LibertaCasa/salt - salt - GitCom: Git with a cup of Com

Author	SHA1	Message	Date
Georg Pfuetzenreuter	c9005950dc	Add web.apache-httpd role Signed-off-by: Georg Pfuetzenreuter <mail@georg-pfuetzenreuter.net>	2023-02-20 19:35:24 +01:00
Georg Pfuetzenreuter	d017233a52	ha-node: vrrp is a protocol All checks were successful ci/lysergic/push/pipeline Pipeline was successful Details Accidentally added as a service. Signed-off-by: Georg Pfuetzenreuter <mail@georg-pfuetzenreuter.net>	2023-02-12 15:22:08 +01:00
Georg Pfuetzenreuter	c5ce94d7b5	Manage backend firewall zone All checks were successful ci/lysergic/push/pipeline Pipeline was successful Details Configure backend firewall zones if applicable. Allow all UDP for cluster traffic. Signed-off-by: Georg Pfuetzenreuter <mail@georg-pfuetzenreuter.net>	2023-02-12 06:04:16 +01:00
Georg Pfuetzenreuter	bef66c1f8a	ha-node: allow vrrp in firewall Needed for keepalived operation. Signed-off-by: Georg Pfuetzenreuter <mail@georg-pfuetzenreuter.net>	2023-02-12 05:54:20 +01:00
Georg Pfuetzenreuter	77c50cf53f	matterbridge: add role pillar All checks were successful ci/lysergic/push/pipeline Pipeline was successful Details Empty for now, adding for future reference and because we enforce role pillars to exist. Signed-off-by: Georg Pfuetzenreuter <mail@georg-pfuetzenreuter.net>	2023-02-09 22:56:28 +01:00
Georg Pfuetzenreuter	a3ec351b70	Add onion-router role Signed-off-by: Georg Pfuetzenreuter <mail@georg-pfuetzenreuter.net>	2023-02-07 18:21:32 +01:00
Georg Pfuetzenreuter	92f01888af	web-proxy: include mime.types All checks were successful ci/lysergic/push/pipeline Pipeline was successful Details Always include mime.types on web-proxies. Signed-off-by: Georg Pfuetzenreuter <mail@georg-pfuetzenreuter.net>	2023-02-05 20:10:57 +01:00
Georg Pfuetzenreuter	e369c53a4c	web-proxy: common includes All checks were successful ci/lysergic/push/pipeline Pipeline was successful Details Always include files in conf.d and vhosts.d on web-proxies. Signed-off-by: Georg Pfuetzenreuter <mail@georg-pfuetzenreuter.net>	2023-02-05 20:09:05 +01:00
Georg Pfuetzenreuter	12ce134559	web-proxy: common nginx.conf All checks were successful ci/lysergic/push/pipeline Pipeline was successful Details Import default nginx.conf contents from our custom packaged file into Salt. Signed-off-by: Georg Pfuetzenreuter <mail@georg-pfuetzenreuter.net>	2023-02-05 19:59:04 +01:00
Georg Pfuetzenreuter	e3e4caaabe	web-proxy: IPv6 listener brackets All checks were successful ci/lysergic/push/pipeline Pipeline was successful Details Add logic to wrap IPv6 listening addresses in brackets, to prevent nginx from failing to start. Signed-off-by: Georg Pfuetzenreuter <mail@georg-pfuetzenreuter.net>	2023-02-05 19:19:27 +01:00
Georg Pfuetzenreuter	5e02090bc6	web-proxy: add firewall configuration All checks were successful ci/lysergic/push/pipeline Pipeline was successful Details Allow internal http and https to pass on web proxies. To-do: logic for web proxies directly attached to the internet. Signed-off-by: Georg Pfuetzenreuter <mail@georg-pfuetzenreuter.net>	2023-02-05 14:29:25 +01:00
Georg Pfuetzenreuter	98ea861c13	web-proxy: add common TLS configuration All checks were successful ci/lysergic/push/pipeline Pipeline was successful Details Add TLS configuration snippet shared between all web-proxies. Signed-off-by: Georg Pfuetzenreuter <mail@georg-pfuetzenreuter.net>	2023-02-05 10:05:20 +01:00
Georg Pfuetzenreuter	2e4d350c7f	Add web-proxy role - web-proxy role to configure nginx - pillar with common nginx configuration Signed-off-by: Georg Pfuetzenreuter <mail@georg-pfuetzenreuter.net>	2023-02-04 11:47:09 +01:00
Georg Pfuetzenreuter	bb252c1d47	Set default saltenv All checks were successful ci/lysergic/push/pipeline Pipeline was successful Details Signed-off-by: Georg Pfuetzenreuter <mail@georg-pfuetzenreuter.net>	2023-02-01 23:23:43 +01:00
Georg Pfuetzenreuter	83f698e18c	Manage Salt roleproxy All checks were successful ci/lysergic/push/pipeline Pipeline was successful Details Add role, profile and pillar for roleproxy. Signed-off-by: Georg Pfuetzenreuter <mail@georg-pfuetzenreuter.net>	2023-01-30 00:39:33 +01:00
Georg Pfuetzenreuter	7600e631d3	salt.master: extra quotes around API listener All checks were successful ci/lysergic/push/pipeline Pipeline was successful Details State would print the colons unquoted into the file, causing the YAML to not parse. Signed-off-by: Georg Pfuetzenreuter <mail@georg-pfuetzenreuter.net>	2023-01-29 16:11:01 +01:00
Georg Pfuetzenreuter	45b53f8392	salt.master: add firewalld rules All checks were successful ci/lysergic/push/pipeline Pipeline was successful Details Signed-off-by: Georg Pfuetzenreuter <mail@georg-pfuetzenreuter.net>	2023-01-29 15:50:11 +01:00
Georg Pfuetzenreuter	880f6796c5	salt.master: enable API IPv6 listener All checks were successful ci/lysergic/push/pipeline Pipeline was successful Details No individual listeners can be configured, hence global dual stack listener it is. Signed-off-by: Georg Pfuetzenreuter <mail@georg-pfuetzenreuter.net>	2023-01-29 14:59:35 +01:00
Georg Pfuetzenreuter	bd166cbb42	salt.master: set rootgroup Needed for formula to not nuke Syndic key permissions. Little bit ugly. Signed-off-by: Georg Pfuetzenreuter <mail@georg-pfuetzenreuter.net>	2023-01-28 02:14:36 +01:00
Georg Pfuetzenreuter	e8b905cd0b	salt.master: increase LDAP scope All checks were successful ci/lysergic/push/pipeline Pipeline was successful Details Likely needed as it does not support searching a more fine grained base DN. Signed-off-by: Georg Pfuetzenreuter <mail@georg-pfuetzenreuter.net>	2023-01-28 00:19:42 +01:00
Georg Pfuetzenreuter	a831a25701	salt.master: switch to CherryPy All checks were successful ci/lysergic/push/pipeline Pipeline was successful Details Tornado does not support all the features. Signed-off-by: Georg Pfuetzenreuter <mail@georg-pfuetzenreuter.net>	2023-01-28 00:17:39 +01:00
Georg Pfuetzenreuter	570522176a	salt.master: add LDAP configuration All checks were successful ci/lysergic/push/pipeline Pipeline was successful Details Signed-off-by: Georg Pfuetzenreuter <mail@georg-pfuetzenreuter.net>	2023-01-27 20:01:01 +01:00
Georg Pfuetzenreuter	85bfe2cac4	salt.master: add Salt API configuration Signed-off-by: Georg Pfuetzenreuter <mail@georg-pfuetzenreuter.net>	2023-01-27 19:25:21 +01:00
Georg Pfuetzenreuter	f949c0aba0	mta.postfix->global.mta pillar; remove mta profile All checks were successful ci/lysergic/push/pipeline Pipeline was successful Details This is more a MTA configuration for system email on all hosts instead of a dedicated email server role. Signed-off-by: Georg Pfuetzenreuter <mail@georg-pfuetzenreuter.net>	2023-01-26 20:54:09 +01:00
Georg Pfuetzenreuter	d627582075	Read formulas from central file - add formulas.yaml file containing list of all enabled formulas - read formulas from said file in role.salt.master and prepare_minion.py - add symlink for easier tracking of the file Signed-off-by: Georg Pfuetzenreuter <mail@georg-pfuetzenreuter.net>	2023-01-26 20:54:09 +01:00
Georg Pfuetzenreuter	68939f8054	Postfix: configure alias_database All checks were successful ci/lysergic/push/pipeline Pipeline was successful Details Not needed, but the formula writes a hash:/ entry default, which might cause confusion in the future, since our alias_maps is using lmdb:/. Signed-off-by: Georg Pfuetzenreuter <mail@georg-pfuetzenreuter.net>	2023-01-25 21:39:35 +01:00
Georg Pfuetzenreuter	9fd56e7640	Allow local system mail in Postfix - correct mydestination to allow lysergic.dev to be sent through the relay - correct relayhost to use SMTPS port Signed-off-by: Georg Pfuetzenreuter <mail@georg-pfuetzenreuter.net>	2023-01-25 21:29:16 +01:00
Georg Pfuetzenreuter	4bf9ac9413	Include Postfix pillar via role All checks were successful ci/lysergic/push/pipeline Pipeline was successful Details Signed-off-by: Georg Pfuetzenreuter <mail@georg-pfuetzenreuter.net>	2023-01-24 23:16:56 +01:00
Georg Pfuetzenreuter	4c6b221dad	Include role.salt.common in master All checks were successful ci/lysergic/push/pipeline Pipeline was successful Details Needed to allow individual apply's of salt.master without breaking common configuration options. Signed-off-by: Georg Pfuetzenreuter <mail@georg-pfuetzenreuter.net>	2023-01-24 21:46:18 +01:00
Georg Pfuetzenreuter	5f9a74c612	Enable postfix-formula Signed-off-by: Georg Pfuetzenreuter <mail@georg-pfuetzenreuter.net>	2023-01-24 21:18:08 +01:00
Georg Pfuetzenreuter	48c9e05de1	Enable users-formula All checks were successful ci/lysergic/push/pipeline Pipeline was successful Details Signed-off-by: Georg Pfuetzenreuter <mail@georg-pfuetzenreuter.net>	2023-01-22 21:37:45 +01:00
Georg Pfuetzenreuter	5ab1c4f854	salt.master: manage formulas All checks were successful ci/lysergic/push/pipeline Pipeline was successful Details Signed-off-by: Georg Pfuetzenreuter <mail@georg-pfuetzenreuter.net>	2023-01-22 14:49:30 +01:00
Georg Pfuetzenreuter	f7bb83bd75	salt.master: move file_roots to production All checks were successful ci/lysergic/push/pipeline Pipeline was successful Details Signed-off-by: Georg Pfuetzenreuter <mail@georg-pfuetzenreuter.net>	2023-01-22 14:40:21 +01:00
Georg Pfuetzenreuter	d593cbeae5	salt.master: move gpg_keydir to master All checks were successful ci/lysergic/push/pipeline Pipeline was successful Details 'gpg_keydir' is a master specific setting, it does not work under the top level 'salt' key. Signed-off-by: Georg Pfuetzenreuter <mail@georg-pfuetzenreuter.net>	2023-01-22 14:34:42 +01:00
Georg Pfuetzenreuter	928809b267	salt.master: manage extension modules Signed-off-by: Georg Pfuetzenreuter <mail@georg-pfuetzenreuter.net>	2023-01-22 14:34:42 +01:00
Georg Pfuetzenreuter	bcac69683b	Update salt.master role pillar - add missing settings needed for use in production - correct existing settings with new advancements Signed-off-by: Georg Pfuetzenreuter <mail@georg-pfuetzenreuter.net>	2023-01-22 13:49:36 +01:00
Georg Pfuetzenreuter	5d60fe6a34	Set Salt log level to info Globally setting log level for easier initial setup. Later on we should consider removing it again, or moving it to the salt:master pillar. Signed-off-by: Georg Pfuetzenreuter <mail@georg-pfuetzenreuter.net>	2023-01-22 13:49:35 +01:00
Georg Pfuetzenreuter	ad4c6af852	Add salt.syndic role + pillar Signed-off-by: Georg Pfuetzenreuter <mail@georg-pfuetzenreuter.net>	2023-01-22 13:49:35 +01:00
Georg Pfuetzenreuter	8c72e7c63a	Add id/role pillar README's Signed-off-by: Georg Pfuetzenreuter <mail@georg-pfuetzenreuter.net>	2023-01-21 18:28:54 +01:00
Georg Pfuetzenreuter	69aa808f3d	Add secret variables Module should now replace ${...} variables during rendering. Pillar references need to be quoted. Signed-off-by: Georg Pfuetzenreuter <mail@georg-pfuetzenreuter.net>	2023-01-20 02:03:43 +01:00
Georg Pfuetzenreuter	fed1e35c88	Init master role w/ pillar Signed-off-by: Georg Pfuetzenreuter <mail@georg-pfuetzenreuter.net>	2023-01-15 18:47:54 +01:00
Georg Pfuetzenreuter	e26039e920	Re-order minion profile Signed-off-by: Georg Pfuetzenreuter <mail@georg-pfuetzenreuter.net>	2023-01-15 17:51:44 +01:00
Georg Pfuetzenreuter	546508c7de	Use custom minion master configuration Signed-off-by: Georg Pfuetzenreuter <mail@georg-pfuetzenreuter.net>	2023-01-15 17:40:16 +01:00
Georg Pfuetzenreuter	fe2a1a21b9	Use traditional grains management Signed-off-by: Georg Pfuetzenreuter <mail@georg-pfuetzenreuter.net>	2023-01-15 17:40:01 +01:00
Georg Pfuetzenreuter	eb1731e7a1	Move managed grains to minion pillar Signed-off-by: Georg Pfuetzenreuter <mail@georg-pfuetzenreuter.net>	2023-01-15 17:39:59 +01:00
Georg Pfuetzenreuter	11620c863c	Init salted salt + minion pillar Signed-off-by: Georg Pfuetzenreuter <mail@georg-pfuetzenreuter.net>	2023-01-15 17:39:31 +01:00

46 Commits