master #2

Open
polz wants to merge 32 commits from polz/servers:master into master

32 commits

Author SHA1 Message Date
Gašper Fele-Žorž
b406ef0441 Add registrator to www-data 2025-11-18 15:14:16 +01:00
Gašper Fele-Žorž
575545dfe9 Add user and group to settings 2025-11-18 14:37:44 +01:00
Gašper Fele-Žorž
fa9f863ad1 Add running in check mode to instructions in README.md 2025-11-13 15:49:15 +01:00
ac9a688864 dnsmasq: add README 2025-11-13 15:19:49 +01:00
1dcb6ca6b7 dnsmasq: read reservations (also) from local context
Some questionable QoL improvement.
2025-11-13 15:19:49 +01:00
07143b28f2 friwall: don’t template settings
Let all settings including list of nodes be managed by application.
Exception is the list of networks instantiated from NetBox data.

Also add README.
2025-11-13 15:19:49 +01:00
927ff9758e debian: add wget to base packages 2025-11-13 15:19:49 +01:00
68baf2d9fe collector: support custom poll intervals
Also simplify config context schema for SNMP since we only use a single
instance.
2025-11-13 15:19:48 +01:00
05fe7eaf08 prometheus: allow setting custom retention time
15 days is default and also too short.
2025-11-13 15:19:48 +01:00
e6664d0d4c collector: add fields to SNMP scraper
Collect system location and uptime.
2025-11-13 15:17:42 +01:00
6c0b5adb5f ocserv: dehardcode site name in cert expiry message 2025-11-13 15:17:42 +01:00
7950b16a6a windows: set up windows_exporter 2025-11-13 15:17:42 +01:00
17bdec487c Release
Got permission to open‐source.
2025-11-13 15:17:42 +01:00
a2ea96c1af grafana: disable analytics also in general 2025-11-13 15:17:42 +01:00
603f0def4d debian: add a newline at the end of interfaces file
Not necessary but nicer.
2025-11-13 15:17:42 +01:00
136e3013b7 debian: enable automatic upgrades only for virtual machines
And factor out VM stuff into a separate file.
2025-11-13 15:17:42 +01:00
286321548d alpine: don’t disable IPv6 autoconf on loopback interface
Not sure if it makes a difference but let’s keep the generated config
minimal.
2025-11-13 15:17:42 +01:00
fd581a5bd6 alpine: add support for VRF interfaces
Mostly so we can merge the firewall role from the network repo, there
aren’t any other current users.
2025-11-13 15:17:42 +01:00
8563634cce alpine: enable automatic upgrades only for virtual machines
And factor out VM stuff into a separate file.
2025-11-13 15:17:42 +01:00
028f89a98a alpine: fix condition for loopback interface template 2025-11-13 15:17:42 +01:00
181f49c977 grafana: fix generated URLs
By setting root_url manually. Also disable some more analytics.
2025-11-13 15:17:42 +01:00
55989d3182 Add collector role
Sets up prometheus to pull metrics, with telegraf to process SNMP data.
2025-11-13 15:17:42 +01:00
ce611dd46a telegraf: drop agent configuration stuff
Servers will be switched to Prometheus. Telegraf remains as a SNMP proxy
(see following commit).
2025-11-13 15:17:42 +01:00
54c2b7ab63 Add prometheus role
Configured to include job definitions from /etc/prometheus/conf.d/*.yml.
2025-11-13 15:17:42 +01:00
Gašper Fele-Žorž
e48025477f Fix apis_process_data.sh cron script 2025-11-06 12:46:15 +01:00
Gašper Fele-Žorž
aef9aa513d Let registrator send out e-mails 2025-11-06 11:03:53 +01:00
Gašper Fele-Žorž
ed4518290a Fix garaze_racunovodstvo.sh 2025-11-06 10:45:35 +01:00
Gašper Fele-Žorž
39276edb93 Add rilec to setup.yml 2025-10-23 23:49:46 +02:00
Gašper Fele-Žorž
216deda916 Add role for apis-rilec 2025-10-23 20:32:48 +02:00
Gašper Fele-Žorž
61d5b4b6d8 Reload smbd instead of samba on Debian 2025-10-21 12:30:37 +02:00
Gašper Fele-Žorž
95a82ed764 Rename reverse-proxy 2025-10-21 12:28:02 +02:00
Gašper Fele-Žorž
d686ade847 Rename roles for apache-php and apache-openidc 2025-10-16 11:37:26 +02:00