unkin-agent 343d645d24 Adapt base classes for the mail edge gateway (#555) ...

The edge gateways sit in BinaryLane VPCs with no consul datacentre and a public interface, so the consul agent cannot join and sshd must not serve the internet.

- add an enable toggle to profiles::consul::client, off for the gateway role
- disable node_exporter on the gateway role, as it registers via consul
- restrict sshd AllowUsers to the edge VPCs (198.18.30.0/24, 198.18.31.0/24) and the lab (198.18.0.0/16, 10.10.12.200/32)

Stacked on #554.

Reviewed-on: #555
Co-authored-by: unkin-agent <unkin-agent@unkin.net>
Co-committed-by: unkin-agent <unkin-agent@unkin.net>

2026-10-13 21:48:03 +11:00

..

auth

feat: add ldap groups for kubernetes/vault (#449)

2026-02-14 19:22:26 +11:00

automation

feat: update vault url (#291)

2025-05-21 19:58:12 +10:00

ceph

ceph/rgw: add s3.ceph.unkin.net to radosgw cert SAN + nginx aliases (#487)

2026-07-18 17:01:41 +10:00

cobbler

chore: centralise all yum repo configuration (#436)

2026-01-15 21:35:13 +11:00

db

feat: deploy redis for git (#336)

2025-07-05 15:51:28 +10:00

dhcp

chore: centralise all yum repo configuration (#436)

2026-01-15 21:35:13 +11:00

dns

chore: enable access to dns (#460)

2026-04-06 22:46:40 +10:00

droneci

fix: updated client secret

2024-08-31 23:00:58 +10:00

etcd

feat: update consul etcd check (#216)

2025-01-26 20:05:18 +11:00

git

feat: upgrade gitea from 1.22.0 to 1.26.2 (#469)

2026-06-06 20:23:25 +10:00

halb

chore: centralise all yum repo configuration (#436)

2026-01-15 21:35:13 +11:00

incus

Migrate incus nodes to puppet-on-k8s (#546)

2026-10-05 22:03:30 +11:00

k8s

ceph: manage /etc/ceph/ceph.conf on osd and mon/mgr/mds hosts (#515)

2026-08-09 00:00:20 +10:00

logs

feat: add syslog listener for vlinsert (#427)

2025-11-20 23:47:10 +11:00

mail

Adapt base classes for the mail edge gateway (#555)

2026-10-13 21:48:03 +11:00

metrics

feat: upgrade grafana from default to 13.0.2 (#470)

2026-06-06 23:46:16 +10:00

network

Persist rp_filter=0 on every router interface (#539)

2026-10-04 16:02:00 +11:00

nomad

chore: centralise all yum repo configuration (#436)

2026-01-15 21:35:13 +11:00

ntp

feat: create ntp consul service

2024-06-02 19:23:39 +10:00

ovirt

chore: centralise all yum repo configuration (#436)

2026-01-15 21:35:13 +11:00

pki

feat: add auth.unkin.net proxying to Kubernetes Traefik ingress (#467)

2026-06-02 22:50:10 +10:00

proxy

feat: add service data

2024-10-27 13:26:07 +11:00

puppet

Install certmanager and sshsignhost from RPM (#524)

2026-10-04 15:07:54 +11:00

puppetboard

chore: set secretid for puppetboard (#232)

2025-03-30 01:53:25 +11:00

puppetdb

chore: centralise all yum repo configuration (#436)

2026-01-15 21:35:13 +11:00

reposync

chore: reduce synced repos (#441)

2026-01-17 17:12:44 +11:00

sql

chore: centralise all yum repo configuration (#436)

2026-01-15 21:35:13 +11:00

storage

Add consul server federation SANs to consul server certs (#547)

2026-10-09 21:51:43 +11:00

dns.yaml

feat: setup metrics agents

2023-11-17 23:12:37 +11:00

droneci.eyaml

feat: add droneci runner

2024-08-25 02:14:35 +10:00

k8s.eyaml

feat: moderate the k8s install (#403)

2025-10-12 17:50:24 +11:00

k8s.yaml

Migrate k8s roles to puppet-on-k8s (#545)

2026-10-05 22:10:50 +11:00

proxmox.yaml

fix: ceph consul check script

2024-06-19 22:36:04 +10:00

puppet.yaml

feat: migrate puppetserver -> openvox-server (#412)

2025-10-18 23:49:51 +11:00