237a47b4f3
Add conntrackd role
continuous-integration/drone/push Build is failing
continuous-integration/drone/pr Build is failing
2022-01-13 14:51:23 +01:00
4d85cd7e4b
Fix some nftables issues
continuous-integration/drone/push Build is passing
continuous-integration/drone/pr Build is passing
2022-01-13 13:59:49 +01:00
f4acc8949c
Add bastion network
continuous-integration/drone/push Build is passing
continuous-integration/drone/pr Build is passing
2022-01-10 22:08:54 +01:00
64772b76e4
Add nftables role
...
continuous-integration/drone/push Build is passing
continuous-integration/drone/pr Build is passing
This is a fully static version of the config, and it is meant to be
temporary (until I figure out a way to properly configure nftables using
ansible…).
2022-01-08 23:41:51 +01:00
9316313f1f
Do not add IPv4 link local addresses
continuous-integration/drone/push Build is passing
continuous-integration/drone/pr Build is passing
2022-01-03 01:57:51 +01:00
8883e672bd
Harmonisation of variable names
continuous-integration/drone/push Build is passing
continuous-integration/drone/pr Build is passing
2022-01-02 20:31:49 +01:00
4ca24ac99c
Add IPForward= support systemd_networkd role
2022-01-02 16:51:31 +01:00
9c0bf190e2
Add systemd-networkd role
2022-01-02 16:30:59 +01:00
91743e598b
Relax permissions on bird6?.conf
2022-01-02 16:07:18 +01:00
a616065513
Add keepalived role
continuous-integration/drone/push Build is passing
2022-01-01 21:45:17 +01:00
0d705bc922
Add bird role
2022-01-01 21:45:08 +01:00
Alexandre Iooss
a320907047
prometheus: fix typo
continuous-integration/drone/push Build is passing
continuous-integration/drone/pr Build is passing
2022-01-01 17:55:32 +01:00
Alexandre Iooss
9e4b8c2509
prometheus: remove ipmi target
continuous-integration/drone/push Build is passing
continuous-integration/drone/pr Build is passing
2022-01-01 17:15:11 +01:00
Alexandre Iooss
a24b473566
prometheus: reduce iLO SNMP timeout
continuous-integration/drone/push Build is passing
continuous-integration/drone/pr Build is passing
2022-01-01 16:45:32 +01:00
Alexandre Iooss
70c8e0ebe0
prometheus: monitor iLO resilient mem and battery
2022-01-01 16:45:10 +01:00
Alexandre Iooss
5ab3dcdac2
prometheus: use enums for iLO SNMP
continuous-integration/drone/push Build is passing
continuous-integration/drone/pr Build is passing
2022-01-01 12:04:01 +01:00
Alexandre Iooss
40d9108b37
prometheus: add iLO alert rules
continuous-integration/drone/push Build is passing
continuous-integration/drone/pr Build is passing
2021-12-31 21:26:27 +01:00
Alexandre Iooss
2830558545
prometheus_federation: add ilo_snmp and remove django
continuous-integration/drone/push Build is passing
continuous-integration/drone/pr Build is passing
2021-12-31 20:04:24 +01:00
Alexandre Iooss
733e9f555d
prometheus: add _snmp suffix to ilo target
2021-12-31 20:03:04 +01:00
Alexandre Iooss
bcded46ed6
prometheus: remove JSON targets cleanup
continuous-integration/drone/push Build is passing
continuous-integration/drone/pr Build is passing
2021-12-31 19:40:22 +01:00
Alexandre Iooss
860a26a8dc
prometheus: federate ilo metrics
continuous-integration/drone/push Build is passing
2021-12-31 19:39:38 +01:00
Alexandre Iooss
fdeaa355ad
prometheus: use longer timeout for iLO scraping
2021-12-31 19:39:23 +01:00
Alexandre Iooss
8c7031d059
prometheus: add iLO SNMP target
continuous-integration/drone/push Build is passing
continuous-integration/drone/pr Build is passing
2021-12-31 18:31:58 +01:00
Alexandre Iooss
50d9282316
prometheus: show failing job when machine is down
continuous-integration/drone/push Build is passing
continuous-integration/drone/pr Build is passing
2021-12-31 17:26:26 +01:00
Alexandre Iooss
265bd5fbb7
prometheus: use static targets
continuous-integration/drone/push Build is passing
continuous-integration/drone/pr Build is passing
2021-12-31 15:08:44 +01:00
Alexandre Iooss
944e200394
prometheus: add ipmi job
continuous-integration/drone/push Build is passing
continuous-integration/drone/pr Build is passing
2021-12-31 14:45:05 +01:00
Alexandre Iooss
f50778ca96
prometheus: commit production alert configuration
2021-12-31 14:44:50 +01:00
Alexandre Iooss
bc4dc03029
prometheus: add newline at the end of targets JSON
2021-12-31 14:44:19 +01:00
Alexandre Iooss
cc2ba9ff7b
prometheus: deploy targets_ipmi.json
2021-12-31 14:43:47 +01:00
1b9fc70649
Merge branch 'bashrc_root'
continuous-integration/drone/push Build is passing
2021-12-16 05:56:57 +01:00
8dca876bbc
Add a very simple bashrc for root
continuous-integration/drone/push Build is passing
continuous-integration/drone/pr Build is passing
2021-12-16 05:48:39 +01:00
515222f404
Merge pull request 'Fix SSH CA deployment' ( #86 ) from use_ssh_ca into master
...
continuous-integration/drone/push Build is passing
Reviewed-on: #86
2021-12-15 17:31:29 +01:00
2f3612fd8e
Deploy SSH CA everywhere and set root password
continuous-integration/drone/push Build is passing
continuous-integration/drone/pr Build is passing
2021-12-15 17:15:57 +01:00
7db282fffb
Fix sshd.service → ssh.service
2021-12-15 16:17:11 +01:00
11937776c8
Merge branch 'master' into borgmatic_hourly
continuous-integration/drone/push Build is passing
continuous-integration/drone/pr Build is passing
2021-12-14 07:58:13 +01:00
e6363e9668
Use the Users CA for authentication
continuous-integration/drone/push Build is failing
2021-12-12 05:56:54 +01:00
a56cea369c
Remove 'dokuwiki' role
2021-11-28 11:17:47 +01:00
Alexandre Iooss
3c85a2bfb2
passbolt: remove role
2021-11-28 11:13:34 +01:00
Alexandre Iooss
fd0cb811a7
postgres: fix defaults
2021-11-28 11:07:13 +01:00
Alexandre Iooss
4bd431f9c3
postgresql: variables in dict
2021-11-28 11:01:29 +01:00
Alexandre Iooss
a818fd8ed9
Rename postgresql_server to postgresql
2021-11-28 10:20:17 +01:00
Alexandre Iooss
0979370418
Add motd for most plays
2021-11-27 22:16:29 +01:00
Alexandre Iooss
14b6a68040
base: configure motd
2021-11-27 20:05:14 +01:00
Alexandre Iooss
cc6f96bbc8
borgbackup-client: call update_motd role in play
2021-11-27 20:04:05 +01:00
Alexandre Iooss
07a0429ae0
nginx: call update_motd role in play
2021-11-27 20:02:08 +01:00
Alexandre Iooss
ce04f937db
prometheus: call update_motd role in play
2021-11-27 19:20:32 +01:00
Alexandre Iooss
1009298023
borgbackup_server: call update_motd role in play
2021-11-27 19:16:24 +01:00
Alexandre Iooss
ea394a01db
prometheus-federate: call update_motd role in play
2021-11-27 19:16:11 +01:00
Alexandre Iooss
b82afd13d9
update_motd: use update_motd dict
2021-11-27 19:14:39 +01:00
Alexandre Iooss
a791cda652
grafana: move Aurore specific variables out of the role
2021-11-27 18:29:05 +01:00