 Maximilian Wilhelm
|
8f98e910df
netfilter: VIFs can exist on top of bridges, too.
|
1 year ago |
|
Maximilian Wilhelm
|
db28535889
nftables: Don't purge iptables on docker and KVM hosts
|
1 year ago |
|
Maximilian Wilhelm
|
57645b4099
Set up install server on infra service VMs
|
1 year ago |
|
Maximilian Wilhelm
|
d7f89f6be1
Groups states for infra services in one stanza
|
1 year ago |
|
Maximilian Wilhelm
|
26bc096db5
Update README
|
1 year ago |
|
Maximilian Wilhelm
|
ab3833e402
ffinfo: Store main node role (from NetBox) on the system
|
1 year ago |
|
Maximilian Wilhelm
|
58bd7a6443
Netfilter: No uRPF on interface with a default gateway
|
1 year ago |
|
Maximilian Wilhelm
|
51aba08c0b
unattended-upgrades: Use Bullseye repos for icinga2/Salt
|
1 year ago |
|
Maximilian Wilhelm
|
dd46e91fbe
icingaweb2: The icingaweb2-module-monitoring pkg doesn't seem required
|
1 year ago |
|
Maximilian Wilhelm
|
6cb331e575
GIT: Use internal DNS alias for our GIT
|
1 year ago |
|
Maximilian Wilhelm
|
663627d700
gid_from_name is deprecated
|
1 year ago |
|
Maximilian Wilhelm
|
5295aa0bd8
Make ifupdown-ng the default suite to configure interfaces
|
1 year ago |
|
Maximilian Wilhelm
|
f90d28e734
nftables now is enabled by default
|
1 year ago |
|
Maximilian Wilhelm
|
f7e5578fe0
sudo: Fix typo, D'oh.
|
1 year ago |
|
Maximilian Wilhelm
|
f1439441fb
sudo: Denote Debian version in current "default" sudoers
|
1 year ago |
|
Maximilian Wilhelm
|
297f977447
Remove superflous hardware state
|
1 year ago |
|
Maximilian Wilhelm
|
68128595d9
Add dns-recursor + ldap-replica's to highstate (+ anycast-healtchecker)
|
1 year ago |
|
Maximilian Wilhelm
|
2455517ceb
Add anycast-healthcecker state
|
1 year ago |
|
Maximilian Wilhelm
|
c35d5ff817
Examples: Update DNS example pillar
|
1 year ago |
|
Maximilian Wilhelm
|
fb3141938a
Clean up obsolete templates for Debian Stretch (which is long gone)
|
1 year ago |
|
Maximilian Wilhelm
|
3594940a1d
Icinga2: Read NS replica information from DNS pillar
|
1 year ago |
|
Maximilian Wilhelm
|
4f6711f16e
DNS: Reflect pillar change to write replica NS name into config
|
1 year ago |
|
Maximilian Wilhelm
|
95753d6d73
Icinga2: DNS repliace ns.youngage.eu is going away
|
1 year ago |
|
Maximilian Wilhelm
|
49004e4a9b
Bird/Icinga2: Bird related monitoring config should ship with bird
|
1 year ago |
 Philipp Fromme
|
1f8ffd3a77
graylog: Use keystore to verify ldap connection
|
1 year ago |
|
Maximilian Wilhelm
|
de87b5e0ef
nftables: Allow prometheus scraping
|
1 year ago |
|
Maximilian Wilhelm
|
b61e0f8b37
nftables: Reflect recent OSPF SDN change
|
1 year ago |
|
Maximilian Wilhelm
|
fe226f2e68
ifupdown2: Don't call any scripts
|
1 year ago |
|
Maximilian Wilhelm
|
bca847161e
SDN/bird: Allow configuring OSPF for single AF
|
1 year ago |
|
Maximilian Wilhelm
|
a1ffcb8721
SDN/bird: Add area support for OSPF
|
1 year ago |
