Commit graph

460 commits

Author SHA1 Message Date
b0be26e459 borgmatic is run under user root so postgres superuser doesn't match peer 2025-04-02 00:09:35 +02:00
6896dcf819 Replace forgejo-backup cron by borgmatic cron 2025-03-30 22:57:51 +02:00
466c4509df forgejo-backup: Don't zip the archive to use it with borgmatic 2025-03-30 14:21:07 +02:00
ea9aad9459 Add backup playbook in the all.yml playbook 2025-03-30 13:09:02 +02:00
8a30c77d86 Initialize borgmatic repository 2025-03-30 12:54:25 +02:00
3f3b7da7cc Add borgmatic config 2025-03-30 12:33:21 +02:00
e3a5f7ab7c Fix newline added on authorized_keys 2025-03-30 11:43:18 +02:00
bc81f72afb forgejo: Use nftables for fail2ban... 2025-03-30 11:43:18 +02:00
f6c0699517 Start setting up backups 2025-03-28 21:19:20 +01:00
81f9b829c3 Rename mailserver-test to eumycota-test 2025-03-28 10:23:44 +01:00
47ddfb86c3 Set forgejo log level to error 2025-03-27 21:20:05 +01:00
Tunui Franken
90a9121a3c Add check_local_unread_emails 2025-03-26 18:32:02 +01:00
eb3272252a Check apt less often, add apt_timeout for lime2 2025-03-25 20:47:59 +01:00
6fa92661be Enable mailer for forgejo 2025-03-25 20:47:59 +01:00
Tunui Franken
d7e2bd9c90 Fix creation of default mailboxes 2025-03-25 14:29:59 +01:00
Tunui Franken
ebb45b3a4a Add mail_uid / mail_gid for dovecot 2025-03-25 12:19:08 +01:00
Tunui Franken
2ec6a089e1 Install ripgrep 2025-03-25 11:02:16 +01:00
Tunui Franken
c7a48b74c6 Allow to check ssh on lime2 when using NATted address 2025-03-25 10:22:56 +01:00
342dcdf016 lime2 and test servers don't have smart devices 2025-03-23 23:18:51 +01:00
d6ada5a32a Check port 25 for mailserver locally as the port is blocked on lime2 2025-03-23 22:55:36 +01:00
e6d3a6e6d7 Allow icinga2 api to master from all, remove root api user 2025-03-23 22:51:25 +01:00
fe0d4be242 Update nagstamon password 2025-03-23 22:39:42 +01:00
4ae0ea6886 Minor fixes 2025-03-23 19:18:33 +01:00
9d9fef0aa7 fixup! Use sendmail for forgejo mailing 2025-03-23 13:53:56 +01:00
5cf8904b6a Change default mailuser for production 2025-03-23 13:26:49 +01:00
6da2576d19 Add needed mail alias for icinga2 2025-03-23 13:11:44 +01:00
47c9e66b25 Allow git clone on localhost for tunuifranken.info 2025-03-23 12:47:04 +01:00
efe4263b4a Remove unttended-upgrades from test images 2025-03-23 12:10:58 +01:00
f9665d8d83 Create ApiUser nagstamon 2025-03-23 10:23:25 +01:00
de4f590585 Minor change 2025-03-23 09:51:49 +01:00
1a7b5b24b7 Minor typo change 2025-03-23 09:38:52 +01:00
872a824394 Regenerate forgejo authorized_keys after installing 2025-03-23 09:05:28 +01:00
776fd31d8b Fix handler of forgejo restart running when service doesn't exist yet 2025-03-21 10:58:09 +01:00
15dff1571a Fix getting latest forgejo binary when new version is a stable release
Sometimes forgejo releases stable that is version lower than a current
stable release (LTS)
2025-03-21 09:32:36 +01:00
6f8b247425 Add check_rbl 2025-03-16 13:22:12 +01:00
0035b79fd8 Add smart check 2025-03-16 12:26:02 +01:00
65e6ed9aee Add check_logfiles for mail activity 2025-03-15 10:11:27 +01:00
82ec5f8206 Add check_memory 2025-02-09 11:25:08 +01:00
53bd4e743a Use percpu load 2025-02-09 11:06:20 +01:00
e5c660210b Rsyslog is needed for nftables log 2025-02-06 22:56:59 +01:00
461baf4f80 Include role setup_nftables for common 2025-02-06 22:56:41 +01:00
a0fac3c2dc Add systemd check 2025-02-02 18:28:10 +01:00
70382d628f Add check for mailserver-pgsql 2025-02-01 23:49:12 +01:00
f026e3a166 [mailserver] Disable plain imap (143) 2025-02-01 22:06:10 +01:00
32fc4122bd [mailserver] Add submissions check 2025-02-01 21:33:15 +01:00
7b7a21d59e [postfix] Add /etc/aliases 2025-02-01 21:23:09 +01:00
913d378dbe [postfix] Use submissions (465) for relaying 2025-02-01 21:22:49 +01:00
e822e40945 [mailserver_postfix] Enable submissions (465 without STARTTLS) 2025-02-01 21:04:14 +01:00
27433263e7 Add debian ntp pool for ntp_time 2025-02-01 00:08:50 +01:00
41b2ad4b20 [icinga2] Define "disk" Service without arguments to get partitions dynamically 2025-01-31 23:56:09 +01:00