Repository navigation

lss 2.0 stage 4: backup, monitoring, network, devops profile - #23

Draft

VectoDE wants to merge 42 commits into

feat/lss-3from

feat/lss-4

Draft

lss 2.0 stage 4: backup, monitoring, network, devops profile#23
VectoDE wants to merge 42 commits into
feat/lss-3from
feat/lss-4

Commits on Oct 14, 2026
- feat(lib): helpers for the monitoring, backup and network modules
  
  VectoDE
  and
  claude
  committed
  12f2de8
- feat(network): wireguard, dns-resolver and ntp-server modules
  
  VectoDE
  and
  claude
  committed
  78ea7af
- feat(monitoring): Prometheus, Grafana, Loki, Alloy, Netdata and smartd modules
  
  VectoDE
  and
  claude
  committed
  c5cf12e
- feat(backup): restic and db-dumps modules
  
  VectoDE
  and
  claude
  committed
  1c0d875
- feat(guard): backup age, weekly restore test and Prometheus metrics
  
  VectoDE
  and
  claude
  committed
  4864b91
- feat(profiles): devops profile; webhosting and all get the new modules
  
  VectoDE
  and
  claude
  committed
  37cbfc6
- docs: backup, monitoring and network in the README and changelog
  
  VectoDE
  and
  claude
  committed
  5bf759c
- docs(module-guide): the helpers of lib/monitoring.sh
  
  VectoDE
  and
  claude
  committed
  25a4183
- test(guard): look for the restore-test call, not the word in the finding
  
  VectoDE
  and
  claude
  committed
  0f46348
- ci(gitleaks): the WireGuard example public keys of the tests are no secret
  
  VectoDE
  and
  claude
  committed
  b4166f0
- refactor(monitoring): one place builds the interface URLs; resolve Sonar findings
  
  VectoDE
  and
  claude
  committed
  1beb398
- fix(grafana): read the admin password through Grafana's $__file{} expansion
  
  VectoDE
  and
  claude
  committed
  a0b0c47
- fix(wireguard): let wg-quick run ip under SELinux
  
  VectoDE
  and
  claude
  committed
  2125e1d
- fix(ntp-server): keep the distribution's chronyd command line in containers
  
  VectoDE
  and
  claude
  committed
  d1b44d9
- fix(dns-resolver): give a cold Unbound three tries for the root zone
  
  VectoDE
  and
  claude
  committed
  3561400
- fix(pkg): drop adduser's note on skipped home directories from the apt output
  
  VectoDE
  and
  claude
  committed
  53c5ffe
- Merge feat/lss-3 into feat/lss-4
  
  VectoDE
  and
  claude
  committed
  f7d14f1
- fix(wireguard): keep the host's /dev for wg-quick
  
  VectoDE
  and
  claude
  committed
  59a8f30
- fix(netdata): check that the agent is not claimed instead of a Cloud switch
  
  VectoDE
  and
  claude
  committed
  75ce862
- fix(files): a removed file is no longer expected by lss verify
  
  VectoDE
  and
  claude
  committed
  7f358c0
- fix(loki): let systemd create Loki's data directory on every start
  
  VectoDE
  and
  claude
  committed
  437b35c
- fix(ntp-server): run chronyd without readiness notification in containers
  
  VectoDE
  and
  claude
  committed
  3b94d50
- fix(backup): the repository credentials reach restic alone
  
  VectoDE
  and
  claude
  committed
  c34032d
- Merge feat/lss-3 into feat/lss-4
  
  VectoDE
  and
  claude
  committed
  5bebbd0
- fix(backup): give 'backup restic' the repository environment again
  
  VectoDE
  and
  claude
  committed
  66fabf0
- Merge feat/lss-3 into feat/lss-4
  
  VectoDE
  and
  claude
  committed
  c98fdba
- fix(dns-resolver): skip the RHEL unit's unbound-anchor run before each start
  
  VectoDE
  and
  claude
  committed
  b866935
- chore(ntp-server): log chronyd's view when it does not answer
  
  VectoDE
  and
  claude
  committed
  051cfd6
- Merge feat/lss-3 into feat/lss-4
  
  VectoDE
  and
  claude
  committed
  ac77bca
- docs(readme): resource figures of the stage-4 modules
  
  VectoDE
  and
  claude
  committed
  a6d0299
- chore(ntp-server): show chrony's whole configuration when it does not answer
  
  VectoDE
  and
  claude
  committed
  279a293
- Merge feat/lss-3 into feat/lss-4
  
  VectoDE
  and
  claude
  committed
  3304d0e
- fix(dns-resolver): keep the server's resolvers where Unbound reaches no DNS
  
  VectoDE
  and
  claude
  committed
  ecfce0e
- fix(monitoring): remove the temporary policy-rc.d also when apt fails
  
  VectoDE
  and
  claude
  committed
  95d7a43
- Merge feat/lss-3 into feat/lss-4
  
  VectoDE
  and
  claude
  committed
  f44ba5a
Commits on Oct 15, 2026
- chore(ntp-server): test chrony's parsing of the confdir when it does not answer
  
  VectoDE
  and
  claude
  committed
  f20a6ae
- Merge feat/lss-3 into feat/lss-4
  
  VectoDE
  and
  claude
  committed
  971faf4
- fix(ntp-server): read the confdir under /etc/chrony on an AppArmor kernel
  
  VectoDE
  and
  claude
  committed
  1437887
- fix(k3s): wait for the secrets encryption status
  
  VectoDE
  and
  claude
  committed
  73a4774
- Merge remote-tracking branch 'origin/feat/lss-3' into feat/lss-4
  VectoDE
  committed
  26c6d32
- Merge remote-tracking branch 'origin/feat/lss-3' into feat/lss-4
  VectoDE
  committed
  52f72c0
- Merge remote-tracking branch 'origin/feat/lss-3' into feat/lss-4
  VectoDE
  committed
  eaab82a

Commits

Commits on Oct 14, 2026

Commits on Oct 15, 2026