salt.git/pillar/id, branch orpheus Work in progress effort to automate the LibertaCasa infrastructure configuration using SaltStack Init orpheus.psyched.dev 2023-05-02T18:57:40+00:00 Georg Pfuetzenreuter 2023-05-02T18:57:40+00:00 52803b6f55965aac1462a0567388e710da863a5f Add pillar ID for orpheus to disable sshd management (machine uses custom configuration for $reasons). Signed-off-by: Georg Pfuetzenreuter <mail@georg-pfuetzenreuter.net> 
Add pillar ID for orpheus to disable sshd management (machine uses
custom configuration for $reasons).

Signed-off-by: Georg Pfuetzenreuter <mail@georg-pfuetzenreuter.net>
Init dencpod01.lysergic.dev 2023-05-02T18:40:09+00:00 Georg Pfuetzenreuter 2023-05-02T18:40:09+00:00 b6b129c41f4df725319b84af87eb6b1f5f3f0b87 Blank machine. Signed-off-by: Georg Pfuetzenreuter <mail@georg-pfuetzenreuter.net> 
Blank machine.

Signed-off-by: Georg Pfuetzenreuter <mail@georg-pfuetzenreuter.net>
Import moni firewall configuration 2023-05-02T18:02:21+00:00 Georg Pfuetzenreuter 2023-05-02T18:02:21+00:00 d89138e2a798c5d9f4ca81f4618483dd41d71ab6 Some ports not yet covered by a role. Signed-off-by: Georg Pfuetzenreuter <mail@georg-pfuetzenreuter.net> 
Some ports not yet covered by a role.

Signed-off-by: Georg Pfuetzenreuter <mail@georg-pfuetzenreuter.net>
Init phoebe.lysergic.dev 2023-05-02T17:48:22+00:00 Georg Pfuetzenreuter 2023-05-02T17:48:22+00:00 55acb1dea417feb9268fe606f0bea847af6ae9d7 Blank machine. Signed-off-by: Georg Pfuetzenreuter <mail@georg-pfuetzenreuter.net> 
Blank machine.

Signed-off-by: Georg Pfuetzenreuter <mail@georg-pfuetzenreuter.net>
Disable manage_sshd for philia 2023-05-02T17:32:36+00:00 Georg Pfuetzenreuter 2023-05-02T17:32:36+00:00 409016ea759c850d0d9761c1361915516d082577 Machine uses a custom sshd configuration for $reasons. Signed-off-by: Georg Pfuetzenreuter <mail@georg-pfuetzenreuter.net> 
Machine uses a custom sshd configuration for $reasons.

Signed-off-by: Georg Pfuetzenreuter <mail@georg-pfuetzenreuter.net>
Repair BookStack httpd configuration 2023-04-30T22:00:31+00:00 Georg Pfuetzenreuter 2023-04-30T22:00:31+00:00 841317e0f4bc1f429055b320c0008097d5e82842 - Replace wrong instances of RewriteCond with RewriteRule - Remove wrong quotes around rewrite conditions - Set correct options (seemingly our version of httpd does not set FollowSymLinks by default?) Signed-off-by: Georg Pfuetzenreuter <mail@georg-pfuetzenreuter.net> 
- Replace wrong instances of RewriteCond with RewriteRule
- Remove wrong quotes around rewrite conditions
- Set correct options (seemingly our version of httpd does not set
  FollowSymLinks by default?)

Signed-off-by: Georg Pfuetzenreuter <mail@georg-pfuetzenreuter.net>
Merge pull request 'Adjust themis httpd directory options' (#50) from themis-httpd-fixup into production 2023-04-30T18:04:42+00:00 Georg Pfuetzenreuter 2023-04-30T18:04:42+00:00 f56ed6f64eeeef273f228448209930b66d99d516 Reviewed-on: https://git.com.de/LibertaCasa/salt/pulls/50 
Reviewed-on: https://git.com.de/LibertaCasa/salt/pulls/50
Correct SAML realm capitalization 2023-04-30T16:22:58+00:00 Georg Pfuetzenreuter 2023-04-30T16:22:58+00:00 d8359f002d3cbecfc4bb3fb6c3744aad71766759 The Keycloak realm is named "LibertaCasa", not "libertacasa". Signed-off-by: Georg Pfuetzenreuter <mail@georg-pfuetzenreuter.net> 
The Keycloak realm is named "LibertaCasa", not "libertacasa".

Signed-off-by: Georg Pfuetzenreuter <mail@georg-pfuetzenreuter.net>
Adjust themis httpd directory options 2023-04-30T16:16:35+00:00 Georg Pfuetzenreuter 2023-04-30T16:05:28+00:00 0a3d34d9623c9d4a9d343db8d92a2625ad7c894d Some directory options are not needed and were listed with syntax issues. Set to false to prevent "Options" from being added, which equals "Options +FollowSymLinks". Signed-off-by: Georg Pfuetzenreuter <mail@georg-pfuetzenreuter.net> 
Some directory options are not needed and were listed with syntax
issues. Set to false to prevent "Options" from
being added, which equals "Options +FollowSymLinks".

Signed-off-by: Georg Pfuetzenreuter <mail@georg-pfuetzenreuter.net>
Add manage_firewall conditional 2023-04-30T14:07:21+00:00 Georg Pfuetzenreuter 2023-04-30T14:07:21+00:00 b685f16c914b9fa05bda7c69ce9e157d04262d09 Allow us to enroll machines in Salt which do not yet have their firewall configuration imported without having their rules overwritten. Signed-off-by: Georg Pfuetzenreuter <mail@georg-pfuetzenreuter.net> 
Allow us to enroll machines in Salt which do not yet have their firewall
configuration imported without having their rules overwritten.

Signed-off-by: Georg Pfuetzenreuter <mail@georg-pfuetzenreuter.net>