2020-08-19 12:29:49 +02:00
|
|
|
---
|
|
|
|
|
### oefenweb.ufw
|
|
|
|
|
ufw_rules:
|
|
|
|
|
- rule: allow
|
|
|
|
|
to_port: 22
|
|
|
|
|
protocol: tcp
|
|
|
|
|
comment: 'ssh'
|
2021-10-06 10:18:23 +02:00
|
|
|
from_ip: 0.0.0.0/0
|
2021-06-16 21:57:28 +02:00
|
|
|
- rule: allow
|
|
|
|
|
to_port: 4949
|
|
|
|
|
protocol: tcp
|
|
|
|
|
comment: 'munin'
|
|
|
|
|
from_ip: 192.168.2.144/24
|
2020-08-19 12:29:49 +02:00
|
|
|
- rule: allow
|
|
|
|
|
to_port: 53
|
2022-01-15 11:19:04 +01:00
|
|
|
comment: 'dns'
|
2021-10-06 10:18:23 +02:00
|
|
|
from_ip: 0.0.0.0/0
|
2021-05-22 21:37:19 +02:00
|
|
|
### mgrote.restic
|
2021-10-09 20:23:23 +02:00
|
|
|
restic_repository: "//192.168.2.36/restic"
|
2021-05-22 21:37:19 +02:00
|
|
|
### mgrote.apt_manage_sources
|
2022-01-15 11:19:04 +01:00
|
|
|
# wird leer gesetzt da dnsmasq NICHT den Router befragt und daher keine Lokalen Hostnamen abfragen kann
|
2021-10-20 19:48:17 +02:00
|
|
|
manage_sources_apt_proxy: ""
|
2022-06-12 22:24:12 +02:00
|
|
|
### mgrote.munin-node
|
2021-09-24 10:11:54 +02:00
|
|
|
munin_node_plugins:
|
2022-02-18 20:34:43 +01:00
|
|
|
- name: timesync
|
|
|
|
|
src: https://git.mgrote.net/mg/mirror-munin-contrib/raw/branch/master/plugins/systemd/timesync_status
|
2021-09-24 10:11:54 +02:00
|
|
|
- name: systemd_status
|
2021-11-07 12:22:11 +01:00
|
|
|
src: https://git.mgrote.net/mg/mirror-munin-contrib/raw/branch/master/plugins/systemd/systemd_status
|
2022-06-12 22:24:12 +02:00
|
|
|
- name: systemd_mem
|
|
|
|
|
src: https://git.mgrote.net/mg/mirror-munin-contrib/raw/branch/master/plugins/systemd/systemd_mem
|
|
|
|
|
config: |
|
|
|
|
|
[systemd_mem]
|
|
|
|
|
env.all_services true
|
2021-09-24 10:11:54 +02:00
|
|
|
- name: lvm_
|
2021-11-07 12:22:11 +01:00
|
|
|
src: https://git.mgrote.net/mg/mirror-munin-contrib/raw/branch/master/plugins/disk/lvm_
|
2021-09-24 10:11:54 +02:00
|
|
|
config: |
|
|
|
|
|
[lvm_*]
|
|
|
|
|
user root
|
2021-10-17 19:40:18 +02:00
|
|
|
- name: fail2ban
|
|
|
|
|
src: https://git.mgrote.net/mg/munin-plugins/raw/branch/master/extern/fail2ban
|
|
|
|
|
config: |
|
|
|
|
|
[fail2ban]
|
|
|
|
|
env.client /usr/bin/fail2ban-client
|
|
|
|
|
env.config_dir /etc/fail2ban
|
|
|
|
|
user root
|
2022-01-15 12:35:44 +01:00
|
|
|
- name: dnsmasq
|
2022-01-15 16:22:40 +01:00
|
|
|
src: https://git.mgrote.net/mg/mirror-dnsmasq-munin/raw/branch/master/dnsmasq
|
2022-01-15 13:43:15 +01:00
|
|
|
config: |
|
|
|
|
|
[dnsmasq]
|
|
|
|
|
env.logfile {{ dnsmasq_logfile }}
|
|
|
|
|
user root
|
2022-01-20 22:19:17 +01:00
|
|
|
- name: dnsresponse_192.168.2.1
|
2022-01-20 14:36:43 +01:00
|
|
|
src: https://git.mgrote.net/mg/mirror-munin-contrib/raw/branch/master/plugins/network/dns/dnsresponse_
|
2022-01-20 22:19:17 +01:00
|
|
|
- name: dnsresponse_127.0.0.1
|
2022-01-20 14:36:43 +01:00
|
|
|
src: https://git.mgrote.net/mg/mirror-munin-contrib/raw/branch/master/plugins/network/dns/dnsresponse_
|
|
|
|
|
config: |
|
2022-01-20 22:19:17 +01:00
|
|
|
[dnsresponse_*]
|
|
|
|
|
env.site www.heise.de
|
2022-01-20 14:36:43 +01:00
|
|
|
env.times 20
|
2022-01-15 11:19:04 +01:00
|
|
|
### mgrote.dnsmasq
|
|
|
|
|
# Welche DNS-Server soll dnsmasq anfragen?
|
|
|
|
|
dnsmasq_resolver:
|
|
|
|
|
- 9.9.9.9
|
|
|
|
|
- 1.1.1.1
|
2022-01-15 13:43:15 +01:00
|
|
|
dnsmasq_log_queries: true # has to be true for munin
|
2022-01-15 11:19:04 +01:00
|
|
|
dnsmasq_logfile: /var/log/dnsmasq.log
|
|
|
|
|
dnsmasq_blocklists:
|
|
|
|
|
- name: sysctl.org
|
|
|
|
|
state: present
|
|
|
|
|
url: http://sysctl.org/cameleon/hosts
|
|
|
|
|
- name: StevenBlack.1
|
|
|
|
|
state: present
|
|
|
|
|
url: https://raw.githubusercontent.com/StevenBlack/hosts/master/data/KADhosts/hosts
|
|
|
|
|
- name: StevenBlack.2
|
|
|
|
|
state: present
|
|
|
|
|
url: https://raw.githubusercontent.com/StevenBlack/hosts/master/data/add.Spam/hosts
|
|
|
|
|
- name: adaway.org
|
|
|
|
|
state: present
|
|
|
|
|
url: https://adaway.org/hosts.txt
|
|
|
|
|
- name: StevenBlack.3
|
|
|
|
|
state: present
|
|
|
|
|
url: https://raw.githubusercontent.com/StevenBlack/hosts/master/hosts
|
|
|
|
|
- name: developerdan.1
|
|
|
|
|
state: present
|
|
|
|
|
url: https://www.github.developerdan.com/hosts/lists/ads-and-tracking-extended.txt
|
|
|
|
|
- name: developerdan.2
|
|
|
|
|
state: present
|
|
|
|
|
url: https://www.github.developerdan.com/hosts/lists/amp-hosts-extended.txt
|
|
|
|
|
dnsmasq_cache_size: 10000
|
|
|
|
|
dnsmasq_port: 53
|
|
|
|
|
dnsmasq_never_forward_domain: grote.lan
|
2022-01-20 14:36:43 +01:00
|
|
|
### mgrote.apt_manage_packages
|
|
|
|
|
apt_packages_extra:
|
|
|
|
|
- libnet-dns-perl # für munin: dnsresponse_*
|
