 Maximilian Wilhelm
|
a2a6ed05d6
nftables: Open server side Wireguard ports automagically.
|
2 years ago |
|
Maximilian Wilhelm
|
dbe9e6730d
Use tags exposed by NACL/Netbox instead of snowflake
|
2 years ago |
|
Maximilian Wilhelm
|
73d0027fc6
icinga2: check_bird_ospf should us Python3 of course
|
2 years ago |
|
Maximilian Wilhelm
|
19aecd6893
Add state to manage Wireguard tunnel configuration
|
2 years ago |
|
Maximilian Wilhelm
|
fd76c665b9
icinga2: Work around SCT checking for hostcerts for now.
|
2 years ago |
|
Maximilian Wilhelm
|
4e1d44b0f0
fastd: Use SDN to determine B.A.T.M.A.N. adv. iface penalty
|
2 years ago |
|
Maximilian Wilhelm
|
e6cd22d682
SDN: Rework B.A.T.M.A.N. adv. interface penalties.
|
2 years ago |
|
Maximilian Wilhelm
|
48493bb4b2
network/interfaces: Add support for Wireguard tunnels
|
2 years ago |
|
Maximilian Wilhelm
|
67ebce5507
sysctl: Wireguard with fwmark requires udp_l3mdev_accept
|
2 years ago |
|
Maximilian Wilhelm
|
b515b6a04b
nftables: Use iifname rather than iif.
|
2 years ago |
|
Maximilian Wilhelm
|
c7d7222bf5
SDN: Activate OSPF on Wireguard tunnels
|
2 years ago |
 Philipp Fromme
|
4578cef595
icinga2: Fix ssl_cert check variable name
|
2 years ago |
|
Maximilian Wilhelm
|
69fbd2ea5a
snmpd: Set bandwidth of user facing fastd interfaces to 500Mb/s too
|
2 years ago |
|
Maximilian Wilhelm
|
e51c8297cc
icinga2: Update check_bird_bgp to latest uptsream version
|
2 years ago |
|
Maximilian Wilhelm
|
4248a7f404
icinga2: Bump check_bird_ospf version (Python 3 support)
|
2 years ago |
|
Maximilian Wilhelm
|
bb26185b9c
apt: Update Salt to version 3004
|
3 years ago |
|
Maximilian Wilhelm
|
df8977fb36
openvpn: Add configuration for OPS VPNs
|
3 years ago |
|
Maximilian Wilhelm
|
2032bdc052
pppoe: Remove Debian stretch Sonderlocke
|
3 years ago |
|
Maximilian Wilhelm
|
5bb9576804
unattended-upgrades: Remove old Debian stretch stuff
|
3 years ago |
|
Maximilian Wilhelm
|
aeba14b215
apt: Remove old Debian stretch stuff
|
3 years ago |
|
Maximilian Wilhelm
|
19319feb5e
fastd: Remove check for Debian stretch.
|
3 years ago |
|
Maximilian Wilhelm
|
f801780497
network: Ignore 'driver' parameter in /etc/network/interfaces
|
3 years ago |
|
Maximilian Wilhelm
|
827bcbcba5
ffho_netfilter: Unify return types of generate_urpf_policy()
|
3 years ago |
|
Maximilian Wilhelm
|
9dd3598121
ffho_netfilter: Move _active_urpf() to private block
|
3 years ago |
|
Philipp Fromme
|
860fa02baa
mongodb: Add backup script
|
3 years ago |
|
Maximilian Wilhelm
|
24ffdc622c
Use global root alias for cron job mails
|
3 years ago |
|
Philipp Fromme
|
1ae79a0a62
graylog: Upgrade to 4.2
|
3 years ago |
|
Maximilian Wilhelm
|
04a882fb54
nftables: Allow respondd replies to yanic
|
3 years ago |
|
Maximilian Wilhelm
|
c221f2d6e7
nftables: respondd needs to be allowed on all B.A.T.M.A.N. adv. nodes
|
3 years ago |
|
Maximilian Wilhelm
|
b7df00fe49
pppoe: Add trivial phone home and remove unused special case
|
3 years ago |
