337906c6c0
add gs dhcp, dns, routing
...
and add thor to inventory
4 years ago
a6b15c0e10
vars: use apartment block id for subnets
4 years ago
4866ce915c
clean up README for ansible(devel)
4 years ago
63b4425a27
gs: fix vars
4 years ago
fe62055cdd
radius: enable service, fix details
4 years ago
8ce63d14b6
radius: fix settings_local.py
4 years ago
99070ed5ef
radius: step 2 of deployment (WIP)
4 years ago
e2fa1964af
radius: change proxy.conf password, use vault
...
and also actually template it... it wasn't being
uploaded.
4 years ago
266b0dde6f
radius: initial setup
4 years ago
8355546131
edc: raise DHCP-announced MTU to 1500
4 years ago
6d00e2733b
unbound: fix log rotation
...
Was too frequent, now that we only log SERVFAILs.
Rotate according to file size.
Fix unbound-control binary path.
4 years ago
87b2e4f8cf
pacaterie: raise MTU to 1500
4 years ago
ba3aec348f
keepalived: deploy to fleming w/ proper password
4 years ago
a992612381
Add certbot challenge DNS-01 key
4 years ago
9c226c680c
Certbot wildcard role
4 years ago
544498c81a
New reverse proxy role
4 years ago
eae3a3ff44
Deploy docker-worker1-aurore and proxy-backup
4 years ago
dea4dda285
hosts: remove dhcp and recursive_dns groups
...
Use patterns instead for now.
4 years ago
3f26e7d4b4
routeur de la pacaterie en ...254 au lieu de ...240 pour keepalived
4 years ago
a4d0f051b6
dhcp: restart server on config update
4 years ago
223578eefa
keepalived: no ansible_managed
...
Used to restart keepalived needlessly
4 years ago
4372b21976
dhcp: allow different router IP suffix
...
This variable is only needed because we're in the process of deploying
keepalived. For now it's only at EDC.
4 years ago
e58ee1c4b5
keepalived: initial config
4 years ago
26524eccc5
ansible-list: allow lack of idempotence
4 years ago
e45bdcbba8
network.yml: ensure safety without --limit
4 years ago
fea73a13aa
aurore-firewall: correct backup router ip
4 years ago
8ba2de1698
aurore-firewall: fix repo address + branch
4 years ago
44be43e528
aurore-firewall: add config after cloning
4 years ago
1a10729b67
hosts: manage dhcp-edc
4 years ago
5ee7bb3069
ansible.cfg: unset scp_if_ssh
4 years ago
c77ae7f4c3
aurore-firewall: initial setup
...
group_vars: add apartment_block_id var
dhcp: move vars to role
4 years ago
268c4d2419
hosts: manage recursive DNS on EDC
4 years ago
e4d428d1dc
unbound: change task order
...
Seems to be necessary to restart unbound manually for some reason?...
4 years ago
3d742c391c
hosts: add routeur-edc-backup
4 years ago
4f224ee817
re2o-service: install Python dependencies
4 years ago
24a6063a91
baseconfig: fix resolv.conf
4 years ago
3f5e0d0035
edc: add group vars required for dhcp deployment
4 years ago
0db7713bbf
hosts: add dhcp-edc-backup
4 years ago
7c7abb6be5
baseconfig: set up /etc/resolv.conf
4 years ago
7e9c4352a0
base: group name is ldap_replica
...
It's an underscore, not a hyphen
4 years ago
9c1f186682
hosts: s/physical/pve/g, add new backup hosts
4 years ago
ef88d0a42b
Some clean up in hosts
4 years ago
36343d90fd
BangShebang!
4 years ago
dc2db3d6a3
Decomment hosts
4 years ago
3b72e2fe2d
Remove SSH blacklist
4 years ago
e42bdd53a8
Merge branch 'aurore-dev' into 'master'
...
Aurore dev
See merge request aurore/ansible!47
4 years ago
81592fa986
Merge branch 'master' into 'aurore-dev'
...
# Conflicts:
# .gitignore
# hosts
# network.yml
# proxmox.yml
4 years ago
29991141f5
misc: add script to copy SSH keys
...
This one has the advantage of actually working :)
I had to blacklist some hosts because they would either outright refuse
connections or would refuse my LDAP credentials.
4 years ago
a77b2c4f0f
unbound: fix MTU settings
...
That was the root cause of all our DNSSEC issues.
Now that this was fixed, we're not having these anymore,
so the relaxed checks can be restored back to their original state.
4 years ago
aae7e0120a
unbound: drop verbosity but log SERVFAILs
...
TODO: less frequent log rotation because of decreased log volume
4 years ago
Yohaï-Eliel BERREBY
Alexandre Iooss
Pierre