|
|
93cd02deec
|
chore: update media roles for incus (#294)
- prevent incus roles from exporting haproxy endpoints (for now)
- incus doesnt need to mount cephfs
Reviewed-on: https://git.query.consul/unkinben/puppet-prod/pulls/294
|
2025-05-24 18:59:46 +10:00 |
|
|
|
9359b8902e
|
feat: vault mlock (#266)
- enable mlock by default
- disable mlock on lxd/incus nodes (lxc doesnt support it)
Reviewed-on: https://git.query.consul/unkinben/puppet-prod/pulls/266
|
2025-04-26 22:43:20 +10:00 |
|
|
|
ecce93bedb
|
feat: lxc cannot use chronyd (#259)
- ensure lxc nodes do not attempt to install chronyd
- ensure chrony is removed
Reviewed-on: https://git.query.consul/unkinben/puppet-prod/pulls/259
|
2025-04-24 23:18:45 +10:00 |
|
|
|
9dcaafb8ba
|
feat: lxc updates (#258)
- add virtual/lxc.yaml
- add crypto crypto-policies-scripts
- ensure ssh::server is managed
Reviewed-on: https://git.query.consul/unkinben/puppet-prod/pulls/258
|
2025-04-24 23:03:01 +10:00 |
|
