1532641640
feat: add nzbget to media platform
...
- add haproxy rules
- generate/distribute letsencrypt certificates
- manage access to cephfs
2024-07-09 22:32:54 +10:00
abb4a47703
chore: add ens19 to nzbget host
...
- required to access cephfs
2024-07-09 22:26:46 +10:00
857d51a934
chore: add matsol to nzbget
2024-07-09 22:26:03 +10:00
fd5163d6e6
Merge branch 'develop' into neoloc/nzbget
2024-07-09 22:25:28 +10:00
d67eba5860
feat: add nzbget module/role
...
- add nzbget module
- add nzbget ldap user/group
2024-07-09 22:23:58 +10:00
dacd2c6994
Merge pull request 'chore: disable gpgcheck for unkin repo' ( #100 ) from neoloc/gpgcheck_unkin_repo into develop
...
Reviewed-on: https://git.query.consul/unkinben/puppet-prod/pulls/100
2024-07-09 22:01:01 +10:00
930341c05c
Merge pull request 'Adding hieradata/node/ausyd1nxvm1048.main.unkin.net.yaml' ( #99 ) from autonode/ausyd1nxvm1048.main.unkin.net into develop
...
Reviewed-on: https://git.query.consul/unkinben/puppet-prod/pulls/99
2024-07-09 22:00:47 +10:00
47333237ee
chore: disable gpgcheck for unkin repo
2024-07-09 21:18:02 +10:00
924631d705
Adding hieradata/node/ausyd1nxvm1048.main.unkin.net.yaml
2024-07-09 20:54:51 +10:00
384e301fd3
Merge pull request 'feat: add new users' ( #98 ) from neoloc/moreusers into develop
...
Reviewed-on: https://git.query.consul/unkinben/puppet-prod/pulls/98
2024-07-09 19:22:26 +10:00
d52949fc4f
feat: add new users
...
- matsol
2024-07-09 19:21:59 +10:00
fe20590ac6
Merge pull request 'neoloc/retrieve_certbot_certs' ( #97 ) from neoloc/retrieve_certbot_certs into develop
...
Reviewed-on: https://git.query.consul/unkinben/puppet-prod/pulls/97
2024-07-08 23:27:21 +10:00
d9a2966ffd
fix: certbot selinux and rsync
...
- fix rsync to use 755 permissions
- add rsync selinux booleans
2024-07-08 23:17:38 +10:00
899e2cbf49
feat: haproxy updates
...
- use letsencrypt certificates
- add fafflix and jellyfin backends
2024-07-08 22:56:24 +10:00
bd5164fed3
feat: certbot reorg
...
- moved certbot into its own module
- added fact to list available certificates
- created systemd timer to rsync data to $data_dir/pub
- ensure the $data_dir/pub exists
- manage selinux for nginx
2024-07-08 22:33:11 +10:00
30ec8c1bb1
feat: enable retrieval of certbot certs
...
- refactor certbot
- add nginx to certbot hosts
2024-07-07 22:30:40 +10:00
c419620838
Merge pull request 'feat: manage certbot' ( #96 ) from neoloc/certbot into develop
...
Reviewed-on: https://git.query.consul/unkinben/puppet-prod/pulls/96
2024-07-07 21:45:18 +10:00
9db714d02f
feat: manage certbot
...
- add haproxy backend for be_letsencrypt
- manage the certbot role/profile
- create define to export certificate requests
2024-07-07 21:21:50 +10:00
4b8a9825c0
Merge pull request 'feat: haproxy updates' ( #95 ) from neoloc/haproxy_backend_httpchk into develop
...
Reviewed-on: https://git.query.consul/unkinben/puppet-prod/pulls/95
2024-07-07 16:56:25 +10:00
991c8a3029
feat: haproxy updates
...
- add acls for all backends
- harden security of backends
- update http-check for all backends
2024-07-07 16:51:36 +10:00
152ffaa1d3
Merge pull request 'feat: stop installing systemd exported by default' ( #94 ) from neoloc/systemd_exporter_removal into develop
...
Reviewed-on: https://git.query.consul/unkinben/puppet-prod/pulls/94
2024-07-07 15:02:48 +10:00
65046329f4
feat: stop installing systemd exported by default
2024-07-07 15:01:49 +10:00
d05cf628a8
Merge pull request 'fix: change service to socket' ( #93 ) from neoloc/cobbler_socket into develop
...
Reviewed-on: https://git.query.consul/unkinben/puppet-prod/pulls/93
2024-07-06 23:40:20 +10:00
da1402691c
fix: change service to socket
...
- ensure the tftpd.socket is running, which starts the service
2024-07-06 23:37:55 +10:00
b5c7b310ee
Merge pull request 'neoloc/mediaproxy' ( #92 ) from neoloc/mediaproxy into develop
...
Reviewed-on: https://git.query.consul/unkinben/puppet-prod/pulls/92
2024-07-06 23:24:49 +10:00
2ab2cd1399
feat: deploy ldap-auth to all *arrs
...
- refactor sonarr locations to generalised locations
- set locations to be deep merged
- updated hiera_include statements for media and media subroles
- added eyaml entries for all ldap credentials
2024-07-06 22:50:10 +10:00
8b01ddba9c
fix: cleanup simpleproxy
...
- remove commented sections
- remove $server from locations
2024-07-06 22:09:16 +10:00
d1dd12a091
feat: add cache to simpleproxy
2024-07-06 22:05:55 +10:00
354e561380
feat: add ldapauth for nginx
...
- add service, defaults and script
2024-07-06 22:02:00 +10:00
cbded220bb
feat: add sonarr locations
...
- add authproxy
- add api and web
- add /consul/health for unauth access from consul
- update sonarr/consul check to use /consul/health
- change client body side to 20mb
2024-07-06 22:01:47 +10:00
89697e85aa
Merge pull request 'chore: update svc_sonarr credential' ( #91 ) from neoloc/sonarr_auth into develop
...
Reviewed-on: https://git.query.consul/unkinben/puppet-prod/pulls/91
2024-07-06 18:32:43 +10:00
158ebaf7a0
chore: update svc_sonarr credential
2024-07-06 18:32:25 +10:00
02a2097955
feat: paramatise use_default_location
...
- allow the use of location blocks for simpleproxy
- add way to add locations in simpleproxy
2024-07-05 23:10:58 +10:00
658af2b6b6
Merge pull request 'feat: manage jellyfin data migration_flag' ( #90 ) from neoloc/jellyfin into develop
...
Reviewed-on: https://git.query.consul/unkinben/puppet-prod/pulls/90
2024-07-04 00:09:22 +10:00
f3046f8fbb
feat: manage jellyfin data migration_flag
2024-07-03 22:49:54 +10:00
f9ff44afec
Merge pull request 'feat: add rpmfusion to jellyfin hosts' ( #89 ) from neoloc/rpmfusion into develop
...
Reviewed-on: https://git.query.consul/unkinben/puppet-prod/pulls/89
2024-07-03 21:28:11 +10:00
21a45c1b03
feat: add rpmfusion to jellyfin hosts
...
- required for jellyfin packages
- additional dependencies also from rpmfusion
2024-07-03 21:27:05 +10:00
33f66c8dbc
Merge pull request 'feat: restart networking on network changes' ( #88 ) from neoloc/network_restart into develop
...
Reviewed-on: https://git.query.consul/unkinben/puppet-prod/pulls/88
2024-07-03 20:37:05 +10:00
b0934caf23
feat: restart networking on network changes
...
- restart network on RedHat
- restart networking on debian
2024-07-03 20:35:58 +10:00
8e1622a158
Merge pull request 'neoloc/glauth' ( #87 ) from neoloc/glauth into develop
...
Reviewed-on: https://git.query.consul/unkinben/puppet-prod/pulls/87
2024-07-02 18:12:54 +10:00
fe35baacfd
chore: cleanup glauth
...
- remove datavol, not required
- remove commented out systemd socket
2024-07-02 18:12:08 +10:00
6e3802ad57
feat: add users/services/groups
2024-07-01 22:54:22 +10:00
c8604baa4e
feat: add glauth role/profile classes
...
- role added to cobbler
- add role specific hieradata
2024-07-01 22:42:29 +10:00
c69e8c487e
feat: create glauth module
...
- manage config directories, config file
- manage systemd service and socket
- manage users, service accounts and groups
- manage defaults for users, services and groups
- manage packages for role
2024-07-01 22:42:12 +10:00
0a86986edf
Merge pull request 'neoloc/jellyfin' ( #86 ) from neoloc/jellyfin into develop
...
Reviewed-on: https://git.query.consul/unkinben/puppet-prod/pulls/86
2024-06-30 21:24:49 +10:00
2199e4e3c0
feat: add jellyfin to haproxy
2024-06-30 00:02:44 +10:00
f81b5753ff
feat: add jellyfin role/profile classes
2024-06-30 00:02:16 +10:00
e437629e12
feat: add jellyfin module
2024-06-30 00:01:38 +10:00
bc35270731
Merge pull request 'Adding hieradata/node/ausyd1nxvm1047.main.unkin.net.yaml' ( #85 ) from autonode/ausyd1nxvm1047.main.unkin.net into develop
...
Reviewed-on: https://git.query.consul/unkinben/puppet-prod/pulls/85
2024-06-29 16:30:17 +10:00
c1a6191cab
Adding hieradata/node/ausyd1nxvm1047.main.unkin.net.yaml
2024-06-29 14:41:25 +10:00
