Commit Graph

451 Commits

Author SHA1 Message Date
chirac b7978f4ec3 Add services-bdd-local 2020-09-15 19:37:59 +02:00
Yohaï-Eliel BERREBY 91157d80c1 dhcp: run re2o service as root in cron / directly 2020-09-13 17:54:46 +02:00
Yohaï-Eliel BERREBY 6dd6168d2a dhcp: upgrade role for dhcp-aurore-backup 2020-09-12 16:03:33 +02:00
Yohann D'ANELLO c07bf24062 Add dhcp-aurore-backup 2020-09-12 14:50:13 +02:00
chirac f05a6507f0 Add pendragon + re2o-* vm -> aurore_vm 2020-09-12 12:13:36 +02:00
Yohaï-Eliel BERREBY 9b07fc9001 dhcp: manage dhcp-aurore 2020-09-11 15:13:11 +02:00
chirac 26743b464d Add Radius-aurore.adm.auro.re to ansible managed radius servers 2020-09-09 23:17:15 +02:00
chirac 53842e4c2f Add ipv6 Radius AURORE address 2020-09-09 23:16:35 +02:00
Yohaï-Eliel BERREBY e48425300a Merge branch 'ansible-2.10' into master 2020-09-08 22:35:30 +02:00
Yohaï-Eliel BERREBY 276a780c65 hosts: add viviane and nextcloud 2020-09-08 22:32:49 +02:00
Yohann D'ANELLO 5c46191389 Register camelot and gitea, make camelot accessible for everyone 2020-09-04 09:56:02 +02:00
Yohaï-Eliel BERREBY 646ebd3ba9 router: ansibilize routeur-aurore{,backup} 2020-08-08 20:45:38 +02:00
Yohaï-Eliel BERREBY 12b0bc91dc radvd: cosmetic changes 2020-08-08 11:32:34 +02:00
Yohaï-Eliel BERREBY b199c45d97 fix broken radius role
Would crash if called from anything other than the nuke radius DBs
playbook
2020-08-08 11:32:06 +02:00
Yohaï-Eliel BERREBY af3c3dc132 enable radvd service 2020-08-08 11:19:16 +02:00
Yohaï-Eliel BERREBY d98764d88e Merge branch 'ipv6' into ansible-2.10 2020-08-06 09:58:43 +02:00
Yohaï-Eliel BERREBY 30e503458e add ability to nuke radius DBs 2020-08-06 09:57:54 +02:00
Yohaï-Eliel BERREBY e762091435 explain fe80::1 keepalived/radvd magic 2020-08-02 12:15:27 +02:00
Yohaï-Eliel BERREBY de36a3bb95 announce IPv6 recursive resolver (untested) 2020-08-02 12:15:15 +02:00
Yohaï-Eliel BERREBY 8360e212cc enable SSH pipelining (THE SPEED!) 2020-08-02 12:14:57 +02:00
Yohaï-Eliel BERREBY 3a8112bf0d roll out (private) IPv6 on George Sand 2020-08-01 17:48:39 +02:00
Yohaï-Eliel BERREBY 361fd54414 keepalived: add IPv6 virtual route 2020-08-01 16:07:27 +02:00
Yohaï-Eliel BERREBY 2e6306b61e radvd: advertise keepalived VIP 2020-08-01 16:05:41 +02:00
Yohaï-Eliel BERREBY 56808e4e60 wip: begin updating 'router' role for IPv6
pending: update virtual routes
2020-08-01 15:46:41 +02:00
Yohaï-Eliel BERREBY 194c19fbf3 fix wrong hardcoded email for keepalived monitoring 2020-08-01 15:34:49 +02:00
Yohaï-Eliel BERREBY 713c93ac44 update unbound role for IPv6 2020-08-01 14:32:02 +02:00
Yohaï-Eliel BERREBY d54da8d2b9 add ipv6_base_prefix variable 2020-08-01 14:31:49 +02:00
Yohaï-Eliel BERREBY 468bb9abde add radvd comment 2020-08-01 14:22:30 +02:00
Yohaï-Eliel BERREBY f09b0906c6 radvd: fix wifi interface, comment out APs for now 2020-08-01 14:20:08 +02:00
Yohaï-Eliel BERREBY a4841e6947 add radvd role, deploy in routers 2020-08-01 12:56:23 +02:00
Yohaï-Eliel BERREBY a32116131d raise MTU at fleming
already been deployed for a while, forgot to push
2020-08-01 12:02:37 +02:00
Alexandre Iooss c7c6e50dd9 Remove matrix mxisd 2020-07-22 10:04:25 +02:00
fpoutre 8639887fd1 Merge branch 'ansible-2.10' of gitlab.federez.net:aurore/ansible into ansible-2.10 2020-07-06 22:28:03 +02:00
fpoutre 354a5e7d63 created a dedicated ldap_replica role 2020-07-06 22:27:53 +02:00
tinylinux 511734a978 Add ldap-replica-gs-backup to hosts 2020-07-06 22:06:16 +02:00
fpoutre f7617c4478 added ldap-replica-gs to hosts 2020-07-06 18:52:46 +02:00
Yohaï-Eliel BERREBY 337906c6c0 add gs dhcp, dns, routing
and add thor to inventory
2020-07-06 18:40:54 +02:00
Yohaï-Eliel BERREBY a6b15c0e10 vars: use apartment block id for subnets 2020-05-21 20:06:47 +02:00
Yohaï-Eliel BERREBY 4866ce915c clean up README for ansible(devel) 2020-05-21 19:46:39 +02:00
Yohaï-Eliel BERREBY 63b4425a27 gs: fix vars 2020-05-21 19:45:35 +02:00
Yohaï-Eliel BERREBY fe62055cdd radius: enable service, fix details 2020-05-21 19:25:30 +02:00
Yohaï-Eliel BERREBY 8ce63d14b6 radius: fix settings_local.py 2020-05-21 18:39:50 +02:00
Yohaï-Eliel BERREBY 99070ed5ef radius: step 2 of deployment (WIP) 2020-05-21 18:06:37 +02:00
Yohaï-Eliel BERREBY e2fa1964af radius: change proxy.conf password, use vault
and also actually template it... it wasn't being
uploaded.
2020-05-21 14:19:28 +02:00
Yohaï-Eliel BERREBY 266b0dde6f radius: initial setup 2020-05-16 22:08:22 +02:00
Yohaï-Eliel BERREBY 8355546131 edc: raise DHCP-announced MTU to 1500 2020-05-14 17:50:06 +02:00
Yohaï-Eliel BERREBY 6d00e2733b unbound: fix log rotation
Was too frequent, now that we only log SERVFAILs.
Rotate according to file size.
Fix unbound-control binary path.
2020-05-11 20:18:23 +02:00
Yohaï-Eliel BERREBY 87b2e4f8cf pacaterie: raise MTU to 1500 2020-05-09 16:15:56 +02:00
Yohaï-Eliel BERREBY ba3aec348f keepalived: deploy to fleming w/ proper password 2020-05-09 16:07:04 +02:00
Alexandre Iooss a992612381
Add certbot challenge DNS-01 key 2020-05-09 13:03:31 +02:00