servers/roles
Timotej Lazar 7907b6f0e5 Revert "dnsmasq: drop dhcp-proxy option"
This reverts commit 554bf1f711.

Turns out ISC dhcrelay will relay even unicast packets from clients. So
the DHCP server got both the routed and the relayed query.

This tells dnsmasq to tell clients to send everything through the relay.
Since everything now comes from the relay we can drop access from client
networks.
2025-03-19 14:49:43 +01:00
..
alpine Consolidate nftables setup for alpine, debian and ceph roles 2025-02-12 17:24:24 +01:00
ceph Consolidate nftables setup for alpine, debian and ceph roles 2025-02-12 17:24:24 +01:00
debian Consolidate nftables setup for alpine, debian and ceph roles 2025-02-12 17:24:24 +01:00
dnsmasq Revert "dnsmasq: drop dhcp-proxy option" 2025-03-19 14:49:43 +01:00
dokuwiki dokuwiki: factor out nginx-php role 2024-12-06 13:07:01 +01:00
facts/tasks facts: don’t barf on missing passwords 2024-09-27 14:02:39 +02:00
forgejo Factor out password store retrieval 2024-07-04 15:31:57 +02:00
friwall friwall: add missing notify 2024-07-05 11:04:01 +02:00
frr frr: disable BFD 2025-01-13 14:57:38 +01:00
grafana Add grafana role 2024-09-27 16:14:23 +02:00
influxdb Add influxdb role 2024-09-27 16:14:10 +02:00
kanboard Add kanboard role and server 2024-12-06 13:08:14 +01:00
netbox netbox: allow registered users to view everything 2024-08-15 17:11:29 +02:00
nginx nginx: add support for Debian distros 2025-01-20 14:22:40 +01:00
nginx-php dokuwiki: factor out nginx-php role 2024-12-06 13:07:01 +01:00
opensmtpd opensmtpd: support relaying mail 2025-02-17 15:04:59 +01:00
postgres/tasks postgres: store DB password with other secrets 2024-08-15 12:58:24 +02:00
proxmox proxmox: disable password SSH authentication 2024-12-13 14:49:44 +01:00
proxmox-backup proxmox-backup: allow IPv6 ND on management interface 2025-01-23 13:12:25 +01:00
redis/tasks netbox: factor out redis role 2024-06-25 00:52:57 +02:00
reverse-proxy reverse-proxy: disable request buffering 2024-11-18 13:36:49 +01:00
samba samba: check AD membership with net 2024-05-28 12:51:44 +02:00
scan Add nsswitch config to scan 2025-02-17 14:12:18 +01:00
synapse synapse: read DB password from secret store 2024-09-06 16:30:51 +02:00
telegraf Add telegraf role 2024-11-27 17:37:00 +01:00
unifi unifi: fix nginx reverse proxy headers 2025-02-17 10:18:56 +01:00