 Maximilian Wilhelm
|
371636b5fc
rsyslog: Log things classified by "messages" only once.
|
6 years ago |
|
Maximilian Wilhelm
|
f0535a2b11
rsyslog: Ignore all known-good sudo log entries generated by Icinga2.
|
6 years ago |
|
Maximilian Wilhelm
|
baecbc23fe
rsyslog: Rename catch-all log config to so it's lexicographically after everything else.
|
6 years ago |
|
Maximilian Wilhelm
|
508887a45b
icinga2: Don't notify for nodes which aren't operational.
|
6 years ago |
|
Maximilian Wilhelm
|
1cb0e7853b
pppoe: Add cronjob to check and restart PPP session every 5 minutes.
|
6 years ago |
|
Maximilian Wilhelm
|
65c0ae2313
burp: New state to set up server and client for burp backup.
|
6 years ago |
|
Maximilian Wilhelm
|
cc1b3ba1cc
nginx: As dhparams as stored within /etc/ssl they are generated be certs state now.
|
6 years ago |
|
Maximilian Wilhelm
|
4649e90f9c
certs: Generate dhparam file on every node. Always.
|
6 years ago |
|
Maximilian Wilhelm
|
8c0c5423e3
postfix: ticket VM should listen for SMTP connections.
|
6 years ago |
|
Maximilian Wilhelm
|
51cce9c2fc
bird: Allow sole activation of ravd protocol.
|
6 years ago |
|
Maximilian Wilhelm
|
2d5de9478a
modules: ffho_net: Allow deactivating OSPF on usually active interface.
|
6 years ago |
|
Maximilian Wilhelm
|
a56b601ad6
bird: Rewriting ALL bgp_next_hops is a bad idea. D'oh.
|
6 years ago |
|
Maximilian Wilhelm
|
e6ae92914a
network: Generated systemd link files for really stable interface names on Debian Stretch.
|
6 years ago |
|
Maximilian Wilhelm
|
90737f27f0
bird: Allow OSPF costs to be overwritten for OpenVPN tunnel interfaces.
|
6 years ago |
|
Maximilian Wilhelm
|
ad348ca746
bird: Configure radv for OPS vlans.
|
6 years ago |
|
Maximilian Wilhelm
|
6f50ff4e92
bird: Make sure bird6 is reconfigured after removing radv protocol.
|
6 years ago |
|
Maximilian Wilhelm
|
037b69485f
bird: Configure radv protocol only on BATMAN gw named gw*
|
6 years ago |
|
Maximilian Wilhelm
|
35b114d7d9
bird: Export routes with source address set to loopback IP into kernel table.
|
6 years ago |
|
Maximilian Wilhelm
|
6ba3659275
bird: Unify bird{,6}.conf to one template file. Strip old legacy config.
|
6 years ago |
|
Maximilian Wilhelm
|
2e01340b01
bird: Add export community for cr04.
|
6 years ago |
|
Maximilian Wilhelm
|
095e32e3ca
bird: Export any routes into iBGP with bgp_next_hop set to local LO IP.
|
6 years ago |
|
Maximilian Wilhelm
|
c91ada0b4c
bird: Don't export IPv6 loopback IP via iBGP.
|
6 years ago |
|
Maximilian Wilhelm
|
7d1b818d51
dhcp-server: Stretch versions of isc-dhcp-server use a different "defaults" format.
|
6 years ago |
|
Maximilian Wilhelm
|
3be5746852
icinga2: sudo feature of check_mailq doesn't work everywhere. Use sudo directly.
|
6 years ago |
|
Maximilian Wilhelm
|
b965ff4412
icinga2: Evaluate commands.s/ files are jinja templates and deploy ssl_cert check only on jessie nodes.
|
6 years ago |
|
Maximilian Wilhelm
|
af1abdb482
icinga2: Allow setting host/service params from pillar.
|
6 years ago |
|
Maximilian Wilhelm
|
fbd1e633f7
icinga2: Beautify sudoers file for Icinga2.
|
6 years ago |
|
Maximilian Wilhelm
|
b8adec4dba
apt: Make sure ffho.list only contains latest entry.
|
6 years ago |
|
Maximilian Wilhelm
|
e49c1ec7d8
apt: Bundle all file remove statements.
|
6 years ago |
|
Maximilian Wilhelm
|
1499a4b74e
apt: Use Debians version of Icinga2 for less surprises.
|
6 years ago |
