Commit graph

305 commits

Author SHA1 Message Date
87bc766115 [__jitsi_meet*] Add parameters for secure domains
This is done with slight adaptations from the official guide at
https://jitsi.github.io/handbook/docs/devops-guide/secure-domain

Amongst other changes, we rely on Prosody's configuration parser only overwriting the parts of a VirtualHost that are explicitly specified in "later appearing" (lexicographically speaking) files.
This allows us to let Jitsi manage the main config file and adding the few customisations on top of it.
We also use the Plaintext authenticator as this is enough atm and is the easiest to manage in an idempotent fashion; support for other authentication mechanisms is possible, see Prosody's documentation for that.
2021-05-10 16:40:46 +02:00
ccd3f364e4 [__jitsi_meet_domain] Support passing the branded index in stdin 2021-05-10 12:55:12 +02:00
9de330a945 Merge branch 'jitsi-fix-versioning' into 'master'
[__jitsi_meet] Update to 2.0.5765, add versioning parameter.

See merge request ungleich-public/cdist-contrib!32
2021-05-10 12:21:58 +02:00
2a97346979 [__jitsi_meet] Update to 2.3, add versioning parameter.
Jitsi's repositories have rotated keys, this removes the previous key if
necessary and ensures the new key is present.

Can't be merged until following lands:
  https://code.ungleich.ch/ungleich-public/cdist/-/merge_requests/994
since we rely on `--use-deprecated-apt-key` and the improvements in the type to
modify the keyring in a reliable fashion.

This also updates the exporter to version 1.1.5 released on April 25th 2021.
2021-05-10 12:21:57 +02:00
92d5753414
__jool: make __start_on_boot depend on package. 2021-05-07 17:54:31 +02:00
cbc91a500f
__bird_static: update to use channel param instead of ipv4 switch. 2021-05-07 17:54:10 +02:00
42a44ffed6 [__jitsi_meet_domain] Stop using deprecated flags 2021-05-07 14:27:52 +02:00
c3dbbc9d0d [__jitsi_meet_domain] Updated version and fixed branding issues
commit 80599bb91a63cef61c00900c97ea89d7ab8cb799
Author: Evilham <cvs@evilham.com>
Date:   Thu Apr 29 20:36:11 2021 +0200

    [__jitsi_meet_video] Fix shellcheck

commit 6d25c36c01ba76a0465f2cc676b8205f09bf1160
Author: pedrolab <531310-pedrolab@users.noreply.gitlab.com>
Date:   Wed Apr 28 22:02:31 2021 +0200

    [__jitsi_meet_domain] config.js to 2.0.5765-1

    thanks @evilham

commit e60a46f8d2124859ce2ea4a6fbe8e7d37deef3d6
Author: pedrolab <531310-pedrolab@users.noreply.gitlab.com>
Date:   Wed Apr 28 22:00:13 2021 +0200

    [__jitsi_meet_domain] fixes #4 branding
2021-04-29 20:43:22 +02:00
6a0647cd90
[__jool]: fail on unkown alpine kernel. 2021-04-21 16:01:24 +02:00
40d19f0ad6
[__jool] Use explorer to determine alpine kernel version. 2021-04-21 15:35:36 +02:00
272e4669fe
Implement __jool type. 2021-04-21 15:35:36 +02:00
f181b5ddb4
Pull updates to __borg_repo from recycled.cloud types. 2021-04-21 15:27:52 +02:00
fnux
ed2f891200 Merge branch 'newtype/pass' into 'master'
Initial implementation of the __pass type.

See merge request ungleich-public/cdist-contrib!19
2021-04-21 08:50:18 +02:00
fnux
af9f718a19 Merge branch 'newtype/bird-xxx' into 'master'
Add bird_xxx types.

See merge request ungleich-public/cdist-contrib!27
2021-04-19 14:06:48 +02:00
3f0798d645 Add bird_xxx types. 2021-04-19 14:06:47 +02:00
2d0491dafd
[__unbound_exporter] fix chicken-egg problem for service start 2021-04-08 17:31:57 +02:00
fnux
16b5158ef5 Merge branch 'uacme' into 'master'
TLS certificates with uacme

See merge request ungleich-public/cdist-contrib!25
2021-03-27 18:18:04 +01:00
73c14825bc
Fix remarks on __uacme_obtain. 2021-03-16 13:04:26 +01:00
f4caa52750
Cleanup renew.sh.sh so the output is more elegant. 2021-03-16 13:03:25 +01:00
5d9bebbdb5
Fix remarks on __uacme_account. 2021-03-16 13:02:51 +01:00
5e2a28d929
Remove -x from renew.sh script to avoid empty cron messages. 2021-03-16 11:04:26 +01:00
fnux
c80d041e1c Merge branch 'wikijs-user' into 'master'
[__wikijs] run under own user

See merge request ungleich-public/cdist-contrib!26
2021-03-08 09:44:42 +01:00
859a156cef
[__wikijs] run under own user 2021-03-01 07:23:47 +01:00
fnux
71c28b9d1f Merge branch '__matrix_synapse' into 'master'
__matrix_synapse types

See merge request ungleich-public/cdist-contrib!9
2021-02-26 08:34:54 +01:00
3263c5dddd
[__matrix_synapse] add outbound-federation-worker parameter 2021-02-24 19:31:48 +01:00
e10ae4d0a7
[__matrix_synapse] Wire parameters for PGSQL pool size 2021-02-24 18:50:01 +01:00
7983e341e5
[__matrix_synapse] fix yet more typos in parameter handling 2021-02-24 17:58:42 +01:00
4e37bc2245
[__matrix_synapse] fix typo in complexity threshold handling 2021-02-24 14:36:00 +01:00
b3f5244cd6
__matrix_synapse: fix SMTP password handling 2021-02-22 13:59:53 +01:00
d589993c6d
[__matrix_synapse] fix typo/error in LDAP configuration handling 2021-02-22 13:12:47 +01:00
f27e65f8e0
[__matrix_synapse*] add --bind-address flag 2021-02-19 11:25:16 +01:00
1370abb991
[__uacme_*] Import from cdist-recycledcloud 2021-02-19 10:44:58 +01:00
f1bab1e23b
[__wikijs] add missing executable bit to initd service 2021-02-19 09:19:24 +01:00
028583f096
[__matrix_synapse_worker] fix config-path parameter in systemd unit 2021-02-18 16:10:04 +01:00
467a1350bf
[__matrix_synapse_worker] bind both v6 and v4, set x_forwarded 2021-02-18 16:03:59 +01:00
f3d8717e69
[__matrix_synapse] fix typo in __apt_backports call 2021-02-18 14:32:41 +01:00
6487839cf5
[__matrix_synapse_worker] various tweaks and fixes following testing 2021-02-18 14:10:19 +01:00
adc335669d
[__matrix_synapse] use __apt_backport instead of __apt_source 2021-02-18 14:09:44 +01:00
12575d661b
[__matrix_synapse] add documentation for --registration-shared-secret 2021-02-18 14:09:33 +01:00
e8b0ced1b1
[__matrix_synapse] various configuration fixes 2021-02-18 11:27:34 +01:00
c84831331e
[__matrix_synapse_worker] add forgotten variable export 2021-02-17 14:02:02 +01:00
33bf0fd416
[__matrix_synapse] wire TLS certs, fix some templating errors 2021-02-17 14:01:06 +01:00
37762dd1ca
[__matrix_synapse_worker] initial implementation 2021-02-17 10:52:29 +01:00
2bcc815555
[__matrix_synapse] wire up worker mode 2021-02-17 10:15:01 +01:00
a1ad30f0c5
[__matrix_synapse] refresh manpage, fix various parameter handling issues 2021-02-17 09:44:50 +01:00
5b70dbd3e9
__matrix_synapse: refresh configuration template and type parameters 2021-02-15 18:50:12 +01:00
2d5b32db1c
Wrap gencode-local in a heredoc. 2021-02-13 15:45:26 +01:00
Nico Schottelius
f6d79e91ff [__unbound] Add missing dns64-prefix parameter 2021-02-12 14:09:31 +01:00
25849bbda1
__matrix_synapse: use dash instead of underscore in parameter names 2021-02-12 09:58:48 +01:00
ce09c402b1
__matrix_synapse: make shellcheck happy! 2021-02-11 16:17:09 +01:00
8a27e5ef22
Import __matrix_synapse type from ungleich's dot-cdist 2021-02-11 16:17:08 +01:00
fnux
0437d9b9dd Merge branch 'nextcloud' into 'master'
__nextcloud types

See merge request ungleich-public/cdist-contrib!18
2021-02-10 10:23:29 +01:00
7b892e1332 [__jitsi_meet] Upgrade prometheus jitsi exporter to 1.1.3
This also fixes a typo in the URL that resulted in the exporter not being
installed '-.-.
2021-02-06 20:36:57 +01:00
fnux
75d901c8e4 Merge branch 'jitsi' into 'master'
Jitsi Meet (and runit) types

See merge request ungleich-public/cdist-contrib!21
2021-01-27 21:04:42 +01:00
0d431d086c
Split initializing the password store from generating passwords. 2021-01-27 16:06:28 +01:00
fnux
1a4e95c821 Merge branch 'unbound-nodns64' into 'master'
Allow non-dns64 unbound setup, normalize unbound type parameters

See merge request ungleich-public/cdist-contrib!20
2021-01-25 07:36:58 +01:00
fnux
fd55a6e8dc Merge branch 'fix/__matrix_element/tarball' into 'master'
__matrix_element: fix download tarball name

See merge request ungleich-public/cdist-contrib!23
2021-01-25 07:24:53 +01:00
b2b2add4c6 __matrix_element: fix download tarball name
All releases after 1.7.14 have a diffrent tarball name than releases
before this. This finally takes over the new name.

The version comparement function was taken from __sensible_editor, to
provide backward compatibility to older versions (if someone needs it).

Maybe this logic can be removed in a while ..
2021-01-24 09:25:02 +01:00
87d4c33e26
Make shellcheck happy with the __jitsi_* types 2021-01-13 08:54:28 +01:00
a1620e8221
__jitsi_meet: remove forgotten/invalid requirement 2021-01-12 16:32:29 +01:00
8929c566fc
__wikijs: remove uneeded npm install call
See https://github.com/Requarks/wiki/issues/1325.
2021-01-12 08:37:20 +01:00
7122fe1bee
__wikijs: add version management and HTTP(S) port configuration 2021-01-12 07:58:42 +01:00
647833580d
Split out service management from the installation type. 2021-01-12 07:58:42 +01:00
ef748cf8e2
Fix typo and drop use of useless tempdir. 2021-01-12 07:58:42 +01:00
0e4bc443e2
Add a type for wikijs. 2021-01-12 07:58:42 +01:00
fnux
bf90e55137 Merge branch 'master' into 'dma-type'
# Conflicts:
#   scripts/run-shellcheck.sh
2021-01-12 07:10:10 +01:00
ac63762653
'unbrand' evilham's runit types 2021-01-11 14:18:41 +01:00
367cbde75b
Import evilham's runit types as it 2021-01-11 14:18:41 +01:00
d3bf8512ec
'unbrand' evilham's jitsi types 2021-01-11 14:18:41 +01:00
f055527735
Import evilham's jitsi types as-it 2021-01-11 14:18:41 +01:00
Dennis Camera
f9f5c578f7 [type/__dma*] Fix shellcheck errors 2021-01-11 12:16:09 +01:00
5a05b87beb
__unbound: normalize flag format 2021-01-04 11:45:04 +01:00
9f4a85901e
Import html/man doc generation logic from upstream cdist 2021-01-04 11:08:55 +01:00
006987307f
__unbound: make the --dns64-prefix flag optional 2021-01-04 09:43:37 +01:00
73e77f5b4d __nextcloud: add db:convert-filecache-bigint command
Looks like this command should be executed on upgrades, too.
2020-12-25 20:14:04 +01:00
1a233062a5 __nextcloud: harden here-doc for su call
Because the here-doc will be evaluated again by the shell, it will was
changed to avoid this. Because the script does not depend on such
function, it will be done in faviour of special characters.
2020-12-25 11:44:32 +01:00
b6db7b5ca8 __nextcloud: suppress global warnings from occ
As it's the default for __nextcloud_app and __nextcloud_user, it will
now suppress global warnings, too. This will be done because nobody
cares about then, only about the errors generated from the executed
command.
2020-12-21 19:04:53 +01:00
1b2d41a34a
Initial implementation of the __pass type. 2020-12-17 13:29:03 +01:00
c89bb59409 __nextcloud: add database maintainer command for upgrades
After my update to 20.0.2, Nextcloud complained about missing primary
key indexes. I don't know if it existed before that version, but
adding it to make life easier .. as no one will propably install an
older version than Nextcloud 20.0.2.
2020-11-20 19:23:40 +01:00
c0b3f79229 __nextcloud{,_user}: Updated manpages 2020-11-16 19:32:10 +01:00
Dennis Camera
487574c865 [type/__dma] Convert AWK to loop over same file twice 2020-11-16 14:15:52 +01:00
Dennis Camera
0932c9ccde [type/{__dma,__dma_auth,__mail_alias}] Quote things properly 2020-11-16 14:10:52 +01:00
Dennis Camera
7e20d13b9f [type/__mail_alias] Use explicit line variables in update_aliases.awk 2020-11-16 13:58:05 +01:00
Dennis Camera
04076a75eb [type/__mail_alias] man.rst: Make bugs a list 2020-11-16 13:57:34 +01:00
ee650d88ed __nextcloud_{app,user}: Updated man cause of __nextcloud changes
Also, the `gencode-remote` scripts where marked executeable.
2020-11-15 19:14:31 +01:00
3fda91ca2f __nextcloud: add comments about the maintenance mode
... because it not always work like you want it.
2020-11-15 17:40:02 +01:00
32417aba34 __nextcloud: aborts at installation with pgsql/mariadb
Accidentally, there was a check for a parameter that could not exist.
The block is now streamlined as other parameters got handled, too :-)
2020-11-15 16:34:26 +01:00
c24aedd4db __nextcloud: remove --webroot parameter
Because the detection of the webroot is not that good, it was removed.
Now, the object id contains the full path of the nextcloud installation.

This changes the installation process a bit, as it will download the
tarball to /tmp rather the webroot.

Also, this commit contains a bit overhaul work.
2020-11-15 16:21:56 +01:00
fnux
2e02c413b6 Merge branch 'netbox' into 'master'
__netbox type

See merge request ungleich-public/cdist-contrib!12
2020-11-04 09:24:18 +01:00
7490cef49e Initial __nextcloud_app type
Overall complete, more functionalitly is currently out of scope.
2020-10-31 16:50:06 +01:00
9ed1a9cbfd __nextcloud_user: fix misspelled quota parameter 2020-10-31 16:25:35 +01:00
d0f597b9e4 __nextcloud: added manpage notes
.. and some more.
2020-10-31 14:27:47 +01:00
a82a880858 __nextcloud_user: finished manpage 2020-10-31 12:26:36 +01:00
30205b38ae __nextcloud_user: add --quota paramter 2020-10-31 11:44:31 +01:00
82283d0b1c __nextcloud_user: new parameters to prevent changes to the user
This adds new parameters `--only-setup` and `--keep-*` to prevent
certain parameters to be changed in Nextcloud. This will not apply to
the setup.
2020-10-31 09:47:38 +01:00
635f03f527 __nextcloud_user: use occ group: commands
Instead of the self-tinkered php code, the correct occ command is used
now.
2020-10-30 20:08:32 +01:00
1e1df1016d __nextcloud_user: add manpage 2020-10-30 20:05:12 +01:00
b0ed6b2f18 Initial __nextcloud_user type
This type setup and updates a nextcloud user account. Currently not
finished yet, but should work in all cases.
2020-10-30 19:14:24 +01:00
072ca37720 __nextcloud: stricter check configuration values
This now checks the configuration value exactly and does not say there
are equal if just the end of the string differs.

Resulting from this, it will run code the next run if the default port
was in a database migration. This was fixed by instantly correct this
configuration value.
2020-10-26 19:19:49 +01:00
b368102bd5 __nextcloud: misc adjustments
Mostly to the manpage, but some minor fixes, too.
2020-10-25 20:29:57 +01:00