feat: share common uci-defaults rule + add agent additional collectors

2023-10-11 10:09:39 +02:00
parent 4b5f2b63d0
commit 707a8c6f30
12 changed files with 22 additions and 126 deletions
--- a/misc/common/agent/collectors.yml
+++ b/misc/common/agent/collectors.yml
@ -0,0 +1,9 @@
+- name: network-interfaces
+  command: ip
+  args:
+    - addr
+    - show
+- name: emissary-firmware
+  commant: cat
+  args:
+    - /etc/emissary_firmware
--- a/misc/common/uci-defaults/99-emissary-common-uci-custom.sh
+++ b/misc/common/uci-defaults/99-emissary-common-uci-custom.sh
--- a/misc/rpi/uci-defaults/99-x86-uci-custom.sh
+++ b/misc/rpi/uci-defaults/99-x86-uci-custom.sh
@ -1,37 +0,0 @@
-#/bin/sh
-
-set -e
-
-main() {
-    # Update default firewall ruleset
-    uci add firewall rule
-    uci set firewall.@rule[-1].name='Allow SSH on WAN'
-    uci set firewall.@rule[-1].src='wan'
-    uci set firewall.@rule[-1].proto='tcp'
-    uci set firewall.@rule[-1].dest_port='22'
-    uci set firewall.@rule[-1].target='ACCEPT'
-
-    uci add firewall rule
-    uci set firewall.@rule[-1].name='Allow HTTP on WAN'
-    uci set firewall.@rule[-1].src='wan'
-    uci set firewall.@rule[-1].proto='tcp'
-    uci set firewall.@rule[-1].dest_port='80'
-    uci set firewall.@rule[-1].target='ACCEPT'
-
-    uci add firewall rule
-    uci set firewall.@rule[-1].name='Allow HTTPS on WAN'
-    uci set firewall.@rule[-1].src='wan'
-    uci set firewall.@rule[-1].proto='tcp'
-    uci set firewall.@rule[-1].dest_port='443'
-    uci set firewall.@rule[-1].target='ACCEPT'
-
-    uci commit firewall
-    
-    # Disable DNS-rebind protection
-    uci set dhcp.@dnsmasq[0].rebind_protection='0'
-    uci commit dhcp
-
-    reload_config
-}
-
-main
--- a/misc/turris/omnia/uci-defaults/98-turris-omnia-uci-custom.sh
+++ b/misc/turris/omnia/uci-defaults/98-turris-omnia-uci-custom.sh
@ -1,37 +0,0 @@
-#/bin/sh
-
-set -e
-
-main() {
-    # Update default firewall ruleset
-    uci add firewall rule
-    uci set firewall.@rule[-1].name='Allow SSH on WAN'
-    uci set firewall.@rule[-1].src='wan'
-    uci set firewall.@rule[-1].proto='tcp'
-    uci set firewall.@rule[-1].dest_port='22'
-    uci set firewall.@rule[-1].target='ACCEPT'
-
-    uci add firewall rule
-    uci set firewall.@rule[-1].name='Allow HTTP on WAN'
-    uci set firewall.@rule[-1].src='wan'
-    uci set firewall.@rule[-1].proto='tcp'
-    uci set firewall.@rule[-1].dest_port='80'
-    uci set firewall.@rule[-1].target='ACCEPT'
-
-    uci add firewall rule
-    uci set firewall.@rule[-1].name='Allow HTTPS on WAN'
-    uci set firewall.@rule[-1].src='wan'
-    uci set firewall.@rule[-1].proto='tcp'
-    uci set firewall.@rule[-1].dest_port='443'
-    uci set firewall.@rule[-1].target='ACCEPT'
-
-    uci commit firewall
-    
-    # Disable DNS-rebind protection
-    uci set dhcp.@dnsmasq[0].rebind_protection='0'
-    uci commit dhcp
-
-    reload_config
-}
-
-main
--- a/misc/x86/uci-defaults/99-x86-uci-custom.sh
+++ b/misc/x86/uci-defaults/99-x86-uci-custom.sh
@ -1,37 +0,0 @@
-#/bin/sh
-
-set -e
-
-main() {
-    # Update default firewall ruleset
-    uci add firewall rule
-    uci set firewall.@rule[-1].name='Allow SSH on WAN'
-    uci set firewall.@rule[-1].src='wan'
-    uci set firewall.@rule[-1].proto='tcp'
-    uci set firewall.@rule[-1].dest_port='22'
-    uci set firewall.@rule[-1].target='ACCEPT'
-
-    uci add firewall rule
-    uci set firewall.@rule[-1].name='Allow HTTP on WAN'
-    uci set firewall.@rule[-1].src='wan'
-    uci set firewall.@rule[-1].proto='tcp'
-    uci set firewall.@rule[-1].dest_port='80'
-    uci set firewall.@rule[-1].target='ACCEPT'
-
-    uci add firewall rule
-    uci set firewall.@rule[-1].name='Allow HTTPS on WAN'
-    uci set firewall.@rule[-1].src='wan'
-    uci set firewall.@rule[-1].proto='tcp'
-    uci set firewall.@rule[-1].dest_port='443'
-    uci set firewall.@rule[-1].target='ACCEPT'
-
-    uci commit firewall
-    
-    # Disable DNS-rebind protection
-    uci set dhcp.@dnsmasq[0].rebind_protection='0'
-    uci commit dhcp
-
-    reload_config
-}
-
-main