 Maximilian Wilhelm
|
4649e90f9c
certs: Generate dhparam file on every node. Always.
|
6 vuotta sitten |
|
Maximilian Wilhelm
|
8c0c5423e3
postfix: ticket VM should listen for SMTP connections.
|
6 vuotta sitten |
|
Maximilian Wilhelm
|
51cce9c2fc
bird: Allow sole activation of ravd protocol.
|
6 vuotta sitten |
|
Maximilian Wilhelm
|
2d5de9478a
modules: ffho_net: Allow deactivating OSPF on usually active interface.
|
6 vuotta sitten |
|
Maximilian Wilhelm
|
a56b601ad6
bird: Rewriting ALL bgp_next_hops is a bad idea. D'oh.
|
6 vuotta sitten |
|
Maximilian Wilhelm
|
e6ae92914a
network: Generated systemd link files for really stable interface names on Debian Stretch.
|
6 vuotta sitten |
|
Maximilian Wilhelm
|
90737f27f0
bird: Allow OSPF costs to be overwritten for OpenVPN tunnel interfaces.
|
6 vuotta sitten |
|
Maximilian Wilhelm
|
ad348ca746
bird: Configure radv for OPS vlans.
|
6 vuotta sitten |
|
Maximilian Wilhelm
|
6f50ff4e92
bird: Make sure bird6 is reconfigured after removing radv protocol.
|
6 vuotta sitten |
|
Maximilian Wilhelm
|
037b69485f
bird: Configure radv protocol only on BATMAN gw named gw*
|
6 vuotta sitten |
|
Maximilian Wilhelm
|
35b114d7d9
bird: Export routes with source address set to loopback IP into kernel table.
|
6 vuotta sitten |
|
Maximilian Wilhelm
|
6ba3659275
bird: Unify bird{,6}.conf to one template file. Strip old legacy config.
|
6 vuotta sitten |
|
Maximilian Wilhelm
|
2e01340b01
bird: Add export community for cr04.
|
6 vuotta sitten |
|
Maximilian Wilhelm
|
095e32e3ca
bird: Export any routes into iBGP with bgp_next_hop set to local LO IP.
|
6 vuotta sitten |
|
Maximilian Wilhelm
|
c91ada0b4c
bird: Don't export IPv6 loopback IP via iBGP.
|
6 vuotta sitten |
|
Maximilian Wilhelm
|
7d1b818d51
dhcp-server: Stretch versions of isc-dhcp-server use a different "defaults" format.
|
6 vuotta sitten |
|
Maximilian Wilhelm
|
3be5746852
icinga2: sudo feature of check_mailq doesn't work everywhere. Use sudo directly.
|
6 vuotta sitten |
|
Maximilian Wilhelm
|
b965ff4412
icinga2: Evaluate commands.s/ files are jinja templates and deploy ssl_cert check only on jessie nodes.
|
6 vuotta sitten |
|
Maximilian Wilhelm
|
af1abdb482
icinga2: Allow setting host/service params from pillar.
|
6 vuotta sitten |
|
Maximilian Wilhelm
|
fbd1e633f7
icinga2: Beautify sudoers file for Icinga2.
|
6 vuotta sitten |
|
Maximilian Wilhelm
|
b8adec4dba
apt: Make sure ffho.list only contains latest entry.
|
6 vuotta sitten |
|
Maximilian Wilhelm
|
e49c1ec7d8
apt: Bundle all file remove statements.
|
6 vuotta sitten |
|
Maximilian Wilhelm
|
1499a4b74e
apt: Use Debians version of Icinga2 for less surprises.
|
6 vuotta sitten |
|
Maximilian Wilhelm
|
81060729e7
apt: Align entries in main sources.list.
|
6 vuotta sitten |
|
Maximilian Wilhelm
|
8fb246cbf2
apt: We ain't have Debian wheezy and Ubuntu no more.
|
6 vuotta sitten |
|
Maximilian Wilhelm
|
5af3dd5a30
icinga2: Rely on "sudo" state to install sudo.
|
6 vuotta sitten |
|
Maximilian Wilhelm
|
1f25159228
sudo: Update sudo state to reflect new Salt layout and new Debian config file (whitespace diff only).
|
6 vuotta sitten |
|
Maximilian Wilhelm
|
c42f15137d
icinga2: Explicitly write HostName into zones.conf.
|
6 vuotta sitten |
|
Maximilian Wilhelm
|
42c677f8d4
Old Icinga2 from Debian {old,}stable doesn't ship with ssl_cert check command.
|
6 vuotta sitten |
 Karsten Böddeker
|
d36a47e854
ffho_net: set specified MAC on BATMAN interface
|
6 vuotta sitten |
