Commit graph

Select branches

Hide pull requests

master

Mono Color

• 0d60aa107f Consolidate nftables setup for alpine, debian and ceph roles master Timotej Lazar 2025-02-12 17:24:24 +0100
• bfda7b3236 dnsmasq: skip DNS update script when starting up Timotej Lazar 2025-02-06 09:14:53 +0100
• e95603fda9 Add unifi role Timotej Lazar 2025-02-04 14:44:02 +0100
• 73555d2fd7 ansible: shut up warnings about discovered Python interpreter Timotej Lazar 2025-01-23 13:36:24 +0100
• 365b5d9f67 Use IPv6 addresses for DNS servers Timotej Lazar 2025-01-23 13:25:45 +0100
• 878e8ba6f9 alpine: set up resolv.conf Timotej Lazar 2025-01-23 13:22:30 +0100
• 9720379c14 proxmox-backup: allow IPv6 ND on management interface Timotej Lazar 2025-01-23 13:12:25 +0100
• 0d607fe2a4 proxmox-backup: don’t modify config for default SSH instance Timotej Lazar 2025-01-23 13:10:50 +0100
• 04bfcb03fa debian: update package cache Timotej Lazar 2025-01-20 15:30:07 +0100
• 45c0f25ce0 debian: disable SSH password authentication Timotej Lazar 2025-01-20 14:58:08 +0100
• 446e6132c7 nginx: add support for Debian distros Timotej Lazar 2025-01-20 14:22:40 +0100
• e3862a5be6 Fix FC check in interface template Timotej Lazar 2025-01-20 11:20:46 +0100
• efbe8d2801 Reorder hosts in setup.yml Timotej Lazar 2025-01-13 15:29:37 +0100
• 67b9b7b268 frr: disable BFD Timotej Lazar 2025-01-13 14:57:38 +0100
• ac52c13803 proxmox-backup: set mail relay Timotej Lazar 2025-01-07 11:19:47 +0100
• b02ebf5be3 templates: skip FC interfaces Timotej Lazar 2025-01-07 10:53:17 +0100
• e5b570ddad proxmox: disable password SSH authentication Timotej Lazar 2024-12-13 14:49:44 +0100
• c585070edc Add kanboard role and server Timotej Lazar 2024-12-06 13:08:01 +0100
• 04f187a140 dokuwiki: factor out nginx-php role Timotej Lazar 2024-12-06 13:07:01 +0100
• 52f8ed5a2d Rename host doku to doc Timotej Lazar 2024-12-05 10:27:15 +0100
• bc05b2a9f6 dokuwiki: support multiple domains for nginx Timotej Lazar 2024-12-05 10:26:25 +0100
• 1b5a20ac8a dnsmasq: disable ping for duplicate address detection Timotej Lazar 2024-11-28 15:41:22 +0100
• ff9620ed2a ceph: allow IPv6 neighbor discovery on mgmt interface Timotej Lazar 2024-11-27 17:37:07 +0100
• 0a0ce7e2a5 Add telegraf role Timotej Lazar 2024-11-27 17:36:20 +0100
• 14dd446fd4 Add monitor Timotej Lazar 2024-11-27 17:31:28 +0100
• 2d776d3246 nginx: only handle acme-challenge well-known directory in default site Timotej Lazar 2024-11-20 15:47:18 +0100
• b7fd838ca9 reverse-proxy: disable request buffering Timotej Lazar 2024-11-18 13:36:35 +0100
• cdb8fe6b66 reverse-proxy: increase proxy read timeout Timotej Lazar 2024-11-18 13:29:46 +0100
• efdb74497a reverse-proxy: increase max request size Timotej Lazar 2024-11-18 12:42:36 +0100
• 973ce03249 Add reverse-proxy role Timotej Lazar 2024-11-15 15:44:29 +0100
• c970c562a9 nginx: support certificates for multiple domains Timotej Lazar 2024-11-15 11:25:50 +0100
• 554bf1f711 dnsmasq: drop dhcp-proxy option Timotej Lazar 2024-11-09 20:06:58 +0100
• 46a9ff6fc0 ceph: add LE certificates Timotej Lazar 2024-11-08 16:32:06 +0100
• 6e5de53937 doku: unoverride style for external link icons Timotej Lazar 2024-10-22 10:16:46 +0200
• ae49801579 doku: update deprecated nginx http2 directive Timotej Lazar 2024-10-22 10:16:22 +0200
• 82ca6a94c1 nginx: reload server for renewed LE certificates Timotej Lazar 2024-10-22 10:02:26 +0200
• 21df85e97a dnsmasq: sort ranges by network name Timotej Lazar 2024-10-21 15:35:32 +0200
• 2bf2eb73a7 Add role=IoT to targets polz 2024-09-30 15:17:41 +0200
• b818249d82 Add grafana role Timotej Lazar 2024-09-27 16:14:23 +0200
• d0f3d828df Add influxdb role Timotej Lazar 2024-09-27 16:14:10 +0200
• 1f5d2f6238 facts: don’t barf on missing passwords Timotej Lazar 2024-09-27 14:02:39 +0200
• 6c817624bc alpine: disable IPv6 automatic addresses Timotej Lazar 2024-09-21 22:41:36 +0200
• 7155c33182 dnsmasq: fix template Timotej Lazar 2024-09-20 12:35:42 +0200
• d89ed5a46b frr: use service module for reloading Timotej Lazar 2024-09-10 16:44:21 +0200
• 13009283c0 proxmox-backup add nftables template Gašper Fele-Žorž 2024-09-10 15:40:16 +0200
• 0802ac9878 proxmox-backup: fix hosts file Gašper Fele-Žorž 2024-09-10 15:10:55 +0200
• 68f0d6ba44 Add proxmox-backup Gašper Fele-Žorž 2024-09-10 15:07:30 +0200
• add84ba1d2 proxmox-backup: set domain for ACME Gašper Fele-Žorž 2024-09-10 15:06:53 +0200
• 11a5ec85b3 proxmox-backup: add firewall Gašper Fele-Žorž 2024-09-10 14:53:46 +0200
• f2fbd0c848 Add role proxmox-backup Gašper Fele-Žorž 2024-09-10 14:13:24 +0200
• b5565b24fd Add RuntimeDirectory to ssh service Gašper Fele-Žorž 2024-09-10 14:11:35 +0200
• 2e3d7d180d proxmox: set mail relay Timotej Lazar 2024-09-10 10:11:13 +0200
• 9932064758 synapse: read DB password from secret store Timotej Lazar 2024-09-06 16:30:51 +0200
• 4fff2fac1b frr: help zebra keep track of ECMP routes on link flap Timotej Lazar 2024-09-06 15:10:54 +0200
• 54240955f1 Update instructions in README Timotej Lazar 2024-09-06 10:41:49 +0200
• e2edd63efe proxmox: add dependency for ldap sync script Gašper Fele-Žorž 2024-09-05 10:56:50 +0200
• a8b83e833b facts: only look up cluster nodes when deploying to members Timotej Lazar 2024-09-04 16:56:56 +0200
• 17c8e84498 proxmox: support certificate renewals with ACME Timotej Lazar 2024-09-04 16:54:47 +0200
• 1c1dd52325 proxmox: support public services for firewall Timotej Lazar 2024-09-04 16:44:46 +0200
• 6b1d871392 alpine: don’t assume all public services are TCP either Timotej Lazar 2024-09-04 16:42:13 +0200
• ec4dcd4ffd frr: don’t use undefined variable Timotej Lazar 2024-08-28 12:39:51 +0200
• 211d4bdb9a Deconsolidate network setup for proxmox and debian roles Timotej Lazar 2024-08-28 12:37:41 +0200
• c3d1a6c4b1 proxmox: fix handling empty values in LDAP sync script Timotej Lazar 2024-08-20 15:08:57 +0200
• 2b4a196e4d alpine: add whimsy Timotej Lazar 2024-08-16 11:48:10 +0200
• 312cd8d4b3 alpine: rename network interfaces Timotej Lazar 2024-08-16 11:44:34 +0200
• d5db7529dd netbox: allow registered users to view everything Timotej Lazar 2024-08-15 17:09:11 +0200
• 8ba6959065 postgres: store DB password with other secrets Timotej Lazar 2024-08-15 12:57:15 +0200
• 3261bc7f98 alpine: don’t hardcode nftables input rule for SSH Timotej Lazar 2024-08-14 12:46:23 +0200
• 38ff061f81 alpine: don’t set gateway for interface if the gateway is that interface Timotej Lazar 2024-08-06 15:47:05 +0200
• 6e35a7462d dnsmasq: get DHCP ranges from NetBox Timotej Lazar 2024-08-05 12:07:39 +0200
• 036f7c8b74 Support custom allowed_ips field for services Timotej Lazar 2024-08-03 11:44:03 +0200
• 01a27e45ce dnsmasq: add script for dynamic DNS updates Timotej Lazar 2024-08-02 12:08:32 +0200
• a3dd4eba65 alpine: don’t assume all services are TCP Timotej Lazar 2024-07-26 10:14:23 +0200
• b20e9cccff Add dnsmasq role Timotej Lazar 2024-07-26 10:13:59 +0200
• 02086cdc32 synapse: enable service Timotej Lazar 2024-07-05 11:27:04 +0200
• 3e55bf9774 dokuwiki: add missing handler Timotej Lazar 2024-07-05 11:04:28 +0200
• e17b5c1b2d friwall: add missing notify Timotej Lazar 2024-07-05 11:04:01 +0200
• f10d94612f Factor out password store retrieval Timotej Lazar 2024-07-04 15:31:25 +0200
• 973522c373 Import friwall role from network ansible scripts Timotej Lazar 2024-07-04 15:01:47 +0200
• bacfc66f7c alpine: flush some handlers Timotej Lazar 2024-07-04 14:55:09 +0200
• 92674f58a1 synapse: allow listing public rooms over federation Timotej Lazar 2024-06-25 18:08:54 +0200
• e101493889 Add synapse role Timotej Lazar 2024-06-25 09:45:53 +0200
• 74cb31e243 netbox: factor out redis role Timotej Lazar 2024-06-25 00:52:57 +0200
• f1f9d6fa34 alpine: configure network interfaces Timotej Lazar 2024-06-25 00:40:13 +0200
• c42f9ae1f9 Set become_flags in ansible.cfg Timotej Lazar 2024-06-24 21:38:31 +0200
• dbdf88fe36 Set become_method in ansible.cfg Timotej Lazar 2024-06-20 20:47:00 +0200
• 2618c1c414 forgejo: enable auto registration for oauth2 Timotej Lazar 2024-06-20 19:43:35 +0200
• 4b34370d5d ceph: set NTP servers Timotej Lazar 2024-06-19 15:07:59 +0200
• 29598ef4bb Rework service handling Timotej Lazar 2024-06-19 13:33:32 +0200
• 38c3464279 alpine: assume one DNS name per host Timotej Lazar 2024-06-19 13:14:51 +0200
• 393614aa79 alpine: configure unattended upgrades Timotej Lazar 2024-06-17 09:52:56 +0200
• 6a9a4142ce forgejo: set WAL mode for sqlite Timotej Lazar 2024-06-17 09:52:36 +0200
• 25df98c97b forgejo: configure some more options Timotej Lazar 2024-06-05 17:33:43 +0200
• f5e9c7d6dc alpine: add iproute2 to base packages Timotej Lazar 2024-06-05 15:39:15 +0200
• 398e41732e alpine: set hostname Timotej Lazar 2024-06-05 15:38:20 +0200
• fe6c35edf1 alpine: set up firewall Timotej Lazar 2024-06-05 15:37:45 +0200
• b3aff08ce3 forgejo: listen on unix socket Timotej Lazar 2024-06-05 15:00:14 +0200
• 22f363d06a Add postgres role Timotej Lazar 2024-06-05 12:54:55 +0200
• af9e30eb3e Add forgejo role Timotej Lazar 2024-06-04 20:02:28 +0200
• f863d87fbf dokuwiki: remove hardcoded names Timotej Lazar 2024-05-28 13:34:34 +0200