766 commits

This branch

This branch

All branches

Author	SHA1	Message	Date
otthorn	40df593f11	Added the certificates gestion	2021-02-06 12:46:39 +01:00
otthorn	3714396b6b	commented unused tasks for the moment	2021-02-06 12:46:39 +01:00
otthorn	750753f16d	Starting the dovecot task	2021-02-06 12:46:39 +01:00
otthorn	673d77d1be	fix yaml lint	2021-02-06 12:46:39 +01:00
otthorn	de83af936d	Add (initial) mailserver playbook	2021-02-06 12:46:39 +01:00
otthorn	5377378bf7	Add (initial) mail-utils role	2021-02-06 12:46:39 +01:00
otthorn	f01533409f	Add (initial) postfix role	2021-02-06 12:46:39 +01:00
otthorn	4b3e491983	Add mail vars	2021-02-06 12:46:39 +01:00
ynerant	71d7358bd7	Merge pull request 'Update re2o-service password' (#12) from change-password into master ... Reviewed-on: Aurore/ansible#12	2021-02-05 22:19:30 +01:00
ynerant	4ecb6ed7be	Update re2o-service password ... Signed-off-by: ynerant <ynerant@crans.org>	2021-02-05 21:18:26 +01:00
ynerant	f9e83e514e	Merge pull request 'Captive portal' (#11) from accueil into master ... Reviewed-on: Aurore/ansible#11	2021-02-05 20:39:50 +01:00
Yohann D'ANELLO	0e224df41f	Install ipset on each router ... Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>	2021-02-05 20:39:26 +01:00
Yohann D'ANELLO	ce00d5e50f	Authorize comnpay urls in the captive portal ... Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>	2021-02-05 20:39:26 +01:00
Yohann D'ANELLO	c527ce16b0	Use good output interface for the main router ... Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>	2021-02-05 20:39:25 +01:00
Yohann D'ANELLO	3f62644927	Use production server ... Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>	2021-02-05 20:39:25 +01:00
Yohann D'ANELLO	a82edc3e24	Firewall configuration without MASQUERADE ... Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>	2021-02-05 20:39:25 +01:00
Yohann D'ANELLO	bbac76023c	Update masquerade configuration for the captive portal ... Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>	2021-02-05 20:39:25 +01:00
Yohann D'ANELLO	a808e3c793	Update captive portal nginx configuration ... Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>	2021-02-05 20:39:25 +01:00
Yohann D'ANELLO	7e4a2d20c0	Clone nginx role from Crans ... Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>	2021-02-05 20:39:25 +01:00
Yohann D'ANELLO	889cb764c1	Clone certbot role from Crans ... Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>	2021-02-05 20:39:25 +01:00
Yohann D'ANELLO	154cbedec2	Deploy firewall config for the captive portal ... Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>	2021-02-05 20:39:25 +01:00
Yohann D'ANELLO	ba9e60dba8	Update the nginx configuration of the captive portal ... Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>	2021-02-05 20:39:25 +01:00
Yohann D'ANELLO	9bd06520fb	Add reverse-proxy for Re2o on the portal VM ... Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>	2021-02-05 20:39:25 +01:00
Yohann D'ANELLO	6df41d16b5	Add portail VM ... Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>	2021-02-05 20:39:20 +01:00
Jeltz	e02670afb0	Les caches unbound renvoie les addresses en 10/8	2021-02-05 20:38:50 +01:00
Yohann D'ANELLO	a7b073e1cc	Add captive portal firewall configuration ... Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>	2021-02-05 20:38:50 +01:00
Yohann D'ANELLO	89ebbd423e	Use the local firewall repository ... Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>	2021-02-05 20:38:50 +01:00
Yohann D'ANELLO	9af9a7bab8	Redirect the proxy IP address to intranet.auro.re by default ... Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>	2021-02-05 20:38:49 +01:00
Yohann D'ANELLO	5a09b77070	Resolve DNS for the accueil vlan ... Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>	2021-02-05 20:38:49 +01:00
Jeltz	5fc2d0a3f9	Ajout d'accueil dans keepalived	2021-02-05 20:38:49 +01:00
Jeltz	7cdef7ee96	Fix: keep the logs for 90 days	2021-02-05 20:38:49 +01:00
Solal Nathan	faba1d2005	Correct typo, this one was sneaky!	2021-02-05 01:50:56 +01:00
Solal Nathan	5f48a46522	Add postfix quota check	2021-02-05 01:35:46 +01:00
Solal Nathan	c0cd3946fb	Fix postfix cert variables	2021-02-05 01:17:58 +01:00
Solal Nathan	b35922346e	Remove file since I did not git mv correclty...	2021-02-05 00:09:12 +01:00
Solal Nathan	77918e00ce	move files to the right place and fix small typo	2021-02-05 00:07:36 +01:00
Solal Nathan	256d2d5df4	Post renewal hook for certbot to reload dovecot and postfix	2021-02-05 00:05:26 +01:00
Solal Nathan	43053e57f9	Fix broken vars	2021-02-04 23:44:32 +01:00
Solal Nathan	efa34dab42	fix yaml syntax	2021-02-04 23:35:12 +01:00
Solal Nathan	e316679e13	Add additional role for mailserver	2021-02-04 23:34:53 +01:00
Otthorn	2c531d1af2	Postfix conf add certs and other security related modifications	2021-02-04 23:18:23 +01:00
Otthorn	27cfcc1320	Don't reinvent the whell, use existing roles (have to be tested)	2021-02-04 14:47:40 +01:00
Otthorn	ebf712d0bc	Use correct re2o API vars (don't add them twice in vault, reuse them)	2021-02-04 13:02:52 +01:00
Otthorn	0a7de4fc78	Mail VM has a public addr now and FQDN is mail.auro.re	2021-02-04 02:24:35 +01:00
Otthorn	1e59bec323	Add Re2o API vars	2021-02-04 02:14:52 +01:00
Otthorn	1c7b4f8560	add re2o service mail cron	2021-02-04 01:46:55 +01:00
Otthorn	9e91f2e9d5	Re2o API config	2021-02-04 01:38:49 +01:00
Otthorn	cf58c2bac5	Add re2o mail server	2021-02-04 01:30:14 +01:00
Otthorn	1c20193fc8	Add re2o mail server to the roles of the mailserver playbook	2021-02-04 01:03:18 +01:00
Otthorn	c85b2b58fe	Add quota to dovecot	2021-02-03 23:20:10 +01:00