Commit Graph

383 Commits (de68bfd3e614fa8497b1b5daf238e2f66f9fbbca)
 

Author SHA1 Message Date
Sean Johnson de68bfd3e6 swarm_ingress fwrule chain 2 years ago
Sean Johnson a37c8dbdd1 restart rsyslog instead of reload 2 years ago
Sean Johnson 523ecc7323 reload rsyslog on changes 2 years ago
Sean Johnson ea322cd71e Add base.syslog state 2 years ago
Sean Johnson e3ac1b4fa1 Add filebeat states 2 years ago
Sean Johnson 7b0dbab6ac only save iptables rules if they are not already saved 2 years ago
Sean Johnson 2575e092d0 Whoops, spacing 2 years ago
Sean Johnson 254c3d30b8 Drop logging is revertable 2 years ago
Sean Johnson 69a491c165 Add drop logging 2 years ago
Sean Johnson b24efe7257 Add allow_docker option 2 years ago
Sean Johnson aff5608730 mine.get -> mine_get 2 years ago
Sean Johnson baa11df774 Update minion_net to use mine.get 2 years ago
Sean Johnson 80e013e3ba Add ssh_private fwrules chain 2 years ago
Sean Johnson 2de70cecca Install clamav and clamdscan everywhere 2 years ago
Sean Johnson 34dd5439cc add elasticsearch_private jump to INPUT chain 2 years ago
Sean Johnson 07299694f0 fix minion ipsetnames 2 years ago
Sean Johnson d6391dfbec add minions ipset to elasticsearch_cluster_private 2 years ago
Sean Johnson 6866670d48 enabled -> enable 2 years ago
Sean Johnson 7b7265d802 ensure netfilter-persistent is running and enabled 2 years ago
Sean Johnson 1eaeaeee63 seperate module states for v4 and v6 2 years ago
Sean Johnson d00f9df5d4 whoopsie 2 years ago
Sean Johnson 4de4e9c023 merge includes 2 years ago
Sean Johnson e5ad61eba0 add iptables-persistent and save at the end of fwrules 2 years ago
Sean Johnson f60d00f668 switch to swarm gwbridge 2 years ago
Sean Johnson 3307949366 swarm_h2h allow 172.17/16 2 years ago
Sean Johnson c9530395e2 swarm_h2h allow 10.200/24 2 years ago
Sean Johnson 7b4e023359 forgotten commas 2 years ago
Sean Johnson 5ab82125bf quoting fix 2 years ago
Sean Johnson e93c14abf1 orch -> orchestrate 2 years ago
Sean Johnson c6acf0fd48 Fix v6 address widening 2 years ago
Sean Johnson bb256b5814 Add missing set action 2 years ago
Sean Johnson 374990a6e1 Fix target test 2 years ago
Sean Johnson be13eb1515 rewrite most fwrules stuff as plain SLS 2 years ago
Sean Johnson 16ae10a372 Add salt-api minion rule 2 years ago
Sean Johnson 2135cdde9f Change firewall.reset orch target to a pillar-set value 2 years ago
Sean Johnson 8b4f225774 Actually ADD THE RULE ACTIONS, FUCK 2 years ago
Sean Johnson 377c4d577e Move chain selection into pillar 2 years ago
Sean Johnson d064fa149f Add ICMP6 default rules 2 years ago
Sean Johnson 5f8ca40e77 Firewall orchestrator 2 years ago
Sean Johnson 6cc093a530 Grainsrv is proxied 2 years ago
Sean Johnson 8fa8b549cc Rebuilding firewall rules 2 years ago
Sean Johnson 05bc297dbb Let's try quoting better 2 years ago
Sean Johnson 61829ad52a Update elasticsearch_exporter 2 years ago
Sean Johnson f7948d15e1 Lighten up runner load 2 years ago
Sean Johnson d9969593cb Unpack the filter iterator into a list 2 years ago
Sean Johnson dcaf5b39bc Use dunders to collect public_addresses? 2 years ago
Sean Johnson 5811c92496 Execute manage.up through runner 2 years ago
Sean Johnson 27dc8edd82 Streamline telegram notification 2 years ago
Sean Johnson 2b1495cc16 Rename to map_hostname_to_public_addresses 2 years ago
Sean Johnson 14cad82c42 Add hostname_to_public_addresses 3 years ago