Maximilian Wilhelm
|
fd76c665b9
icinga2: Work around SCT checking for hostcerts for now.
|
2 years ago |
Maximilian Wilhelm
|
4e1d44b0f0
fastd: Use SDN to determine B.A.T.M.A.N. adv. iface penalty
|
2 years ago |
Maximilian Wilhelm
|
e6cd22d682
SDN: Rework B.A.T.M.A.N. adv. interface penalties.
|
2 years ago |
Maximilian Wilhelm
|
48493bb4b2
network/interfaces: Add support for Wireguard tunnels
|
2 years ago |
Maximilian Wilhelm
|
67ebce5507
sysctl: Wireguard with fwmark requires udp_l3mdev_accept
|
2 years ago |
Maximilian Wilhelm
|
b515b6a04b
nftables: Use iifname rather than iif.
|
2 years ago |
Maximilian Wilhelm
|
c7d7222bf5
SDN: Activate OSPF on Wireguard tunnels
|
2 years ago |
Philipp Fromme
|
4578cef595
icinga2: Fix ssl_cert check variable name
|
2 years ago |
Maximilian Wilhelm
|
69fbd2ea5a
snmpd: Set bandwidth of user facing fastd interfaces to 500Mb/s too
|
2 years ago |
Maximilian Wilhelm
|
e51c8297cc
icinga2: Update check_bird_bgp to latest uptsream version
|
2 years ago |
Maximilian Wilhelm
|
4248a7f404
icinga2: Bump check_bird_ospf version (Python 3 support)
|
2 years ago |
Maximilian Wilhelm
|
bb26185b9c
apt: Update Salt to version 3004
|
2 years ago |
Maximilian Wilhelm
|
df8977fb36
openvpn: Add configuration for OPS VPNs
|
2 years ago |
Maximilian Wilhelm
|
2032bdc052
pppoe: Remove Debian stretch Sonderlocke
|
2 years ago |
Maximilian Wilhelm
|
5bb9576804
unattended-upgrades: Remove old Debian stretch stuff
|
2 years ago |
Maximilian Wilhelm
|
aeba14b215
apt: Remove old Debian stretch stuff
|
2 years ago |
Maximilian Wilhelm
|
19319feb5e
fastd: Remove check for Debian stretch.
|
2 years ago |
Maximilian Wilhelm
|
f801780497
network: Ignore 'driver' parameter in /etc/network/interfaces
|
2 years ago |
Maximilian Wilhelm
|
827bcbcba5
ffho_netfilter: Unify return types of generate_urpf_policy()
|
2 years ago |
Maximilian Wilhelm
|
9dd3598121
ffho_netfilter: Move _active_urpf() to private block
|
2 years ago |
Philipp Fromme
|
860fa02baa
mongodb: Add backup script
|
3 years ago |
Maximilian Wilhelm
|
24ffdc622c
Use global root alias for cron job mails
|
3 years ago |
Philipp Fromme
|
1ae79a0a62
graylog: Upgrade to 4.2
|
3 years ago |
Maximilian Wilhelm
|
04a882fb54
nftables: Allow respondd replies to yanic
|
3 years ago |
Maximilian Wilhelm
|
c221f2d6e7
nftables: respondd needs to be allowed on all B.A.T.M.A.N. adv. nodes
|
3 years ago |
Maximilian Wilhelm
|
b7df00fe49
pppoe: Add trivial phone home and remove unused special case
|
3 years ago |
Maximilian Wilhelm
|
3c3639a5e7
snmpd: lo interface has more bandwidth than 10Mb/s :)
|
3 years ago |
Maximilian Wilhelm
|
5fc21b1d9d
icinga2: Ignore ifupdown2 check on nodes running ifupdown-ng
|
3 years ago |
Maximilian Wilhelm
|
1c6d5423bd
systemd: Work around new systemd persistent MAC "feature"
|
3 years ago |
Maximilian Wilhelm
|
6f0f5b35ff
nftables: Disable uRPF for non-routers entirely.
|
3 years ago |