salt.git - Work in progress effort to automate the LibertaCasa infrastructure configuration using SaltStack

	Commit message (Collapse)	Author	Age	Files	Lines
*	Repair boolean	Georg Pfuetzenreuter	2023-07-21	1	-1/+1
\| \| \| \| \| \| \| \| \|	``` nginx: [emerg] invalid value "True" in "proxy_ssl_verify" directive, it must be "on" or "off" in /etc/nginx/vhosts.d/agola.conf:14 ``` Signed-off-by: Georg Pfuetzenreuter <mail@georg-pfuetzenreuter.net>
*	Add reverse proxy for Agola	Georg Pfuetzenreuter	2023-07-21	1	-0/+11
\| \| \| \| \| \|	New service behind ci.lysergic.dev / ci.git.com.de. Signed-off-by: Georg Pfuetzenreuter <mail@georg-pfuetzenreuter.net>
*	Add manage_firewall conditional	Georg Pfuetzenreuter	2023-04-30	1	-0/+1
\| \| \| \| \| \| \|	Allow us to enroll machines in Salt which do not yet have their firewall configuration imported without having their rules overwritten. Signed-off-by: Georg Pfuetzenreuter <mail@georg-pfuetzenreuter.net>
*	denc-webcluster: add ModSecurity adjustments	Georg Pfuetzenreuter	2023-02-12	1	-0/+9
\| \| \| \| \| \| \| \|	With the rollout of our Salted configuration, ModSecurity came enforced. This adds necessary rules to PrivateBin and BookStack for correct operation. Signed-off-by: Georg Pfuetzenreuter <mail@georg-pfuetzenreuter.net>
*	denc-webcluster: nginx listen on HA addresses	Georg Pfuetzenreuter	2023-02-12	1	-5/+5
\| \| \| \| \| \|	Accidentally configured to listen only internally. Signed-off-by: Georg Pfuetzenreuter <mail@georg-pfuetzenreuter.net>
*	denc-webcluster: nginx AppArmor rules	Georg Pfuetzenreuter	2023-02-12	1	-0/+7
\| \| \| \| \| \|	Allow access to client trust certificate and to static content. Signed-off-by: Georg Pfuetzenreuter <mail@georg-pfuetzenreuter.net>
*	denc-webcluster: nginx config fixup	Georg Pfuetzenreuter	2023-02-12	1	-5/+2
\| \| \| \| \| \| \| \|	- remove keys duplicated by include - repair wrong snippets include directory - repair wrong ip_hash option syntax Signed-off-by: Georg Pfuetzenreuter <mail@georg-pfuetzenreuter.net>
*	denc-webcluster: enable keepalived script security	Georg Pfuetzenreuter	2023-02-12	1	-0/+1
\| \| \| \| \| \|	Prevent script tampering. Signed-off-by: Georg Pfuetzenreuter <mail@georg-pfuetzenreuter.net>
*	denc-webcluster: allow http(s) publicly	Georg Pfuetzenreuter	2023-02-12	1	-0/+7
\| \| \| \| \| \|	Public firewall rules were missing from initial import. Signed-off-by: Georg Pfuetzenreuter <mail@georg-pfuetzenreuter.net>
*	nemesis/hubris: import keepalived configuration	Georg Pfuetzenreuter	2023-02-12	1	-4/+61
\| \| \| \| \| \|	Add shared configuration to cluster.denc.web-proxy. Signed-off-by: Georg Pfuetzenreuter <mail@georg-pfuetzenreuter.net>
*	nemesis/hubris: import nginx configuration	Georg Pfuetzenreuter	2023-02-12	1	-0/+149
	Add shared configuration to cluster.denc.web-proxy. Signed-off-by: Georg Pfuetzenreuter <mail@georg-pfuetzenreuter.net>