Commit graph

Select branches

Hide pull requests

master

Mono Color

• 7ef4023424 firewall: add known IP ranges in network ipset definitions Timotej Lazar 2024-03-19 09:46:26 +01:00
• aa82e5aa18 firewall_master: don’t define ipsets for VLAN groups Timotej Lazar 2024-03-19 09:45:23 +01:00
• a97d133873 fabric: don’t set bond slaves if there are none Timotej Lazar 2024-03-05 12:46:26 +01:00
• be0cc49b33 access: ignore more non‐changes Timotej Lazar 2024-03-04 10:12:38 +01:00
• dbc00fd448 fabric: add custom field on dcim.Interface for bond mode Timotej Lazar 2024-02-27 13:16:51 +01:00
• ce7c1bd49e fabric: consolidate interface templates Timotej Lazar 2024-02-27 10:59:06 +01:00
• 5381fecaa4 fabric: fix check for peer switch Timotej Lazar 2024-02-26 10:06:26 +01:00
• 65c16dbc63 Drop BGP update-delay option Timotej Lazar 2024-02-26 08:58:17 +01:00
• e93877c83d firewall_master: add newly required option to pip invocation Timotej Lazar 2024-02-26 08:54:22 +01:00
• 7fe1dac008 firewall: use slurp instead of generic command to get host key Timotej Lazar 2024-02-22 09:28:37 +01:00
• cacf46c891 Lowercows Timotej Lazar 2024-02-27 13:35:10 +01:00
• 2a644e7936 Eliminate the bovine infestation through ansible.cfg Gašper Fele-Žorž 2024-02-21 12:40:04 +01:00
• c20c47709c exit: fix keepalive configuration Timotej Lazar 2024-02-18 16:28:35 +01:00
• 37c025e2a0 firewall_master: move secrets to password store Timotej Lazar 2024-02-13 13:13:56 +01:00
• d94e79f8b7 certbot_dns: move secrets to password store Timotej Lazar 2024-02-13 13:13:33 +01:00
• 27dac09549 access: move secrets to password store Timotej Lazar 2024-02-13 10:33:14 +01:00
• 91afaec9c2 firewall: allow connections from master with NATted IP Timotej Lazar 2024-02-06 09:19:49 +01:00
• f54b23f49a firewall: disable forwarding for mgmt interfaces in if-pre-up Timotej Lazar 2024-01-30 12:58:58 +01:00
• 25289dd82f firewall: fix interface renaming Timotej Lazar 2024-01-30 12:48:10 +01:00
• 544aa0a088 firewall: create empty ipsets for known networks Timotej Lazar 2024-01-30 12:37:14 +01:00
• 161ce73be7 exit: restart keepalived on DHCP config update Timotej Lazar 2024-01-30 12:36:19 +01:00
• aeb124e346 Add inside and outside roles for VLANs Timotej Lazar 2024-01-30 12:35:33 +01:00
• 0802dc8637 access: move templates to netbox Timotej Lazar 2023-12-29 14:55:00 +01:00
• be398e54fe fabric: sort bridge VLANs by ID Timotej Lazar 2023-12-29 13:51:38 +01:00
• 6fd5432b69 fabric: reload switchd before reloading interfaces Timotej Lazar 2023-12-29 09:01:01 +01:00
• 0d24f9fdc7 firewall: log policy update messages to syslog Timotej Lazar 2023-12-18 11:03:01 +01:00
• 2b275c2ab4 exit: receive VPN IPv6 addresses from firewalls Timotej Lazar 2023-12-14 21:41:39 +01:00
• c2d0e88996 firewall: set IPv6 address for wireguard interface Timotej Lazar 2023-12-13 19:03:35 +01:00
• d789e4a037 leaf: don’t talk BGP at bridges and bonds Timotej Lazar 2023-12-11 21:09:34 +01:00
• 9e8db74d24 fabric: allow setting bridge access VLANs on non-bond ports Timotej Lazar 2023-12-11 21:08:52 +01:00
• 950cd41c33 fabric: only add enabled ports to bridge Timotej Lazar 2023-12-11 20:31:44 +01:00
• b2e42bfb30 Add DC access switches Timotej Lazar 2023-12-08 17:02:55 +01:00
• 786fa37e4f Add requirements Timotej Lazar 2023-12-08 14:54:14 +01:00
• 6574219bfb Add .gitignore Timotej Lazar 2023-12-08 14:54:06 +01:00
• 158e8740b8 Initial commit, squashed Timotej Lazar 2023-12-18 11:22:14 +01:00