T

Ruakij 32651402c6 Revert "host_firewall: sources zone accepts tcp ports from listed addresses alone"

This reverts commit 0abc9fb1c3.

2026-10-28 14:02:36 +00:00

_deprecated

Move netmaker to deprecated

2023-01-18 13:23:51 +01:00

apt_updates

apt_updates: count a package as security when any version newer than the installed one has a security origin

2026-10-27 07:40:18 +00:00

common

common: tag the timezone task so it runs on its own

2026-10-25 10:54:32 +00:00

crowdsec

crowdsec: no crowdsec.list when a deb822 crowdsec.sources already defines the repository

2026-10-26 19:15:46 +00:00

crowdsec_range_bouncer

crowdsec_range_bouncer: skip range decisions wider than /8 (IPv4) or /16 (IPv6) and log each skip

2026-10-26 19:52:14 +00:00

docker

docker: hourly prune of objects older than 7 days, root mail only when the prune fails

2026-10-26 10:18:29 +00:00

host_exporters

host_exporters: host_exporters_listen_address binds the node exporter to one address for hosts without host firewall

2026-10-26 15:45:34 +00:00

host_firewall

Revert "host_firewall: sources zone accepts tcp ports from listed addresses alone"

2026-10-28 14:02:36 +00:00

journal_upload

journal_upload: uploader drop-in with no start limit and 30s restarts so ingest outages do not end it

2026-10-25 14:19:26 +00:00

kopia_backup

Copy per-host files of kopia_backup from a files list, empty by default

2026-10-22 08:25:43 +00:00

kubernetes

kubernetes: k3s resolv-conf from fixed nameservers 1.1.1.1 and 9.9.9.9 instead of a copy of the node

2026-10-27 15:24:48 +00:00

mail_relay

mail_relay: the comment points to the security perimeter doc

2026-10-26 16:45:10 +00:00

netbird_client

Join a fresh host to NetBird idempotently with the keyring, the management URL and the interface blacklist from the vars, and edit the blacklist and log level of a joined one

2026-10-23 20:54:30 +00:00

proxmox_no_nag

Add a proxmox_no_nag role that hides the subscription dialog and reapplies it from an apt hook after every widget-toolkit update

2026-10-13 15:55:56 +00:00

tuned

Add a tuned role that installs tuned and sets the throughput-performance profile

2026-10-09 14:37:25 +00:00

unattended_upgrades

unattended_upgrades: apt-listchanges sends no mails

2026-10-26 14:17:53 +00:00

wireguard-ipv6-converter

wireguard-ipv6-converter: download the release assets under their 0.5.0 names wg-ipv6-converter-linux-<arch>

2026-10-28 13:16:33 +00:00

zfs_host

zfs_host: zed and pool capacity and scrub metrics for the node exporter textfile collector

2026-10-25 15:09:50 +00:00

zsh

Add role zsh

2022-10-17 12:59:59 +02:00

README.md

Initial commit

2022-10-17 12:41:50 +02:00

README.md

Ansible-Roles

A collection of ansible-roles i have created for deployments.