Commit graph

22 commits

Author SHA1 Message Date
7100ec707d move mosh firewall so it is placed afterfirewall is installed 2026-05-31 15:52:54 +02:00
c36f52e420 support updating the app if the source is updated 2026-05-30 19:30:32 +02:00
03d9493e7a support closed ssh range 2026-05-30 19:30:12 +02:00
dccb45168c firewall: restart failtoban if it exists 2026-05-30 19:29:58 +02:00
0cdef8be5b only set root pass/ssh keys if vars are set 2026-05-30 19:29:39 +02:00
1bd7ae2913 typofix 2026-05-30 19:28:55 +02:00
13d2513d87 use correct permissions for templatefiles 2026-05-26 14:34:48 +02:00
be2b2a7ca7 added extra handy packages 2026-05-26 14:34:23 +02:00
c34b3c1d0f add passt as dependency 2025-08-15 22:58:22 +02:00
4d8c4e5f48 Cleanup firewall + make it more strict
- Do not put too many empty newlines in rendered file
- Also write redirect rules in the output chain.  This will allow us to
use the port from the same machine.  Note that redirect does rewrite the
destination to localhost if used on the same machine, so your
application should also listen to localhost
- made the file a bit clearer with better comments
- Add the explicit device if we can for redirects
2025-08-15 22:52:03 +02:00
dc99b61ea8 the zabbix scripts I use use netcat 2025-08-15 22:49:10 +02:00
0a32383de3 add ssh key option for apps
This way we can push ssh keys that can pull/push to repositories.  This
is very handy if we wish to edit/maintain the appinfo repository right
on the server where it is hosted....
2025-08-15 22:48:55 +02:00
5fda82d0d3 when the setup changed something, show output in changed color 2025-08-15 22:48:14 +02:00
b021bb2620 allow defining the home directory
The idea here is that we can have a backup server that should run on a
slow huge disk, and that the rest should run on your very fast nvme's.
To differentiate, you can specify where the homedir should be
2025-08-15 22:47:51 +02:00
a55246263b implement "enabled" apps 2025-08-15 22:46:42 +02:00
bb5ee5085f add new zabbix template so we can automatically add new checks 2025-07-14 18:35:42 +02:00
242a6d1cca new firewall system
Render the template system wide, then apply.  This way, the
appdefinition.yml can contain everything that is required, and we don't
have to specify this anymore in the main config
2025-07-14 18:35:05 +02:00
cd8e0cbad7 setup the app using ppm setup 2025-07-14 18:33:32 +02:00
1df77aa74d install zabbix agent in the baseline 2025-07-14 18:32:39 +02:00
d9c8951e60 remove ansible_managed
This has been deprecated by ansible
2025-07-14 18:30:42 +02:00
4cb7926fa4 add support for open ports and udp 2024-10-20 17:46:10 +02:00
6f50de798b initial commit 2024-10-16 21:13:17 +02:00