Commit graph

11 commits

Author SHA1 Message Date
036f7c8b74 Support custom allowed_ips field for services
Like allowed_prefixes, but for single IP addresses. Currently used
just for DHCP server to allow (only) packets from relays.
2024-08-03 11:44:03 +02:00
a3dd4eba65 alpine: don’t assume all services are TCP 2024-07-26 10:14:23 +02:00
bacfc66f7c alpine: flush some handlers 2024-07-04 14:55:09 +02:00
f1f9d6fa34 alpine: configure network interfaces 2024-06-25 00:40:13 +02:00
29598ef4bb Rework service handling
Allow running playbooks without NetBox access. Mainly to bootstrap
NetBox itself.

Would prefer not to access network from filter plugins, so maybe do
that at some point also.
2024-06-19 13:33:32 +02:00
393614aa79 alpine: configure unattended upgrades 2024-06-17 09:52:56 +02:00
f5e9c7d6dc alpine: add iproute2 to base packages
Too useful too often not to.
2024-06-05 15:40:59 +02:00
398e41732e alpine: set hostname
And configure /etc/hosts accordingly.
2024-06-05 15:40:55 +02:00
fe6c35edf1 alpine: set up firewall
Get services from NetBox and enable SSH unconditionally for now.
2024-06-05 15:37:45 +02:00
ce80765560 alpine: add nftables to base packages 2024-05-28 12:52:59 +02:00
c2c1fdbe40 Add alpine role
Base packages and SSH config, and QEMU guest agent for VMs.
2024-05-19 14:21:22 +02:00