 Maximilian Wilhelm
|
5998da7d83
nftables: Allow specifying node role specific monitoring services
|
hai 1 ano |
|
Maximilian Wilhelm
|
d8ac36a679
bind9: Allow statistics scraping by bind-exporter
|
hai 1 ano |
|
Maximilian Wilhelm
|
38c9622968
locales: Store full generatd configuration to avoid unnecessary diff
|
hai 1 ano |
|
Maximilian Wilhelm
|
07349ed721
nftables: Derive/compute monitoring access rules from node information
|
hai 1 ano |
|
Maximilian Wilhelm
|
10e0a0465e
Add basic config to set up prometheus servers
|
hai 1 ano |
|
Maximilian Wilhelm
|
42fdb07d21
certs: Allow more flexibal configuration
|
hai 1 ano |
|
Maximilian Wilhelm
|
9c7c0bd8b1
KVM: Remove need for ifupdown* to configure VM interfaces
|
hai 1 ano |
|
Maximilian Wilhelm
|
3f5eb5be5f
SDN: Only enable OSPf in interface in main VRF
|
hai 1 ano |
|
Maximilian Wilhelm
|
2fec8fd839
SDN: Add definition for vrf_mgmt
|
hai 1 ano |
|
Maximilian Wilhelm
|
8f98e910df
netfilter: VIFs can exist on top of bridges, too.
|
hai 1 ano |
|
Maximilian Wilhelm
|
db28535889
nftables: Don't purge iptables on docker and KVM hosts
|
hai 1 ano |
|
Maximilian Wilhelm
|
57645b4099
Set up install server on infra service VMs
|
hai 1 ano |
|
Maximilian Wilhelm
|
d7f89f6be1
Groups states for infra services in one stanza
|
hai 1 ano |
|
Maximilian Wilhelm
|
26bc096db5
Update README
|
hai 1 ano |
|
Maximilian Wilhelm
|
ab3833e402
ffinfo: Store main node role (from NetBox) on the system
|
hai 1 ano |
|
Maximilian Wilhelm
|
58bd7a6443
Netfilter: No uRPF on interface with a default gateway
|
hai 1 ano |
|
Maximilian Wilhelm
|
51aba08c0b
unattended-upgrades: Use Bullseye repos for icinga2/Salt
|
hai 1 ano |
|
Maximilian Wilhelm
|
dd46e91fbe
icingaweb2: The icingaweb2-module-monitoring pkg doesn't seem required
|
hai 1 ano |
|
Maximilian Wilhelm
|
6cb331e575
GIT: Use internal DNS alias for our GIT
|
hai 1 ano |
|
Maximilian Wilhelm
|
663627d700
gid_from_name is deprecated
|
hai 1 ano |
|
Maximilian Wilhelm
|
5295aa0bd8
Make ifupdown-ng the default suite to configure interfaces
|
hai 1 ano |
|
Maximilian Wilhelm
|
f90d28e734
nftables now is enabled by default
|
hai 1 ano |
|
Maximilian Wilhelm
|
f7e5578fe0
sudo: Fix typo, D'oh.
|
hai 1 ano |
|
Maximilian Wilhelm
|
f1439441fb
sudo: Denote Debian version in current "default" sudoers
|
hai 1 ano |
|
Maximilian Wilhelm
|
297f977447
Remove superflous hardware state
|
hai 1 ano |
|
Maximilian Wilhelm
|
68128595d9
Add dns-recursor + ldap-replica's to highstate (+ anycast-healtchecker)
|
hai 1 ano |
|
Maximilian Wilhelm
|
2455517ceb
Add anycast-healthcecker state
|
hai 1 ano |
|
Maximilian Wilhelm
|
c35d5ff817
Examples: Update DNS example pillar
|
hai 1 ano |
|
Maximilian Wilhelm
|
fb3141938a
Clean up obsolete templates for Debian Stretch (which is long gone)
|
hai 1 ano |
|
Maximilian Wilhelm
|
3594940a1d
Icinga2: Read NS replica information from DNS pillar
|
hai 1 ano |
