aboutsummaryrefslogtreecommitdiffstats
AgeCommit message (Collapse)Author
2019-04-03space_server: named: support dynamic updatesEmil Renner Berthing
..of the dhcp zone and reverse dns for 10.42.0.0/16 This way the dhcp daemon can add entries when it handles out leases.
2019-04-02space_server: named: create reverse ipv4 zoneEmil Renner Berthing
2019-04-01Add initial README.md and CONTRIBUTING.mdMax Campbell
2019-04-01space_server: vars: rework local_hostsEmil Renner Berthing
..to get rid of the need for ipv4/ipv6 filters and python-netaddr dependency.
2019-04-01space_server: named: use named instead of unboundEmil Renner Berthing
This reverts commit 3b795796bd03488a385f3ad42b10b8c0d61282c1, "space_server: unbound: use unbound instad of bind". Unlike unbound, bind supports synthesizing DNS64 answers only for certain clients, so only requests from the Labitat NAT64 network will get DNS64 answers.
2019-03-31space_server: kernel: make sure selinux is disabledEmil Renner Berthing
2019-03-31space_server: dhcpd: update dhcpd.confEmil Renner Berthing
Host declerations are global and dhcpd has been warning about this for some time.
2019-03-31space_server: vars: remove old APEmil Renner Berthing
..and unused ip address for ap2
2019-03-25jumbotron: fakta: make a better bell soundEmil Renner Berthing
2019-03-20jumbotron: fakta: added fakta bellMax Campbell
2019-02-10users: max: addedmax
2019-02-09users: signout: update ssh keysEmil Renner Berthing
2019-01-29users: richard: addedRichard42Graham
2019-01-13users: optionally set user passwordEmil Renner Berthing
2019-01-13users: add more flexible user managementEmil Renner Berthing
Now user data is in roles/users/defaults/main.yml and each server should have a hash like this users: 'foo': sudo 'bar': true 'baz': false #'qux': false This means the user foo will be created with sudo access, the user bar will be created without sudo access, while baz and qux will be removed.
2019-01-13space_server: add xeroxwax printerEmil Renner Berthing
2019-01-10space_server: fix one last reference to the old prefixAsbjørn Sloth Tønnesen
Fixes: 78688483 space_server: add Asbjorn's colo addresses and net
2018-12-06jumbotron: autologin: fix unneeded calculationEmil Renner Berthing
2018-12-06space_server: networkd: fix unneeded calculationEmil Renner Berthing
2018-12-06debian: networkd: add networkd-wait-online supportEmil Renner Berthing
2018-12-05space_server: enable NAT64/DNS64 networkEmil Renner Berthing
2018-12-05space_server: avahi: ask myhostname 2ndEmil Renner Berthing
2018-12-05space_server: unbound: create /etc/resolv.confEmil Renner Berthing
2018-12-03users: esmil: add passwordEmil Renner Berthing
..so I can log in on a serial port and save the day. This is one way to generate the hashed password line: python <<EOF from passlib.hash import sha512_crypt import getpass print(sha512_crypt.using(rounds=5000).hash(getpass.getpass())) EOF
2018-12-03space_server: networkd: announce proper DNS on mgtEmil Renner Berthing
2018-12-03space_server: networkd: disable ARP on untagged interfaceEmil Renner Berthing
2018-11-30space_server: networkd: small cleanupsEmil Renner Berthing
2018-11-30space_server: use systemd-network for RAsEmil Renner Berthing
..rather radvd
2018-11-30space_server: networkd: use Link.RequiredForOnlineEmil Renner Berthing
..rather than overriding ExecStart to call networkd-wait-online with --ignore
2018-11-29space_server: use dnf_packages when possibleEmil Renner Berthing
2018-11-29space_server: radvd: wait-online.conf no longer neededEmil Renner Berthing
The package-provided radvd.service now has After=network-online.target Wants=network-online.target
2018-11-28space_server: nat Labitat free from 185.38.175.1Emil Renner Berthing
2018-11-28documentation: addressplan: add Deni's addressesAsbjørn Sloth Tønnesen
2018-11-28space_server: add Asbjorn's colo addresses and netAsbjørn Sloth Tønnesen
2018-11-28documentation: update and fix addressplanEmil Renner Berthing
- Align addresses - Prefix ipv4 addresses by network bits + 1 *s - Prefix ipv6 addresses by network nibbles + 1 *s - Fix labitat prefix - Add spacewand and spacebrain addresses
2018-11-28space_server: nftables: accept all traffic to colo netsEmil Renner Berthing
..but don't let colo servers connect to internal addresses.
2018-11-27space_server: radius: omit src when state != linkEmil Renner Berthing
This fixes some ansible warnings.
2018-11-24jumbotron: autologin: better set differenceEmil Renner Berthing
2018-11-24space_server: networkd: smarter set differenceEmil Renner Berthing
2018-11-24documentation: add initial addressplanAsbjørn Sloth Tønnesen
2018-11-23debian: apt: support Debian release overrideEmil Renner Berthing
2018-11-23debian: apt: install netbase and dialog by defaultEmil Renner Berthing
2018-11-23debian: apt: don't upgrade packagesEmil Renner Berthing
2018-11-22debian: apt: update and manage apt-preferences.dEmil Renner Berthing
2018-11-22space_server: radvd: up DNS server valid timeEmil Renner Berthing
2018-11-22space_server: bootstrap: chmod subvolumeEmil Renner Berthing
2018-11-16roles: use ' and " consistentlyEmil Renner Berthing
2018-11-16fedora: dnf: disable dnf-makecache.timer by defaultEmil Renner Berthing
2018-11-11fedora: align with debian roleEmil Renner Berthing
2018-11-10space_server: replace blackhole scriptEmil Renner Berthing