aboutsummaryrefslogtreecommitdiffstats
path: root/roles/space_server/templates
AgeCommit message (Collapse)Author
4 daysspace_server: nftables: remove old IP prefixesAsbjørn Sloth Tønnesen
Signed-off-by: Asbjørn Sloth Tønnesen <asbjorn@labitat.dk>
4 daysspace_server: dhcpd: update IP prefixesAsbjørn Sloth Tønnesen
Actually this is not used, as it has been replaced by dnsmasq. Signed-off-by: Asbjørn Sloth Tønnesen <asbjorn@labitat.dk>
4 daysspace_server: named: update IP prefixesAsbjørn Sloth Tønnesen
Signed-off-by: Asbjørn Sloth Tønnesen <asbjorn@labitat.dk>
4 daysspace_server: named: zones: change IP prefix for labitrackAsbjørn Sloth Tønnesen
Signed-off-by: Asbjørn Sloth Tønnesen <asbjorn@labitat.dk>
4 daysspace_server: nftables: fix labitat.dk IPAsbjørn Sloth Tønnesen
Signed-off-by: Asbjørn Sloth Tønnesen <asbjorn@labitat.dk>
4 daysspace_server: networkd: change reamining networks to new prefixesAsbjørn Sloth Tønnesen
Signed-off-by: Asbjørn Sloth Tønnesen <asbjorn@labitat.dk>
2025-04-27space_server: named: allow queries from new prefixesAsbjørn Sloth Tønnesen
Signed-off-by: Asbjørn Sloth Tønnesen <asbjorn@labitat.dk>
2025-04-27space_server: nftables: add new external prefixesAsbjørn Sloth Tønnesen
Signed-off-by: Asbjørn Sloth Tønnesen <asbjorn@labitat.dk>
2024-02-22space_server: networkd: add new secondary Labicolo networkAsbjørn Sloth Tønnesen
This completes the split of Labicolo into two networks. Henceforth we have two Labicolo network, and any two Labicolo nodes on different parts of the network will have to join LabIX, if they want to peer. Signed-off-by: Asbjørn Sloth Tønnesen <asbjorn@labitat.dk>
2024-02-22space_server: networkd: move Tor network to vlan 25Asbjørn Sloth Tønnesen
Signed-off-by: Asbjørn Sloth Tønnesen <asbjorn@labitat.dk>
2023-04-08space_server: named: remove obsolete dnssec-enableHafnium
2023-03-26space_server: chrony: Enable NTS serverEmil Renner Berthing
2023-01-26space_server: nftables: NAT local traffic bound for colo ifEmil Renner Berthing
2021-09-27space_server: use local_hosts where possibleEmil Renner Berthing
..to make sure we keep ip addresses in sync everywhere
2021-09-27space_server: vars: use dictionary for local_hostsEmil Renner Berthing
This allows us to look up info on specific hosts without searching through the whole list.
2021-01-19space_server: chrony: run chrony ntp serverEmil Renner Berthing
2021-01-17space_server: update for Fedora 33Emil Renner Berthing
2019-04-11space_server: dhcpd: add timezone infoEmil Renner Berthing
2019-04-07space_server: dhcpd: only do ddns for sane hostnamesEmil Renner Berthing
2019-04-05space_server: named: allow local transfer queriesEmil Renner Berthing
..so now you can see all registered dhcp hostnames with: dig axfr dhcp
2019-04-03space_server: dhcpd: reclaim 10.42.0.70Emil Renner Berthing
There used to be a server with this address, so the available dhcp range had to be broken up.
2019-04-03space_server: dhcpd: add hosts to .dhcp zoneEmil Renner Berthing
Only requests with the host-name header set will be added to the dhcp zone (so it can be looked up at <hostname>.dhcp). This will fail if the host-name is not a valid dns name though. Also leases on the member wired, member wireless, and free are added to the zone, but just like the s zone the dhcp zone and reverse dns for 10.42.0.0/16 cannot be queried from Labitat (free). This way you can connect gadgets to Labitat (free), but still look them up in dns and connect to them from the member networks.
2019-04-03space_server: named: support dynamic updatesEmil Renner Berthing
..of the dhcp zone and reverse dns for 10.42.0.0/16 This way the dhcp daemon can add entries when it handles out leases.
2019-04-02space_server: named: create reverse ipv4 zoneEmil Renner Berthing
2019-04-01space_server: vars: rework local_hostsEmil Renner Berthing
..to get rid of the need for ipv4/ipv6 filters and python-netaddr dependency.
2019-04-01space_server: named: use named instead of unboundEmil Renner Berthing
This reverts commit 3b795796bd03488a385f3ad42b10b8c0d61282c1, "space_server: unbound: use unbound instad of bind". Unlike unbound, bind supports synthesizing DNS64 answers only for certain clients, so only requests from the Labitat NAT64 network will get DNS64 answers.
2019-03-31space_server: kernel: make sure selinux is disabledEmil Renner Berthing
2019-03-31space_server: dhcpd: update dhcpd.confEmil Renner Berthing
Host declerations are global and dhcpd has been warning about this for some time.
2018-12-05space_server: enable NAT64/DNS64 networkEmil Renner Berthing
2018-11-10space_server: update for Fedora 29Emil Renner Berthing
2018-11-10space_server: drop uneccessary subdirsEmil Renner Berthing
2018-10-27space_server: radius: use python for ASSHA authEmil Renner Berthing
..rather than our own patched radiusd
2018-10-11Migrate to new ipv6 prefixEmil Renner Berthing
..to avoid overlapping /32 announced by DKUUG.
2018-09-26space_server: kernel: better cmdline templateEmil Renner Berthing
2017-11-28space_server: radius: fail getusers script on http errorEmil Renner Berthing
2017-11-19space_server: generate DNS, mDNS and dhcp entriesEmil Renner Berthing
..from the same variables
2017-11-18space_server: radius: clean up configurationEmil Renner Berthing
Disable all the unused auth methods
2017-11-12initial commitEmil Renner Berthing