Bartłomiej Piotrowski
cfda2ad72f
hosts: explicitly set addresses of ind and jpn mirrors
2017-12-07 08:56:57 +01:00
Bartłomiej Piotrowski
c64454c9df
hosts: add fixed PIA server
2017-12-06 19:42:53 +01:00
Bartłomiej Piotrowski
64515a6389
hosts: sort IP addresses
2017-12-06 19:42:53 +01:00
Florian Pritz
cbf3572734
kanboard: Remove composer usage
...
composer dependencies are part of the git repo since kanboard 1.1.0
Signed-off-by: Florian Pritz <bluewind@xinu.at>
2017-12-02 17:49:34 +01:00
Florian Pritz
d225a33637
Store postgres passwords encrypted on server
...
Seems to be required with postgres 10 now.
Signed-off-by: Florian Pritz <bluewind@xinu.at>
2017-12-02 17:44:12 +01:00
Florian Pritz
dcf737a25a
kanboard: Update to 1.1.0
...
Signed-off-by: Florian Pritz <bluewind@xinu.at>
2017-12-02 17:42:13 +01:00
Bartłomiej Piotrowski
725cb2d0cc
archweb: allow to specify ref to checkout
2017-12-01 21:30:17 +01:00
Florian Pritz
e2aa651df2
Remove retired TU - Daniel Micay
...
Signed-off-by: Florian Pritz <bluewind@xinu.at>
2017-12-01 10:50:08 +01:00
Florian Pritz
d38e8cd09f
Add new TU - Andrew Crerar
...
Signed-off-by: Florian Pritz <bluewind@xinu.at>
2017-11-30 22:06:31 +01:00
Jan Alexander Steffens (heftig)
f81c6c48ae
gitpkg: Make default meson funcs a bit more compact
2017-11-26 16:18:02 +01:00
Florian Pritz
43b47094f9
borg-client: Configure prefix map for hosts with btrfs
...
Signed-off-by: Florian Pritz <bluewind@xinu.at>
2017-11-26 11:28:22 +01:00
Florian Pritz
03b39f90fc
archweb: Deliver mail via port 10027
...
Signed-off-by: Florian Pritz <bluewind@xinu.at>
2017-11-25 23:23:24 +01:00
Florian Pritz
2d5bd20c8c
postfix: Add server name to reject footer
...
Signed-off-by: Florian Pritz <bluewind@xinu.at>
2017-11-25 18:02:40 +01:00
Florian Pritz
db9cd7c42a
postfix: Add dkim injecton port 10027
...
Signed-off-by: Florian Pritz <bluewind@xinu.at>
2017-11-25 17:52:17 +01:00
Florian Pritz
031ac20be3
postfix: Pass internal mails through filters so they get signed by opendkim
...
Signed-off-by: Florian Pritz <bluewind@xinu.at>
2017-11-25 17:26:07 +01:00
Florian Pritz
b5d5e3c48e
root_ssh: Add dragon's key to nymeria/luna
...
Signed-off-by: Florian Pritz <bluewind@xinu.at>
2017-11-25 10:37:09 +01:00
Florian Pritz
82baf629c3
root_ssh: Use template for more flexibility
...
Signed-off-by: Florian Pritz <bluewind@xinu.at>
2017-11-25 10:27:44 +01:00
Florian Pritz
8604be9f8c
dbscripts: Add temporary archive endpoint
...
Signed-off-by: Florian Pritz <bluewind@xinu.at>
2017-11-25 10:11:39 +01:00
Bartłomiej Piotrowski
7d11ef7a08
arch32_mirror: serve pool.mirror.archlinux32.org
2017-11-23 21:45:43 +01:00
Bartłomiej Piotrowski
a9c47fee38
borg-client: use is-active for checking service state
...
Also add mariadb support
2017-11-22 14:37:40 +01:00
Bartłomiej Piotrowski
66fe99e042
borg-client: replace mysqldump with xtrabackup
2017-11-22 14:35:43 +01:00
Florian Pritz
6eccd3332f
borg: Add borg-restore.pl config
...
Signed-off-by: Florian Pritz <bluewind@xinu.at>
2017-11-21 20:30:27 +01:00
Florian Pritz
425f4263d8
Deploy basic config on nymeria and dragon
...
Mostly interesting for root_ssh.
Signed-off-by: Florian Pritz <bluewind@xinu.at>
2017-11-20 21:32:02 +01:00
Jelle van der Waa
e0f895832b
pubkeys: Update jelle's key
2017-11-19 16:49:18 +01:00
Florian Pritz
9e54c881a9
postfix: Fix certificate domain name for non-primary mail servers
...
Signed-off-by: Florian Pritz <bluewind@xinu.at>
2017-11-18 16:18:56 +01:00
Bartłomiej Piotrowski
ce4d17109c
Revert "arch32_mirror: rely solely on lastupdate"
...
This reverts commit a2c61b56ad
.
2017-11-15 21:29:41 +01:00
Bartłomiej Piotrowski
a2c61b56ad
arch32_mirror: rely solely on lastupdate
2017-11-15 15:36:04 +01:00
Bartłomiej Piotrowski
e5b461e31a
Add role for mirroring archlinux32
2017-11-15 12:50:32 +01:00
Jan Alexander Steffens (heftig)
6136bd2b0b
roles: Remove various references to i686
2017-11-08 22:58:30 +01:00
Florian Pritz
69de3d10fa
Update README regarding installation and certbot
...
Signed-off-by: Florian Pritz <bluewind@xinu.at>
2017-11-06 09:52:22 +01:00
Florian Pritz
769e6af84c
Add archusers tag to sudo and phrik roles
...
Running archusers resets the groups of the users so these also need to
run afterwards.
Signed-off-by: Florian Pritz <bluewind@xinu.at>
2017-11-06 09:34:32 +01:00
Florian Pritz
8140f80c76
spamassassin: Fix parcel delivery rule
...
Should check for both words, not just one
Signed-off-by: Florian Pritz <bluewind@xinu.at>
2017-11-05 21:50:43 +01:00
Florian Pritz
d739ed5173
journald: Raise max files limit
...
Not strictly necessary yet, but we don't care about a bunch more files
so better safe than without logs.
Signed-off-by: Florian Pritz <bluewind@xinu.at>
2017-11-05 11:28:17 +01:00
Florian Pritz
ee74b3652c
journald: Raise burst rate limit
...
Sending many mails at once put us over that limit quite quickly and then
we are missing logs. This default is way too low for server usage.
Signed-off-by: Florian Pritz <bluewind@xinu.at>
2017-11-05 11:27:15 +01:00
Florian Pritz
8607c19a28
Add new TU - David Runge
...
Signed-off-by: Florian Pritz <bluewind@xinu.at>
2017-11-02 13:51:58 +01:00
Florian Pritz
db2db99d96
spampd: Check SA config before restarting things
...
This will leave the config broken on the machine, but it's an easy check
to add.
Signed-off-by: Florian Pritz <bluewind@xinu.at>
2017-10-30 21:12:12 +01:00
Florian Pritz
32f74b4c16
spamassassin: Add rule for arabic spam mails
...
Signed-off-by: Florian Pritz <bluewind@xinu.at>
2017-10-30 21:11:51 +01:00
Florian Pritz
fa84916503
spamasassin: Merge my own config
...
Mostly score adjustments and 5.0 is a safer cutoff now because my own config also
uses that. 2.5 would most likely reject too much with the stricter
scores.
Signed-off-by: Florian Pritz <bluewind@xinu.at>
2017-10-30 20:26:59 +01:00
Bartłomiej Piotrowski
124e537f2c
common: update journald.conf template
2017-10-23 09:36:40 +02:00
Bartłomiej Piotrowski
ba7439c14c
common: add kernel packages to IgnorePkg
2017-10-23 09:36:30 +02:00
Bartłomiej Piotrowski
aa41f34dd8
luna: disable network configuration
2017-10-23 09:35:45 +02:00
Bartłomiej Piotrowski
d12fc9c61a
borg-client: use xtrabackup for additional mysql backups
2017-10-22 18:40:28 +02:00
Bartłomiej Piotrowski
5ddd81ae8a
Use more idiomatic way of checking for variable presence
2017-10-22 18:40:28 +02:00
Florian Pritz
cf9352504a
motd: Remove configuration warning
...
Signed-off-by: Florian Pritz <bluewind@xinu.at>
2017-10-20 23:09:09 +02:00
Florian Pritz
599cdf69af
motd: Fix coloring of backup warning
...
Signed-off-by: Florian Pritz <bluewind@xinu.at>
2017-10-20 22:43:23 +02:00
Florian Pritz
b0fe6a3a2c
Add missing tags to vostok playbook
...
Signed-off-by: Florian Pritz <bluewind@xinu.at>
2017-10-20 22:43:05 +02:00
Florian Pritz
c9f245a325
Add borg-client role to all-hosts-basic playbook
...
Signed-off-by: Florian Pritz <bluewind@xinu.at>
2017-10-20 22:40:46 +02:00
Florian Pritz
b3de7489d5
sshd: Add motd
...
Signed-off-by: Florian Pritz <bluewind@xinu.at>
2017-10-20 22:33:19 +02:00
Florian Pritz
a9100c3d3b
Fix typo in ssl cert creation
...
Signed-off-by: Florian Pritz <bluewind@xinu.at>
2017-10-20 21:28:22 +02:00
Florian Pritz
8614708627
Create SSL certificates automatically for nginx configs
...
Signed-off-by: Florian Pritz <bluewind@xinu.at>
2017-10-20 21:26:55 +02:00