This commit is contained in:
cronekorkn 2024-09-21 19:39:48 +02:00
parent ea447ba24c
commit 4876f08cb0
Signed by: cronekorkn
SSH key fingerprint: SHA256:v0410ZKfuO1QHdgKBsdQNF64xmTxOF8osF1LIqwTcVw
5 changed files with 41 additions and 26 deletions

View file

@ -86,6 +86,8 @@ if node.has_bundle('telegraf'):
'needs': [ 'needs': [
'pkg_apt:acl', 'pkg_apt:acl',
'svc_systemd:postfix', 'svc_systemd:postfix',
'svc_systemd:postfix:reload',
'svc_systemd:postfix:restart',
], ],
} }
actions['postfix_setfacl_default_telegraf'] = { actions['postfix_setfacl_default_telegraf'] = {
@ -94,5 +96,7 @@ if node.has_bundle('telegraf'):
'needs': [ 'needs': [
'pkg_apt:acl', 'pkg_apt:acl',
'svc_systemd:postfix', 'svc_systemd:postfix',
'svc_systemd:postfix:reload',
'svc_systemd:postfix:restart',
], ],
} }

View file

@ -15,16 +15,16 @@ files = {
'svc_systemd:telegraf:restart', 'svc_systemd:telegraf:restart',
], ],
}, },
# '/usr/local/share/telegraf/procio': { '/usr/local/share/telegraf/procio': {
# 'content_type': 'download', 'content_type': 'download',
# 'source': f"https://dl.sublimity.de/telegraf-procio/telegraf-procio-{node.metadata.get('system/architecture')}-latest", 'source': f"https://dl.sublimity.de/telegraf-procio/telegraf-procio-{node.metadata.get('system/architecture')}-latest",
# 'mode': '0755', 'mode': '0755',
# }, },
# '/usr/local/share/telegraf/pressure_stall': { '/usr/local/share/telegraf/pressure_stall': {
# 'content_type': 'download', 'content_type': 'download',
# 'source': f"https://dl.sublimity.de/telegraf-pressure-stall/telegraf-pressure-stall-{node.metadata.get('system/architecture')}-latest", 'source': f"https://dl.sublimity.de/telegraf-pressure-stall/telegraf-pressure-stall-{node.metadata.get('system/architecture')}-latest",
# 'mode': '0755', 'mode': '0755',
# }, },
} }
svc_systemd['telegraf'] = { svc_systemd['telegraf'] = {

View file

@ -73,20 +73,20 @@ defaults = {
'system': {h({})}, 'system': {h({})},
'net': {h({})}, 'net': {h({})},
'exec': { 'exec': {
# h({ h({
# 'commands': [ 'commands': [
# f'sudo /usr/local/share/telegraf/procio', f'sudo /usr/local/share/telegraf/procio',
# ], ],
# 'data_format': 'influx', 'data_format': 'influx',
# 'interval': '20s', 'interval': '20s',
# }), }),
# h({ h({
# 'commands': [ 'commands': [
# f'/usr/local/share/telegraf/pressure_stall', f'/usr/local/share/telegraf/pressure_stall',
# ], ],
# 'data_format': 'influx', 'data_format': 'influx',
# 'interval': '10s', 'interval': '10s',
# }), }),
}, },
}, },
}, },

View file

@ -42,6 +42,17 @@
], ],
}, },
}, },
'nftables': {
'forward': {
# Drop DHCP client requests (UDP port 68)
'udp sport 68 drop',
'udp dport 68 drop',
# Drop DHCP server responses (UDP port 67)
'udp sport 67 drop',
'udp dport 67 drop',
},
},
'sysctl': { 'sysctl': {
'net': { 'net': {
'ipv4': { 'ipv4': {

View file

@ -5,10 +5,10 @@
'debian-12', 'debian-12',
'hetzner-cloud', 'hetzner-cloud',
'mailserver', 'mailserver',
#'monitored', 'monitored',
'webserver', 'webserver',
'dnsserver', 'dnsserver',
#'wordpress', 'wordpress',
#'left4dead2', #'left4dead2',
], ],
'bundles': [ 'bundles': [