aboutsummaryrefslogtreecommitdiffstats
AgeCommit message (Collapse)Author
2025-04-27space_server: nftables: add new external prefixesAsbjørn Sloth Tønnesen
Signed-off-by: Asbjørn Sloth Tønnesen <asbjorn@labitat.dk>
2025-04-27space_server: bird: duplicate customer sessionsAsbjørn Sloth Tønnesen
Duplicate all customer BGP sessions, so that there is one with the old prefix, and one with the new one. This enables everyone to migrate to the new IP addresses at their own pace. Once the migration has been completed, we will remove the old sessions. Applied on 2025-04-25. Signed-off-by: Asbjørn Sloth Tønnesen <asbjorn@labitat.dk>
2025-04-27space_server: bird: change router-idAsbjørn Sloth Tønnesen
Signed-off-by: Asbjørn Sloth Tønnesen <asbjorn@labitat.dk>
2025-04-24space_server: networkd: add new addresses for testingAsbjørn Sloth Tønnesen
Signed-off-by: Asbjørn Sloth Tønnesen <asbjorn@labitat.dk>
2025-04-24space_server: bird: add extra IPv6 prefixAsbjørn Sloth Tønnesen
Prefix kindly provided by FreeTransit / OpenFactory Signed-off-by: Asbjørn Sloth Tønnesen <asbjorn@labitat.dk>
2025-04-24space_server: bird: add new IPv6 prefixAsbjørn Sloth Tønnesen
Prefix kindly provided by Kracon ApS (Svenne) Signed-off-by: Asbjørn Sloth Tønnesen <asbjorn@labitat.dk>
2025-04-24space_server: bird: add new IPv4 prefixAsbjørn Sloth Tønnesen
Prefix kindly provided by Toke Signed-off-by: Asbjørn Sloth Tønnesen <asbjorn@labitat.dk>
2025-04-05space_server: bird: remove rayman BGP setupJens Andersen
2024-12-17space_server: bird: add svenne/Kracon ASNSvenne Krap
2024-02-27jumbotron: update for new hardwareEmil Renner Berthing
2024-02-27space_server: vars: update jumbotron.s MAC/IPv6Emil Renner Berthing
..and let it do its own mDNS
2024-02-27space_server: vars: remove piscreen2.sEmil Renner Berthing
This host doesn't seem to respond to pings and the MAC address is a duplicate of snakeskin.s
2024-02-22space_server: networkd: add new secondary Labicolo networkAsbjørn Sloth Tønnesen
This completes the split of Labicolo into two networks. Henceforth we have two Labicolo network, and any two Labicolo nodes on different parts of the network will have to join LabIX, if they want to peer. Signed-off-by: Asbjørn Sloth Tønnesen <asbjorn@labitat.dk>
2024-02-22space_server: networkd: reduce Labicolo to a /27Asbjørn Sloth Tønnesen
I want to split Labicolo up in two networks, since it is a bit silly that we have a internet exchange prefix allocation, when all members of the IX are already connected to the same layer 2 network, when they all have transit through the same network. Therefore by splitting Labicolo into 2 networks, we ensure that there is a need for the internet exchange, since not all nodes are able to talk directly to eachother over the transit layer 2 network. Since it would be a bit excessive to allocate another /26 to Labicolo, thereby using half of our IPv4 space for Labicolo. This patch reduces the the current Labicolo network to a /27 network, a subsequent patch will then add a second Labicolo network with the other /27 network. The only issue here is that Labicolo machines, which haven't been updated to have a /27 netmask, will not be able to reach endpoints in 185.38.175.96/27, before they fix their netmask. Signed-off-by: Asbjørn Sloth Tønnesen <asbjorn@labitat.dk>
2024-02-22space_server: networkd: move Tor network to vlan 25Asbjørn Sloth Tønnesen
Signed-off-by: Asbjørn Sloth Tønnesen <asbjorn@labitat.dk>
2024-02-22documentation: vlans: add vlan listAsbjørn Sloth Tønnesen
Document which VLAN id's are used for what in the space. Signed-off-by: Asbjørn Sloth Tønnesen <asbjorn@labitat.dk>
2024-02-22documentation: addressplan: don't document Labicolo nodes hereAsbjørn Sloth Tønnesen
These nodes should be documented in the wiki: https://labitat.dk/wiki/Labicolo Signed-off-by: Asbjørn Sloth Tønnesen <asbjorn@labitat.dk>
2024-01-09doorputer: users: add otbmOliver Taubenheim
2024-01-09space_server: users: add otbmOliver Taubenheim
[esmil: add otbm as a regular user]
2023-09-06space_server: add graceful reboot scriptAsbjørn Sloth Tønnesen
[esmil: call the script just reboot-graceful] Signed-off-by: Asbjørn Sloth Tønnesen <asbjorn@labitat.dk> Signed-off-by: Emil Renner Berthing <esmil@labitat.dk>
2023-09-06space_server: bird: add /48 IPv6 prefix for DBrasHafnium
Finally got around to recreate #51 Co-authored-by: DBras danielbrasholt@gmail.com
2023-07-26sky: vars: add hafnium as a sudo userHafnium
2023-06-20space_server: bird: add flummer ASNThomas Flummer
2023-06-20space_server: bird: add Rayman ASNJens Andersen
2023-06-20space_server: bird: add Olivia ASNOlivia Wenya
2023-06-20fedora: resolved: skip if service doesn't existEmil Renner Berthing
2023-05-10space_server: bird: Allow Hafnium announcements of /44 to /48Hafnium
2023-04-21users: graffen: removeEmil Renner Berthing
RIP :(
2023-04-21space_server: bird: remove Graffen's BGP configEmil Renner Berthing
RIP :(
2023-04-14users: otbm: addedEmil Renner Berthing
Added user for Oliver to debug jumbotron bell
2023-04-11space_server: networkd: remove unneded IPv6RoutePrefix'esEmil Renner Berthing
2023-04-11space_server: networkd: disable ARP on physical interfacesEmil Renner Berthing
2023-04-08space_server: radius: dh_file no longer neededEmil Renner Berthing
2023-04-08space_server: disable pam_sss pluginEmil Renner Berthing
2023-04-08space_server: bird: add /44 IPv6 prefix for HafniumHafnium
2023-04-08space_server: networkd: update IPv6 RA configHafnium
2023-04-08space_server: named: remove obsolete dnssec-enableHafnium
2023-03-26space_server: chrony: Enable NTS serverEmil Renner Berthing
2023-03-26space_server: chrony: Use Netnod NTP servers in MalmöEmil Renner Berthing
..and add Fiberby's time server as backup too.
2023-01-27sky: homepage: set up the frontpage of labitat.dkJoshua Hull
esmil: - use timer to update the homepage - git clone/update and install gems as the homepage user
2023-01-27sky: certbot: configure certbotJoshua Hull
esmil: - don't install cron job, just use the packaged timer - install deploy hook to reload nginx when certificates are updated
2023-01-27sky: add role for new labitat.dk serverEmil Renner Berthing
2023-01-27nginx: add common role for nginxJoshua Hull
esmil: - disable access log and log errors to syslog (journal really) use journalctl -u nginx to see the errors - hoist some configuration values into ansible variables - add tags and use a handler to reload nginx on configuration changes - make nginx do its DNS queries against our local resolved this enables nginx to use DNSSEC and DoT - don't start nginx before the network is up. if it can't do dns lookups ssl_stapling will be ignored
2023-01-26space_server: nftables: NAT local traffic bound for colo ifEmil Renner Berthing
2023-01-25jumbotron: jumbotron: clean up git cloneEmil Renner Berthing
2023-01-25doorputer: lockserver: clean up git cloneEmil Renner Berthing
2023-01-24debian: resolved: libnss-myhostname is not neededEmil Renner Berthing
..now that we always rely on systemd-resolved being up
2023-01-24space_server: bird: don't reconfigure bird in chrootEmil Renner Berthing
2023-01-24jumbotron: jumbotron: git clone/update as the jumbotron userEmil Renner Berthing
2023-01-24doorputer: lockserver: git clone/update as the doorman userEmil Renner Berthing
generated by cgit v1.2.1 (git 2.18.0) at 2025-06-08 18:36:49 +0000