Mike Reeves 339a5af4a3 Serve /kernelrepo through nginx so minions can reach the kernel repo ...

The /nsm/kernelrepo bind mount exposed the files, but without a matching
location block external requests to /kernelrepo/ fell through to the SOC
app and returned HTML, so minions hit 'repomd.xml parser error'. Add a
/kernelrepo/ location mirroring /repo/.

2026-06-26 12:02:49 -04:00

..

_beacons

remove unneeded files

2025-05-30 12:50:59 -04:00

_modules

Remove non-Oracle Linux 9 support from salt states

2026-03-16 16:58:39 -04:00

_runners

merge 2.4/dev

2025-12-02 11:16:08 -06:00

backup

use so-config-backup script in soup

2026-06-01 11:52:35 -05:00

bpf

update helpLink references for new documentation

2026-03-18 09:46:45 -04:00

ca

Add so-postgres Salt states and integration wiring

2026-04-08 10:58:52 -04:00

common

Add so-kernel-upgrade to switch the boot default to the UEK8 kernel

2026-06-26 09:21:11 -04:00

cron

…

desktop

the great ssl refactor

2025-12-11 17:30:06 -05:00

docker

Change so-postgres final_octet to 47

2026-04-21 09:33:47 -04:00

docker_clean

…

elastalert

new elastalert options advanced

2026-03-19 17:19:42 -04:00

elastic-fleet-package-registry

fleet package registry health check

2026-05-04 10:52:37 -05:00

elasticagent

ensure bool sliders for each state:enabled annotation

2026-03-19 12:35:38 -04:00

elasticfleet

wip

2026-06-22 14:25:46 -05:00

elasticsearch

wip

2026-06-22 14:25:46 -05:00

firewall

Open postgres on every hostgroup that opens influxdb

2026-04-29 09:09:50 -04:00

global

Remove helpLink for influxdb in soc_global.yaml

2026-04-23 13:56:41 -04:00

healthcheck

…

host

update helpLink references for new documentation

2026-03-18 09:46:45 -04:00

hydra

ensure bool sliders for each state:enabled annotation

2026-03-19 12:35:38 -04:00

hypervisor

merge 2.4/dev

2025-12-02 11:16:08 -06:00

idh

Remove hardcoded path

2026-03-23 16:26:56 -04:00

influxdb

define options in annotation files

2026-04-09 10:18:36 -04:00

kafka

userid vs names

2026-06-12 11:18:59 -04:00

kibana

userid vs names

2026-06-12 11:18:59 -04:00

kratos

prep for soc db config

2026-05-13 17:28:07 -04:00

libvirt

create libvirt volumes directory

2025-10-30 11:02:36 -04:00

logrotate

remove steno

2026-03-06 15:45:36 -05:00

logstash

userid vs names

2026-06-12 11:18:59 -04:00

manager

Seed an empty /nsm/kernelrepo so the manager repo is always valid

2026-06-24 13:23:25 -04:00

motd

FIX: Update MOTD #13317

2024-07-09 10:06:16 -04:00

nginx

Serve /kernelrepo through nginx so minions can reach the kernel repo

2026-06-26 12:02:49 -04:00

ntp

update helpLink references for new documentation

2026-03-18 09:46:45 -04:00

orch

fix regex

2026-05-05 14:26:04 -04:00

patch

ensure bool sliders for patch

2026-03-19 14:39:10 -04:00

pcap

cleanup steno. sensor run pcap.cleanup

2026-03-10 16:09:32 -04:00

pipeline

…

postgres

postgres updates

2026-06-03 09:49:53 -04:00

reactor

fix regex

2026-05-05 14:26:04 -04:00

redis

ensure bool sliders for each state:enabled annotation

2026-03-19 12:35:38 -04:00

registry

upgrade registry

2026-06-22 13:01:02 -04:00

repo/client

Gate so_kernel_repo on running salt matching the shipped version

2026-06-26 09:21:11 -04:00

salt

Add manager boot-time grid mine.update oneshot before highstate

2026-06-08 11:05:13 -04:00

sensor

update helpLink references for new documentation

2026-03-18 09:46:45 -04:00

sensoroni

ensure bool sliders sensoroni

2026-03-19 14:41:49 -04:00

setup/virt

remove highstate from startup_states. highstate on system start

2026-05-14 13:57:40 -04:00

soc

es|ql defaults

2026-06-15 12:33:08 -04:00

ssl

dont remove ca in ssl.remove

2026-01-07 14:14:57 -05:00

stig

update stig profile v1r3

2026-03-23 14:04:48 -05:00

storage

remove .log extension

2025-10-14 11:03:00 -04:00

strelka

Merge pull request #15792 from Security-Onion-Solutions/3/strelkalnk

2026-05-14 13:06:26 +02:00

suricata

define options in annotation files

2026-04-09 10:18:36 -04:00

systemd

…

tcpreplay

…

telegraf

Change Telegraf output from BOTH to INFLUXDB

2026-05-13 11:58:21 -04:00

utility

…

vars

Move telegraf_output from global pillar to telegraf pillar

2026-04-20 16:03:02 -04:00

versionlock

update helpLink references for new documentation

2026-03-18 09:46:45 -04:00

vm

handle - in hypervisor hostname

2025-08-04 15:25:26 -04:00

zeek

Fix JA4+ license link in soc_zeek.yaml

2026-04-06 10:12:37 -04:00

allowed_states.map.jinja

Merge pull request #15749 from Security-Onion-Solutions/feature/postgres

2026-04-28 10:15:47 -04:00

schedule.sls

splay highstate schedule 2minutes for non managers

2025-07-22 11:52:50 -04:00

top.sls

remove stig from hypervisor and managerhype

2026-05-13 10:53:11 -04:00