salt.git/pillar/role, branch import-denc-webcluster Work in progress effort to automate the LibertaCasa infrastructure configuration using SaltStack Manage backend firewall zone 2023-02-12T05:04:16+00:00 Georg Pfuetzenreuter 2023-02-12T05:04:16+00:00 c5ce94d7b5217265cc50b6aa98a2074f4885d5eb Configure backend firewall zones if applicable. Allow all UDP for cluster traffic. Signed-off-by: Georg Pfuetzenreuter <mail@georg-pfuetzenreuter.net> 
Configure backend firewall zones if applicable. Allow all UDP for
cluster traffic.

Signed-off-by: Georg Pfuetzenreuter <mail@georg-pfuetzenreuter.net>
ha-node: allow vrrp in firewall 2023-02-12T04:54:20+00:00 Georg Pfuetzenreuter 2023-02-12T04:54:20+00:00 bef66c1f8a5500a24ae41286c3f377c07f47cd30 Needed for keepalived operation. Signed-off-by: Georg Pfuetzenreuter <mail@georg-pfuetzenreuter.net> 
Needed for keepalived operation.

Signed-off-by: Georg Pfuetzenreuter <mail@georg-pfuetzenreuter.net>
matterbridge: add role pillar 2023-02-09T21:56:28+00:00 Georg Pfuetzenreuter 2023-02-09T21:56:28+00:00 77c50cf53f8a7190163c11fc32fb1850b82ef934 Empty for now, adding for future reference and because we enforce role pillars to exist. Signed-off-by: Georg Pfuetzenreuter <mail@georg-pfuetzenreuter.net> 
Empty for now, adding for future reference and because we enforce role
pillars to exist.

Signed-off-by: Georg Pfuetzenreuter <mail@georg-pfuetzenreuter.net>
Add onion-router role 2023-02-07T17:21:32+00:00 Georg Pfuetzenreuter 2023-02-07T17:21:32+00:00 a3ec351b70a30787e3bd17737b09b14a5df60175 Signed-off-by: Georg Pfuetzenreuter <mail@georg-pfuetzenreuter.net> 
Signed-off-by: Georg Pfuetzenreuter <mail@georg-pfuetzenreuter.net>
web-proxy: include mime.types 2023-02-05T19:10:57+00:00 Georg Pfuetzenreuter 2023-02-05T19:10:57+00:00 92f01888af8acc36e019981330c6203c0575f96d Always include mime.types on web-proxies. Signed-off-by: Georg Pfuetzenreuter <mail@georg-pfuetzenreuter.net> 
Always include mime.types on web-proxies.

Signed-off-by: Georg Pfuetzenreuter <mail@georg-pfuetzenreuter.net>
web-proxy: common includes 2023-02-05T19:09:05+00:00 Georg Pfuetzenreuter 2023-02-05T19:09:05+00:00 e369c53a4ca75ba4c4c925982138c8a5210d2f81 Always include files in conf.d and vhosts.d on web-proxies. Signed-off-by: Georg Pfuetzenreuter <mail@georg-pfuetzenreuter.net> 
Always include files in conf.d and vhosts.d on web-proxies.

Signed-off-by: Georg Pfuetzenreuter <mail@georg-pfuetzenreuter.net>
web-proxy: common nginx.conf 2023-02-05T18:59:04+00:00 Georg Pfuetzenreuter 2023-02-05T18:59:04+00:00 12ce1345598c0586f399b0f99760079b069154ad Import default nginx.conf contents from our custom packaged file into Salt. Signed-off-by: Georg Pfuetzenreuter <mail@georg-pfuetzenreuter.net> 
Import default nginx.conf contents from our custom packaged file into
Salt.

Signed-off-by: Georg Pfuetzenreuter <mail@georg-pfuetzenreuter.net>
web-proxy: IPv6 listener brackets 2023-02-05T18:19:27+00:00 Georg Pfuetzenreuter 2023-02-05T18:19:27+00:00 e3e4caaabe9795c56468e67c3b9105b2a5f53145 Add logic to wrap IPv6 listening addresses in brackets, to prevent nginx from failing to start. Signed-off-by: Georg Pfuetzenreuter <mail@georg-pfuetzenreuter.net> 
Add logic to wrap IPv6 listening addresses in brackets, to prevent nginx
from failing to start.

Signed-off-by: Georg Pfuetzenreuter <mail@georg-pfuetzenreuter.net>
web-proxy: add firewall configuration 2023-02-05T13:29:25+00:00 Georg Pfuetzenreuter 2023-02-05T13:29:25+00:00 5e02090bc6037ac2e30190d97c3717c3fee01f96 Allow internal http and https to pass on web proxies. To-do: logic for web proxies directly attached to the internet. Signed-off-by: Georg Pfuetzenreuter <mail@georg-pfuetzenreuter.net> 
Allow internal http and https to pass on web proxies.
To-do: logic for web proxies directly attached to the internet.

Signed-off-by: Georg Pfuetzenreuter <mail@georg-pfuetzenreuter.net>
web-proxy: add common TLS configuration 2023-02-05T09:05:20+00:00 Georg Pfuetzenreuter 2023-02-05T09:05:20+00:00 98ea861c1391f652d339704f8be3096b814f0c16 Add TLS configuration snippet shared between all web-proxies. Signed-off-by: Georg Pfuetzenreuter <mail@georg-pfuetzenreuter.net> 
Add TLS configuration snippet shared between all web-proxies.

Signed-off-by: Georg Pfuetzenreuter <mail@georg-pfuetzenreuter.net>