Commit graph

135 commits

Author SHA1 Message Date
Julian Labus
dc72070628
Role system-sysctl-gateway: add small delay to sysctl startup
- sysctl starts to quick after modules-load and setting the nf_conntrack parameters fails
2018-02-28 11:16:30 +01:00
Julian Labus
f5732aeb2a
Role network-routing: fix netmasks 2018-02-28 11:16:22 +01:00
Julian Labus
f81a5c1a5f
Role network-iptables-gateway: load module nf_conntrack at boot 2018-02-28 11:16:15 +01:00
Tobias Hachmer
7359c03bf8 Role service-nginx: enable IPv6 support 2018-02-28 06:15:43 +01:00
Tobias Hachmer
89281c68a8 Role server-basic: ensure rpcbind is not installed 2018-02-28 06:06:14 +01:00
Tobias Hachmer
3c8d012ac7 Add role users 2018-02-28 06:04:25 +01:00
Julian Labus
be84e6f148
Role service-nginx-firmware: enable IPv6 support 2018-02-25 18:13:26 +01:00
Tobias Hachmer
4ccb9a52ea Revert "Role network-meshbridge: update workaround to set hwaddress"
This reverts commit f81bbfed65.
2018-02-06 06:00:16 +01:00
Tobias Hachmer
a947803e28 Revert "Role network-routing: move interface specific routes to role network-meshbridge"
This reverts commit d3298d4a3c.
2018-02-06 06:00:01 +01:00
Tobias Hachmer
e633015873 Role service-fastd: explicitly clear ExecStart to prevent multiple definitions 2018-02-05 20:44:41 +01:00
Tobias Hachmer
bd52ad6dd7 Role server-basic: fix networking.service from ifupdown2 - some interfaces come up too late 2018-02-05 17:37:52 +01:00
Tobias Hachmer
95140f12ea Role service-fastd: configure systemd service unit overrides instead of replacing the whole file 2018-02-05 15:46:56 +01:00
Tobias Hachmer
3e311bd995 Role service-dhcpd: add override settings for kea-dhcp4-server service unit 2018-02-05 15:31:40 +01:00
Julian Labus
d3298d4a3c Role network-routing: move interface specific routes to role network-meshbridge 2018-02-02 06:38:06 +01:00
Julian Labus
f81bbfed65 Role network-meshbridge: update workaround to set hwaddress
`pre-up` doesn't work properly as it is called before the bridge is created.
Initializing the bridge via `up` in the batman mesh interface seems to be a better solution.
2018-02-02 06:38:06 +01:00
Tobias Hachmer
b246e8982b Add role service-nullmailer 2018-01-07 17:40:33 +01:00
Tobias Hachmer
90f486eb60 Role service-bird-icvpn: correct roa log messages 2018-01-02 10:45:09 +01:00
Tobias Hachmer
64f99ea396 Rename ffmwu custom config config dir from ~/.config to ~/.ffmwu-config 2017-12-31 13:41:46 +01:00
Tobias Hachmer
41a1d0bac3 Add role service-vnstat 2017-12-31 12:40:00 +01:00
Tobias Hachmer
7c80d75632 Role server-basic: update handling of dummy module 2017-12-30 23:10:11 +01:00
Tobias Hachmer
c79fb69789 Role server-basic: add unattended-upgrades 2017-12-30 22:47:58 +01:00
Tobias Hachmer
b36f4dfe5b Role service-fastd-mesh: update peer limit config
* rename setting timeout to remote_data_timeout
* introduce setting remote_fetch_timeout
2017-12-30 11:26:47 +01:00
Tobias Hachmer
7757387dd5 Role service-nginx: add nginx.conf templating 2017-12-29 20:31:46 +01:00
Tobias Hachmer
a2104ddcc5 Role service-tinc: fix handling of systemd unit
* remove init script if present
* nets.boot not necessary with new systemd unit
* update systemd tasks to use systemd unit tinc@
* update handler
2017-12-29 14:27:52 +01:00
Tobias Hachmer
0a51ee02a3 Role service-dhcpd: change dhcp daemon to kea 2017-12-28 22:12:00 +01:00
n0trax
7abc41ee92 Fix systemd service scripts (#12) 2017-12-14 19:45:27 +01:00
Tobias Hachmer
2faa4e11dd Role network-iptables-gateway: omit dropping invalid packets 2017-12-14 06:33:39 +01:00
n0trax
ad5b658467 Add prometheus role (#9) 2017-12-05 05:58:34 +01:00
Tobias Hachmer
0f9cee0e7d Role service-tinc: add task to enable post-merge script 2017-12-04 16:32:38 +01:00
Tobias Hachmer
89c187a975 Role network-routing: add missing service dependency for ffmwu-static-routes service unit 2017-12-04 06:21:25 +01:00
Tobias Hachmer
466a08a0b3 Role service-fastd-mesh: ensure fastd_status.json file is present; reorder nginx roles 2017-11-30 23:12:15 +01:00
Tobias Hachmer
80bd91a469 Role network-iptables-gateway: fix freifunk bridge rules 2017-11-14 23:09:55 +01:00
Tobias Hachmer
071bdb40d4 Role service-tinc: rework passwordstore lookup 2017-11-12 20:39:33 +01:00
Tobias Hachmer
78a141305d Rework passwordstore lookup handling in roles service-fastd-mesh und service-fastd-intragate 2017-11-12 20:27:12 +01:00
Tobias Hachmer
7437095761 Roles service-fastd-[mesh|intragate]: reload networking on fastd instance start 2017-11-12 15:08:41 +01:00
Tobias Hachmer
10d25ee031 Move dummy module from role kmod-batman to server-basic 2017-11-12 14:35:11 +01:00
Tobias Hachmer
07eda681ca Roles service-fastd-mesh + service-fastd-intragate
- remove on-up|on-down stanzas from fastd.conf
- update readme
2017-11-12 14:12:07 +01:00
Tobias Hachmer
7a482e195f Role server-basic: add locale setting 2017-11-12 12:44:20 +01:00
Tobias Hachmer
9d08803a9e Rename role server-repos to server-apt-repos
- Role server-apt-repos: add readme
2017-11-12 11:30:44 +01:00
Tobias Hachmer
42d407340a Role network-meshbridge: workaround to set mac address on boot and get ipv6 address configured correctly 2017-11-12 00:31:14 +01:00
Tobias Hachmer
623faaa40f Role prerequisites: add cname asserts 2017-11-11 23:24:49 +01:00
Tobias Hachmer
99a77aa0b7 Role server-repos: remove universe-factory repo since fastd package is available in debian upstream 2017-11-09 06:20:23 +01:00
Tobias Hachmer
f0564b5ad2 Role service-respondd: install python3 module dependency 2017-11-07 20:25:39 +01:00
Tobias Hachmer
b1480594fa Role server-repos: change ffmwu repo to stretch 2017-11-07 20:23:23 +01:00
Tobias Hachmer
fc04651e8b Lowercase all network interface names 2017-11-06 21:24:56 +01:00
Tobias Hachmer
387f3bbf6b Update fastd peer limit configuration
* add list of legacy gateways (temporarily)
 * change backend-scripts branch to ansible
 * Role server-basic: ensure ffmwu config directory is present
 * Role service-fastd: add fastd-status script
 * role service-fastd-mesh: add templating for fastd peer limit
configuration
2017-11-06 17:41:17 +01:00
Tobias Hachmer
67c915e877 Role service-respondd: also listen on fastd-interfaces 2017-10-31 22:54:58 +01:00
Tobias Hachmer
d6eea602b7 Flush handlers after configuring network interfaces 2017-10-29 21:26:10 +01:00
Tobias Hachmer
f00a216fef Role service-nginx: add autoindex options to default vhost 2017-10-29 21:24:48 +01:00
Tobias Hachmer
dc146df5f7 Add role service-nginx-firmware 2017-10-27 11:41:00 +02:00