Commit graph

1262 commits

Author SHA1 Message Date
9763017450 Merge branch 'renovate/gitlab-telegraf-1.x' into 'master'
automation: Update gitlab-telegraf Docker tag to v1.21

See merge request saibotk.de/infrastructure!415
2021-12-21 22:58:31 +00:00
32dc7911ea Merge branch 'renovate/matrix-elementweb-1.x' into 'master'
automation: Update matrix-elementweb Docker tag to v1.9.8

See merge request saibotk.de/infrastructure!421
2021-12-21 22:58:08 +00:00
Renovate Bot
46cd98e34a automation: Update matrix-synapse Docker tag to v1.49.2 2021-12-21 19:02:47 +00:00
Renovate Bot
574fa11743 automation: Update community.general to version 4.2.0 2021-12-21 13:02:54 +00:00
Renovate Bot
bbc98d9d31 automation: Update factorio Docker tag to v1.1.50 2021-12-21 13:02:49 +00:00
Renovate Bot
35690d19b8 automation: Update keycloak Docker tag to v16.1.0 2021-12-20 17:06:07 +00:00
Renovate Bot
99e6a300df automation: Update matrix-elementweb Docker tag to v1.9.8 2021-12-20 15:03:17 +00:00
e695ba0aa6
telegraf: Disable read-only for now to make it work again
The official image just pushed an update to all tags which sets capabilities on runtime and thus breaks read only environments. Gotta make my own image later.
2021-12-20 01:43:28 +01:00
b2d15fd18a Merge branch 'renovate/minecraft-image-2021.x' into 'master'
automation: Update minecraft-image Docker tag to v2021.26.0

See merge request saibotk.de/infrastructure!413
2021-12-20 00:05:47 +00:00
997e9f5ce3 Merge branch 'renovate/devsec.hardening-7.x' into 'master'
automation: Update devsec.hardening to version 7.14.0

See merge request saibotk.de/infrastructure!414
2021-12-20 00:05:33 +00:00
e3afecdcfc Merge branch 'renovate/gitlabrunner-image-14.x' into 'master'
automation: Update gitlabrunner-image Docker tag to v14.6.0

See merge request saibotk.de/infrastructure!418
2021-12-20 00:05:23 +00:00
e66eec1b61 Merge branch 'renovate/keycloak-16.x' into 'master'
automation: Update keycloak Docker tag to v16

See merge request saibotk.de/infrastructure!420
2021-12-20 00:05:15 +00:00
Renovate Bot
362a62d1a4 automation: Update keycloak Docker tag to v16 2021-12-18 09:03:10 +00:00
Renovate Bot
6bfe4d9516 automation: Update gitlabrunner-image Docker tag to v14.6.0 2021-12-17 19:03:05 +00:00
Renovate Bot
8aa7a3f4a8 automation: Update telegraf Docker tag to v1.21.1 2021-12-17 03:03:05 +00:00
Renovate Bot
37d7e2293b automation: Update minecraft-telegraf Docker tag to v1.21.1 2021-12-17 03:03:03 +00:00
Renovate Bot
780473ba4e automation: Update gitlab-telegraf Docker tag to v1.21 2021-12-17 03:03:00 +00:00
Renovate Bot
efd5b12178 automation: Update devsec.hardening to version 7.14.0 2021-12-16 11:04:34 +00:00
1428d4f514
gitlab_runner: Add image prune cron job task to playbook 2021-12-14 19:27:16 +01:00
Renovate Bot
fb3d6dfc98 automation: Update minecraft-image Docker tag to v2021.26.0 2021-12-14 17:03:09 +00:00
d24c0d960b
minecraft: Use actual image version tag instead of latest 2021-12-14 16:09:54 +01:00
bf96e2d9db Merge branch 'renovate/matrix-synapse-1.x' into 'master'
automation: Update matrix-synapse Docker tag to v1.49.0

See merge request saibotk.de/infrastructure!412
2021-12-14 15:08:43 +00:00
Renovate Bot
afa082b01c automation: Update matrix-synapse Docker tag to v1.49.0 2021-12-14 15:03:16 +00:00
40aaceb361 Merge branch 'renovate/monitoring-grafana-8.x' into 'master'
automation: Update monitoring-grafana Docker tag to v8.3.3

See merge request saibotk.de/infrastructure!411
2021-12-14 14:20:45 +00:00
Renovate Bot
aa5a7757fd automation: Update monitoring-grafana Docker tag to v8.3.3 2021-12-14 13:04:20 +00:00
25e1b65f4e Merge branch 'renovate/matrix-elementweb-1.x' into 'master'
automation: Update matrix-elementweb Docker tag to v1.9.7

See merge request saibotk.de/infrastructure!410
2021-12-13 17:30:42 +00:00
Renovate Bot
addddf2bbe automation: Update matrix-elementweb Docker tag to v1.9.7 2021-12-13 17:04:42 +00:00
abc63a3fd6 Merge branch 'renovate/traefik-2.x' into 'master'
automation: Update traefik Docker tag to v2.5.5

See merge request saibotk.de/infrastructure!409
2021-12-12 09:25:59 +00:00
Renovate Bot
4d0aaad561 automation: Update traefik Docker tag to v2.5.5 2021-12-10 23:02:58 +00:00
bbfda870be Merge branch 'renovate/gitlabrunner-image-14.x' into 'master'
automation: Update gitlabrunner-image Docker tag to v14.5.2

See merge request saibotk.de/infrastructure!408
2021-12-10 22:09:28 +00:00
Renovate Bot
ddebd9dfa6 automation: Update gitlabrunner-image Docker tag to v14.5.2 2021-12-10 19:03:02 +00:00
b02431614d Merge branch 'renovate/keycloak-15.x' into 'master'
automation: Update keycloak Docker tag to v15.1.0

See merge request saibotk.de/infrastructure!407
2021-12-10 15:44:28 +00:00
f398ec8cc1 Merge branch 'renovate/factorio-1.x' into 'master'
automation: Update factorio Docker tag to v1.1.49

See merge request saibotk.de/infrastructure!405
2021-12-10 15:44:20 +00:00
3c88c75270 Merge branch 'renovate/monitoring-grafana-8.x' into 'master'
automation: Update monitoring-grafana Docker tag to v8.3.2

See merge request saibotk.de/infrastructure!406
2021-12-10 15:44:11 +00:00
Renovate Bot
ddc41eddc5 automation: Update keycloak Docker tag to v15.1.0 2021-12-10 15:03:22 +00:00
Renovate Bot
425bf2bff5 automation: Update monitoring-grafana Docker tag to v8.3.2 2021-12-10 15:03:21 +00:00
Renovate Bot
7ff858023b automation: Update factorio Docker tag to v1.1.49 2021-12-07 19:02:54 +00:00
ebf26abe33 Merge branch 'renovate/monitoring-grafana-8.x' into 'master'
automation: Update monitoring-grafana Docker tag to v8.3.1

See merge request saibotk.de/infrastructure!404
2021-12-07 17:09:15 +00:00
Renovate Bot
da3dd7c857 automation: Update monitoring-grafana Docker tag to v8.3.1 2021-12-07 17:03:06 +00:00
bef419101a Merge branch 'renovate/gitlab-14.x' into 'master'
automation: Update gitlab Docker tag to v14.5.2

See merge request saibotk.de/infrastructure!403
2021-12-06 23:13:50 +00:00
Renovate Bot
8350a3c0b1 automation: Update gitlab Docker tag to v14.5.2 2021-12-06 23:03:06 +00:00
e9a89142a3 Merge branch 'renovate/matrix-elementweb-1.x' into 'master'
automation: Update matrix-elementweb Docker tag to v1.9.6

See merge request saibotk.de/infrastructure!402
2021-12-06 19:31:08 +00:00
Renovate Bot
4192f20129 automation: Update matrix-elementweb Docker tag to v1.9.6 2021-12-06 17:04:23 +00:00
367bdb4f67 Merge branch 'renovate/monitoring-grafana-8.x' into 'master'
automation: Update monitoring-grafana Docker tag to v8.3.0

See merge request saibotk.de/infrastructure!397
2021-12-05 14:18:12 +00:00
b749b62d6d Merge branch 'renovate/gitlab-14.x' into 'master'
automation: Update gitlab Docker tag to v14.5.1

See merge request saibotk.de/infrastructure!398
2021-12-05 14:13:58 +00:00
ed1687d3de Merge branch 'renovate/gitlabrunner-image-14.x' into 'master'
automation: Update gitlabrunner-image Docker tag to v14.5.1

See merge request saibotk.de/infrastructure!399
2021-12-05 14:13:43 +00:00
5bd226bddf Merge branch 'renovate/codimd-1.x' into 'master'
automation: Update codimd Docker tag to v1.9.2

See merge request saibotk.de/infrastructure!400
2021-12-05 14:13:33 +00:00
7674a04a25 Merge branch 'master' into 'master'
fail2ban: Harden service

See merge request saibotk.de/infrastructure!401
2021-12-05 14:13:00 +00:00
25846e32f0
fail2ban: Switch to ansible.builtin.systemd module 2021-12-05 14:54:04 +01:00
d822f8544d
fail2ban: Harden service
This hardens the fail2ban service by giving it only the capabilities and
read/write access it needs.

This is done in accordance to the Arch Wiki article [1] where further
information about the needed capabilities and read/write paths can be
found.

[1] https://wiki.archlinux.org/title/Fail2ban#Service_hardening
2021-12-05 14:22:51 +01:00