<feed xmlns='http://www.w3.org/2005/Atom'>
<title>salt.git/pillar/cluster, branch fix/matterb-trashtgirclinks</title>
<subtitle>Work in progress effort to automate the LibertaCasa infrastructure configuration using SaltStack </subtitle>
<link rel='alternate' type='text/html' href='https://git.casa/salt.git/'/>
<entry>
<title>denc-webcluster: include proxy in agola</title>
<updated>2023-07-31T19:25:28+00:00</updated>
<author>
<name>Georg Pfuetzenreuter</name>
</author>
<published>2023-07-31T19:25:28+00:00</published>
<link rel='alternate' type='text/html' href='https://git.casa/salt.git/commit/?id=32a0f8d653d6bb2e7072fdcb85cebf0c98f05ab1'/>
<id>32a0f8d653d6bb2e7072fdcb85cebf0c98f05ab1</id>
<content type='text'>
Signed-off-by: Georg Pfuetzenreuter &lt;mail@georg-pfuetzenreuter.net&gt;
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
Signed-off-by: Georg Pfuetzenreuter &lt;mail@georg-pfuetzenreuter.net&gt;
</pre>
</div>
</content>
</entry>
<entry>
<title>Merge pull request 'Repair boolean' (#84) from fix/nginx/boolean into production</title>
<updated>2023-07-31T19:15:42+00:00</updated>
<author>
<name>Pratyush Desai</name>
</author>
<published>2023-07-31T19:15:42+00:00</published>
<link rel='alternate' type='text/html' href='https://git.casa/salt.git/commit/?id=0df71b433152b01f2c78e95a60a2ebcbe0af10a6'/>
<id>0df71b433152b01f2c78e95a60a2ebcbe0af10a6</id>
<content type='text'>
Reviewed-on: https://git.com.de/LibertaCasa/salt/pulls/84
Reviewed-by: Pratyush Desai &lt;pratyush.desai@liberta.casa&gt;
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
Reviewed-on: https://git.com.de/LibertaCasa/salt/pulls/84
Reviewed-by: Pratyush Desai &lt;pratyush.desai@liberta.casa&gt;
</pre>
</div>
</content>
</entry>
<entry>
<title>Repair boolean</title>
<updated>2023-07-31T19:10:35+00:00</updated>
<author>
<name>Georg Pfuetzenreuter</name>
</author>
<published>2023-07-31T19:10:35+00:00</published>
<link rel='alternate' type='text/html' href='https://git.casa/salt.git/commit/?id=13d5e44baa2801ad080c7c5539735d98c114e750'/>
<id>13d5e44baa2801ad080c7c5539735d98c114e750</id>
<content type='text'>
Follow up to b6e9f753521111919dfcf67e91e02b30fbc41b24, forgot to quote
the string causing it to still be converted to a boolean.

Signed-off-by: Georg Pfuetzenreuter &lt;mail@georg-pfuetzenreuter.net&gt;
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
Follow up to b6e9f753521111919dfcf67e91e02b30fbc41b24, forgot to quote
the string causing it to still be converted to a boolean.

Signed-off-by: Georg Pfuetzenreuter &lt;mail@georg-pfuetzenreuter.net&gt;
</pre>
</div>
</content>
</entry>
<entry>
<title>denc-webcluster: exclude 949110</title>
<updated>2023-07-31T18:44:52+00:00</updated>
<author>
<name>Georg Pfuetzenreuter</name>
</author>
<published>2023-07-31T18:44:52+00:00</published>
<link rel='alternate' type='text/html' href='https://git.casa/salt.git/commit/?id=fb981646e52321c1d45d46dd1f435acaf7c94029'/>
<id>fb981646e52321c1d45d46dd1f435acaf7c94029</id>
<content type='text'>
ModSecurity rule blocked Bookstack from saving some pages while editing.

Signed-off-by: Georg Pfuetzenreuter &lt;mail@georg-pfuetzenreuter.net&gt;
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
ModSecurity rule blocked Bookstack from saving some pages while editing.

Signed-off-by: Georg Pfuetzenreuter &lt;mail@georg-pfuetzenreuter.net&gt;
</pre>
</div>
</content>
</entry>
<entry>
<title>Repair boolean</title>
<updated>2023-07-21T15:04:49+00:00</updated>
<author>
<name>Georg Pfuetzenreuter</name>
</author>
<published>2023-07-21T15:04:49+00:00</published>
<link rel='alternate' type='text/html' href='https://git.casa/salt.git/commit/?id=b6e9f753521111919dfcf67e91e02b30fbc41b24'/>
<id>b6e9f753521111919dfcf67e91e02b30fbc41b24</id>
<content type='text'>
```
nginx: [emerg] invalid value "True" in "proxy_ssl_verify" directive, it
must be "on" or "off" in /etc/nginx/vhosts.d/agola.conf:14
```

Signed-off-by: Georg Pfuetzenreuter &lt;mail@georg-pfuetzenreuter.net&gt;
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
```
nginx: [emerg] invalid value "True" in "proxy_ssl_verify" directive, it
must be "on" or "off" in /etc/nginx/vhosts.d/agola.conf:14
```

Signed-off-by: Georg Pfuetzenreuter &lt;mail@georg-pfuetzenreuter.net&gt;
</pre>
</div>
</content>
</entry>
<entry>
<title>Add reverse proxy for Agola</title>
<updated>2023-07-21T14:27:50+00:00</updated>
<author>
<name>Georg Pfuetzenreuter</name>
</author>
<published>2023-07-21T13:17:28+00:00</published>
<link rel='alternate' type='text/html' href='https://git.casa/salt.git/commit/?id=24d6de3a5d4931ae3fee5be62435bac88f82fca6'/>
<id>24d6de3a5d4931ae3fee5be62435bac88f82fca6</id>
<content type='text'>
New service behind ci.lysergic.dev / ci.git.com.de.

Signed-off-by: Georg Pfuetzenreuter &lt;mail@georg-pfuetzenreuter.net&gt;
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
New service behind ci.lysergic.dev / ci.git.com.de.

Signed-off-by: Georg Pfuetzenreuter &lt;mail@georg-pfuetzenreuter.net&gt;
</pre>
</div>
</content>
</entry>
<entry>
<title>Add manage_firewall conditional</title>
<updated>2023-04-30T14:07:21+00:00</updated>
<author>
<name>Georg Pfuetzenreuter</name>
</author>
<published>2023-04-30T14:07:21+00:00</published>
<link rel='alternate' type='text/html' href='https://git.casa/salt.git/commit/?id=b685f16c914b9fa05bda7c69ce9e157d04262d09'/>
<id>b685f16c914b9fa05bda7c69ce9e157d04262d09</id>
<content type='text'>
Allow us to enroll machines in Salt which do not yet have their firewall
configuration imported without having their rules overwritten.

Signed-off-by: Georg Pfuetzenreuter &lt;mail@georg-pfuetzenreuter.net&gt;
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
Allow us to enroll machines in Salt which do not yet have their firewall
configuration imported without having their rules overwritten.

Signed-off-by: Georg Pfuetzenreuter &lt;mail@georg-pfuetzenreuter.net&gt;
</pre>
</div>
</content>
</entry>
<entry>
<title>denc-webcluster: add ModSecurity adjustments</title>
<updated>2023-02-12T22:46:22+00:00</updated>
<author>
<name>Georg Pfuetzenreuter</name>
</author>
<published>2023-02-12T22:46:22+00:00</published>
<link rel='alternate' type='text/html' href='https://git.casa/salt.git/commit/?id=c75e31c14542cd8db89e9b7616adb82e22e945ea'/>
<id>c75e31c14542cd8db89e9b7616adb82e22e945ea</id>
<content type='text'>
With the rollout of our Salted configuration, ModSecurity came enforced.
This adds necessary rules to PrivateBin and BookStack for correct
operation.

Signed-off-by: Georg Pfuetzenreuter &lt;mail@georg-pfuetzenreuter.net&gt;
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
With the rollout of our Salted configuration, ModSecurity came enforced.
This adds necessary rules to PrivateBin and BookStack for correct
operation.

Signed-off-by: Georg Pfuetzenreuter &lt;mail@georg-pfuetzenreuter.net&gt;
</pre>
</div>
</content>
</entry>
<entry>
<title>denc-webcluster: nginx listen on HA addresses</title>
<updated>2023-02-12T16:42:31+00:00</updated>
<author>
<name>Georg Pfuetzenreuter</name>
</author>
<published>2023-02-12T16:42:31+00:00</published>
<link rel='alternate' type='text/html' href='https://git.casa/salt.git/commit/?id=37a1ec433ac588e864de89e245bb84308d6ed4da'/>
<id>37a1ec433ac588e864de89e245bb84308d6ed4da</id>
<content type='text'>
Accidentally configured to listen only internally.

Signed-off-by: Georg Pfuetzenreuter &lt;mail@georg-pfuetzenreuter.net&gt;
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
Accidentally configured to listen only internally.

Signed-off-by: Georg Pfuetzenreuter &lt;mail@georg-pfuetzenreuter.net&gt;
</pre>
</div>
</content>
</entry>
<entry>
<title>denc-webcluster: nginx AppArmor rules</title>
<updated>2023-02-12T15:39:49+00:00</updated>
<author>
<name>Georg Pfuetzenreuter</name>
</author>
<published>2023-02-12T15:28:19+00:00</published>
<link rel='alternate' type='text/html' href='https://git.casa/salt.git/commit/?id=2d5da24ce5d695b3f934ec06c654f7ae754b3fbf'/>
<id>2d5da24ce5d695b3f934ec06c654f7ae754b3fbf</id>
<content type='text'>
Allow access to client trust certificate and to static content.

Signed-off-by: Georg Pfuetzenreuter &lt;mail@georg-pfuetzenreuter.net&gt;
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
Allow access to client trust certificate and to static content.

Signed-off-by: Georg Pfuetzenreuter &lt;mail@georg-pfuetzenreuter.net&gt;
</pre>
</div>
</content>
</entry>
</feed>
