Commit graph

Select branches

Hide pull requests

master

Mono Color

• 3e1949565a firewall: increase max connections master Timotej Lazar 2025-04-16 22:24:01 +0200
• ed0f4b4bff fabric: make some space Timotej Lazar 2025-04-03 18:42:23 +0200
• a4c6ac04fb ansible: silence pointless warnings Timotej Lazar 2025-04-03 17:51:18 +0200
• 39284749f2 fabric: clean up formatting for interface templates Timotej Lazar 2025-03-27 11:58:24 +0100
• 09eb030e32 exit: determine uplink gateway address from interface address Timotej Lazar 2025-03-27 11:31:40 +0100
• a2d7174829 fabric: clean up switch.intf template Timotej Lazar 2025-03-26 22:43:26 +0100
• 2f662373e5 firewall: get mgmt gateway from custom field on prefix Timotej Lazar 2025-03-26 19:19:09 +0100
• 6040a3ae84 access: round allowed MACs on a port down to 64 Timotej Lazar 2025-03-26 19:12:15 +0100
• d3196a48c2 firewall: set up resolv.conf Timotej Lazar 2025-03-26 10:35:00 +0100
• f9f71bb337 firewall: don’t import or advertise subnets for inside networks Timotej Lazar 2025-03-26 10:14:15 +0100
• cafa938da3 firewall: consolidate IPv4 and IPv6 address families for BGP Timotej Lazar 2025-03-26 01:46:28 +0100
• 8a0113ea49 leaf: consolidate IPv4 and IPv6 address families for BGP Timotej Lazar 2025-03-26 01:33:33 +0100
• d667a38553 exit: consolidate IPv4 and IPv6 address families Timotej Lazar 2025-03-26 01:15:14 +0100
• 3b3e759cc1 exit: don’t import or advertise subnets for inside networks Timotej Lazar 2025-03-24 18:15:53 +0100
• 0ed4973894 access: get mgmt gateway from custom field on prefix Timotej Lazar 2025-03-24 18:13:55 +0100
• 9c35f0fa25 fabric: get mgmt gateway from custom field on prefix Timotej Lazar 2025-03-23 19:51:25 +0100
• bc93f26a21 fabric: disable snmpd Timotej Lazar 2025-03-23 12:35:23 +0100
• 60dd62c00f access: increase command timeout when setting config Timotej Lazar 2025-03-18 14:40:18 +0100
• 08a0cdd994 exit: update package cache before installing stuff Timotej Lazar 2025-03-18 14:17:59 +0100
• c0156b4899 exit: bump keepalive version Timotej Lazar 2025-03-18 14:17:31 +0100
• 07fa350ae6 access: enable port-security Timotej Lazar 2025-03-17 15:41:48 +0100
• fe30b550de fabric: add some Cumulus defaults to mgmt interface config Timotej Lazar 2025-03-14 15:30:44 +0100
• dd30e2ab1c access: support native VLAN on tagged interfaces for D-Link switches Timotej Lazar 2025-02-10 17:07:32 +0100
• f57023b0f0 firewall: allow connections from master over IPv6 Timotej Lazar 2024-12-20 15:18:36 +0100
• 1d97ec2cda exit: remove --giaddr-src option for DHCP relay Timotej Lazar 2024-11-09 19:59:11 +0100
• de05fd236b access: enable DHCP snooping on D-Link switches Timotej Lazar 2024-11-09 19:56:31 +0100
• bbf0798d5c firewall: add more ports to AD service definition Timotej Lazar 2024-10-04 13:29:39 +0200
• 57197d7695 access: set up SNMP user for D-Link switches Timotej Lazar 2024-10-02 14:27:45 +0200
• e51d08c073 access: get switch username from password store Timotej Lazar 2024-10-02 10:39:12 +0200
• a230697846 access: disable HTTP service for D-Link switches Timotej Lazar 2024-09-30 10:50:50 +0200
• 7e02a13144 firewall: forward ICMP(v6) packets Timotej Lazar 2024-09-21 20:19:55 +0200
• f8e8acb521 firewall: expand convenience nftables port sets Timotej Lazar 2024-09-21 20:19:24 +0200
• 5a9f0ac26a exit: strip own AS prefix from routes received by firewalls Timotej Lazar 2024-09-21 16:13:59 +0200
• ef1b00adce firewall: update backup route maps Timotej Lazar 2024-09-21 10:13:26 +0200
• 6c18e2ff94 firewall: add convenience nftables set for AD ports Timotej Lazar 2024-09-19 16:25:51 +0200
• ae1cfd5337 exit: enable forwarding directed broadcasts for WoL Timotej Lazar 2024-09-18 14:27:30 +0200
• 6322d5ec97 exit: add routes for VPN IPv4 addresses to outside and default VRFs Timotej Lazar 2024-09-16 17:19:25 +0200
• 6c8309f1c9 exit: leak non-NATted inside routes into default VRF Timotej Lazar 2024-09-03 17:15:12 +0200
• 103ecae2e7 exit: leak outside routes into default VRF Timotej Lazar 2024-09-01 12:19:13 +0200
• 3caea81896 access: add voice VLAN support Timotej Lazar 2024-09-01 10:37:11 +0200
• c3ff39fe72 firewall: reload nftables in mgmt VRF Timotej Lazar 2024-08-19 13:54:01 +0200
• 5032d1ac84 fabric: fix a template Timotej Lazar 2024-08-15 17:22:55 +0200
• 14d2e00f0b exit: only send RAs on interfaces with FHRP addresses Timotej Lazar 2024-08-13 19:12:29 +0200
• 7b5980f871 exit: add routes for internal IPv4 addresses to outside VRF Timotej Lazar 2024-08-13 19:02:03 +0200
• fe8f9161d9 exit: drop redundant and now misleading comment Timotej Lazar 2024-08-12 11:46:07 +0200
• 9a56e48141 exit: allow multiple VLANs per VRF Timotej Lazar 2024-08-04 14:12:26 +0200
• c239b91d17 Simplify README Timotej Lazar 2024-08-03 11:48:09 +0200
• c741b90981 fabric: disable less-than-sane Cumulus SSH default options Timotej Lazar 2024-07-26 14:27:34 +0200
• 82b10e8133 exit: support custom VRF imports Timotej Lazar 2024-07-15 11:28:33 +0200
• 99aef43574 exit: add DHCP relay for new server Timotej Lazar 2024-07-13 18:08:31 +0200
• bb41d406f8 exit, firewall: don’t hardcode prefix length Timotej Lazar 2024-07-10 16:57:08 +0200
• 2327b42412 fabric: disable nvue-startup service Timotej Lazar 2024-07-04 15:36:02 +0200
• 48b987180a Move firewall_master role to servers repo Timotej Lazar 2024-07-04 15:35:41 +0200
• ff1abcb508 firewall: drop a line Timotej Lazar 2024-06-20 20:54:01 +0200
• 668af8bdb6 firewall: use a handler to reboot Timotej Lazar 2024-05-19 10:09:37 +0200
• 0e9dac6985 fabric: support arbitrary port breakouts Timotej Lazar 2024-05-13 17:44:39 +0200
• 16f34c4502 Don’t gather facts when setting them Timotej Lazar 2024-05-13 17:39:05 +0200
• 8c82af23e4 firewall: also configure VPN forwards in the app Timotej Lazar 2024-05-03 11:27:27 +0200
• 7656c05b2d Revert "firewall: configure NAT from NetBox data" Timotej Lazar 2024-04-30 20:59:49 +0200
• 8a9d47f176 firewall: configure NAT from NetBox data Timotej Lazar 2024-04-28 12:15:39 +0200
• 457ab7d3b7 Query prefixes once for all hosts Timotej Lazar 2024-04-28 10:59:32 +0200
• 1c0709a6a6 fabric: allow all VLANs on bridge Timotej Lazar 2024-04-27 11:30:20 +0200
• c07c03a430 Set default inventory Timotej Lazar 2024-04-27 10:58:55 +0200
• 2443a90bc5 fabric: use FHRP groups for virtual router IPs Timotej Lazar 2024-04-14 15:09:48 +0200
• db397cb2b1 exit: store VLAN interface addresses in NetBox Timotej Lazar 2024-04-10 14:03:50 +0200
• ece3b8a377 exit: sort prefixes by family values Timotej Lazar 2024-04-09 10:47:51 +0200
• 000f625988 Move VM secrets to a separate password store directory Timotej Lazar 2024-04-08 15:06:18 +0200
• 6dcae194d7 firewall: accept VPN connections from inside also Timotej Lazar 2024-04-08 15:03:29 +0200
• c479f90669 access: move switch config templates back to this repo Timotej Lazar 2024-04-08 10:48:10 +0200
• 1ffdea8e43 firewall: fix duplicate space in template Timotej Lazar 2024-04-05 12:00:55 +0200
• f489555ba1 access: fix password store subdirectory for switches Timotej Lazar 2024-04-05 12:00:22 +0200
• 7ef4023424 firewall: add known IP ranges in network ipset definitions Timotej Lazar 2024-03-19 09:46:26 +0100
• aa82e5aa18 firewall_master: don’t define ipsets for VLAN groups Timotej Lazar 2024-03-19 09:45:23 +0100
• a97d133873 fabric: don’t set bond slaves if there are none Timotej Lazar 2024-03-05 12:46:26 +0100
• be0cc49b33 access: ignore more non‐changes Timotej Lazar 2024-03-04 10:12:38 +0100
• dbc00fd448 fabric: add custom field on dcim.Interface for bond mode Timotej Lazar 2024-02-27 13:16:51 +0100
• ce7c1bd49e fabric: consolidate interface templates Timotej Lazar 2024-02-27 10:59:06 +0100
• 5381fecaa4 fabric: fix check for peer switch Timotej Lazar 2024-02-26 10:06:26 +0100
• 65c16dbc63 Drop BGP update-delay option Timotej Lazar 2024-02-26 08:58:17 +0100
• e93877c83d firewall_master: add newly required option to pip invocation Timotej Lazar 2024-02-26 08:54:22 +0100
• 7fe1dac008 firewall: use slurp instead of generic command to get host key Timotej Lazar 2024-02-22 09:28:37 +0100
• cacf46c891 Lowercows Timotej Lazar 2024-02-27 13:35:10 +0100
• 2a644e7936 Eliminate the bovine infestation through ansible.cfg Gašper Fele-Žorž 2024-02-21 12:40:04 +0100
• c20c47709c exit: fix keepalive configuration Timotej Lazar 2024-02-18 16:28:35 +0100
• 37c025e2a0 firewall_master: move secrets to password store Timotej Lazar 2024-02-13 13:13:56 +0100
• d94e79f8b7 certbot_dns: move secrets to password store Timotej Lazar 2024-02-13 13:13:33 +0100
• 27dac09549 access: move secrets to password store Timotej Lazar 2024-02-13 10:33:14 +0100
• 91afaec9c2 firewall: allow connections from master with NATted IP Timotej Lazar 2024-02-06 09:19:49 +0100
• f54b23f49a firewall: disable forwarding for mgmt interfaces in if-pre-up Timotej Lazar 2024-01-30 12:58:58 +0100
• 25289dd82f firewall: fix interface renaming Timotej Lazar 2024-01-30 12:48:10 +0100
• 544aa0a088 firewall: create empty ipsets for known networks Timotej Lazar 2024-01-30 12:37:14 +0100
• 161ce73be7 exit: restart keepalived on DHCP config update Timotej Lazar 2024-01-30 12:36:19 +0100
• aeb124e346 Add inside and outside roles for VLANs Timotej Lazar 2024-01-30 12:35:33 +0100
• 0802dc8637 access: move templates to netbox Timotej Lazar 2023-12-29 14:55:00 +0100
• be398e54fe fabric: sort bridge VLANs by ID Timotej Lazar 2023-12-29 13:51:38 +0100
• 6fd5432b69 fabric: reload switchd before reloading interfaces Timotej Lazar 2023-12-29 09:01:01 +0100
• 0d24f9fdc7 firewall: log policy update messages to syslog Timotej Lazar 2023-12-18 11:03:01 +0100
• 2b275c2ab4 exit: receive VPN IPv6 addresses from firewalls Timotej Lazar 2023-12-14 21:41:39 +0100
• c2d0e88996 firewall: set IPv6 address for wireguard interface Timotej Lazar 2023-12-13 19:03:35 +0100
• d789e4a037 leaf: don’t talk BGP at bridges and bonds Timotej Lazar 2023-12-11 21:09:34 +0100