Commit graph

Select branches

Hide pull requests

master

Mono Color

• dd30e2ab1c access: support native VLAN on tagged interfaces for D-Link switches master Timotej Lazar 2025-02-10 17:07:32 +0100
• f57023b0f0 firewall: allow connections from master over IPv6 Timotej Lazar 2024-12-20 15:18:36 +0100
• 1d97ec2cda exit: remove --giaddr-src option for DHCP relay Timotej Lazar 2024-11-09 19:59:11 +0100
• de05fd236b access: enable DHCP snooping on D-Link switches Timotej Lazar 2024-11-09 19:56:31 +0100
• bbf0798d5c firewall: add more ports to AD service definition Timotej Lazar 2024-10-04 13:29:39 +0200
• 57197d7695 access: set up SNMP user for D-Link switches Timotej Lazar 2024-10-02 14:27:45 +0200
• e51d08c073 access: get switch username from password store Timotej Lazar 2024-10-02 10:39:12 +0200
• a230697846 access: disable HTTP service for D-Link switches Timotej Lazar 2024-09-30 10:50:50 +0200
• 7e02a13144 firewall: forward ICMP(v6) packets Timotej Lazar 2024-09-21 20:19:55 +0200
• f8e8acb521 firewall: expand convenience nftables port sets Timotej Lazar 2024-09-21 20:19:24 +0200
• 5a9f0ac26a exit: strip own AS prefix from routes received by firewalls Timotej Lazar 2024-09-21 16:13:59 +0200
• ef1b00adce firewall: update backup route maps Timotej Lazar 2024-09-21 10:13:26 +0200
• 6c18e2ff94 firewall: add convenience nftables set for AD ports Timotej Lazar 2024-09-19 16:25:51 +0200
• ae1cfd5337 exit: enable forwarding directed broadcasts for WoL Timotej Lazar 2024-09-18 14:27:30 +0200
• 6322d5ec97 exit: add routes for VPN IPv4 addresses to outside and default VRFs Timotej Lazar 2024-09-16 17:19:25 +0200
• 6c8309f1c9 exit: leak non-NATted inside routes into default VRF Timotej Lazar 2024-09-03 17:15:12 +0200
• 103ecae2e7 exit: leak outside routes into default VRF Timotej Lazar 2024-09-01 12:19:13 +0200
• 3caea81896 access: add voice VLAN support Timotej Lazar 2024-09-01 10:37:11 +0200
• c3ff39fe72 firewall: reload nftables in mgmt VRF Timotej Lazar 2024-08-19 13:54:01 +0200
• 5032d1ac84 fabric: fix a template Timotej Lazar 2024-08-15 17:22:55 +0200
• 14d2e00f0b exit: only send RAs on interfaces with FHRP addresses Timotej Lazar 2024-08-13 19:12:29 +0200
• 7b5980f871 exit: add routes for internal IPv4 addresses to outside VRF Timotej Lazar 2024-08-13 19:02:03 +0200
• fe8f9161d9 exit: drop redundant and now misleading comment Timotej Lazar 2024-08-12 11:46:07 +0200
• 9a56e48141 exit: allow multiple VLANs per VRF Timotej Lazar 2024-08-04 14:12:26 +0200
• c239b91d17 Simplify README Timotej Lazar 2024-08-03 11:48:09 +0200
• c741b90981 fabric: disable less-than-sane Cumulus SSH default options Timotej Lazar 2024-07-26 14:27:34 +0200
• 82b10e8133 exit: support custom VRF imports Timotej Lazar 2024-07-15 11:28:33 +0200
• 99aef43574 exit: add DHCP relay for new server Timotej Lazar 2024-07-13 18:08:31 +0200
• bb41d406f8 exit, firewall: don’t hardcode prefix length Timotej Lazar 2024-07-10 16:57:08 +0200
• 2327b42412 fabric: disable nvue-startup service Timotej Lazar 2024-07-04 15:36:02 +0200
• 48b987180a Move firewall_master role to servers repo Timotej Lazar 2024-07-04 15:35:41 +0200
• ff1abcb508 firewall: drop a line Timotej Lazar 2024-06-20 20:54:01 +0200
• 668af8bdb6 firewall: use a handler to reboot Timotej Lazar 2024-05-19 10:09:37 +0200
• 0e9dac6985 fabric: support arbitrary port breakouts Timotej Lazar 2024-05-13 17:44:39 +0200
• 16f34c4502 Don’t gather facts when setting them Timotej Lazar 2024-05-13 17:39:05 +0200
• 8c82af23e4 firewall: also configure VPN forwards in the app Timotej Lazar 2024-05-03 11:27:27 +0200
• 7656c05b2d Revert "firewall: configure NAT from NetBox data" Timotej Lazar 2024-04-30 20:59:49 +0200
• 8a9d47f176 firewall: configure NAT from NetBox data Timotej Lazar 2024-04-28 12:15:39 +0200
• 457ab7d3b7 Query prefixes once for all hosts Timotej Lazar 2024-04-28 10:59:32 +0200
• 1c0709a6a6 fabric: allow all VLANs on bridge Timotej Lazar 2024-04-27 11:30:20 +0200
• c07c03a430 Set default inventory Timotej Lazar 2024-04-27 10:58:55 +0200
• 2443a90bc5 fabric: use FHRP groups for virtual router IPs Timotej Lazar 2024-04-14 15:09:48 +0200
• db397cb2b1 exit: store VLAN interface addresses in NetBox Timotej Lazar 2024-04-10 14:03:50 +0200
• ece3b8a377 exit: sort prefixes by family values Timotej Lazar 2024-04-09 10:47:51 +0200
• 000f625988 Move VM secrets to a separate password store directory Timotej Lazar 2024-04-08 15:06:18 +0200
• 6dcae194d7 firewall: accept VPN connections from inside also Timotej Lazar 2024-04-08 15:03:29 +0200
• c479f90669 access: move switch config templates back to this repo Timotej Lazar 2024-04-08 10:48:10 +0200
• 1ffdea8e43 firewall: fix duplicate space in template Timotej Lazar 2024-04-05 12:00:55 +0200
• f489555ba1 access: fix password store subdirectory for switches Timotej Lazar 2024-04-05 12:00:22 +0200
• 7ef4023424 firewall: add known IP ranges in network ipset definitions Timotej Lazar 2024-03-19 09:46:26 +0100
• aa82e5aa18 firewall_master: don’t define ipsets for VLAN groups Timotej Lazar 2024-03-19 09:45:23 +0100
• a97d133873 fabric: don’t set bond slaves if there are none Timotej Lazar 2024-03-05 12:46:26 +0100
• be0cc49b33 access: ignore more non‐changes Timotej Lazar 2024-03-04 10:12:38 +0100
• dbc00fd448 fabric: add custom field on dcim.Interface for bond mode Timotej Lazar 2024-02-27 13:16:51 +0100
• ce7c1bd49e fabric: consolidate interface templates Timotej Lazar 2024-02-27 10:59:06 +0100
• 5381fecaa4 fabric: fix check for peer switch Timotej Lazar 2024-02-26 10:06:26 +0100
• 65c16dbc63 Drop BGP update-delay option Timotej Lazar 2024-02-26 08:58:17 +0100
• e93877c83d firewall_master: add newly required option to pip invocation Timotej Lazar 2024-02-26 08:54:22 +0100
• 7fe1dac008 firewall: use slurp instead of generic command to get host key Timotej Lazar 2024-02-22 09:28:37 +0100
• cacf46c891 Lowercows Timotej Lazar 2024-02-27 13:35:10 +0100
• 2a644e7936 Eliminate the bovine infestation through ansible.cfg Gašper Fele-Žorž 2024-02-21 12:40:04 +0100
• c20c47709c exit: fix keepalive configuration Timotej Lazar 2024-02-18 16:28:35 +0100
• 37c025e2a0 firewall_master: move secrets to password store Timotej Lazar 2024-02-13 13:13:56 +0100
• d94e79f8b7 certbot_dns: move secrets to password store Timotej Lazar 2024-02-13 13:13:33 +0100
• 27dac09549 access: move secrets to password store Timotej Lazar 2024-02-13 10:33:14 +0100
• 91afaec9c2 firewall: allow connections from master with NATted IP Timotej Lazar 2024-02-06 09:19:49 +0100
• f54b23f49a firewall: disable forwarding for mgmt interfaces in if-pre-up Timotej Lazar 2024-01-30 12:58:58 +0100
• 25289dd82f firewall: fix interface renaming Timotej Lazar 2024-01-30 12:48:10 +0100
• 544aa0a088 firewall: create empty ipsets for known networks Timotej Lazar 2024-01-30 12:37:14 +0100
• 161ce73be7 exit: restart keepalived on DHCP config update Timotej Lazar 2024-01-30 12:36:19 +0100
• aeb124e346 Add inside and outside roles for VLANs Timotej Lazar 2024-01-30 12:35:33 +0100
• 0802dc8637 access: move templates to netbox Timotej Lazar 2023-12-29 14:55:00 +0100
• be398e54fe fabric: sort bridge VLANs by ID Timotej Lazar 2023-12-29 13:51:38 +0100
• 6fd5432b69 fabric: reload switchd before reloading interfaces Timotej Lazar 2023-12-29 09:01:01 +0100
• 0d24f9fdc7 firewall: log policy update messages to syslog Timotej Lazar 2023-12-18 11:03:01 +0100
• 2b275c2ab4 exit: receive VPN IPv6 addresses from firewalls Timotej Lazar 2023-12-14 21:41:39 +0100
• c2d0e88996 firewall: set IPv6 address for wireguard interface Timotej Lazar 2023-12-13 19:03:35 +0100
• d789e4a037 leaf: don’t talk BGP at bridges and bonds Timotej Lazar 2023-12-11 21:09:34 +0100
• 9e8db74d24 fabric: allow setting bridge access VLANs on non-bond ports Timotej Lazar 2023-12-11 21:08:52 +0100
• 950cd41c33 fabric: only add enabled ports to bridge Timotej Lazar 2023-12-11 20:31:44 +0100
• b2e42bfb30 Add DC access switches Timotej Lazar 2023-12-08 17:02:55 +0100
• 786fa37e4f Add requirements Timotej Lazar 2023-12-08 14:54:14 +0100
• 6574219bfb Add .gitignore Timotej Lazar 2023-12-08 14:54:06 +0100
• 158e8740b8 Initial commit, squashed Timotej Lazar 2023-12-18 11:22:14 +0100