Commit Graph

314 Commits

Author SHA1 Message Date
sparrowhawk 2ce8223fa7
[matrix-synapse] Fix typo in `$os` matches. 2021-07-06 14:59:30 +02:00
fnux 5102fe466e
__matrix_synapse: use matrix.org APT repository for Debian 2021-06-23 13:19:58 +02:00
sparrowhawk af66c7e753 Merge branch 'newtype/wireguard' into 'master'
Add types to create wireguard VPN.

See merge request ungleich-public/cdist-contrib!14
2021-06-09 16:37:06 +02:00
sparrowhawk 87c43b042d newtype: __wireguard. 2021-06-09 16:37:05 +02:00
sparrowhawk 2f4c92803b
[__bird_core]: make configuration file depend on bird being installed.
This is required for correct file ownership upon a clean installation.
2021-06-08 18:52:03 +02:00
sparrowhawk c6474593df Merge branch 'newtype/opendkim' into 'master'
New type: __opendkim
New type: __opendkim_genkey

See merge request ungleich-public/cdist-contrib!37
2021-05-31 11:25:31 +02:00
sparrowhawk bcf88606ea Implement __opendkim and __opendkim_genkey type. 2021-05-31 11:25:29 +02:00
evilham 05f2bd394c Merge branch 'fix_jitsi_user_manifest' into 'master'
[__jitsi_meet_user] adds user validation and directory creation

Closes #7

See merge request ungleich-public/cdist-contrib!35
2021-05-23 19:15:14 +02:00
pedro b07ac7a732 [__jitsi_meet_user] refactor user validation
improve user validation and the corresponding docs

coauthored with evilham :D
2021-05-23 19:15:14 +02:00
evilham 8245f8f0c7 Merge branch '9_fix_multidomain' into 'master'
[__jitsi_meet_domain] fixes #9 multidomain error

Closes #9

See merge request ungleich-public/cdist-contrib!38
2021-05-23 18:33:55 +02:00
evilham 725c272e81 Merge branch '8-jitsi-meet-nginx-hash-bucket' into 'master'
[__jitsi_meet*] Relocate hash_bucket_size nginx directive

Closes #8

See merge request ungleich-public/cdist-contrib!39
2021-05-23 18:33:06 +02:00
evilham b26657426d Merge branch '6_jitsi_welcome_logo' into 'master'
[__jitsi_meet_domain] fixes #6 welcome logo

Closes #6

See merge request ungleich-public/cdist-contrib!31
2021-05-23 18:31:08 +02:00
pedro e4396500a7 [__jitsi_meet_domain] fixes #6 welcome logo
the approach is to include a new template for the interface_config.js which
will allow to add other customizations to come
2021-05-23 18:31:08 +02:00
evilham d4f303c64b [__jitsi_meet*] Relocate hash_bucket_size nginx directive
This was causing issues in multi-domain scenarios where it'd get duplicated.

Fixes #8
2021-05-23 11:45:54 +02:00
pedro 0612483115 [__jitsi_meet_domain] fixes #9 multidomain error 2021-05-21 03:26:50 +02:00
fnux 916862f7ab Merge branch 'unbound-ng' into 'master'
__unbound: create more generalized type.

See merge request ungleich-public/cdist-contrib!36
2021-05-14 08:32:26 +02:00
sparrowhawk 6eab68f081
__unbound: add missing functionality. 2021-05-12 14:48:57 +02:00
sparrowhawk a7d51bee35
__unbound: update examples. 2021-05-12 14:21:03 +02:00
sparrowhawk a3e59377df
__unbound: create more generalized type. 2021-05-12 12:33:21 +02:00
sparrowhawk 5d1c9ff1d8
Fix indentation in __bird_static. 2021-05-12 12:32:39 +02:00
sparrowhawk c4a881140c Merge branch 'newtype/bird-radv' into 'master'
Add __bird_radv type.

See merge request ungleich-public/cdist-contrib!33
2021-05-11 15:03:01 +02:00
sparrowhawk f16e452881
Add __bird_radv type. 2021-05-11 14:49:15 +02:00
evilham fbdcd8d6fc [__jitsi_meet*] Improve documentation
Also improve __jitsi_meet_user's support for removing users in that a password
is not required to remove them.
2021-05-10 17:04:44 +02:00
evilham a90c8b18e5 Merge branch 'jitsi_secured_domains' into 'master'
See merge request ungleich-public/cdist-contrib!34
2021-05-10 16:40:47 +02:00
pedro 87bc766115 [__jitsi_meet*] Add parameters for secure domains
This is done with slight adaptations from the official guide at
https://jitsi.github.io/handbook/docs/devops-guide/secure-domain

Amongst other changes, we rely on Prosody's configuration parser only overwriting the parts of a VirtualHost that are explicitly specified in "later appearing" (lexicographically speaking) files.
This allows us to let Jitsi manage the main config file and adding the few customisations on top of it.
We also use the Plaintext authenticator as this is enough atm and is the easiest to manage in an idempotent fashion; support for other authentication mechanisms is possible, see Prosody's documentation for that.
2021-05-10 16:40:46 +02:00
evilham ccd3f364e4 [__jitsi_meet_domain] Support passing the branded index in stdin 2021-05-10 12:55:12 +02:00
evilham 9de330a945 Merge branch 'jitsi-fix-versioning' into 'master'
[__jitsi_meet] Update to 2.0.5765, add versioning parameter.

See merge request ungleich-public/cdist-contrib!32
2021-05-10 12:21:58 +02:00
evilham 2a97346979 [__jitsi_meet] Update to 2.3, add versioning parameter.
Jitsi's repositories have rotated keys, this removes the previous key if
necessary and ensures the new key is present.

Can't be merged until following lands:
  https://code.ungleich.ch/ungleich-public/cdist/-/merge_requests/994
since we rely on `--use-deprecated-apt-key` and the improvements in the type to
modify the keyring in a reliable fashion.

This also updates the exporter to version 1.1.5 released on April 25th 2021.
2021-05-10 12:21:57 +02:00
sparrowhawk 92d5753414
__jool: make __start_on_boot depend on package. 2021-05-07 17:54:31 +02:00
sparrowhawk cbc91a500f
__bird_static: update to use `channel` param instead of `ipv4` switch. 2021-05-07 17:54:10 +02:00
evilham 42a44ffed6 [__jitsi_meet_domain] Stop using deprecated flags 2021-05-07 14:27:52 +02:00
evilham c3dbbc9d0d [__jitsi_meet_domain] Updated version and fixed branding issues
commit 80599bb91a63cef61c00900c97ea89d7ab8cb799
Author: Evilham <cvs@evilham.com>
Date:   Thu Apr 29 20:36:11 2021 +0200

    [__jitsi_meet_video] Fix shellcheck

commit 6d25c36c01ba76a0465f2cc676b8205f09bf1160
Author: pedrolab <531310-pedrolab@users.noreply.gitlab.com>
Date:   Wed Apr 28 22:02:31 2021 +0200

    [__jitsi_meet_domain] config.js to 2.0.5765-1

    thanks @evilham

commit e60a46f8d2124859ce2ea4a6fbe8e7d37deef3d6
Author: pedrolab <531310-pedrolab@users.noreply.gitlab.com>
Date:   Wed Apr 28 22:00:13 2021 +0200

    [__jitsi_meet_domain] fixes #4 branding
2021-04-29 20:43:22 +02:00
fnux 5581cbabf9 Merge branch 'jool' into 'master'
Implement __jool type.

See merge request ungleich-public/cdist-contrib!28
2021-04-21 16:03:43 +02:00
sparrowhawk 6a0647cd90
[__jool]: fail on unkown alpine kernel. 2021-04-21 16:01:24 +02:00
sparrowhawk 40d19f0ad6
[__jool] Use explorer to determine alpine kernel version. 2021-04-21 15:35:36 +02:00
sparrowhawk 272e4669fe
Implement __jool type. 2021-04-21 15:35:36 +02:00
sparrowhawk f181b5ddb4
Pull updates to __borg_repo from recycled.cloud types. 2021-04-21 15:27:52 +02:00
fnux ed2f891200 Merge branch 'newtype/pass' into 'master'
Initial implementation of the __pass type.

See merge request ungleich-public/cdist-contrib!19
2021-04-21 08:50:18 +02:00
fnux af9f718a19 Merge branch 'newtype/bird-xxx' into 'master'
Add bird_xxx types.

See merge request ungleich-public/cdist-contrib!27
2021-04-19 14:06:48 +02:00
sparrowhawk 3f0798d645 Add bird_xxx types. 2021-04-19 14:06:47 +02:00
fnux 2d0491dafd
[__unbound_exporter] fix chicken-egg problem for service start 2021-04-08 17:31:57 +02:00
fnux 16b5158ef5 Merge branch 'uacme' into 'master'
TLS certificates with uacme

See merge request ungleich-public/cdist-contrib!25
2021-03-27 18:18:04 +01:00
sparrowhawk 73c14825bc
Fix remarks on __uacme_obtain. 2021-03-16 13:04:26 +01:00
sparrowhawk f4caa52750
Cleanup renew.sh.sh so the output is more elegant. 2021-03-16 13:03:25 +01:00
sparrowhawk 5d9bebbdb5
Fix remarks on __uacme_account. 2021-03-16 13:02:51 +01:00
sparrowhawk 5e2a28d929
Remove -x from renew.sh script to avoid empty cron messages. 2021-03-16 11:04:26 +01:00
fnux c80d041e1c Merge branch 'wikijs-user' into 'master'
[__wikijs] run under own user

See merge request ungleich-public/cdist-contrib!26
2021-03-08 09:44:42 +01:00
fnux 859a156cef
[__wikijs] run under own user 2021-03-01 07:23:47 +01:00
fnux 71c28b9d1f Merge branch '__matrix_synapse' into 'master'
__matrix_synapse types

See merge request ungleich-public/cdist-contrib!9
2021-02-26 08:34:54 +01:00
fnux 3263c5dddd
[__matrix_synapse] add outbound-federation-worker parameter 2021-02-24 19:31:48 +01:00