aboutsummaryrefslogtreecommitdiffstats
AgeCommit message (Collapse)Author
2020-10-17space_server: nftables: drop spoofed incoming trafficEmil Renner Berthing
Discovered by IMAAL Research Lab, Brigham Young University, thank you.
2020-08-13space_server: add labicolo ipv6 range for EsmilEmil Renner Berthing
2020-06-19space_server: radius: update radiusd.confEmil Renner Berthing
2020-06-01users: rasmis: addedEmil Renner Berthing
Add Rasmus so he can jump to the foodputer and read out the drinkomatic database.
2020-06-01users: add support for jumponly usersEmil Renner Berthing
2020-06-01users: esmil: add stitch key and update .bashrcEmil Renner Berthing
2020-04-10users: root: update bashrcEmil Renner Berthing
2020-03-21space_server: networkd: set NTP server on wan interfaceEmil Renner Berthing
time.cloudflare.com has much lower ping than any of the default N.fedora.pool.ntp.org servers.
2020-03-20space_server: nftables: remove traffic stats rulesEmil Renner Berthing
This used to open up for polling our old switch for traffic data, but it died and it doesn't work with the new switch so let's plug the hole.
2020-03-20users: graffen: addedJesper Hess Nielsen
2020-03-14space_server: nftables: add graffens prefixes to nftablesJesper Hess Nielsen
2020-03-14space_server: bird: add ipv4 BGP session for graffenJesper Hess Nielsen
2020-03-11space_server: bird: add bgp peering for graffen/AS209616Jesper Hess Nielsen
2020-03-11documentation: update addressplan.txt to match wikiJesper Hess Nielsen
2020-03-07documentation: allocate colo addresses for GraffenEmil Renner Berthing
2020-03-07space_server: nftables: forward space.labitat.dk:17380 to jumbotronEmil Renner Berthing
2020-03-03jumbotron: disable IPv6 privacy extensionsEmil Renner Berthing
..so we can make sure the jumbotron always takes the same IPv6 address and we can whitelist it in the firewall.
2020-03-02Add AnyEvent::HTTPD package (for github integration)Kristian Nielsen
2020-03-01space_server: radius: configure certificatesEmil Renner Berthing
2020-02-29space_server: update to Fedora 31Emil Renner Berthing
2020-02-29space_server: networkd: set Scope=link link addressesEmil Renner Berthing
2020-02-29fedora: networkd: configure networkd.confEmil Renner Berthing
2020-02-29fedora: sudo: update sudoers fileEmil Renner Berthing
2020-02-29fedora: dnf: set install_weak_deps=noEmil Renner Berthing
..when installing packages. In case the Ansible dnf module doesn't consult /etc/dnf/dnf.conf
2020-02-27debian: networkd: remove last |bool instanceEmil Renner Berthing
2020-02-27roles: remove useless |bool filtersEmil Renner Berthing
This used to be a fix for some bogus warnings, but they seem to have gone in recent versions of Ansible
2020-02-27space_server: show nicer loop itemsEmil Renner Berthing
2020-02-27debian: apt: show nicer loop itemsEmil Renner Berthing
2020-02-27doorputer: lockserve allow empty string in lockserver.iniEmil Renner Berthing
2020-02-27fedora: allow empty strings in ini filesEmil Renner Berthing
2020-02-27debian: allow empty strings in ini filesEmil Renner Berthing
2020-02-27space_server: avahi: use shorter dict formatEmil Renner Berthing
2020-02-27mail1: haveged: fix missing chroot conditionEmil Renner Berthing
2020-02-27space_server: move sudo tasks to fedora roleEmil Renner Berthing
..to align with debian role
2020-02-27ansible.cfg: set interpreter_python = autoEmil Renner Berthing
The default is auto_legacy, which will choose /usr/bin/python over /usr/bin/python3*, but will change to auto in the future. Let's live in the future!
2020-02-27doorputer: alsa: disable state daemonEmil Renner Berthing
2020-02-27debian: sshd: set PermitRootLogin noEmil Renner Berthing
2020-02-27debian: streamline use of apt_release variableEmil Renner Berthing
..and ansible_distribution_release fact.
2020-02-27space_server: use common secrets.yml in ansible rootEmil Renner Berthing
..and generalize and move sshd tasks to fedora role.
2020-02-27ansible.cfg: remove hash_behaviour optionEmil Renner Berthing
This will be deprecated in Ansible 2.10 and removed in 2.13.
2020-02-27raspbian: update for hash_behaviour = replaceEmil Renner Berthing
2020-02-27debian: update for hash_behaviour = replaceEmil Renner Berthing
2020-02-27fedora: update for hash_behaviour = replaceEmil Renner Berthing
2020-02-23space_server: vars: add piscreen2.sEmil Renner Berthing
2020-02-21Add some Perl packages needed by new JumbotronKristian Nielsen
2019-12-20jumbotron: irssi: add Jumbchatter.pl symlinkKristian Nielsen
2019-12-20jumbotron: install libanyevent-http-perlKristian Nielsen
..needed for next-generation jumbowatch awesomeness
2019-11-06mail1: add semi to sudo usersEmil Renner Berthing
2019-10-14mail1: networkd: add IPv6 addressEmil Renner Berthing
2019-10-08mail1: add role to set up new mailserverEmil Renner Berthing
This is just the base OS for now. Let's hope someone who knows more about mail wants to continue..