aboutsummaryrefslogtreecommitdiffstats
path: root/roles/space_server/files
AgeCommit message (Collapse)Author
2020-03-21space_server: networkd: set NTP server on wan interfaceEmil Renner Berthing
time.cloudflare.com has much lower ping than any of the default N.fedora.pool.ntp.org servers.
2020-03-20space_server: nftables: remove traffic stats rulesEmil Renner Berthing
This used to open up for polling our old switch for traffic data, but it died and it doesn't work with the new switch so let's plug the hole.
2020-03-14space_server: nftables: add graffens prefixes to nftablesJesper Hess Nielsen
2020-03-14space_server: bird: add ipv4 BGP session for graffenJesper Hess Nielsen
2020-03-11space_server: bird: add bgp peering for graffen/AS209616Jesper Hess Nielsen
2020-03-07space_server: nftables: forward space.labitat.dk:17380 to jumbotronEmil Renner Berthing
2020-02-29space_server: update to Fedora 31Emil Renner Berthing
2020-02-29space_server: networkd: set Scope=link link addressesEmil Renner Berthing
2020-02-27space_server: move sudo tasks to fedora roleEmil Renner Berthing
..to align with debian role
2019-05-02space_server: renumber Fiberby linkAsbjørn Sloth Tønnesen
Signed-off-by: Asbjørn Sloth Tønnesen <asbjorn@labitat.dk>
2019-04-03space_server: named: support dynamic updatesEmil Renner Berthing
..of the dhcp zone and reverse dns for 10.42.0.0/16 This way the dhcp daemon can add entries when it handles out leases.
2019-04-02space_server: named: create reverse ipv4 zoneEmil Renner Berthing
2019-04-01space_server: named: use named instead of unboundEmil Renner Berthing
This reverts commit 3b795796bd03488a385f3ad42b10b8c0d61282c1, "space_server: unbound: use unbound instad of bind". Unlike unbound, bind supports synthesizing DNS64 answers only for certain clients, so only requests from the Labitat NAT64 network will get DNS64 answers.
2019-01-10space_server: fix one last reference to the old prefixAsbjørn Sloth Tønnesen
Fixes: 78688483 space_server: add Asbjorn's colo addresses and net
2018-12-05space_server: enable NAT64/DNS64 networkEmil Renner Berthing
2018-12-05space_server: avahi: ask myhostname 2ndEmil Renner Berthing
2018-12-05space_server: unbound: create /etc/resolv.confEmil Renner Berthing
2018-12-03space_server: networkd: announce proper DNS on mgtEmil Renner Berthing
2018-12-03space_server: networkd: disable ARP on untagged interfaceEmil Renner Berthing
2018-11-30space_server: networkd: small cleanupsEmil Renner Berthing
2018-11-30space_server: use systemd-network for RAsEmil Renner Berthing
..rather radvd
2018-11-30space_server: networkd: use Link.RequiredForOnlineEmil Renner Berthing
..rather than overriding ExecStart to call networkd-wait-online with --ignore
2018-11-28space_server: nat Labitat free from 185.38.175.1Emil Renner Berthing
2018-11-28space_server: add Asbjorn's colo addresses and netAsbjørn Sloth Tønnesen
2018-11-28space_server: nftables: accept all traffic to colo netsEmil Renner Berthing
..but don't let colo servers connect to internal addresses.
2018-11-24space_server: networkd: smarter set differenceEmil Renner Berthing
2018-11-22space_server: radvd: up DNS server valid timeEmil Renner Berthing
2018-11-10space_server: replace blackhole scriptEmil Renner Berthing
2018-11-10space_server: update for Fedora 29Emil Renner Berthing
2018-11-10space_server: drop uneccessary subdirsEmil Renner Berthing
2018-11-06space_server: add spacebrain.labitat.dkAsbjørn Sloth Tønnesen
2018-10-27space_server: radius: use python for ASSHA authEmil Renner Berthing
..rather than our own patched radiusd
2018-10-11Migrate to new ipv6 prefixEmil Renner Berthing
..to avoid overlapping /32 announced by DKUUG.
2018-09-30Make it easier to run locallyEmil Renner Berthing
Now you just need ansible-playbook <playbook> when running ansible from your workstation. However when running ansible on the target machine it's a good idea to add "-clocal". Otherwise ansible will ssh to itself :/
2018-09-23space_server: kernel: order entries by timeEmil Renner Berthing
2017-11-25space_server: bird: add preferred sourceEmil Renner Berthing
..to default routes
2017-11-20space_server: networkd: use drop-in file for wait-onlineEmil Renner Berthing
The trick to overwriting the ExecStart option is to clear it first with ExecStart=
2017-11-20space_server: update to Fedora 27Emil Renner Berthing
2017-11-19space_server: generate DNS, mDNS and dhcp entriesEmil Renner Berthing
..from the same variables
2017-11-19space_server: unbound: use unbound instad of bindEmil Renner Berthing
2017-11-18space_server: radius: clean up configurationEmil Renner Berthing
Disable all the unused auth methods
2017-11-17space_server: nftables: cleanupEmil Renner Berthing
Allow hop-by-hop ipv6-icmp only on local interfaces.
2017-11-17space_server: enable IPv6 on the free wifiEmil Renner Berthing
2017-11-15space_server: nftables: only NAT local addressesEmil Renner Berthing
2017-11-15space_server: nftables: allow IPv6 mDNSEmil Renner Berthing
2017-11-13space_server: networkd: use fe80::1 link-local addressEmil Renner Berthing
..on lan interfaces with IPv6
2017-11-13space_server: nftables: clean up rules a bitEmil Renner Berthing
2017-11-12space_server: dhcpd: remove spacewand from dhcp rangeEmil Renner Berthing
..otherwise dhcpd complains: dhcpd[3857]: Dynamic and static leases present for 10.42.0.70. dhcpd[3857]: Remove host declaration spacewand or remove 10.42.0.70 dhcpd[3857]: from the dynamic address pool for 10.42.0.0/24
2017-11-12space_server: named: point s. to public IPv6Emil Renner Berthing
We're not using the old site-local addresses anymore.
2017-11-12initial commitEmil Renner Berthing
generated by cgit v1.2.1 (git 2.18.0) at 2024-11-22 21:25:39 +0000