946922fdb9
feat: add vrrp to halb
...
- update keepalived module to 5.1.0
- add keepalived::vrrp::* to be deep merged in hiera
- add vrrp dns configuration
- add vrrp instance/script to halb in syd1
2024-07-13 20:15:13 +10:00
01fc6aacd7
Merge pull request 'fix: remove unkin.net from internal dns' ( #113 ) from neoloc/bind_static_dns into develop
...
Reviewed-on: https://git.query.consul/unkinben/puppet-prod/pulls/113
2024-07-11 22:31:29 +10:00
73c7dbd56c
fix: remove unkin.net from internal dns
...
- unkin.net is entirely hosted externally
2024-07-11 22:30:44 +10:00
3ed692cc77
Merge pull request 'feat: manage the nzbget service' ( #112 ) from neoloc/nzbget_group_media into develop
...
Reviewed-on: https://git.query.consul/unkinben/puppet-prod/pulls/112
2024-07-11 22:27:44 +10:00
ec92a6d3df
feat: manage the nzbget service
2024-07-11 21:39:34 +10:00
bbd6cdb228
Merge pull request 'feat: add rpmfusion to nzbget' ( #110 ) from neoloc/rpmfusion_nzbget into develop
...
Reviewed-on: https://git.query.consul/unkinben/puppet-prod/pulls/110
2024-07-11 21:28:56 +10:00
2cbba808c3
feat: add rpmfusion to nzbget
2024-07-11 21:24:35 +10:00
df9f31e0f7
Merge pull request 'feat: add othergroups support for services' ( #109 ) from neoloc/nzbget_client into develop
...
Reviewed-on: https://git.query.consul/unkinben/puppet-prod/pulls/109
2024-07-11 20:00:10 +10:00
95a0b543fd
feat: add othergroups support for services
...
- extend glauth::obj::service to allow othergroups
2024-07-11 19:59:26 +10:00
90d123f4d0
Merge pull request 'chore: add service account to submit nzbs' ( #108 ) from neoloc/nzbget_client into develop
...
Reviewed-on: https://git.query.consul/unkinben/puppet-prod/pulls/108
2024-07-11 19:56:51 +10:00
3dc8fb03fa
chore: add service account to submit nzbs
2024-07-11 19:56:17 +10:00
c7e5356444
Merge pull request 'feat: rewrite for nzbget' ( #107 ) from neoloc/nzbget_rewrite into develop
...
Reviewed-on: https://git.query.consul/unkinben/puppet-prod/pulls/107
2024-07-10 21:29:44 +10:00
93ab2bebc3
feat: rewrite for nzbget
...
- required for consul health check to work
2024-07-10 21:26:53 +10:00
348f2dfca3
Merge pull request 'fix: update ldap filter' ( #106 ) from neoloc/ldap_filters into develop
...
Reviewed-on: https://git.query.consul/unkinben/puppet-prod/pulls/106
2024-07-10 20:54:38 +10:00
5221c15a66
fix: update ldap filter
...
- update ldap filter for *arr's to match on user and group
2024-07-10 20:43:50 +10:00
1d49480010
Merge pull request 'fix: create nginx cache dirs before nginx class' ( #105 ) from neoloc/nzbget into develop
...
Reviewed-on: https://git.query.consul/unkinben/puppet-prod/pulls/105
2024-07-09 23:30:33 +10:00
f63cf2f654
fix: create nginx cache dirs before nginx class
2024-07-09 23:29:56 +10:00
3d425bfcbd
Merge pull request 'fix: simpleproxy create cachedirs' ( #104 ) from neoloc/nzbget into develop
...
Reviewed-on: https://git.query.consul/unkinben/puppet-prod/pulls/104
2024-07-09 23:28:38 +10:00
e8c8f5c1d6
fix: simpleproxy create cachedirs
...
- ensure the '/var/cache/nginx' directory exists
2024-07-09 23:27:51 +10:00
ae85541f6b
Merge pull request 'fix: change nzbget::manage_group to boolean' ( #103 ) from neoloc/nzbget into develop
...
Reviewed-on: https://git.query.consul/unkinben/puppet-prod/pulls/103
2024-07-09 23:23:33 +10:00
0c1fd63b7d
fix: change nzbget::manage_group to boolean
2024-07-09 23:22:49 +10:00
797670b55d
Merge pull request 'feat: actually add nzbget profile' ( #102 ) from neoloc/nzbget into develop
...
Reviewed-on: https://git.query.consul/unkinben/puppet-prod/pulls/102
2024-07-09 23:20:58 +10:00
1204ee3314
feat: actually add nzbget profile
2024-07-09 23:20:12 +10:00
75ddacb6b1
Merge pull request 'neoloc/nzbget' ( #101 ) from neoloc/nzbget into develop
...
Reviewed-on: https://git.query.consul/unkinben/puppet-prod/pulls/101
2024-07-09 22:34:37 +10:00
1532641640
feat: add nzbget to media platform
...
- add haproxy rules
- generate/distribute letsencrypt certificates
- manage access to cephfs
2024-07-09 22:32:54 +10:00
abb4a47703
chore: add ens19 to nzbget host
...
- required to access cephfs
2024-07-09 22:26:46 +10:00
857d51a934
chore: add matsol to nzbget
2024-07-09 22:26:03 +10:00
fd5163d6e6
Merge branch 'develop' into neoloc/nzbget
2024-07-09 22:25:28 +10:00
d67eba5860
feat: add nzbget module/role
...
- add nzbget module
- add nzbget ldap user/group
2024-07-09 22:23:58 +10:00
dacd2c6994
Merge pull request 'chore: disable gpgcheck for unkin repo' ( #100 ) from neoloc/gpgcheck_unkin_repo into develop
...
Reviewed-on: https://git.query.consul/unkinben/puppet-prod/pulls/100
2024-07-09 22:01:01 +10:00
930341c05c
Merge pull request 'Adding hieradata/node/ausyd1nxvm1048.main.unkin.net.yaml' ( #99 ) from autonode/ausyd1nxvm1048.main.unkin.net into develop
...
Reviewed-on: https://git.query.consul/unkinben/puppet-prod/pulls/99
2024-07-09 22:00:47 +10:00
47333237ee
chore: disable gpgcheck for unkin repo
2024-07-09 21:18:02 +10:00
924631d705
Adding hieradata/node/ausyd1nxvm1048.main.unkin.net.yaml
2024-07-09 20:54:51 +10:00
384e301fd3
Merge pull request 'feat: add new users' ( #98 ) from neoloc/moreusers into develop
...
Reviewed-on: https://git.query.consul/unkinben/puppet-prod/pulls/98
2024-07-09 19:22:26 +10:00
d52949fc4f
feat: add new users
...
- matsol
2024-07-09 19:21:59 +10:00
fe20590ac6
Merge pull request 'neoloc/retrieve_certbot_certs' ( #97 ) from neoloc/retrieve_certbot_certs into develop
...
Reviewed-on: https://git.query.consul/unkinben/puppet-prod/pulls/97
2024-07-08 23:27:21 +10:00
d9a2966ffd
fix: certbot selinux and rsync
...
- fix rsync to use 755 permissions
- add rsync selinux booleans
2024-07-08 23:17:38 +10:00
899e2cbf49
feat: haproxy updates
...
- use letsencrypt certificates
- add fafflix and jellyfin backends
2024-07-08 22:56:24 +10:00
bd5164fed3
feat: certbot reorg
...
- moved certbot into its own module
- added fact to list available certificates
- created systemd timer to rsync data to $data_dir/pub
- ensure the $data_dir/pub exists
- manage selinux for nginx
2024-07-08 22:33:11 +10:00
30ec8c1bb1
feat: enable retrieval of certbot certs
...
- refactor certbot
- add nginx to certbot hosts
2024-07-07 22:30:40 +10:00
c419620838
Merge pull request 'feat: manage certbot' ( #96 ) from neoloc/certbot into develop
...
Reviewed-on: https://git.query.consul/unkinben/puppet-prod/pulls/96
2024-07-07 21:45:18 +10:00
9db714d02f
feat: manage certbot
...
- add haproxy backend for be_letsencrypt
- manage the certbot role/profile
- create define to export certificate requests
2024-07-07 21:21:50 +10:00
4b8a9825c0
Merge pull request 'feat: haproxy updates' ( #95 ) from neoloc/haproxy_backend_httpchk into develop
...
Reviewed-on: https://git.query.consul/unkinben/puppet-prod/pulls/95
2024-07-07 16:56:25 +10:00
991c8a3029
feat: haproxy updates
...
- add acls for all backends
- harden security of backends
- update http-check for all backends
2024-07-07 16:51:36 +10:00
152ffaa1d3
Merge pull request 'feat: stop installing systemd exported by default' ( #94 ) from neoloc/systemd_exporter_removal into develop
...
Reviewed-on: https://git.query.consul/unkinben/puppet-prod/pulls/94
2024-07-07 15:02:48 +10:00
65046329f4
feat: stop installing systemd exported by default
2024-07-07 15:01:49 +10:00
d05cf628a8
Merge pull request 'fix: change service to socket' ( #93 ) from neoloc/cobbler_socket into develop
...
Reviewed-on: https://git.query.consul/unkinben/puppet-prod/pulls/93
2024-07-06 23:40:20 +10:00
da1402691c
fix: change service to socket
...
- ensure the tftpd.socket is running, which starts the service
2024-07-06 23:37:55 +10:00
b5c7b310ee
Merge pull request 'neoloc/mediaproxy' ( #92 ) from neoloc/mediaproxy into develop
...
Reviewed-on: https://git.query.consul/unkinben/puppet-prod/pulls/92
2024-07-06 23:24:49 +10:00
2ab2cd1399
feat: deploy ldap-auth to all *arrs
...
- refactor sonarr locations to generalised locations
- set locations to be deep merged
- updated hiera_include statements for media and media subroles
- added eyaml entries for all ldap credentials
2024-07-06 22:50:10 +10:00
