703 commits

Author	SHA1	Message	Date
Jeltz	3f29960a04	freeradius: explicitly disable OCSP	2022-09-01 08:18:39 +02:00
Jeltz	67994d988b	freeradius: disable detail + detail.log modules	2022-09-01 03:42:33 +02:00
Jeltz	ea843e2f47	freeradius: minimal config for attr_filter	2022-09-01 03:42:24 +02:00
Jeltz	c6afab5728	freeradius: add eap_inner module	2022-09-01 02:21:12 +02:00
Jeltz	a816fb1f01	freeradius: add support for sites	2022-08-31 05:04:19 +02:00
Jeltz	4bd54fe371	freeradius: remove more unused files	2022-08-31 04:54:20 +02:00
Jeltz	8f27164c17	freeradius: include clients.conf	2022-08-31 04:54:00 +02:00
Jeltz	8937e4f8e8	freeradius: fix clients.conf (ipv4addr + ipv6addr)	2022-08-31 04:53:37 +02:00
Jeltz	3d6e0f21b6	freeradius: configure eap module + remove more modules	2022-08-31 03:44:20 +02:00
Jeltz	953403d0b3	freeradius: create minimal role + playbook	2022-08-31 02:01:41 +02:00
Jeltz	5a7c8b280d	Merge branch 'master' into dns	2022-08-30 13:54:54 +02:00
jeltz	2e10714a79	Merge pull request 'NTP: simple fixes (logdir + local stratum + logchange support)' (#101) from ntp into master ... Reviewed-on: #101	2022-08-30 13:50:35 +02:00
Jeltz	e86b17094b	keepalived: print link-local VIP first + silence priority warning	2022-08-27 13:47:08 +02:00
Jeltz	9820ae62e8	keepalived: better support for notify scripts	2022-08-27 12:55:53 +02:00
Jeltz	c6ac61aa53	keepalived: add minimal support for keepalived	2022-08-27 11:15:18 +02:00
Jeltz	204ad7f2ce	Merge branch 'master' into dhcp	2022-08-27 10:26:39 +02:00
Jeltz	34b0ed5478	ifupdown2: add ipv6_addrgen option	2022-08-27 09:53:41 +02:00
Jeltz	5485254c47	ifupdown2: add forward option	2022-08-27 09:28:07 +02:00
Jeltz	d5b0fd85c8	ifupdown2: add bridge_disable_pvid option	2022-08-27 09:18:16 +02:00
Jeltz	f6b12fd696	ifupdown2: add minimal support for bridges	2022-08-27 08:31:42 +02:00
Jeltz	76f76a0ca4	ntp: add logdir + local + logchange support	2022-08-27 06:52:38 +02:00
Jeltz	f723c3e1a4	ifupdown2: notify ifup -a + auto instead of allow-hotplug	2022-08-27 04:46:16 +02:00
Jeltz	5ae7126ce2	ifupdown2: add support for stanzas with no gateway	2022-08-27 04:10:11 +02:00
Jeltz	a5a4d28ccc	ifupdown2: simple interfaces file configuration	2022-08-26 20:52:23 +02:00
Jeltz	e26d5dfc27	resolvconf: add role	2022-08-26 19:11:40 +02:00
Jeltz	3d2ce8f79f	ifupdown2: add minimal role	2022-08-26 10:13:37 +02:00
Jeltz	9fc0aa1fe8	kresd: create role + playbook	2022-08-26 02:01:12 +02:00
Jeltz	b00d5bc09e	chronyd: fix unit name + remove other ntp packages	2022-08-25 23:51:57 +02:00
Jeltz	4b2868783f	chronyd: fix typo in chrony.conf.j2	2022-08-25 23:51:09 +02:00
Jeltz	d2c1b1c07a	chronyd: add role + playbook	2022-08-25 23:01:00 +02:00
Jeltz	1938cc24da	isc_dhcp_server: remove old role	2022-08-20 19:34:54 +02:00
Jeltz	69c3949ef8	dhcpd: add support for failover	2022-08-20 16:53:10 +02:00
Jeltz	6bb2bbb54f	dhcpd: create role with support for DHCPv4 only	2022-08-20 16:08:25 +02:00
Jeltz	426296d8bd	knotd: fix typo	2022-08-20 04:34:28 +02:00
Jeltz	6f32c9bc2c	knotd: do not try to load zone file of slave zones	2022-08-19 15:52:06 +02:00
Jeltz	126d0f49df	dns_zone + knotd: add 'reverse_hosts' option	2022-08-19 04:44:49 +02:00
Jeltz	4a29c317a5	knotd: hide version in chaos txt	2022-08-18 21:24:12 +02:00
Jeltz	b1f26f2cd7	knotd: fix knotd__queryacl type	2022-08-18 19:50:35 +02:00
Jeltz	b9dd74af40	dns_zone + knot: rename some fields + add record types	2022-08-18 16:32:56 +02:00
Jeltz	86277d05c2	knotd: add knotd__soa_rname variable	2022-08-18 03:59:43 +02:00
Jeltz	642b3eb801	knotd: use human times for SOA fields	2022-08-18 03:47:59 +02:00
Jeltz	f321b12d2f	knotd: add queryacl support	2022-08-18 01:35:35 +02:00
Jeltz	961a2f1105	Add knotd role	2022-08-17 19:00:07 +02:00
Alexandre Iooss	a320907047	prometheus: fix typo	2022-01-01 17:55:32 +01:00
Alexandre Iooss	9e4b8c2509	prometheus: remove ipmi target	2022-01-01 17:15:11 +01:00
Alexandre Iooss	a24b473566	prometheus: reduce iLO SNMP timeout	2022-01-01 16:45:32 +01:00
Alexandre Iooss	70c8e0ebe0	prometheus: monitor iLO resilient mem and battery	2022-01-01 16:45:10 +01:00
Alexandre Iooss	5ab3dcdac2	prometheus: use enums for iLO SNMP	2022-01-01 12:04:01 +01:00
Alexandre Iooss	40d9108b37	prometheus: add iLO alert rules	2021-12-31 21:26:27 +01:00
Alexandre Iooss	2830558545	prometheus_federation: add ilo_snmp and remove django	2021-12-31 20:04:24 +01:00
Alexandre Iooss	733e9f555d	prometheus: add _snmp suffix to ilo target	2021-12-31 20:03:04 +01:00
Alexandre Iooss	bcded46ed6	prometheus: remove JSON targets cleanup	2021-12-31 19:40:22 +01:00
Alexandre Iooss	860a26a8dc	prometheus: federate ilo metrics	2021-12-31 19:39:38 +01:00
Alexandre Iooss	fdeaa355ad	prometheus: use longer timeout for iLO scraping	2021-12-31 19:39:23 +01:00
Alexandre Iooss	8c7031d059	prometheus: add iLO SNMP target	2021-12-31 18:31:58 +01:00
Alexandre Iooss	50d9282316	prometheus: show failing job when machine is down	2021-12-31 17:26:26 +01:00
Alexandre Iooss	265bd5fbb7	prometheus: use static targets	2021-12-31 15:08:44 +01:00
Alexandre Iooss	944e200394	prometheus: add ipmi job	2021-12-31 14:45:05 +01:00
Alexandre Iooss	f50778ca96	prometheus: commit production alert configuration	2021-12-31 14:44:50 +01:00
Alexandre Iooss	bc4dc03029	prometheus: add newline at the end of targets JSON	2021-12-31 14:44:19 +01:00
Alexandre Iooss	cc2ba9ff7b	prometheus: deploy targets_ipmi.json	2021-12-31 14:43:47 +01:00
Jeltz	1b9fc70649	Merge branch 'bashrc_root'	2021-12-16 05:56:57 +01:00
Jeltz	8dca876bbc	Add a very simple bashrc for root	2021-12-16 05:48:39 +01:00
jeltz	515222f404	Merge pull request 'Fix SSH CA deployment' (#86) from use_ssh_ca into master ... Reviewed-on: #86	2021-12-15 17:31:29 +01:00
Jeltz	2f3612fd8e	Deploy SSH CA everywhere and set root password	2021-12-15 17:15:57 +01:00
Jeltz	7db282fffb	Fix sshd.service → ssh.service	2021-12-15 16:17:11 +01:00
Jeltz	11937776c8	Merge branch 'master' into borgmatic_hourly	2021-12-14 07:58:13 +01:00
Jeltz	e6363e9668	Use the Users CA for authentication	2021-12-12 05:56:54 +01:00
Jeltz	a56cea369c	Remove 'dokuwiki' role	2021-11-28 11:17:47 +01:00
Alexandre Iooss	3c85a2bfb2	passbolt: remove role	2021-11-28 11:13:34 +01:00
Alexandre Iooss	fd0cb811a7	postgres: fix defaults	2021-11-28 11:07:13 +01:00
Alexandre Iooss	4bd431f9c3	postgresql: variables in dict	2021-11-28 11:01:29 +01:00
Alexandre Iooss	a818fd8ed9	Rename postgresql_server to postgresql	2021-11-28 10:20:17 +01:00
Alexandre Iooss	0979370418	Add motd for most plays	2021-11-27 22:16:29 +01:00
Alexandre Iooss	14b6a68040	base: configure motd	2021-11-27 20:05:14 +01:00
Alexandre Iooss	cc6f96bbc8	borgbackup-client: call update_motd role in play	2021-11-27 20:04:05 +01:00
Alexandre Iooss	07a0429ae0	nginx: call update_motd role in play	2021-11-27 20:02:08 +01:00
Alexandre Iooss	ce04f937db	prometheus: call update_motd role in play	2021-11-27 19:20:32 +01:00
Alexandre Iooss	1009298023	borgbackup_server: call update_motd role in play	2021-11-27 19:16:24 +01:00
Alexandre Iooss	ea394a01db	prometheus-federate: call update_motd role in play	2021-11-27 19:16:11 +01:00
Alexandre Iooss	b82afd13d9	update_motd: use update_motd dict	2021-11-27 19:14:39 +01:00
Alexandre Iooss	a791cda652	grafana: move Aurore specific variables out of the role	2021-11-27 18:29:05 +01:00
Alexandre Iooss	fdfed1a05a	grafana: remove trailing lines	2021-11-27 18:17:57 +01:00
Alexandre Iooss	e2acfd4031	grafana: single quote LDAP password	2021-11-27 18:17:57 +01:00
Alexandre Iooss	c7f94b54c8	grafana: validate gpg key	2021-11-27 18:17:57 +01:00
Alexandre Iooss	aba0370c5b	Add grafana playbook and machine	2021-11-27 18:17:57 +01:00
Alexandre Iooss	3efc8179bc	logrotate: restore Debian formatting	2021-11-22 18:08:25 +01:00
Alexandre Iooss	3a56439fac	update_motd: remove become true	2021-11-22 18:03:09 +01:00
Alexandre Iooss	94b8f37302	rsyslog_common: remove become true	2021-11-22 18:02:53 +01:00
Alexandre Iooss	1392e3fe64	Remove cached motd	2021-11-22 18:01:21 +01:00
Alexandre Iooss	11b3738fcd	ldap_client: Add one extra line to follow Debian	2021-11-22 18:00:57 +01:00
Jeltz	8b54121a87	Install prometheus-node-exporter-collectors	2021-09-24 01:41:01 +02:00
Jean-Marie Mineau	5d3d965112	the service does not need to be enabled	2021-09-23 19:02:26 +02:00
Jean-Marie Mineau	73e522f0c6	add exporter on bullseye	2021-09-23 18:54:06 +02:00
pz2891	b31f9bd952	Retention time is now a file that will be copied	2021-08-21 11:25:39 +02:00
pz2891	cc3b4294ae	Kepp federated datas 4 months (120 days)	2021-08-20 19:31:04 +02:00
pz2891	f17e7f7524	Add snmp pdu password to generate config	2021-08-20 18:22:00 +02:00
pz2891	0bfc631465	Remove unused files	2021-08-20 17:00:19 +02:00
pz2891	c5e6fbcfdf	Configuration for monitoring APC PDU	2021-08-20 16:58:28 +02:00
pz2891	54b073bd02	Typo in unhealthy disk rule	2021-08-18 18:53:27 +02:00
pz2891	e6b6790f63	New rule for unhealthy disks	2021-08-13 15:24:12 +02:00
Gabriel Detraz	b7ead19d50	Remove mail from re2o bug report	2021-05-25 23:11:30 +02:00
Jeltz	bb97bca456	Increase RandomizedDelaySec when hourly = 0	2021-05-23 14:09:01 +02:00
Jeltz	9296a2ed91	Add caradoc.adm.auro.re	2021-05-23 14:02:20 +02:00
Jeltz	4f2f0ffe64	Increase swap alert threshold	2021-05-19 15:32:33 +02:00
Jeltz	c8a877282f	Add 9 & 10 for Debian distribution	2021-05-19 15:29:40 +02:00
Jeltz	c6b768e1bb	Don't run borgmatic every hour if not needed	2021-05-10 13:02:45 +02:00
jeltz	ceaf75f0ad	Merge pull request 'Use a disk assisted queue for rsyslog' (#56) from rsyslog_queues into master ... Reviewed-on: Aurore/ansible#56	2021-05-04 00:54:40 +02:00
Jeltz	b29e9c0e45	Configure a disk-assisted queue for output actions	2021-04-30 16:49:00 +02:00
Otthorn	3a600d9061	Give a name to unnamed tasks	2021-04-17 17:43:49 +02:00
pz2891	11d0b46ef0	Remove port for docker instances. Remove 'remove old files' tasks	2021-04-14 20:00:16 +02:00
pz2891	013743f910	typo in docker rules	2021-04-14 19:54:37 +02:00
pz2891	1b0bff4c51	Fix deployment and add prometheus groups for hosts	2021-04-14 19:51:47 +02:00
pz2891	fde52f2e42	Alerts repository owned by prometheus	2021-04-14 19:29:12 +02:00
pz2891	e4d2416722	fix typo	2021-04-14 19:27:13 +02:00
pz2891	226b55b0d1	Update alerts (remove instance, translations)	2021-04-14 19:10:42 +02:00
pz2891	fd5ad8d5ac	Merge branch 'prometheus_postgres_exporter' of https://gitea.auro.re/Aurore/ansible into prometheus_postgres_exporter	2021-04-12 11:10:31 +02:00
pz2891	5d9a6599e8	Fix some typos, in accordance to Solal's comments	2021-04-12 11:10:15 +02:00
pz2891	3320e3e0c6	Update the labels for the alert (make complete tenses)	2021-04-12 11:01:43 +02:00
pz2891	676cc716cf	Modify label for the alert	2021-04-12 11:00:31 +02:00
pz2891	954e3e0892	End of yaml file (bad copy/paste)	2021-04-12 10:58:59 +02:00
pz2891	8c666151d6	Merge branch 'master' into prometheus_postgres_exporter	2021-04-12 10:10:17 +02:00
pz2891	1908deee9c	fix CI	2021-04-12 10:01:39 +02:00
Jeltz	e2b1f8eae5	Allow root to connect using peer authentication	2021-04-11 22:08:11 +02:00
pz2891	6c64bb214c	fix CI	2021-04-11 22:01:21 +02:00
pz2891	764f0f106d	Install postgres exporter when it is bullseye or buster	2021-04-11 21:38:29 +02:00
pz2891	c48fe1ae17	7% rollback for the warning	2021-04-11 20:57:53 +02:00
pz2891	304437da97	Remove .save file	2021-04-11 20:56:40 +02:00
pz2891	9d18ebb7f1	Fix docker rules	2021-04-11 17:18:32 +02:00
pz2891	6775d9ecde	Add docker rules	2021-04-11 16:43:34 +02:00
pz2891	9ebdf15bb9	Splite alerts on some files	2021-04-11 15:58:35 +02:00
pz2891	dd48302585	Configure Prometheus and Prometheus federate to scrape Postgres Exporter	2021-04-10 18:01:55 +02:00
pz2891	45041be2ab	Install postgres exporter	2021-04-10 17:29:50 +02:00
jeltz	6b2bc60589	Merge branch 'master' into add_rives_vm_master	2021-04-06 19:37:57 +02:00
Jeltz	91817b324c	Increase the alert threshold for temperatures	2021-04-03 08:04:10 +02:00
Jeltz	1c3127dbbe	Add more node-exporter alerts ... Source: https://awesome-prometheus-alerts.grep.to/rules.html	2021-04-02 22:55:51 +02:00
Jeltz	f80435cb31	Differentiate alerts for servers and Wi-Fi APs	2021-04-02 21:54:38 +02:00
Jeltz	06f101527d	Use a dynamic interval for UPS output voltage alerts	2021-04-02 13:57:34 +02:00
Jeltz	83f5b35e59	Fix a filename typo	2021-04-01 18:24:21 +02:00
Jeltz	35286a661a	Change an alert description	2021-04-01 18:24:03 +02:00
Jeltz	11335a6077	Fix typo in alert description	2021-04-01 18:15:22 +02:00
Jeltz	083fc4da9a	Fix permissions on prometheus.yml	2021-04-01 18:15:09 +02:00
Jeltz	a743ce09fb	Move templates of the prometheus_federate role	2021-04-01 09:42:54 +02:00
Jeltz	bc35cd8e90	Move templates of the prometheus role	2021-04-01 09:40:22 +02:00
Jeltz	5bcc428895	Remove 'instance' from description and fix typos	2021-04-01 09:36:11 +02:00
Jeltz	eeaf0f8486	Fix syntax errors	2021-04-01 06:02:40 +02:00
Jeltz	e247aa3f70	Uniform labels for alerts	2021-04-01 05:21:08 +02:00
jeltz	424aa80d8f	Merge pull request 'Use update_motd everywhere' (#44) from use_update_motd_everywhere into master ... Reviewed-on: Aurore/ansible#44	2021-03-30 10:12:14 +02:00
Jeltz	ac05da7173	Use update_motd everywhere	2021-03-30 10:08:21 +02:00
Jeltz	dff0d9922c	Store log.adm.auro.re local logs in /var/log/remote	2021-03-30 10:06:25 +02:00