-11-15 12:00:58 +01:00
Franziska Kunsmann	4f9281a4a4	bundles/dhcpd: download oui.txt	2020-11-15 11:40:33 +01:00
Franziska Kunsmann	2457d5b435	bundles/backup-client: redirect stderr to /dev/null ... We have monitoring to determine wether the backup succeeded or not. No need for E-Mails, too.	2020-11-15 11:15:53 +01:00
Franziska Kunsmann	84d1984cc1	nodes/home.nas: add users to "nas" group, add cronjobs to ensure permissions on nas dataset	2020-11-15 11:12:22 +01:00
Franziska Kunsmann	ccfa56ad5e	bundles/pppd: also wait for ppp interface to vanish before restarting	2020-11-15 10:02:13 +01:00
Franziska Kunsmann	0aafeb96cd	bundles/pppd: make sure dependent services are stopped before restarting pppoe session	2020-11-15 09:56:06 +01:00
Franziska Kunsmann	d83dbbdd75	bundles/systemd-networkd: use some more options for bond interfaces	2020-11-15 09:39:44 +01:00
Franziska Kunsmann	5319cd1e8b	bundles/netdata: disable health checks	2020-11-14 16:55:29 +01:00
Franziska Kunsmann	6d58f2387f	bundles/openssh: introduce, add to all nodes	2020-11-14 14:46:59 +01:00
Franziska Kunsmann	e56e875433	bundles/rspamd: switch to automatically-generated dkim key	2020-11-14 14:35:27 +01:00
Franziska Kunsmann	3213e462c5	bundles/netdata: only save to ram, keep less history	2020-11-14 14:34:38 +01:00
Franziska Kunsmann	1339564dc4	bundles/netdata: introduce, add to home.nas and home.router	2020-11-14 14:05:28 +01:00
Franziska Kunsmann	ff607777ce	bundles/backup-client: support using a non-standard ssh port	2020-11-14 12:52:18 +01:00
Franziska Kunsmann	f405dca771	bundles/pppd: add dyndns capability	2020-11-14 12:46:19 +01:00
Franziska Kunsmann	0ca8edf656	bundles/apt: move patchday to metadata reactor, make patchday configurable	2020-11-14 12:24:55 +01:00
Franziska Kunsmann	32b7dda61f	bundles/iptables: add newline to rules files	2020-11-14 12:24:12 +01:00
Franziska Kunsmann	877744b0ba	bundles/pppd: send out a Router Solicitation on ifup	2020-11-14 12:11:51 +01:00
Franziska Kunsmann	a14580944b	bundles/{radvd,wide-dhcp6c}: improve handling of non-properly terminated ip-down scripts	2020-11-14 11:57:01 +01:00
Franziska Kunsmann	644eb37b82	bundles/radvd: introduce, add to home.router	2020-11-14 11:47:44 +01:00
Franziska Kunsmann	fa224a9939	bundles/wide-dhcp6c: introduce, add to home.router	2020-11-14 11:34:16 +01:00
Franziska Kunsmann	00ba7e49d6	bundles/pppd: accept RA on ppp interface	2020-11-13 23:56:59 +01:00
Sophie Schiller	cbfc8c75ad	bundles/dhcpd add defaults file and some escaping	2020-11-13 23:30:49 +01:00
Sophie Schiller	ef211f7356	update gitignore	2020-11-13 23:30:49 +01:00
Sophie Schiller	dcf944b198	bundles/dhcpd add initial items, metadata and template	2020-11-13 23:30:49 +01:00
Franziska Kunsmann	6ba0f6df1d	bundles/systemd: make sure we're using UTC and NTP	2020-11-13 23:26:13 +01:00
Franziska Kunsmann	870a5252e5	bundles/pppd: add iptables rules on ifup/ifdown	2020-11-13 23:04:43 +01:00
Franziska Kunsmann	f65e216828	bundles/iptables: introduce, add to home.router	2020-11-13 22:47:23 +01:00
Franziska Kunsmann	df9863ef31	bundles/openvpn-client: add	2020-11-13 22:15:36 +01:00
Franziska Kunsmann	e515378497	bundles/backup-server: dummy nodes never do backups	2020-11-13 21:58:35 +01:00
Franziska Kunsmann	3b829caaf6	bundles/pppd: introduce	2020-11-13 21:41:02 +01:00
Franziska Kunsmann	b1860b7e01	bundles/systemd-networkd: add option to only create a .netdev file for interfaces	2020-11-13 21:40:44 +01:00
Franziska Kunsmann	75d86f3339	bundles/systemd-networkd: support vlans	2020-11-13 16:29:17 +01:00
Franziska Kunsmann	4213b60052	bundles/lldp: introduce, add to all nodes at home	2020-11-13 16:28:43 +01:00
Franziska Kunsmann	b9b0a9c5ca	bundles/vmhost: install correct packages	2020-11-13 14:47:40 +01:00
Franziska Kunsmann	df63f8c732	bundles/nginx: make sure /var/www exists	2020-11-13 13:35:02 +01:00
Franziska Kunsmann	e91ac7e457	bundles/backup-client: fix detection of rsync errors	2020-11-13 13:34:21 +01:00
Franziska Kunsmann	d31910368c	icinga2: install packages and dependencies	2020-11-13 13:19:26 +01:00
Franziska Kunsmann	6bac83def2	bundles/rspamd: fix automatic generation of dkim key	2020-11-13 13:11:26 +01:00
Franziska Kunsmann	cff0870e63	bundles/rspamd: refine auto-generation of dkim signing keys	2020-11-13 13:09:37 +01:00
Franziska Kunsmann	56f1b1a6c6	bundles/rspamd: first draft for automatically-rotating dkim keys	2020-11-13 13:09:34 +01:00
Franziska Kunsmann	f04dac11e5	Merge branch 'kunsi-icinga2' into main	2020-11-13 13:03:16 +01:00
Franziska Kunsmann	741f3b0032	bundles/backup-client: fix cronjob	2020-11-13 12:57:50 +01:00
Franziska Kunsmann	0749fc75c5	bundles: add backup paths	2020-11-13 12:37:26 +01:00
Franziska Kunsmann	f71653e3ce	bundles/backup-{client,server}: introduce	2020-11-13 12:36:52 +01:00
Franziska Kunsmann	30ee0c8bdf	bundles/mx-puppet-discord: restart service after building new version	2020-11-13 09:26:34 +01:00
Franziska Kunsmann	e5c12f0628	bundles/nginx: create webroot directories after bundle:zfs is done	2020-11-12 22:59:46 +01:00
Franziska Kunsmann	2274e7aa37	bundles/nfs-server: introduce	2020-11-12 19:59:02 +01:00
Franziska Kunsmann	f2a0f0b46a	bundles/systemd-networkd: support bond and bridge interfaces	2020-11-12 19:38:10 +01:00
Franziska Kunsmann	633ccb97fd	bundles/zfs: rename zed -> zfs-zed	2020-11-12 19:36:28 +01:00
Franziska Kunsmann	d01d89d432	bundles/apt: support debian 11	2020-11-12 18:40:19 +01:00
Franziska Kunsmann	e395a42160	bundles/apt: no need to have apt-daily.timer running	2020-11-12 15:10:59 +01:00
Franziska Kunsmann	087f4bb74d	groups/{gce,home}: send mail via mx0.kunbox.net	2020-11-11 13:31:01 +01:00
Franziska Kunsmann	11701a67c8	dns: deploy MTA-STS	2020-11-11 11:41:06 +01:00
Franziska Kunsmann	d47c39185b	bundles/php: no need to restart php if just installing the base packages	2020-11-11 08:37:29 +01:00
Franziska Kunsmann	652fb72ccc	bundles/postfix: fix metadata reactor for letsencrypt	2020-11-11 08:35:36 +01:00
Franziska Kunsmann	9dd7589f12	bundles/postfix: add submission_header_cleanup file	2020-11-10 20:34:27 +01:00
Franziska Kunsmann	8180769120	bundles/postfix: add postmaster alias	2020-11-10 20:32:39 +01:00
Franziska Kunsmann	f9bd2d695d	bundles/postfix: add SPAM BLOCKLISt for every non-private IP attached to the server	2020-11-10 14:28:12 +01:00
Franziska Kunsmann	aad1a742b7	bundles/icinga2: add ipv6-capable check_rbl script	2020-11-10 14:26:07 +01:00
Franziska Kunsmann	f30aa48eca	bundles/icinga2: add sshmon private key	2020-11-10 13:43:46 +01:00
Franziska Kunsmann	a176a1aa65	bundles/icinga2: introduce, install checks, install sources.list, create postgres database	2020-11-10 13:37:27 +01:00
Franziska Kunsmann	a9c00409b4	bundles/mautrix-telegram: fix item dependency error	2020-11-10 13:26:03 +01:00
Franziska Kunsmann	6cd02dc563	bundles: move non-login users to items.py	2020-11-10 13:24:07 +01:00
Franziska Kunsmann	cca4fec761	bundles/users: get default user data from users.json	2020-11-10 13:12:36 +01:00
Franziska Kunsmann	c090a9c2c2	bundles/users: move root user to metadata	2020-11-10 12:50:08 +01:00
Franziska Kunsmann	3fbe32518a	bundles/postgresql: rename users -> roles	2020-11-10 12:37:58 +01:00
Franziska Kunsmann	d087cea869	bundles/gitea: add monitoring	2020-11-10 11:32:59 +01:00
Franziska Kunsmann	985f47ca99	bundles/miniflux: add monitoring	2020-11-10 11:28:40 +01:00
Franziska Kunsmann	8cb997133a	bundles/nginx: add monitoring	2020-11-10 10:57:04 +01:00
Franziska Kunsmann	65a8efc97f	bundles/zfs: fix monitoring metadata	2020-11-10 10:35:01 +01:00
Franziska Kunsmann	f80896fa3b	bundles/postfix: add monitoring	2020-11-10 10:21:37 +01:00
Franziska Kunsmann	420cea15d2	bundles/apt: add monitoring for unattended upgrades	2020-11-10 09:50:20 +01:00
Franziska Kunsmann	6ca0d863b1	bundles/sudo: use sudoers.d	2020-11-09 20:39:35 +01:00
Franziska Kunsmann	c7362df6c4	bundles/sshmon: import from work repository	2020-11-09 20:31:06 +01:00
Franziska Kunsmann	eaf268aea9	libs/tools: change resolve_identifier() to return ipv4 and ipv6 separately	2020-11-09 18:46:37 +01:00
Franziska Kunsmann	67386d9efa	bundles/cron: provide some environment, also manage /etc/crontab	2020-11-09 18:24:01 +01:00
Franziska Kunsmann	a58c5877bf	bundles/gce-workaround: uninstall gce-disk-expand, too	2020-11-09 16:48:28 +01:00
Franziska Kunsmann	4921e0b74f	bundles/systemd-networkd: use correct syntax for resolv.conf	2020-11-09 16:47:56 +01:00
Franziska Kunsmann	6f87a1d240	bundles/systemd-networkd: also deploy resolv.conf	2020-11-09 16:38:59 +01:00
Franziska Kunsmann	394424951f	bundles/systemd-networkd: fix naming of GatewayOnlink	2020-11-09 16:38:35 +01:00
Franziska Kunsmann	78047da04a	bundles/postgresql: only install packages after we have a zfs dataset	2020-11-09 16:37:00 +01:00
Franziska Kunsmann	5bd642236c	bundles/postfix: only call newaliases if we already have postfix installed	2020-11-09 16:36:26 +01:00
Franziska Kunsmann	607da9d39b	bundles/powerdns: user resolve_identifier() for node-dns-entries	2020-11-09 15:37:48 +01:00
Franziska Kunsmann	91fd33cfa0	bundles/systemd-networkd: better dhcp support	2020-11-09 14:58:09 +01:00
Franziska Kunsmann	5e7c7671e0	bundles/systemd-networkd: proper config	2020-11-09 14:48:19 +01:00
Franziska Kunsmann	fbb4e2f7a5	systemd-networkd: first draft	2020-11-09 14:08:32 +01:00
Franziska Kunsmann	c3c510c609	bundles/mautrix-telegram: disable parallel file transfers for now	2020-11-09 13:17:38 +01:00
Franziska Kunsmann	af97226512	nodes/htz.ex42-1048908: update mautrix-telegram to 0.9.2-rc2	2020-11-09 12:16:06 +01:00
Franziska Kunsmann	06e30cf23c	bundles/mautrix-telegram: also upgrade pip when upgrading bridge	2020-11-09 12:15:37 +01:00
Franziska Kunsmann	90e3bb7fb2	bundles/mautrix-telegram: no need to provide our own alembic.ini	2020-11-09 12:12:04 +01:00
Franziska Kunsmann	c0986eb956	bundles/mautrix-telegram: fix database migration	2020-11-09 12:09:17 +01:00
Franziska Kunsmann	614b920890	bundles/mautrix-telegram: pin version until database migration is fixed	2020-11-09 11:27:34 +01:00
Franziska Kunsmann	3ff5d8a7dd	bundles/postfix: add alias database	2020-11-09 10:52:24 +01:00
Franziska Kunsmann	64cffad6a7	bundles/rspamd: silence clamav cronjob	2020-11-08 15:03:26 +01:00
Franziska Kunsmann	0eca42d188	bundles/dovecot: fix home directory for virtual mailboxes	2020-11-08 13:00:44 +01:00
Franziska Kunsmann	b4b988e5f2	bundles/postfix: disable TLS1.0 and 1.1, disable weak ciphers	2020-11-08 12:24:37 +01:00
Franziska Kunsmann	f85349f0c5	bundles/postfixadmin: fix apt packages	2020-11-08 11:53:51 +01:00
Franziska Kunsmann	15428b03be	bundles/rspamd: introduce, add to htz.ex42-1048908	2020-11-08 10:43:51 +01:00
Franziska Kunsmann	a236444fe5	bundles/dovecot: make sure to reload dovecot after letsencrypt	2020-11-08 10:42:08 +01:00
Franziska Kunsmann	b00b2aa245	bundles/dovecot: autoexpunge Junk folder	2020-11-07 22:46:15 +01:00
Franziska Kunsmann	7080b0d89e	bundles/rspamd: create dummy bundle	2020-11-07 22:32:08 +01:00
Franziska Kunsmann	18b573a9c6	bundles/dovecot: introduce	2020-11-07 22:31:47 +01:00
Franziska Kunsmann	f42dda5961	bundles/postfixadmin: introduce	2020-11-07 22:31:29 +01:00
Franziska Kunsmann	5550d2cc56	bundles/postfix: introduce	2020-11-07 22:31:18 +01:00
Franziska Kunsmann	88afba9ce9	bundles/mx-puppet-discord: add RestartSec= to systemd unit file	2020-11-07 09:40:22 +01:00
Franziska Kunsmann	7ab121e7e5	bundles/mautrix-telegram: install bridge from git repository	2020-11-07 09:39:57 +01:00
Franziska Kunsmann	d7f578742b	bundles/mx-puppet-discord: put bridge repo into subdirectory ... this avoids recreating config and registration on every update, which in turn avoids restarting synapse	2020-11-07 09:08:10 +01:00
Franziska Kunsmann	c481fc1327	nodes/htz.ex42-1048908: add php	2020-11-07 09:06:11 +01:00
Franziska Kunsmann	f8bc4b2ad9	bundles/php: introduce	2020-10-31 13:00:38 +01:00
Franziska Kunsmann	e2d8923dee	bundles/nginx: use metadata reactor to determine index files	2020-10-31 10:41:48 +01:00
Franziska Kunsmann	f1f7086aab	bundles/postgresql: make sure we have postgres_role before adding postgres_db	2020-10-31 10:30:48 +01:00
Franziska Kunsmann	67c5c23194	bundles/nginx: support non-domain vhost names	2020-10-31 10:30:07 +01:00
Franziska Kunsmann	113221a9b2	bundles/nginx: make sure we have dhparam.pem	2020-10-31 10:18:40 +01:00
Franziska Kunsmann	9cc5c07466	bundles/letsencrypt: do not try to do authorizations without a webserver	2020-10-31 10:11:58 +01:00
Franziska Kunsmann	76fe68a3d1	bundles/zfs: fix dependencies, auto-load zfs module if not loaded	2020-10-31 10:11:15 +01:00
Franziska Kunsmann	8eeaabf615	bundles/nginx: use http 308 for https redirect ... basically "go away. nothing's here. use https forever."	2020-10-30 15:24:24 +01:00
Franziska Kunsmann	50372572f4	bundles/zfs: improvements	2020-10-25 16:41:18 +01:00
Franziska Kunsmann	3077d74318	bundles/users: alias s='sudo -i'	2020-10-25 13:21:04 +01:00
Franziska Kunsmann	351d779f20	bundles/users: add metadata entry for bash aliases	2020-10-25 13:19:46 +01:00
Franziska Kunsmann	2a992773f3	bundles/users: fish shell is gone everywhere	2020-10-25 13:17:26 +01:00
Franziska Kunsmann	831545d8b1	introduce node.metadata['hostname'] to other bundles, update nodefiles to reflect changes	2020-10-25 11:14:46 +01:00
Franziska Kunsmann	b70f9c9c9d	bundles/powerdns: make sure every dns server is able to resolve every other dns server	2020-10-25 10:58:11 +01:00
Franziska Kunsmann	a33d8e4201	bundles/powerdns: decrease RETRY time	2020-10-25 10:57:26 +01:00
Franziska Kunsmann	29f488c082	bundles/powerdns: put ip addresses of secondary nameservers into allow-axfer-ips	2020-10-25 10:56:55 +01:00
Franziska Kunsmann	152bb56fdd	bundles/powerdns: remove superslave setting ... debian currently does ship an older version, in which this setting is enabled by default.	2020-10-25 10:55:17 +01:00
Franziska Kunsmann	7a3e3ad68f	bundles/powerdns: we don't need the node names of primary nameservers	2020-10-25 10:53:55 +01:00
Franziska Kunsmann	43bd6b4774	bundles/powerdns: only enable webserver and api on primary nameservers	2020-10-25 10:52:51 +01:00
Franziska Kunsmann	78c553faf9	bundles/nodejs: update to 14.x	2020-10-24 17:20:50 +02:00
Franziska Kunsmann	a0702416a0	bundles/radicale: introduce	2020-10-23 15:22:35 +02:00
Franziska Kunsmann	d76f69ab49	bundles/apt: more output for upgrade-and-reboot	2020-10-23 06:26:19 +02:00
Franziska Kunsmann	2bc659af5f	bundles/users: add some bash aliases	2020-10-23 06:06:59 +02:00
Franziska Kunsmann	6398e668e1	bundles/apt: use DEBIAN_FRONTEND=noninteractive everywhere in upgrade-and-reboot	2020-10-23 04:33:01 +02:00
Franziska Kunsmann	07dcb813f3	bundles/raspberrypi: add options for camera and gpu_mem	2020-10-18 19:51:52 +02:00
Franziska Kunsmann	48cc865892	bundles/nginx: make sure webroot directory exists	2020-10-18 18:55:00 +02:00
Franziska Kunsmann	5c31cdccdd	bundles/kodi: fix path	2020-10-18 16:53:19 +02:00
Franziska Kunsmann	4271c92d70	bundles/gitea: fix chmod	2020-10-18 16:18:12 +02:00
Franziska Kunsmann	e32ad2eb19	formatting	2020-10-18 15:51:45 +02:00
Franziska Kunsmann	ececab44b4	bundles/miniflux: introduce	2020-10-18 15:49:32 +02:00
Franziska Kunsmann	366374b4e5	bundles/apt: handle unattended-upgrades ourselves	2020-10-18 15:33:41 +02:00
kunsi	5635571f97	Merge pull request 'PowerDNS instead of bind9' (#2) from kunsi-feature-powerdns-instead-of-bind into main ... Reviewed-on: https://git.kunsmann.eu/kunsi/bundlewrap/pulls/2	2020-10-17 11:12:35 +00:00
Franziska Kunsmann	ae7c3220e0	bundles/powerdns: fix NS records in zonefile header	2020-10-17 13:04:28 +02:00
Franziska Kunsmann	4d6b867bb3	bundles/powerdns: add metadata reactor for automatic node-dns-generation	2020-10-17 12:57:35 +02:00
Franziska Kunsmann	793220c0ec	bundles/powerdns: auto-generate zonefile header based on dns server nodes	2020-10-17 12:57:07 +02:00
Franziska Kunsmann	51e6d0534e	bundles/powerdns: fix Faults	2020-10-17 10:50:21 +02:00
Franziska Kunsmann	ca1646d394	bundles/powerdns: add support for zone transfers	2020-10-16 23:02:47 +02:00
Franziska Kunsmann	31cc74951b	bundles/powerdns: only reload pdns on zone changes, don't restart	2020-10-16 20:40:05 +02:00
Franziska Kunsmann	7c1c0f5e80	bundles/powerdns: increase default TTL to 1 day	2020-10-16 20:16:34 +02:00
Franziska Kunsmann	0a115d2372	EOL bundles/bind	2020-10-16 20:12:47 +02:00
Franziska Kunsmann	155c93f739	bundles/powerdns: fix schema import for pgsql	2020-10-16 20:10:55 +02:00
Franziska Kunsmann	9bba18d13e	bundles/powerdnsadmin: introduce	2020-10-16 20:10:34 +02:00
Franziska Kunsmann	0533e4087a	bundles/postgresql: install dev packages	2020-10-16 19:24:40 +02:00
Franziska Kunsmann	d442ab399e	bundles/powerdns: support pgsql	2020-10-16 19:24:12 +02:00
Franziska Kunsmann	2c1a825b7d	bundles/apt: make sure we have python3-dev	2020-10-16 19:14:15 +02:00
Franziska Kunsmann	8acc0a7bb1	bundles/apt: make sure we have build-essential and git	2020-10-16 19:12:26 +02:00
Franziska Kunsmann	a553e736d1	bundles/powerdns: fix dependencies	2020-10-16 17:59:46 +02:00
Franziska Kunsmann	df852e8ef9	bundles/powerdns: more config, add bind backend	2020-10-16 17:44:31 +02:00
Franziska Kunsmann	fa67bd13f4	bundles/powerdns: minimal pdns.conf	2020-10-16 13:19:44 +02:00
Franziska Kunsmann	d029af554c	bundles/travelynx: make sure to restart worker service, too	2020-10-16 13:03:52 +02:00
Franziska Kunsmann	c5c0c923d1	home.kodi-wohnzimmer: switch to debian-multimedia repository to have kodi 18	2020-10-15 19:34:22 +02:00
Franziska Kunsmann	a08f483ac5	bundles/powerdns: introduce	2020-10-13 19:06:22 +02:00
Franziska Kunsmann	591d3fb947	bundles/nfs-client: fix installation of automount units	2020-10-10 17:25:39 +02:00
Franziska Kunsmann	6a8768fb2f	bundles/nfs-client: introduce	2020-10-10 16:37:33 +02:00
Sophie Schiller	3170e75bbe	update kodi to unstable	2020-10-09 18:12:56 +02:00
Franziska Kunsmann	a955a7b84d	bundles/raspberrypi: do not set empty default for config.txt	2020-10-09 17:46:36 +02:00
Franziska Kunsmann	c953d138ee	bundles/kodi: fix dependencies for alsa	2020-10-09 17:46:07 +02:00
Franziska Kunsmann	5e8489a74c	bundles/kodi: add missing dependencies	2020-10-03 18:36:48 +02:00
Franziska Kunsmann	c2bcd1f0d9	bundles/apt: add raspbian to supported OSes	2020-10-03 18:36:29 +02:00
Franziska Kunsmann	2387b196b2	bundles/kodi: use alsa instead of pulseaudio	2020-10-03 17:00:13 +02:00
Franziska Kunsmann	018bdd1d00	bundles/kodi: also install addon repository	2020-10-03 15:54:03 +02:00
Franziska Kunsmann	9b8c5450ec	bundles/raspberrypi: make sure dphys-swapfile is uninstalled	2020-10-03 15:10:28 +02:00
Franziska Kunsmann	60cfe90a1d	bundles/raspberrypi: force maximum cpu frequency	2020-10-03 13:52:34 +02:00
Franziska Kunsmann	32fd2f7a7b	bundles/kodi: introduce	2020-10-03 13:36:12 +02:00
Franziska Kunsmann	fc44a9cd69	bundles/raspberrypi: enable audio, force hdmi mode	2020-10-03 13:35:44 +02:00
Franziska Kunsmann	675f8beea9	bundles/raspberrypi: improvements	2020-09-27 17:18:05 +02:00
Franziska Kunsmann	c2c9913514	allow setting hostname in metadata	2020-09-27 16:46:54 +02:00
Franziska Kunsmann	5d1e71e83e	bundles/raspberrypi: introduce	2020-09-27 16:46:26 +02:00
Franziska Kunsmann	0784b85fbb	bundles/mx-puppet-discord: create registration.yaml using bw	2020-09-26 15:34:12 +02:00
Franziska Kunsmann	bf7e982fdb	bundles/bind: change zonefile header	2020-09-26 15:20:37 +02:00
Franziska Kunsmann	4b41a00ac4	bundles/matrix-synapse: don't remove conf.d directory ... We're taking care of that by deploying a override.conf instead	2020-09-26 15:20:08 +02:00
Franziska Kunsmann	a67353e24f	Merge branch 'pending-new-bw-release' into main	2020-09-26 15:18:29 +02:00
Franziska Kunsmann	c8adfcabf1	bundles/octoprint: add octoprint to dialout group	2020-09-26 15:16:09 +02:00
Franziska Kunsmann	91c4846129	bundles/mjpg-streamer: introduce	2020-09-22 19:59:36 +02:00
Franziska Kunsmann	176a41e2f3	bundles/octoprint: add octoprint to gpio group	2020-09-22 19:16:38 +02:00
Franziska Kunsmann	d02538368a	bundles/octoprint: add systemd-wrapper script	2020-09-22 18:52:11 +02:00
Franziska Kunsmann	7ea85247e0	bundles/nginx: proxy is a dict now, add some more configuration options	2020-09-22 18:39:38 +02:00
Franziska Kunsmann	d1672a9a45	bundles/octoprint: restart octoprint after changing unit file	2020-09-22 18:11:42 +02:00
Franziska Kunsmann	eee9b00f10	bundles/systemd: fix daemon-reload command	2020-09-22 18:11:09 +02:00
Franziska Kunsmann	44a6e8292a	bundles/bind: add node-dns-auto-generator	2020-09-20 18:56:53 +02:00
Franziska Kunsmann	151d8e92c3	bundles/nginx: do not set X-Forwarded-Proto if https is disabled, do not use http2 without ssl	2020-09-20 15:46:39 +02:00
Franziska Kunsmann	84a78f5fec	bundles/octoprint: allow 'sudo /usr/bin/vcgencmd'	2020-09-20 15:12:18 +02:00
Franziska Kunsmann	577c3c7c49	bundles/sudo: change metadata key to 'sudo_commands'	2020-09-20 15:11:52 +02:00
Franziska Kunsmann	04c632953d	bundles/octoprint: introduce	2020-09-20 15:05:17 +02:00
Franziska Kunsmann	d6799088c4	bundles/nginx: add metadata option to disable https	2020-09-20 14:36:43 +02:00
Franziska Kunsmann	bb0b6f2079	shuffle some ports around	2020-09-20 13:16:08 +02:00
Franziska Kunsmann	3242d97cfa	bundles/mautrix-telegram: use pkg_pip	2020-09-20 10:30:13 +02:00
Franziska Kunsmann	eede422e9a	shuffle some ports around	2020-09-20 10:29:19 +02:00
Franziska Kunsmann	d1bbb5a855	bundles/travelynx: restart service when changing imprint	2020-09-12 17:08:18 +02:00
Franziska Kunsmann	dd082d45e9	bundles/matrix-synapse: set suppress_key_server_warning if using matrix.org as trusted key server	2020-09-12 13:22:16 +02:00
Franziska Kunsmann	6adc4a675f	bundles/mautrix-telegram: reload systemd when changing service file	2020-09-12 13:03:15 +02:00
Franziska Kunsmann	2361466c84	bundles/mautrix-telegram: handle registration.yaml ourselves	2020-09-12 12:59:34 +02:00
Franziska Kunsmann	f6ecaf3c29	bundles/mautrix-telegram: also deploy alembic.ini, make sure alembic ini gets called if alembic scripts dir does not exist	2020-09-12 12:09:20 +02:00
Franziska Kunsmann	cf2920f284	bundles/mautrix-telegram: introduce	2020-09-06 12:15:37 +02:00
Franziska Kunsmann	180802a669	bundles/apt: make sure we do have pip3 and virtualenv	2020-09-06 12:04:56 +02:00
Franziska Kunsmann	1744596296	bundles/matrix-synapse: deploy override.conf to make sure synapse doesn't try to load config from there	2020-09-05 20:06:35 +02:00
Franziska Kunsmann	a443272e02	bundles/gitea: make sure to restart gitea after downloading binary	2020-09-04 21:06:13 +02:00
Franziska Kunsmann	e35f41c6dc	bundles/letsencrypt: change cronjob times	2020-08-30 21:26:33 +02:00
Franziska Kunsmann	27d6c1880a	bundles/influxdb: introduce	2020-08-30 12:07:06 +02:00
Franziska Kunsmann	ccd4a09183	bundles/apt: allow variables {os} and {os_release} in sources.list entries	2020-08-30 12:06:19 +02:00
Franziska Kunsmann	77051c0a0e	bundles/nginx: clean up unmanaged nginx vhosts	2020-08-30 11:36:48 +02:00
Franziska Kunsmann	626355178a	bundles/apt: make sure popularity-contest is uninstalled	2020-08-30 11:14:31 +02:00
Franziska Kunsmann	f22b30e4fa	bundles/cron: purge unwanted data from /etc/cron.d	2020-08-30 11:14:10 +02:00
Franziska Kunsmann	c8ae22da8a	I HATE GOOGLE (v3)	2020-08-30 10:44:13 +02:00
Franziska Kunsmann	b24253a64b	bundles/nginx: determine worker processes by cpu count by default	2020-08-30 10:32:29 +02:00
Franziska Kunsmann	049b77e702	bundles/postgresql: use zfs if possible	2020-08-29 21:30:12 +02:00
Franziska Kunsmann	4934eb46fb	bundles/zfs: import bundle from work repository	2020-08-29 21:10:59 +02:00
Franziska Kunsmann	b690ae25b0	bundles/apt: use node.os and node.os_version to determine settings	2020-08-29 21:10:22 +02:00
Franziska Kunsmann	007a617785	bundles/users: rework	2020-08-29 19:21:35 +02:00
Franziska Kunsmann	0de62a0afa	bundles/postgresql: add apt packages, create root user	2020-08-21 16:21:46 +02:00
Franziska Kunsmann	b4122bf3f9	travelynx: add imprint	2020-08-21 15:06:04 +02:00
Franziska Kunsmann	4a81c05f6d	I HATE GOOGLE (v2)	2020-08-21 14:41:34 +02:00
Franziska Kunsmann	0d8332ec7e	bundles/gitea: auto-configure nginx vhost	2020-08-20 15:49:11 +02:00
Franziska Kunsmann	1fb5787807	htz.ex42-1048908: can haz gitea?	2020-08-20 15:34:27 +02:00
Franziska Kunsmann	55d6257243	bundles/users: only remove ssh key if we're managing configs	2020-08-20 15:34:05 +02:00
Franziska Kunsmann	21343f6213	get rid of cloud-init	2020-08-20 11:07:18 +02:00
Franziska Kunsmann	ad620396f5	bundles/apt: rework gpg key handling	2020-08-20 10:59:45 +02:00
Franziska Kunsmann	54371cf289	I HATE GOOGLE	2020-08-20 10:01:34 +02:00
Franziska Kunsmann	4974494ee0	bundles/travelynx: make version configurable via metadata	2020-08-20 09:44:01 +02:00
Franziska Kunsmann	b7f377816f	htz.ex42-1048908: fix travelynx static files	2020-08-19 22:01:54 +02:00
Franziska Kunsmann	15dbc4307f	bundles/travelynx: use worker service instead of cronjob	2020-08-19 21:53:19 +02:00
Franziska Kunsmann	8547948ce6	bundles/nginx: also set host header for proxy connections	2020-08-19 21:43:37 +02:00
Franziska Kunsmann	15eda05074	bundles/travelynx: hard-code displayed version	2020-08-19 20:09:21 +02:00
Franziska Kunsmann	71b604c5af	bundles/travelynx: use github mirror ... git.finalrewind.org seems slow sometimes, which breaks our CI pipeline	2020-08-19 19:06:59 +02:00
Franziska Kunsmann	277c259e05	bundles/travelynx: hard-code displayed version	2020-08-19 18:52:20 +02:00
Franziska Kunsmann	9f4f19cdc5	bundles/travelynx: make sure config changes are reflected in production	2020-08-19 18:51:27 +02:00
Franziska Kunsmann	5797d790aa	bundles/travelynx: add cron	2020-08-19 18:48:05 +02:00
Franziska Kunsmann	0dd2a4b985	htz.ex42-1048908: can haz travelynx?	2020-08-19 18:43:32 +02:00
Franziska Kunsmann	20f3f566ac	bundles/mx-puppet-discord: fix postgres database	2020-08-19 18:39:07 +02:00
Franziska Kunsmann	0ebcf9762e	add gce workaround ... those daemons keep messing with our settings, get rid of them	2020-08-18 15:51:24 +02:00
Franziska Kunsmann	11468cd1e7	bundles/apt: more default packages	2020-08-18 15:46:42 +02:00
Franziska Kunsmann	7d911ce835	bundles/matrix-synapse: remove conf.d, fix server name	2020-08-18 15:34:20 +02:00
Franziska Kunsmann	5e2fea8497	update to bw4	2020-08-18 15:31:52 +02:00
Franziska Kunsmann	d7862918a6	bundles/nginx: set default X-Frame-Options to SAMEORIGIN	2020-08-18 15:07:43 +02:00
Franziska Kunsmann	17828a29f8	bundles/nginx: fix hsts header	2020-08-14 08:23:41 +02:00
Franziska Kunsmann	7986f6ee7d	bundles/letsencrypt: remove ocsp stapling ... This causes problems with weechat and dovecot. Those certificates are short-lived, so not having OCSP stapling is probably fine.	2020-07-26 18:48:37 +02:00
Franziska Kunsmann	f7eb0cc150	bundles/{letsencrypt,nginx}: fix ocsp stapling	2020-07-19 12:10:19 +02:00
Franziska Kunsmann	de632a7725	htz.ex42-1048908: add missing domains	2020-07-19 11:26:12 +02:00
Franziska Kunsmann	94c2c644a6	bundles/nginx: support PHP 7.3	2020-07-19 11:09:53 +02:00
Franziska Kunsmann	0743283763	bundles/letsencrypt: use sorted() in domains.txt	2020-07-19 10:59:19 +02:00
Franziska Kunsmann	31a1a88d13	bundles/nginx: use DEFAULTS for letsencrypt	2020-07-19 10:58:54 +02:00
Franziska Kunsmann	950897324c	bundles/mx-puppet-discord: add dependency on chown	2020-07-05 16:59:30 +02:00
Franziska Kunsmann	f47c9ea0a0	htz-cloud: keep cloud-init	2020-06-08 10:12:48 +02:00
Franziska Kunsmann	2e92f9851a	bundles/apt: auto reboot after upgrade if needed	2020-06-08 10:08:16 +02:00
Franziska Kunsmann	507e28bc24	bundles/apt: remove cloud-init if found on node	2020-06-06 10:26:05 +02:00
Franziska Kunsmann	9d9e33977a	bundles/bind: add	2020-06-05 17:50:45 +02:00
Franziska Kunsmann	d1236d6e25	bundles/nginx: add stub_status	2020-06-01 13:35:54 +02:00
Franziska Kunsmann	5f804ca3be	bundles/letsencrypt: add metadata to reload certificates and services	2020-06-01 12:33:25 +02:00
Franziska Kunsmann	2a6547dfb7	bundles/cron: add	2020-06-01 11:54:28 +02:00
Franziska Kunsmann	85b3adf671	add proxy feature to nginx	2020-06-01 11:31:13 +02:00
Franziska Kunsmann	3523edbcb4	bundles/nginx: ensure we're doing letsencrypt, since we're enforcing ssl	2020-06-01 11:17:52 +02:00
Franziska Kunsmann	54467af6f5	bundles/jenkins-ci: fix metaproc name	2020-06-01 11:14:04 +02:00
Franziska Kunsmann	943a7c1566	nodes/htz.ex42-1048908: move postgres roles and databases to bundles	2020-06-01 11:09:40 +02:00
Franziska Kunsmann	36c8b90c4b	bundles/nginx: switch to TLS 1.2 and 1.3 only	2020-06-01 11:01:00 +02:00
Franziska Kunsmann	871341dd4b	bundles/riot-web: add nginx metadata	2020-06-01 10:53:19 +02:00
Franziska Kunsmann	c4330f866b	bundles/nginx: add deployment of vhost configs	2020-06-01 10:52:52 +02:00
Franziska Kunsmann	dc9e8dc679	add letsencrypt bundle	2020-06-01 10:26:37 +02:00
Franziska Kunsmann	d136e90a3d	bundles/apt: no need to do minimal steps when doing unattended-upgrade	2020-05-29 20:06:33 +02:00
Franziska Kunsmann	6d9e62e653	bundles/apt: fix typo	2020-05-29 19:58:21 +02:00
Franziska Kunsmann	86d88a4355	fix apt unattended-upgrades	2020-05-23 17:01:30 +02:00
Franziska Kunsmann	bd48c45553	bundles/users: edit tmux.conf	2020-05-23 11:36:03 +02:00
Franziska Kunsmann	7a04c7182e	bundles/users: fix typo	2020-05-16 10:32:44 +02:00
Franziska Kunsmann	4e72b41971	bundles/mx-puppet-discord: config tweaks	2020-05-16 10:06:40 +02:00
Franziska Kunsmann	dddb387e58	display login name in tmux status bar	2020-05-09 15:36:32 +02:00
Franziska Kunsmann	34703b6eba	add bundle jenkins-ci	2020-05-09 13:14:49 +02:00
Franziska Kunsmann	3765189450	bundles/voc-loudness-monitor: remove sloop	2020-05-09 11:35:40 +02:00
Franziska Kunsmann	7b3d3567de	bundles/voc-loudness-monitor: use h264 instead	2020-05-09 10:23:50 +02:00
Franziska Kunsmann	fa50f8b248	bundles/seafile: fix mode of /opt/seafile	2020-04-13 09:59:02 +02:00
Franziska Kunsmann	f701110654	bundles/users: fix deletion of unneded home directories	2020-04-13 09:57:33 +02:00
Franziska Kunsmann	004422c060	bundles/seafile: initial commit ... seafile installation itself is not managed	2020-04-13 09:53:10 +02:00
Franziska Kunsmann	ffb962b108	bundles/nginx: add nginx config	2020-04-13 09:52:26 +02:00
Franziska Kunsmann	411d22d404	bundles/users: add vim	2020-04-11 12:26:02 +02:00
Franziska Kunsmann	2990216a8b	bundles/users: add fish_variables	2020-04-11 12:06:57 +02:00
Franziska Kunsmann	4c79fdf997	bundles/voc-loudness-monitor: add s23 and s89	2020-04-11 11:29:04 +02:00
Franziska Kunsmann	f1a693d0d6	bundles: only install apt packages via apt bundle to avoid double defining packages	2020-04-11 11:25:24 +02:00
Franziska Kunsmann	8a26def21c	add matrix-synapse bundle	2020-04-05 11:38:31 +02:00
Franziska Kunsmann	29eeffbdc3	bundles/mx-puppet-discord: restart bridge if config or registration changed	2020-04-04 18:33:05 +02:00
Franziska Kunsmann	78bae4f77b	bundles/postgresql: fix database creation	2020-04-04 18:28:38 +02:00
Franziska Kunsmann	1dfa5c457c	bundles/mx-puppet-discord: specify path to registration file in systemd unit	2020-04-04 18:28:15 +02:00
Franziska Kunsmann	081fafc64e	bundles/mx-puppet-discord: add systemd unit file	2020-04-04 18:21:40 +02:00
Franziska Kunsmann	629c38230c	bundles/users: add option to change home directory mode	2020-04-04 18:15:08 +02:00
Franziska Kunsmann	a8a3bcdb83	bundles/mx-puppet-discord: remove registration.yaml before generating new one	2020-04-04 18:10:37 +02:00
Franziska Kunsmann	5910d825c0	bundles/mx-puppet-discord: set default listen-addr to IPv4	2020-04-04 18:07:27 +02:00
Franziska Kunsmann	4c5a88f734	add bundle for mx-puppet-discord	2020-04-04 18:01:58 +02:00
Franziska Kunsmann	1856f4749c	bundles/users: add option to not automatically deploy configs	2020-04-04 17:54:26 +02:00
Franziska Kunsmann	4da792f522	bundles/postgresql: add bundle	2020-04-04 17:53:59 +02:00
Franziska Kunsmann	234604cd0c	bundles/sudo: add secure_path to sudoers file	2020-04-04 16:53:25 +02:00
Franziska Kunsmann	f3dc5c8325	bundles/nodejs: move to own bundle	2020-04-04 16:31:50 +02:00
Franziska Kunsmann	a1e05108c1	bundles/apt: change origins to sites	2020-04-04 11:21:30 +02:00
Franziska Kunsmann	0750610ccc	bundles/users: fix user-specific tmux config	2020-03-28 13:32:39 +01:00
Franziska Kunsmann	719d41a557	bundles/users: add readme	2020-03-28 13:12:45 +01:00
Franziska Kunsmann	0b51c9dae4	bundles/users: deploy standard tmux config to /etc/tmux.conf instead of ~/.tmux.conf	2020-03-28 13:03:35 +01:00
Franziska Kunsmann	eddb8ca70a	bundles/users: add option for custom tmux/bash/fish configs	2020-03-28 12:56:45 +01:00
Franziska Kunsmann	810c2cfcf8	bundles/users: also deploy tmux config	2020-03-28 12:40:37 +01:00
Franziska Kunsmann	d7ca23d57e	bundles/apt: autoclean unused packages	2020-03-28 12:36:40 +01:00
Franziska Kunsmann	32bdcae23f	bundles/hostname: add node name to hosts file	2020-03-28 09:47:43 +00:00
Franziska Kunsmann	841b49cd18	bundles/users: also deploy shell config	2020-03-27 13:33:37 +00:00
Franziska Kunsmann	6656a0864f	bundles/{systemd,hostname}: add hostname control	2020-03-27 12:46:10 +00:00
Franziska Kunsmann	067b498bf2	bundles/sudo: add bundle	2020-03-27 11:52:17 +00:00
Franziska Kunsmann	9a956e832a	bundles/voc-loudness-monitor: no need to start the loudness units on every run	2020-03-27 11:50:50 +00:00
Franziska Kunsmann	7406ed7522	bundles/apt: fix additional origins for unattended-users	2020-03-27 11:30:11 +00:00
Franziska Kunsmann	a3c0e6a08e	bundles/users: regular users don't need a password	2020-03-27 11:28:44 +00:00
Franziska Kunsmann	8e681e4c39	bundles/voc-loudness-monitor: sources need ffmpeg installed	2020-03-21 11:42:33 +00:00
Franziska Kunsmann	e351c508f2	bundles/systemd: add daemon-reload action	2020-03-21 11:31:56 +00:00
Franziska Kunsmann	8abfe74c2b	bundles/voc-loudness-monitor: inital commit of sources units	2020-03-21 11:31:27 +00:00
Franziska Kunsmann	9556e423bd	bundles/nginx: initial commit	2020-03-14 09:56:19 +00:00
Franziska Kunsmann	b4808d54e9	bundles/riot-web: add metadata to write config.json	2020-03-14 09:38:12 +00:00
Franziska Kunsmann	589965b58b	bundles/apt: fix unattended-upgrades	2020-03-14 09:37:31 +00:00
Franziska Kunsmann	d0ba89a1f3	default shell is bash, not fish ... ... sadly :(	2020-02-29 14:47:41 +00:00
Franziska Kunsmann	a27fd619a2	add riot-web bundle	2020-02-29 14:42:54 +00:00
Franziska Kunsmann	ad7b164533	add apt bundle	2020-02-29 14:42:29 +00:00
Franziska Kunsmann	e5539d508b	bundles/users: remove authorized_keys if not set by bundle	2020-02-29 13:09:14 +00:00
Franziska Kunsmann	a47bdcfb39	fixup groups	2020-02-29 12:38:27 +00:00
Franziska Kunsmann	ebf7f7ada9	add users bundle	2020-02-29 12:30:21 +00:00
Franziska Kunsmann	3934414140	initial version of vmhost bundle	2020-02-29 12:30:06 +00:00