Commit graph

561 commits

Author SHA1 Message Date
cbc0a1a927
nodes/htz.ex42-1048908: fix X-Forwarded-For header for matrix-media-repo
All checks were successful
bundlewrap/pipeline/head This commit looks good
2021-07-04 20:03:22 +02:00
b5ab21549d
bundles/nginx: rename 'proxy' metadata to 'locations', support more generic options, move extras files to metadata
All checks were successful
bundlewrap/pipeline/head This commit looks good
2021-07-04 19:28:03 +02:00
Sophie Schiller
a3a228fc2d bw/htz-cloud.miniserver bump element-web version
All checks were successful
bundlewrap/pipeline/head This commit looks good
2021-07-04 13:32:18 +02:00
af53a610bb
use bundlewrap-pass for human-used passwords
Some checks failed
bundlewrap/pipeline/head There was a failure building this commit
2021-07-02 19:29:52 +02:00
9c1b4f5dbe
move travelynx.franzi.business to rx300
All checks were successful
bundlewrap/pipeline/head This commit looks good
2021-07-02 16:15:31 +02:00
b7935e59e7
nodes/home.paperless: increase max_body_size 2021-07-02 15:49:17 +02:00
a2501ed2cb
nodes/rx300: update to debian bullseye
All checks were successful
bundlewrap/pipeline/head This commit looks good
2021-07-01 18:23:30 +02:00
6d5085c1e7
move unicornsden.franzi.business to rx300
All checks were successful
bundlewrap/pipeline/head This commit looks good
2021-07-01 17:40:07 +02:00
ba30015f7f
nodes/rx300: set pretty name for status page 2021-07-01 16:15:03 +02:00
0f383cfb2c
move miniflux to rx300, change domain to rss.franzi.business
All checks were successful
bundlewrap/pipeline/head This commit looks good
2021-07-01 16:10:06 +02:00
d4dabc90c5
nodes/aurto: also backup aurto database
All checks were successful
bundlewrap/pipeline/head This commit looks good
2021-06-29 16:39:05 +02:00
73ebf746f9
nodes/{aurto,rx300}: add backups 2021-06-29 14:58:14 +02:00
da6a607033
nodes/rx300: add nginx, letsencrypt, postgresql 2021-06-29 14:24:10 +02:00
faae70bbb1
nodes/aurto: add ssl to nginx vhost 2021-06-29 14:14:18 +02:00
a594337965
nodes/{aurto,rx300}: lives in a data center now
All checks were successful
bundlewrap/pipeline/head This commit looks good
2021-06-28 19:42:51 +02:00
bb15d1217f
nodes/home.nas: more ram
All checks were successful
bundlewrap/pipeline/head This commit looks good
2021-06-26 06:18:01 +02:00
a793bb5fc1
bundles/zfs: rename zfs_arc_max_mb to zfs_arc_max_gb
All checks were successful
bundlewrap/pipeline/head This commit looks good
2021-06-25 18:39:06 +02:00
b36018f36b
nodes/htz.ex42-1048908: update travelynx to 1.20.1 2021-06-25 18:37:07 +02:00
Sophie Schiller
b949ba3e72 bw/home.kodi-wohnzimmer update to bullseye
All checks were successful
bundlewrap/pipeline/head This commit looks good
2021-06-23 18:07:43 +02:00
7f290dfce6
nodes/htz.ex42-1048908: pkg_apt:oidentd is managed by bundle:oidentd
All checks were successful
bundlewrap/pipeline/head This commit looks good
2021-06-20 21:44:32 +02:00
d4659fd189
update gitea to 1.14.3 2021-06-19 08:47:32 +02:00
8c47b74ec3
update travelynx to 1.20.0 2021-06-18 13:09:38 +02:00
5a8f7f4075
update mautrix-telegram, update mautrix-whatsapp 2021-06-16 07:15:20 +02:00
e3578e669c
nodes/home.nas: add cronjob
All checks were successful
bundlewrap/pipeline/head This commit looks good
2021-06-12 08:56:38 +02:00
1e13e632c9
nodes/rx300: remove lldp, set correct ip
All checks were successful
bundlewrap/pipeline/head This commit looks good
2021-06-11 15:02:43 +02:00
611954e199
nodes/kunsi-t470: add a bridge on ethernet to be able to use vms 2021-06-11 15:02:03 +02:00
1b70a4247c
upgrade element-web to 1.7.30 2021-06-11 12:58:37 +02:00
3fc51d9eba
nodes/home.nas: move scrub to where it does not interfere with backups 2021-06-06 08:03:16 +02:00
72d4826dbb
remove bundle:netdata - we have telegraf and grafana now
All checks were successful
bundlewrap/pipeline/head This commit looks good
2021-06-05 13:28:25 +02:00
91cf6cd1e5
move lm-sensors to its own bundle, add to hardware systems 2021-06-05 12:23:09 +02:00
95856a2c2d
add bundle:sysctl 2021-06-04 07:28:26 +02:00
1fbc08f74b
bundles/nginx: add a default security.txt to all vhosts
All checks were successful
bundlewrap/pipeline/head This commit looks good
2021-06-03 18:57:25 +02:00
d569b00960
modify nodes and bundles for new nftables syntax 2021-06-03 13:59:36 +02:00
faf27a3940
bundles/nfs-server: support using node names for shares
All checks were successful
bundlewrap/pipeline/head This commit looks good
2021-06-03 07:45:56 +02:00
f84e9c533f
nodes/aurto: add nginx, move aurto to dedicated user
All checks were successful
bundlewrap/pipeline/head This commit looks good
2021-06-01 17:00:09 +02:00
a6434bd8d0
create dedicated user for kunsi work laptop 2021-06-01 16:55:16 +02:00
d756e3daf8
nodes/kunsi-t470: fix scansnap mount path 2021-05-29 09:21:18 +02:00
79facf2409
nodes/home.paperless: set backup target
All checks were successful
bundlewrap/pipeline/head This commit looks good
2021-05-24 19:19:24 +02:00
Sophie Schiller
c395438a41 update element-web
All checks were successful
bundlewrap/pipeline/head This commit looks good
2021-05-24 19:12:33 +02:00
Sophie Schiller
1461cf2827 bw/home.paperless-sophie add sophie's paperless host
All checks were successful
bundlewrap/pipeline/head This commit looks good
2021-05-24 19:04:59 +02:00
d193ec8ef3
bundles/paperless: set some options 2021-05-24 10:23:19 +02:00
fa59c547a9
nodes/home.paperless: add vhost extras for static files
All checks were successful
bundlewrap/pipeline/head This commit looks good
2021-05-23 18:11:57 +02:00
22c98a4206
nodes/home.paperless: introduce
All checks were successful
bundlewrap/pipeline/head This commit looks good
2021-05-23 17:41:19 +02:00
aaf937a89f
nodes/kunsi-t470: add automount for scansnap 2021-05-23 15:24:21 +02:00
46f7aa93ef
bundles: fix dependencies 2021-05-23 14:54:24 +02:00
24066d89a2
nodes/aurto: add vm
Some checks failed
bundlewrap/pipeline/head There was a failure building this commit
2021-05-23 14:36:22 +02:00
17f3537d74
nodes/kunsi-*: use new groups 2021-05-23 14:36:19 +02:00
5a182fadef
make some bundles arch-compatible, more default packages for arch 2021-05-23 14:36:16 +02:00
Sophie Schiller
c200e4002e add dimension
All checks were successful
bundlewrap/pipeline/head This commit looks good
2021-05-21 23:37:11 +02:00
e7dce1c36b
nodes/rx300: monitoring
All checks were successful
bundlewrap/pipeline/head This commit looks good
2021-05-20 18:24:35 +02:00
522cecb9fb
nodes/rx300: add smartd 2021-05-20 18:24:23 +02:00
78498b5a46
nodes/rx300: a bit less ram
All checks were successful
bundlewrap/pipeline/head This commit looks good
2021-05-20 17:51:50 +02:00
c74a249a00
nodes/kunsi-seibert-x1: don't try to manage networking 2021-05-19 18:35:45 +02:00
Sophie Schiller
4d33539a63 bump element-web to 1.7.28
All checks were successful
bundlewrap/pipeline/head This commit looks good
2021-05-17 17:27:40 +02:00
Sophie Schiller
d307bc0556 bw/htz-cloud.miniserver enable backups
All checks were successful
bundlewrap/pipeline/head This commit looks good
2021-05-16 19:54:18 +02:00
479b730be4
bundles/zfs: introduce zfs-snapshot-backups, enable backups for nodes which need zfs-snapshot-backups
All checks were successful
bundlewrap/pipeline/head This commit looks good
2021-05-15 20:32:23 +02:00
32826ed131
bundles/mosquitto: add telegraf stats for tasmota devices
Some checks failed
bundlewrap/pipeline/head There was a failure building this commit
2021-05-15 08:52:37 +02:00
d51cded72d
nodes/home.router: use debian buster nginx repo for now
All checks were successful
bundlewrap/pipeline/head This commit looks good
2021-05-15 06:58:42 +02:00
Sophie Schiller
8bde57be4b bw/htz-cloud.miniserver install matrix and other components
All checks were successful
bundlewrap/pipeline/head This commit looks good
2021-05-14 20:07:55 +02:00
Sophie Schiller
ea73de81e5 remove dummy from miniserver
All checks were successful
bundlewrap/pipeline/head This commit looks good
2021-05-14 15:00:37 +02:00
f92eb37bfc
nodes/htz-cloud.influxdb: increase login timeout
All checks were successful
bundlewrap/pipeline/head This commit looks good
2021-05-14 12:27:58 +02:00
1fce93ad30
update postfixadmin setup password 2021-05-13 09:15:55 +02:00
dccdd4d97f
nodes/home.octoprint-vielschichtigkeit: remove node
All checks were successful
bundlewrap/pipeline/head This commit looks good
2021-05-13 09:11:33 +02:00
7775f33679
bundles/apt: move patchday to 21:00 UTC 2021-05-13 09:10:33 +02:00
835726f3a7
nodes: update postfixadmin to 3.3.9 2021-05-13 09:01:45 +02:00
762a4d34c1
nodes/htz.ex42-1048908: update gitea and element-web
All checks were successful
bundlewrap/pipeline/head This commit looks good
2021-05-11 17:44:35 +02:00
c41c43cd5c
nodes/home.nas: more snapshot for storage/nas 2021-05-08 11:07:12 +02:00
f33f638d88
nodes/htz-cloud.miniserver: set dummy=True
All checks were successful
bundlewrap/pipeline/head This commit looks good
2021-05-04 17:34:22 +02:00
2bcc0bd22a
nodes/ovh.icinga2: install unbound
All checks were successful
bundlewrap/pipeline/head This commit looks good
seems quad9 isn't as stable as we'd want them to be :(
2021-05-03 19:36:47 +02:00
a971bf5d3b
nodes: add work laptop
All checks were successful
bundlewrap/pipeline/head This commit looks good
2021-05-02 20:53:10 +02:00
7d9ce7aed9
add pretty name for status page to some nodes
All checks were successful
bundlewrap/pipeline/head This commit looks good
2021-05-02 10:54:27 +02:00
c548a88ee7
bundles/grafana: introduce, add to htz-cloud.influxdb 2021-05-02 10:44:50 +02:00
1a1ea721d9
bundles/telegraf: also work for arch linux systems 2021-05-02 07:32:54 +02:00
8c276b53a6
nodes/home.nas: enable x11 forwarding for admins
All checks were successful
bundlewrap/pipeline/head This commit looks good
2021-05-01 15:18:21 +02:00
75fea7aa34
bundles/gitea: add a ssh key, enable git hooks for htz.ex42-1048908
All checks were successful
bundlewrap/pipeline/head This commit looks good
2021-05-01 14:27:31 +02:00
8f4023c1c5
nodes/htz.ex42-1048908: update matrix-media-repo to 1.2.8
All checks were successful
bundlewrap/pipeline/head This commit looks good
2021-05-01 12:25:00 +02:00
8a95dfa90a
nodes/home.downloadhelper: restrict lldp to vlan 42
All checks were successful
bundlewrap/pipeline/head This commit looks good
2021-05-01 10:05:24 +02:00
8fd83241ca
bundles: ensure apt/repos/*/items is a set 2021-04-30 12:49:59 +02:00
bac0ac0b00
nodes/htz.ex42-1048908: update element-web to 1.7.26
All checks were successful
bundlewrap/pipeline/head This commit looks good
2021-04-27 19:05:26 +02:00
c2c59892fe
nodes/htz.ex42-1048908: add die-brontosaurier-waren-es.org to nginx
All checks were successful
bundlewrap/pipeline/head This commit looks good
2021-04-25 12:06:38 +02:00
671b460855
nodes/htz.ex42-1048908: add unicornsden.franzi.business 2021-04-25 10:04:56 +02:00
a8e07c62c3
nodes/home.router: add ssl to vnstat nginx vhost 2021-04-25 09:10:05 +02:00
019d658442
bundles/icinga2: add check_usv_snmp
All checks were successful
bundlewrap/pipeline/head This commit looks good
2021-04-25 08:02:04 +02:00
1360a36a95
nodes/home.router: poll switch and usv more often 2021-04-24 14:58:09 +02:00
e5c49ab172
nodes/home.router: add snmp plugin to telegraf
All checks were successful
bundlewrap/pipeline/head This commit looks good
2021-04-24 14:32:27 +02:00
5b32ae836d
nodes/htz.ex42-1048908: update travelynx to 1.19.13
All checks were successful
bundlewrap/pipeline/head This commit looks good
2021-04-24 13:45:37 +02:00
2f222371c3
nodes/htz-cloud.influxdb: add influxdb2 to node 2021-04-24 10:35:41 +02:00
4e175e998e
nodes/htz-cloud.influxdb: add node
Some checks failed
bundlewrap/pipeline/head There was a failure building this commit
2021-04-24 09:14:28 +02:00
90a84fc9da
htz-cloud: add wireguard node, add internal network to nodes
All checks were successful
bundlewrap/pipeline/head This commit looks good
2021-04-24 08:53:20 +02:00
0a3210c703
nodes/htz.ex42-1048908: update travelynx to 1.19.12
All checks were successful
bundlewrap/pipeline/head This commit looks good
2021-04-24 08:09:31 +02:00
Sophie Schiller
883caac939 add new wireguard keys
All checks were successful
bundlewrap/pipeline/head This commit looks good
2021-04-23 21:23:43 +02:00
8687cd6bfa
nodes/home.nas: set zfs snapshot settings for storage/scan
All checks were successful
bundlewrap/pipeline/head This commit looks good
2021-04-21 18:26:10 +02:00
0c0a8e6263
bundles/scansnap: chown files to nobody-nogroup 2021-04-21 18:18:27 +02:00
b5fb5dd6c2
bundles/scansnap: introduce, add to home.nas 2021-04-21 17:58:16 +02:00
24362768fb
bundles/dhcpd: rework metadata
All checks were successful
bundlewrap/pipeline/head This commit looks good
2021-04-20 18:18:17 +02:00
3bd851aae5
nodes/htz.ex42-1048908: add new entropia IPs to rspamd/ignore_spam_check_for_ips
All checks were successful
bundlewrap/pipeline/head This commit looks good
2021-04-19 20:59:55 +02:00
0028e0fcd0
nodes/home.downloadhelper: do not send hostname via dhcp
All checks were successful
bundlewrap/pipeline/head This commit looks good
2021-04-19 20:42:15 +02:00
7738736120
nodes/htz.ex42-1048908: update matrix-media-repo to 1.2.7
All checks were successful
bundlewrap/pipeline/head This commit looks good
2021-04-19 18:12:26 +02:00
8536e87475
bundles/systemd-networkd: some more dhcp settings
All checks were successful
bundlewrap/pipeline/head This commit looks good
2021-04-18 11:05:42 +02:00
0c59af2fdc
nodes/home.octoprint-vielschichtigkeit: set exclude_from_monitoring 2021-04-17 09:40:02 +02:00
4973c63e62
bundles/icinga2: remove icinga_options/downtime_also_for, add host dependencies via icinga_options/also_affected_by
All checks were successful
bundlewrap/pipeline/head This commit looks good
2021-04-17 09:21:51 +02:00
4d5e75df68
bundles/icinga2: introduce icinga_options/downtime_also_for
All checks were successful
bundlewrap/pipeline/head This commit looks good
2021-04-17 03:43:08 +02:00
ad5e628957
nodes/htz.ex42-1048908: update gitea to 1.14.1
Some checks are pending
bundlewrap/pipeline/head Build queued...
2021-04-16 16:33:46 +02:00
c3e3fc75bf
nodes/htz.ex42-1048908: update element-web to 1.7.25
All checks were successful
bundlewrap/pipeline/head This commit looks good
2021-04-12 17:33:43 +02:00
b04a207262
nodes/htz.ex42-1048908: add some blocked email domains
All checks were successful
bundlewrap/pipeline/head This commit looks good
2021-04-11 18:20:16 +02:00
9e1e3acfea
nodes/htz.ex42-1048908: update gitea to 1.14.0
All checks were successful
bundlewrap/pipeline/head This commit looks good
2021-04-11 18:12:23 +02:00
b68726c413
nodes/ovh.icinga2: add custom page title to status.franzi.business
All checks were successful
bundlewrap/pipeline/head This commit looks good
2021-04-11 11:27:49 +02:00
36bd6f5755
bundles/simple-icinga-dashboard: config is a toml file now
Some checks failed
bundlewrap/pipeline/head There was a failure building this commit
2021-04-10 16:08:52 +02:00
b33ddaadb5
bundles/simple-icinga-dashboard: add replacements 2021-04-10 15:43:37 +02:00
9587bae4fe
nodes/gce.*: fix typo in metadata
All checks were successful
bundlewrap/pipeline/head This commit looks good
2021-04-10 15:11:48 +02:00
fc7655469f
icinga2: add pretty_name for status page
All checks were successful
bundlewrap/pipeline/head This commit looks good
2021-04-10 15:05:29 +02:00
8c292ff8e0
nodes/htz.ex42-1048908: update gitea to 1.13.7
All checks were successful
bundlewrap/pipeline/head This commit looks good
2021-04-10 14:40:48 +02:00
ac58f2a10c
nodes/home.router: fix dhcp config for dmz 2021-04-10 12:09:24 +02:00
3a7d612c7a
nodes/home.router: update to bullseye 2021-04-10 09:20:34 +02:00
Sophie Schiller
913f2cde8f switch to new kodi with old name
All checks were successful
bundlewrap/pipeline/head This commit looks good
2021-04-09 21:13:24 +02:00
Sophie Schiller
995ae2f55f add new kodi minion
All checks were successful
bundlewrap/pipeline/head This commit looks good
2021-04-09 20:54:53 +02:00
28eb3f023c
nodes/home.openwebrx: reuse pi for home.octoprint-leapfrog
All checks were successful
bundlewrap/pipeline/head This commit looks good
2021-04-05 19:50:36 +02:00
7bb5179b4f
nodes/htz.ex42-1048908: update travelynx to 1.19.10
All checks were successful
bundlewrap/pipeline/head This commit looks good
2021-04-05 15:28:55 +02:00
fd63d3d857
nodes/voc.pretalx: only set content-security-policy for requests to django itself, not for media and static endpoints
All checks were successful
bundlewrap/pipeline/head This commit looks good
2021-04-05 10:16:06 +02:00
68b8cf28d3
nodes/home.{nas,router}: fix firewall for netdata and nginx
All checks were successful
bundlewrap/pipeline/head This commit looks good
2021-04-04 11:30:50 +02:00
c418102000
bundles/netdata: fix iptables default 2021-04-04 10:30:45 +02:00
9cbf866de7
bundles/mosquitto: introduce, add to node home.nas
All checks were successful
bundlewrap/pipeline/head This commit looks good
2021-04-03 09:36:47 +02:00
6712d98040
nodes/htz-cloud.miniserver: remove dummy metadata, add monitoring 2021-04-02 13:40:10 +02:00
763a071acc
nodes/htz.ex42-1048908: update mautrix-whatsapp to 0.1.6
All checks were successful
bundlewrap/pipeline/head This commit looks good
2021-04-01 17:03:42 +02:00
3481d4e13c
have ovh systems relay mail via htz.ex42-1048908, too 2021-04-01 17:00:23 +02:00
6e423c24fb
bundles/wireguard: rework metadata.py
Some checks failed
bundlewrap/pipeline/head There was a failure building this commit
2021-04-01 16:27:31 +02:00
d787f8b0a3
bundles/systemd-networkd: rework routes 2021-04-01 16:25:24 +02:00
b52a196c73
bundles/nginx: add configuration option for client_max_body_size
All checks were successful
bundlewrap/pipeline/head This commit looks good
2021-03-30 21:26:25 +02:00
b7583bc8cc
nodes/voc.pretalx: install some plugins
All checks were successful
bundlewrap/pipeline/head This commit looks good
2021-03-30 19:52:31 +02:00
8503a4a946
nodes/htz.ex42-1048908: update travelynx to 1.19.9
All checks were successful
bundlewrap/pipeline/head This commit looks good
2021-03-30 18:22:35 +02:00
e924cc1322
nodes/htz.ex42-1048908: update element-web to 1.7.24 2021-03-30 18:22:19 +02:00
72831ee386
nodes/home.nas: one cronjob for permissions instead of three
All checks were successful
bundlewrap/pipeline/head This commit looks good
2021-03-28 16:44:01 +02:00
85d9b9fdac
nodes/htz-cloud.sewfile: move seafile data to zfs
All checks were successful
bundlewrap/pipeline/head This commit looks good
2021-03-27 14:03:33 +01:00
0ca57e8e24
nodes/htz-cloud.sewfile: also backup mysql database
All checks were successful
bundlewrap/pipeline/head This commit looks good
2021-03-27 13:49:23 +01:00
83db4ba886
nodes/home.nas: add firewalling for yate sip server
All checks were successful
bundlewrap/pipeline/head This commit looks good
2021-03-26 18:55:20 +01:00
8d7e5d3f66
nodes/htz.ex42-1048908: update matrix-media-repo to 1.2.6
All checks were successful
bundlewrap/pipeline/head This commit looks good
2021-03-26 09:06:35 +01:00
4bd61fedde
nodes/htz.ex42-1048908: update gitea to 1.13.6
All checks were successful
bundlewrap/pipeline/head This commit looks good
2021-03-25 17:44:55 +01:00
50438d940e
nodes/htz.ex42-1048908: update gitea to 1.13.5
All checks were successful
bundlewrap/pipeline/head This commit looks good
2021-03-21 17:55:43 +01:00
28dd9694af
add bundle:oidentd
All checks were successful
bundlewrap/pipeline/head This commit looks good
2021-03-21 17:40:58 +01:00
6a6198c9b9
bundles/wireguard: move iptables rules to metadata reactor
All checks were successful
bundlewrap/pipeline/head This commit looks good
2021-03-21 15:26:29 +01:00
559f743ce2
nodes/voc.pretalx: no localized strings in website_check_string
All checks were successful
bundlewrap/pipeline/head This commit looks good
2021-03-21 12:59:08 +01:00
691c3e7bc2
iptables: add some missing rules
All checks were successful
bundlewrap/pipeline/head This commit looks good
2021-03-21 12:27:03 +01:00
087bc4c669
nodes: iptables for all
All checks were successful
bundlewrap/pipeline/head This commit looks good
2021-03-21 11:44:52 +01:00
626075ee94
nodes/htz.ex42-1048908: add some iptables rules for unmanaged services
Some checks failed
bundlewrap/pipeline/head There was a failure building this commit
2021-03-21 11:12:42 +01:00
5775001301
bundles/postfix: add iptables config 2021-03-21 11:11:49 +01:00
d3ea06c3e8
nodes/htz.ex42-1048908: update matrix-media-repo to 1.2.5
All checks were successful
bundlewrap/pipeline/head This commit looks good
2021-03-19 15:00:00 +01:00
41dac92e1a
nodes/htz.ex42-1048908: update element-web to 1.7.23
All checks were successful
bundlewrap/pipeline/head This commit looks good
2021-03-17 14:15:38 +01:00
9e1685531c
nodes/home.router: add iptables rule for mail
All checks were successful
bundlewrap/pipeline/head This commit looks good
2021-03-15 11:48:35 +01:00
3fcd81960e
bundles/postfix: allow configuring mynetworks
All checks were successful
bundlewrap/pipeline/head This commit looks good
2021-03-15 11:41:35 +01:00
d596d46783
nodes/htz.ex42-1048908: update travelynx to 1.19.8 2021-03-14 17:03:34 +01:00