216 Commits

This Branch

This Branch

All Branches

Author	SHA1	Message	Date
Georg Pfuetzenreuter	533aedd864	denc-webcluster: enable keepalived script security ... Prevent script tampering. Signed-off-by: Georg Pfuetzenreuter <mail@georg-pfuetzenreuter.net>	2023-02-12 14:37:45 +01:00
Georg Pfuetzenreuter	7481741f95	denc-webcluster: allow http(s) publicly ... Public firewall rules were missing from initial import. Signed-off-by: Georg Pfuetzenreuter <mail@georg-pfuetzenreuter.net>	2023-02-12 14:33:34 +01:00
Georg Pfuetzenreuter	8c21d250c3	Merge pull request 'Import denc webcluster (nemesis/hubris)' (#12) from import-denc-webcluster into production ... Reviewed-on: #12	2023-02-12 14:25:55 +01:00
Georg Pfuetzenreuter	c5ce94d7b5	Manage backend firewall zone ... Configure backend firewall zones if applicable. Allow all UDP for cluster traffic. Signed-off-by: Georg Pfuetzenreuter <mail@georg-pfuetzenreuter.net>	2023-02-12 06:04:16 +01:00
Georg Pfuetzenreuter	bef66c1f8a	ha-node: allow vrrp in firewall ... Needed for keepalived operation. Signed-off-by: Georg Pfuetzenreuter <mail@georg-pfuetzenreuter.net>	2023-02-12 05:54:20 +01:00
Georg Pfuetzenreuter	0581510c10	Add ha-netcup role ... Role managing the Netcup IP failover script plus keepalived. Requires ha-node role introduced via a8bbe056f1. Signed-off-by: Georg Pfuetzenreuter <mail@georg-pfuetzenreuter.net>	2023-02-12 05:24:27 +01:00
Georg Pfuetzenreuter	af2c5b0061	Add keepalived_script_user profile ... Short profile source from other profiles requiring the keepalived_script user to be present. Signed-off-by: Georg Pfuetzenreuter <mail@georg-pfuetzenreuter.net>	2023-02-12 05:24:27 +01:00
Georg Pfuetzenreuter	f08bda4256	Add netcup_failover profile ... Profile managing a Netcup IP address failover script for use with keepalived. Signed-off-by: Georg Pfuetzenreuter <mail@georg-pfuetzenreuter.net>	2023-02-12 05:24:27 +01:00
Georg Pfuetzenreuter	303b06ae8c	nemesis/hubris: import keepalived configuration ... Add shared configuration to cluster.denc.web-proxy. Signed-off-by: Georg Pfuetzenreuter <mail@georg-pfuetzenreuter.net>	2023-02-12 05:21:43 +01:00
Georg Pfuetzenreuter	a0a21a17db	nemesis/hubris: include denc.web-proxy ... Add shared nginx configuration to nemesis/hubris HA pair nodes. Signed-off-by: Georg Pfuetzenreuter <mail@georg-pfuetzenreuter.net>	2023-02-12 05:21:42 +01:00
Georg Pfuetzenreuter	eed4945a9f	nemesis/hubris: import nginx configuration ... Add shared configuration to cluster.denc.web-proxy. Signed-off-by: Georg Pfuetzenreuter <mail@georg-pfuetzenreuter.net>	2023-02-12 05:21:39 +01:00
Georg Pfuetzenreuter	1b0965943f	Merge pull request 'common-suse: add qemu-guest-agent + remove AutoYaST' (#23) from common-suse into production ... Reviewed-on: #23	2023-02-12 04:13:50 +01:00
Georg Pfuetzenreuter	8e1436d4af	common.suse: manage qemu-guest-agent ... Ensure qemu-guest-agent is active on all KVM guests. Signed-off-by: Georg Pfuetzenreuter <mail@georg-pfuetzenreuter.net>	2023-02-12 04:11:14 +01:00
Georg Pfuetzenreuter	b6b7ff1e33	common.suse: remove AutoYaST ... We only use AutoYaST for the OS deployment and don't need the packages afterwards. Signed-off-by: Georg Pfuetzenreuter <mail@georg-pfuetzenreuter.net>	2023-02-12 04:11:14 +01:00
Georg Pfuetzenreuter	95248fd374	Merge pull request 'dericom02: manage web firewall zone' (#22) from dericom02-webfw into production ... Reviewed-on: #22	2023-02-12 03:52:41 +01:00
Georg Pfuetzenreuter	1f8d8b642c	dericom02: manage web firewall zone ... Import locally configured web zone into Salt. This zone allows the web proxy to reach http for serving Matterbridge media. Signed-off-by: Georg Pfuetzenreuter <mail@georg-pfuetzenreuter.net>	2023-02-12 03:49:40 +01:00
Georg Pfuetzenreuter	9043634123	Merge pull request 'lighttpd: improve dependencies' (#21) from lighttpd-watch into production ... Reviewed-on: #21	2023-02-12 03:06:20 +01:00
Georg Pfuetzenreuter	9a0c210b87	lighttpd: improve dependencies ... - add more explicit Salt ID dependencies - reload service on configuration changes Signed-off-by: Georg Pfuetzenreuter <mail@georg-pfuetzenreuter.net>	2023-02-12 03:03:09 +01:00
Georg Pfuetzenreuter	5da0bfe798	Merge pull request 'dericom02: disable matterbridge XMPP debug' (#20) from matterbridge-xmpp-debug into production ... Reviewed-on: #20	2023-02-12 02:56:22 +01:00
Georg Pfuetzenreuter	16c8cd3dd5	dericom02: disable matterbridge XMPP debug ... It's very noisy - one can enable it on demand if needed. Signed-off-by: Georg Pfuetzenreuter <mail@georg-pfuetzenreuter.net>	2023-02-12 02:53:04 +01:00
Georg Pfuetzenreuter	1eb10e4687	Merge pull request 'matterbridge: restart on changes' (#19) from matterbridge-watch into production ... Reviewed-on: #19	2023-02-12 02:42:29 +01:00
Georg Pfuetzenreuter	b446afcc49	matterbridge: restart on changes ... Matterbridge does detect file changes, but seems to only apply them on a service restart. Signed-off-by: Georg Pfuetzenreuter <mail@georg-pfuetzenreuter.net>	2023-02-12 02:39:47 +01:00
Georg Pfuetzenreuter	82e8ce4eb2	Merge pull request 'matterbridge: quote numbers' (#18) from matterbridge-booleans into production ... Reviewed-on: #18	2023-02-12 02:33:30 +01:00
Georg Pfuetzenreuter	586c7e3bc7	Merge pull request 'Disable "aithunder" Discord bridge' (#17) from matterbridge-aithunder into production ... Reviewed-on: #17	2023-02-12 02:31:48 +01:00
Georg Pfuetzenreuter	b061265885	matterbridge: quote numbers ... Needed to make the TOML configuration format happy. Signed-off-by: Georg Pfuetzenreuter <mail@georg-pfuetzenreuter.net>	2023-02-12 02:30:56 +01:00
Georg Pfuetzenreuter	1302e06486	Disable "aithunder" Discord bridge ... Discord room does not exist. Signed-off-by: Georg Pfuetzenreuter <mail@georg-pfuetzenreuter.net>	2023-02-12 02:25:55 +01:00
Georg Pfuetzenreuter	8fbfd38ec3	Merge pull request 'dericom02: quote matterbridge booleans' (#16) from matterbridge-booleans into production ... Reviewed-on: #16	2023-02-12 02:18:19 +01:00
Georg Pfuetzenreuter	12c47a346b	dericom02: quote matterbridge booleans ... TOML configuration format needs lowercase boolean values. Signed-off-by: Georg Pfuetzenreuter <mail@georg-pfuetzenreuter.net>	2023-02-12 02:13:03 +01:00
Pratyush Desai	c9a157833b	Merge pull request 'Matterbridge media' (#15) from matterbridge-media into production ... Reviewed-on: #15	2023-02-12 00:55:49 +01:00
Georg Pfuetzenreuter	1aacd3f340	dericom02: manage matterbridge media ... - move base media directory to variable - add lighttpd vhosts to pillar Signed-off-by: Georg Pfuetzenreuter <mail@georg-pfuetzenreuter.net>	2023-02-12 00:51:59 +01:00
Georg Pfuetzenreuter	ab47eb5485	matterbridge: manage media directories ... Create media directories if defined in the pillar. Signed-off-by: Georg Pfuetzenreuter <mail@georg-pfuetzenreuter.net>	2023-02-12 00:51:26 +01:00
Pratyush Desai	e2560f0dd6	Merge pull request 'matterbridge: add role pillar' (#14) from matterbridge-pillar-fixup into production ... Reviewed-on: #14	2023-02-09 23:00:18 +01:00
Georg Pfuetzenreuter	77c50cf53f	matterbridge: add role pillar ... Empty for now, adding for future reference and because we enforce role pillars to exist. Signed-off-by: Georg Pfuetzenreuter <mail@georg-pfuetzenreuter.net>	2023-02-09 22:56:28 +01:00
Pratyush Desai	03a4aec0f3	Merge pull request 'Import Matterbridge configuration' (#10) from import-dericom02 into production ... Reviewed-on: #10	2023-02-09 21:02:02 +01:00
Pratyush Desai	dee3e035c2	Merge pull request 'Refactor Matterbridge profile' (#11) from matterbridge-refactor into production ... Reviewed-on: #11	2023-02-09 20:44:03 +01:00
Georg Pfuetzenreuter	f7893a980e	Merge pull request 'Add ha-node role + enable keepalived formula' (#13) from keepalived-formula into production ... Reviewed-on: #13	2023-02-08 22:55:45 +01:00
Georg Pfuetzenreuter	a8bbe056f1	Add ha-node role ... Add ha-node role for machines in a HA pair using keepalived. Signed-off-by: Georg Pfuetzenreuter <mail@georg-pfuetzenreuter.net>	2023-02-08 20:31:27 +01:00
Georg Pfuetzenreuter	2d06de94ca	Enable keepalived-formula ... Signed-off-by: Georg Pfuetzenreuter <mail@georg-pfuetzenreuter.net>	2023-02-08 20:30:52 +01:00
Georg Pfuetzenreuter	650854fa27	Refactor matterbridge profile ... - reduce pillar calls - no longer define possible configuration options, apply settings from pillar 1:1 Signed-off-by: Georg Pfuetzenreuter <mail@georg-pfuetzenreuter.net>	2023-02-07 22:37:37 +01:00
Georg Pfuetzenreuter	07d325d777	dericom02: import Matterbridge configuration ... Signed-off-by: Georg Pfuetzenreuter <mail@georg-pfuetzenreuter.net>	2023-02-07 22:29:02 +01:00
Georg Pfuetzenreuter	f678de8560	derimisc01: import Tor configuration ... Signed-off-by: Georg Pfuetzenreuter <mail@georg-pfuetzenreuter.net>	2023-02-07 18:35:40 +01:00
Georg Pfuetzenreuter	a3ec351b70	Add onion-router role ... Signed-off-by: Georg Pfuetzenreuter <mail@georg-pfuetzenreuter.net>	2023-02-07 18:21:32 +01:00
Georg Pfuetzenreuter	687473b919	Enable tor-formula ... Signed-off-by: Georg Pfuetzenreuter <mail@georg-pfuetzenreuter.net>	2023-02-06 23:00:47 +01:00
Georg Pfuetzenreuter	70ca4fabc8	Set webirc backend to https ... Ergo rightfully does not accept plain text websocket connections. Signed-off-by: Georg Pfuetzenreuter <mail@georg-pfuetzenreuter.net>	2023-02-06 14:20:19 +01:00
Georg Pfuetzenreuter	82cad3b099	Include libertacasa for liberta.casa ... Fallout from 77fa39e59c - libertacasa nginx snippet needs to be included in liberta.casa server for main website to operate on the clearnet. Signed-off-by: Georg Pfuetzenreuter <mail@georg-pfuetzenreuter.net>	2023-02-06 14:10:14 +01:00
Georg Pfuetzenreuter	df3eeede1d	Repair liberta.casa TLS include ... Accidentally mixed up the libertacasa with the libertacasa2 nginx TLS snippet. Signed-off-by: Georg Pfuetzenreuter <mail@georg-pfuetzenreuter.net>	2023-02-06 14:01:23 +01:00
Georg Pfuetzenreuter	92f01888af	web-proxy: include mime.types ... Always include mime.types on web-proxies. Signed-off-by: Georg Pfuetzenreuter <mail@georg-pfuetzenreuter.net>	2023-02-05 20:10:57 +01:00
Georg Pfuetzenreuter	e369c53a4c	web-proxy: common includes ... Always include files in conf.d and vhosts.d on web-proxies. Signed-off-by: Georg Pfuetzenreuter <mail@georg-pfuetzenreuter.net>	2023-02-05 20:09:05 +01:00
Georg Pfuetzenreuter	7dc481c996	Merge pull request 'web-proxy: common nginx.conf' (#9) from nginxconf into production ... Reviewed-on: #9	2023-02-05 20:03:18 +01:00
Georg Pfuetzenreuter	12ce134559	web-proxy: common nginx.conf ... Import default nginx.conf contents from our custom packaged file into Salt. Signed-off-by: Georg Pfuetzenreuter <mail@georg-pfuetzenreuter.net>	2023-02-05 19:59:04 +01:00