369 commits

Author	SHA1	Message	Date
Franzi	ccfa56ad5e	bundles/pppd: also wait for ppp interface to vanish before restarting	2020-11-15 10:02:13 +01:00
Franzi	0aafeb96cd	bundles/pppd: make sure dependent services are stopped before restarting pppoe session	2020-11-15 09:56:06 +01:00
Franzi	d83dbbdd75	bundles/systemd-networkd: use some more options for bond interfaces	2020-11-15 09:39:44 +01:00
Franzi	5319cd1e8b	bundles/netdata: disable health checks	2020-11-14 16:55:29 +01:00
Franzi	6d58f2387f	bundles/openssh: introduce, add to all nodes	2020-11-14 14:46:59 +01:00
Franzi	e56e875433	bundles/rspamd: switch to automatically-generated dkim key	2020-11-14 14:35:27 +01:00
Franzi	3213e462c5	bundles/netdata: only save to ram, keep less history	2020-11-14 14:34:38 +01:00
Franzi	1339564dc4	bundles/netdata: introduce, add to home.nas and home.router	2020-11-14 14:05:28 +01:00
Franzi	ff607777ce	bundles/backup-client: support using a non-standard ssh port	2020-11-14 12:52:18 +01:00
Franzi	f405dca771	bundles/pppd: add dyndns capability	2020-11-14 12:46:19 +01:00
Franzi	0ca8edf656	bundles/apt: move patchday to metadata reactor, make patchday configurable	2020-11-14 12:24:55 +01:00
Franzi	32b7dda61f	bundles/iptables: add newline to rules files	2020-11-14 12:24:12 +01:00
Franzi	877744b0ba	bundles/pppd: send out a Router Solicitation on ifup	2020-11-14 12:11:51 +01:00
Franzi	a14580944b	bundles/{radvd,wide-dhcp6c}: improve handling of non-properly terminated ip-down scripts	2020-11-14 11:57:01 +01:00
Franzi	644eb37b82	bundles/radvd: introduce, add to home.router	2020-11-14 11:47:44 +01:00
Franzi	fa224a9939	bundles/wide-dhcp6c: introduce, add to home.router	2020-11-14 11:34:16 +01:00
Franzi	00ba7e49d6	bundles/pppd: accept RA on ppp interface	2020-11-13 23:56:59 +01:00
Sophie Schiller	cbfc8c75ad	bundles/dhcpd add defaults file and some escaping	2020-11-13 23:30:49 +01:00
Sophie Schiller	ef211f7356	update gitignore	2020-11-13 23:30:49 +01:00
Sophie Schiller	dcf944b198	bundles/dhcpd add initial items, metadata and template	2020-11-13 23:30:49 +01:00
Franzi	6ba0f6df1d	bundles/systemd: make sure we're using UTC and NTP	2020-11-13 23:26:13 +01:00
Franzi	870a5252e5	bundles/pppd: add iptables rules on ifup/ifdown	2020-11-13 23:04:43 +01:00
Franzi	f65e216828	bundles/iptables: introduce, add to home.router	2020-11-13 22:47:23 +01:00
Franzi	df9863ef31	bundles/openvpn-client: add	2020-11-13 22:15:36 +01:00
Franzi	e515378497	bundles/backup-server: dummy nodes never do backups	2020-11-13 21:58:35 +01:00
Franzi	3b829caaf6	bundles/pppd: introduce	2020-11-13 21:41:02 +01:00
Franzi	b1860b7e01	bundles/systemd-networkd: add option to only create a .netdev file for interfaces	2020-11-13 21:40:44 +01:00
Franzi	75d86f3339	bundles/systemd-networkd: support vlans	2020-11-13 16:29:17 +01:00
Franzi	4213b60052	bundles/lldp: introduce, add to all nodes at home	2020-11-13 16:28:43 +01:00
Franzi	b9b0a9c5ca	bundles/vmhost: install correct packages	2020-11-13 14:47:40 +01:00
Franzi	df63f8c732	bundles/nginx: make sure /var/www exists	2020-11-13 13:35:02 +01:00
Franzi	e91ac7e457	bundles/backup-client: fix detection of rsync errors	2020-11-13 13:34:21 +01:00
Franzi	d31910368c	icinga2: install packages and dependencies	2020-11-13 13:19:26 +01:00
Franzi	6bac83def2	bundles/rspamd: fix automatic generation of dkim key	2020-11-13 13:11:26 +01:00
Franzi	cff0870e63	bundles/rspamd: refine auto-generation of dkim signing keys	2020-11-13 13:09:37 +01:00
Franzi	56f1b1a6c6	bundles/rspamd: first draft for automatically-rotating dkim keys	2020-11-13 13:09:34 +01:00
Franzi	f04dac11e5	Merge branch 'kunsi-icinga2' into main	2020-11-13 13:03:16 +01:00
Franzi	741f3b0032	bundles/backup-client: fix cronjob	2020-11-13 12:57:50 +01:00
Franzi	0749fc75c5	bundles: add backup paths	2020-11-13 12:37:26 +01:00
Franzi	f71653e3ce	bundles/backup-{client,server}: introduce	2020-11-13 12:36:52 +01:00
Franzi	30ee0c8bdf	bundles/mx-puppet-discord: restart service after building new version	2020-11-13 09:26:34 +01:00
Franzi	e5c12f0628	bundles/nginx: create webroot directories after bundle:zfs is done	2020-11-12 22:59:46 +01:00
Franzi	2274e7aa37	bundles/nfs-server: introduce	2020-11-12 19:59:02 +01:00
Franzi	f2a0f0b46a	bundles/systemd-networkd: support bond and bridge interfaces	2020-11-12 19:38:10 +01:00
Franzi	633ccb97fd	bundles/zfs: rename zed -> zfs-zed	2020-11-12 19:36:28 +01:00
Franzi	d01d89d432	bundles/apt: support debian 11	2020-11-12 18:40:19 +01:00
Franzi	e395a42160	bundles/apt: no need to have apt-daily.timer running	2020-11-12 15:10:59 +01:00
Franzi	087f4bb74d	groups/{gce,home}: send mail via mx0.kunbox.net	2020-11-11 13:31:01 +01:00
Franzi	11701a67c8	dns: deploy MTA-STS	2020-11-11 11:41:06 +01:00
Franzi	d47c39185b	bundles/php: no need to restart php if just installing the base packages	2020-11-11 08:37:29 +01:00
Franzi	652fb72ccc	bundles/postfix: fix metadata reactor for letsencrypt	2020-11-11 08:35:36 +01:00
Franzi	9dd7589f12	bundles/postfix: add submission_header_cleanup file	2020-11-10 20:34:27 +01:00
Franzi	8180769120	bundles/postfix: add postmaster alias	2020-11-10 20:32:39 +01:00
Franzi	f9bd2d695d	bundles/postfix: add SPAM BLOCKLISt for every non-private IP attached to the server	2020-11-10 14:28:12 +01:00
Franzi	aad1a742b7	bundles/icinga2: add ipv6-capable check_rbl script	2020-11-10 14:26:07 +01:00
Franzi	f30aa48eca	bundles/icinga2: add sshmon private key	2020-11-10 13:43:46 +01:00
Franzi	a176a1aa65	bundles/icinga2: introduce, install checks, install sources.list, create postgres database	2020-11-10 13:37:27 +01:00
Franzi	a9c00409b4	bundles/mautrix-telegram: fix item dependency error	2020-11-10 13:26:03 +01:00
Franzi	6cd02dc563	bundles: move non-login users to items.py	2020-11-10 13:24:07 +01:00
Franzi	cca4fec761	bundles/users: get default user data from users.json	2020-11-10 13:12:36 +01:00
Franzi	c090a9c2c2	bundles/users: move root user to metadata	2020-11-10 12:50:08 +01:00
Franzi	3fbe32518a	bundles/postgresql: rename users -> roles	2020-11-10 12:37:58 +01:00
Franzi	d087cea869	bundles/gitea: add monitoring	2020-11-10 11:32:59 +01:00
Franzi	985f47ca99	bundles/miniflux: add monitoring	2020-11-10 11:28:40 +01:00
Franzi	8cb997133a	bundles/nginx: add monitoring	2020-11-10 10:57:04 +01:00
Franzi	65a8efc97f	bundles/zfs: fix monitoring metadata	2020-11-10 10:35:01 +01:00
Franzi	f80896fa3b	bundles/postfix: add monitoring	2020-11-10 10:21:37 +01:00
Franzi	420cea15d2	bundles/apt: add monitoring for unattended upgrades	2020-11-10 09:50:20 +01:00
Franzi	6ca0d863b1	bundles/sudo: use sudoers.d	2020-11-09 20:39:35 +01:00
Franzi	c7362df6c4	bundles/sshmon: import from work repository	2020-11-09 20:31:06 +01:00
Franzi	eaf268aea9	libs/tools: change resolve_identifier() to return ipv4 and ipv6 separately	2020-11-09 18:46:37 +01:00
Franzi	67386d9efa	bundles/cron: provide some environment, also manage /etc/crontab	2020-11-09 18:24:01 +01:00
Franzi	a58c5877bf	bundles/gce-workaround: uninstall gce-disk-expand, too	2020-11-09 16:48:28 +01:00
Franzi	4921e0b74f	bundles/systemd-networkd: use correct syntax for resolv.conf	2020-11-09 16:47:56 +01:00
Franzi	6f87a1d240	bundles/systemd-networkd: also deploy resolv.conf	2020-11-09 16:38:59 +01:00
Franzi	394424951f	bundles/systemd-networkd: fix naming of GatewayOnlink	2020-11-09 16:38:35 +01:00
Franzi	78047da04a	bundles/postgresql: only install packages after we have a zfs dataset	2020-11-09 16:37:00 +01:00
Franzi	5bd642236c	bundles/postfix: only call newaliases if we already have postfix installed	2020-11-09 16:36:26 +01:00
Franzi	607da9d39b	bundles/powerdns: user resolve_identifier() for node-dns-entries	2020-11-09 15:37:48 +01:00
Franzi	91fd33cfa0	bundles/systemd-networkd: better dhcp support	2020-11-09 14:58:09 +01:00
Franzi	5e7c7671e0	bundles/systemd-networkd: proper config	2020-11-09 14:48:19 +01:00
Franzi	fbb4e2f7a5	systemd-networkd: first draft	2020-11-09 14:08:32 +01:00
Franzi	c3c510c609	bundles/mautrix-telegram: disable parallel file transfers for now	2020-11-09 13:17:38 +01:00
Franzi	af97226512	nodes/htz.ex42-1048908: update mautrix-telegram to 0.9.2-rc2	2020-11-09 12:16:06 +01:00
Franzi	06e30cf23c	bundles/mautrix-telegram: also upgrade pip when upgrading bridge	2020-11-09 12:15:37 +01:00
Franzi	90e3bb7fb2	bundles/mautrix-telegram: no need to provide our own alembic.ini	2020-11-09 12:12:04 +01:00
Franzi	c0986eb956	bundles/mautrix-telegram: fix database migration	2020-11-09 12:09:17 +01:00
Franzi	614b920890	bundles/mautrix-telegram: pin version until database migration is fixed	2020-11-09 11:27:34 +01:00
Franzi	3ff5d8a7dd	bundles/postfix: add alias database	2020-11-09 10:52:24 +01:00
Franzi	64cffad6a7	bundles/rspamd: silence clamav cronjob	2020-11-08 15:03:26 +01:00
Franzi	0eca42d188	bundles/dovecot: fix home directory for virtual mailboxes	2020-11-08 13:00:44 +01:00
Franzi	b4b988e5f2	bundles/postfix: disable TLS1.0 and 1.1, disable weak ciphers	2020-11-08 12:24:37 +01:00
Franzi	f85349f0c5	bundles/postfixadmin: fix apt packages	2020-11-08 11:53:51 +01:00
Franzi	15428b03be	bundles/rspamd: introduce, add to htz.ex42-1048908	2020-11-08 10:43:51 +01:00
Franzi	a236444fe5	bundles/dovecot: make sure to reload dovecot after letsencrypt	2020-11-08 10:42:08 +01:00
Franzi	b00b2aa245	bundles/dovecot: autoexpunge Junk folder	2020-11-07 22:46:15 +01:00
Franzi	7080b0d89e	bundles/rspamd: create dummy bundle	2020-11-07 22:32:08 +01:00
Franzi	18b573a9c6	bundles/dovecot: introduce	2020-11-07 22:31:47 +01:00
Franzi	f42dda5961	bundles/postfixadmin: introduce	2020-11-07 22:31:29 +01:00
Franzi	5550d2cc56	bundles/postfix: introduce	2020-11-07 22:31:18 +01:00