aurore/ansible
aurore/ansible
11
2
Fork 0
Code Issues 1 Pull requests 13 Releases Wiki Activity
1121 commits 31 branches 0 tags 3 MiB
Commit graph

599 commits

Author SHA1 Message Date
Jeltz
3030d3bfab Fix typo: use 'Reload' instead of 'Restart' 2021-03-30 07:42:46 +02:00
Jeltz
f59d9ee6f0 WIP: add logrotate config for rsyslog-managed files 2021-03-30 06:01:43 +02:00
jeltz
6d74f04db4 Merge pull request 'Better distribution of backups over time' (#49) from backups into master 
Reviewed-on: Aurore/ansible#49
 2021-03-24 02:12:53 +01:00
Jeltz
21eaeb2d42 Better distribution of backups over time 2021-03-24 02:10:11 +01:00
jeltz
789c11c3e3 Merge pull request 'Cleanup borgmatic related roles' (#47) from backups into master 
Reviewed-on: Aurore/ansible#47
 2021-03-18 22:19:39 +01:00
pz2891
a1533b7efd Fix issues for installing radius-rives (baq package for postgresql-client) 2021-03-17 20:41:46 +01:00
pz2891
f662e4bd47 Remove bullseye for radius role. Add the oid for temperature of ups 2021-03-16 21:13:45 +01:00
Jeltz
3000f46c46 Randomize borgmatic timer 2021-03-16 15:05:29 +01:00
Jeltz
8524b9fa99 Fix typo 2021-03-16 14:13:12 +01:00
Jeltz
37582abfe1 Remove useless tasks from borgmatic_client 2021-03-16 13:47:14 +01:00
Jeltz
96a498c6de Break long lines in borgmatic.service unit 2021-03-16 13:46:46 +01:00
Jeltz
1be92bad62 Log source port for NGinx 2021-03-16 09:43:13 +01:00
Jeltz
01bca6597d Run borgmatic every hour 2021-03-16 09:38:51 +01:00
Jeltz
21a3d5af2a Add bullseye support in 'prometheus_node' 2021-03-15 10:50:40 +01:00
jeltz
4305a60639 Merge pull request 'Backups with borg and borgmatic' (#39) from backups into master 
Reviewed-on: Aurore/ansible#39
 2021-03-15 07:53:33 +01:00
Jeltz
3f3f688da4 Use 'present' instead of 'latest' (ansible-lint) 2021-03-15 07:51:48 +01:00
Jeltz
6713b550b6 Merge branch 'master' into backups 2021-03-15 07:50:11 +01:00
Jeltz
cb3ec07121 Use 'inventory_hostname' instead of 'ansible_fqdn' 
While 'ansible_fdqn' can be changed by a compromised host,
'inventory_hostname' can't (hopefully).

It should therefore no longer be possible for the said host to access
the backups of another host.
 2021-03-15 07:25:09 +01:00
Solal Nathan
243ec1fe9d [borgbackup_client] VaRi0u5 f1X3s 2021-03-15 01:04:42 +01:00
Jeltz
f15b222cdc Allow root to log as postgres 2021-03-14 23:45:36 +01:00
Solal Nathan
7480a7c565 [borgbackup_client] precedence rules and sain defaults for borg config 2021-03-14 22:02:34 +01:00
Solal Nathan
b14b359027 [borgbackup_client] add exlude path to conf 2021-03-14 19:21:15 +01:00
Solal Nathan
33a1ec02f3 [borgbackup_client] update config directory to be homogeneous 2021-03-14 19:07:02 +01:00
Solal Nathan
ebfc4f2a26 [borgbackup_client] do update cache 2021-03-14 19:03:44 +01:00
Jeltz
86f8b31159 Delegate facts for borgbackup_client 2021-03-14 18:44:13 +01:00
Jeltz
d9f1104309 Move id_remote to /etc/borgmatic 2021-03-14 18:42:26 +01:00
Solal Nathan
c6cae75031 [borgbackup_server] fix /borg permissions 2021-03-14 18:29:33 +01:00
Solal Nathan
46d10022ea [borgbackup_client] fix rentention date to int and list correctly source directories 2021-03-14 18:24:36 +01:00
Solal Nathan
ff750c5b63 [borgbackup_client] remove 1 minute sleep and fix verbosity 2021-03-14 18:23:44 +01:00
Solal Nathan
2651432582 [WIP] various fixes 2021-03-14 18:22:52 +01:00
Solal Nathan
d928c7f7f0 [borgbackup_client] rename variable correclty 2021-03-14 16:11:40 +01:00
Solal Nathan
021a5ef1e8 [borgbackup_client] various fixes for ssh keys 2021-03-14 16:11:18 +01:00
Jeltz
c99b611b8f Various fixes 2021-03-14 14:17:36 +01:00
Jeltz
8112788396 [borgbackup_client] Add 'user:' in authorized_key 2021-03-14 13:18:30 +01:00
Jeltz
2f2f71422f [borgbackup_client] Move some handlers to tasks 2021-03-14 13:16:08 +01:00
Jeltz
637b74a2ad Fix some linter issues 2021-03-13 05:05:30 +01:00
Jeltz
f45cd77510 Merge branch 'master' into logs-first-phase 2021-03-13 05:02:30 +01:00
pz2891
f6e1949c21 Adding master VM for Rives and adapt radius role for bullseye
Some checks failed
continuous-integration/drone/push Build is failing
Details
2021-03-12 12:29:52 +01:00
Otthorn
965bbe62a4 [borgbackup_client] configure encryption passphrase and storage 2021-03-12 01:46:35 +01:00
Otthorn
3f8ffbe164 [borgbackup_client] Add borg username and group defaults 2021-03-12 00:01:11 +01:00
Otthorn
531f7593d2 [borgbackup_client] fix identation
All checks were successful
continuous-integration/drone/push Build is passing
Details
continuous-integration/drone/pr Build is passing
Details
2021-03-11 23:37:55 +01:00
Otthorn
313314a674 [borgbackup_client] fix risky file permission on apt config for pinning version 2021-03-11 23:36:27 +01:00
Otthorn
4642395330 [borgbackup_client] Add initial role defintion
Some checks failed
continuous-integration/drone/push Build is failing
Details
continuous-integration/drone/pr Build is failing
Details
2021-03-11 23:29:57 +01:00
Jeltz
f0f56ecd3f Fix linter-related issues
All checks were successful
continuous-integration/drone/push Build is passing
Details
continuous-integration/drone/pr Build is passing
Details
2021-03-11 20:15:35 +01:00
Jeltz
db8dbb6c7a Add borgbackup_server role 2021-03-11 20:08:41 +01:00
jeltz
2a6c2b30de Merge pull request 'Rôle pour motd' (#38) from update_motd into master
Some checks failed
continuous-integration/drone/push Build is failing
Details 
Reviewed-on: Aurore/ansible#38
 2021-03-11 19:34:41 +01:00
pz2891
6125856c60 Merge branch 'monitoring_ups'
All checks were successful
continuous-integration/drone/push Build is passing
Details
continuous-integration/drone/pr Build is passing
Details
2021-03-11 14:06:38 +01:00
pz2891
d233fc2759 Update of threesold for warning battery 2021-03-11 13:23:15 +01:00
Jeltz
6095d9cef9 Add 'no_log' for postgres passwords
All checks were successful
continuous-integration/drone/push Build is passing
Details
continuous-integration/drone/pr Build is passing
Details
2021-03-10 18:18:08 +01:00
Jeltz
d16f444130 Use a dict for HBA hosts
All checks were successful
continuous-integration/drone/push Build is passing
Details
continuous-integration/drone/pr Build is passing
Details
2021-03-10 15:59:21 +01:00
Jeltz
4f6eda8329 Use /run instead of /var/run to please systemd 2021-03-10 15:57:19 +01:00
Jeltz
628e11488d Switch postgresql to english 2021-03-10 15:22:01 +01:00
Jeltz
bd05b702bb Use '::' in place of '[::]' 2021-03-10 15:19:39 +01:00
Jeltz
06b54d5f89 Use postgresql_privs
Some checks failed
continuous-integration/drone/push Build is failing
Details
continuous-integration/drone/pr Build is failing
Details
2021-03-10 14:27:14 +01:00
Jeltz
40eadf802c Add template and no_log for postgresql_user
Some checks failed
continuous-integration/drone/push Build is failing
Details
continuous-integration/drone/pr Build is failing
Details
2021-03-10 13:58:40 +01:00
Jeltz
8e855d7009 Listen addresses must be quoted
All checks were successful
continuous-integration/drone/push Build is passing
Details
continuous-integration/drone/pr Build is passing
Details
2021-03-10 13:36:10 +01:00
Jeltz
7a07155237 Install python3-psycopg2 (required by Ansible)
All checks were successful
continuous-integration/drone/push Build is passing
Details
continuous-integration/drone/pr Build is passing
Details
2021-03-10 13:35:18 +01:00
Jeltz
36b04239fd Rename 'postgresql_db' to 'postgresql_databases' 2021-03-10 13:34:58 +01:00
Jeltz
f919ec689a Fix 'ansible_header' → 'ansible_managed'
All checks were successful
continuous-integration/drone/push Build is passing
Details
continuous-integration/drone/pr Build is passing
Details
2021-03-10 13:25:36 +01:00
Jeltz
9ef6202fdf Add configuration for users and databases
All checks were successful
continuous-integration/drone/push Build is passing
Details
continuous-integration/drone/pr Build is passing
Details
2021-03-10 13:23:52 +01:00
pz2891
bbf4ac323c Moniroting of ups environmental temperature 2021-03-10 12:55:11 +01:00
Otthorn
8b9bef865e postgresql listen on pseudo-address
All checks were successful
continuous-integration/drone/push Build is passing
Details
continuous-integration/drone/pr Build is passing
Details
2021-03-10 12:26:18 +01:00
Otthorn
dbbaf0d26d remove tailling whitespaces
All checks were successful
continuous-integration/drone/push Build is passing
Details
continuous-integration/drone/pr Build is passing
Details
2021-03-10 12:11:02 +01:00
Otthorn
a4c393d3fb fix yaml ci truthy value
Some checks failed
continuous-integration/drone/push Build is failing
Details
continuous-integration/drone/pr Build is failing
Details
2021-03-10 12:10:06 +01:00
Otthorn
d14306a86c fix syntax for CI
Some checks failed
continuous-integration/drone/push Build is failing
Details
continuous-integration/drone/pr Build is failing
Details
2021-03-10 12:08:05 +01:00
Otthorn
a625a58ddd create role postgresql_server
Some checks failed
continuous-integration/drone/push Build is failing
Details
continuous-integration/drone/pr Build is failing
Details
2021-03-10 12:01:32 +01:00
Jeltz
2c0727a419 Update the list of packages installed via baseconfig
Some checks failed
continuous-integration/drone/push Build is failing
Details
continuous-integration/drone/pr Build is failing
Details
2021-03-07 21:41:42 +01:00
jeltz
41779fb172 Merge pull request 'Add backup root SSH keys' (#27) from add-ssh-keys into master
Some checks failed
continuous-integration/drone/push Build is failing
Details 
Reviewed-on: Aurore/ansible#27
 2021-03-07 21:30:38 +01:00
Jeltz
deb4372588 Merge branch 'master' into add-ssh-keys
Some checks failed
continuous-integration/drone/push Build is failing
Details
continuous-integration/drone/pr Build is failing
Details
2021-03-07 21:29:57 +01:00
Jeltz
929baa300f Use 'update_motd' in 'prometheus_federate' (again)
Some checks failed
continuous-integration/drone/push Build is failing
Details
continuous-integration/drone/pr Build is failing
Details
2021-03-06 04:48:39 +01:00
Jeltz
71ee06c9c0 Fix typo
Some checks failed
continuous-integration/drone/push Build is failing
Details
2021-03-06 04:45:00 +01:00
Jeltz
bc2701d8ba Use 'update_motd' in 'prometheus_federate'
Some checks failed
continuous-integration/drone/push Build is failing
Details
2021-03-06 04:43:09 +01:00
Jeltz
2353589da6 Ensures /etc/update-motd.d exists 2021-03-06 04:42:21 +01:00
Jeltz
1d0200a1f0 Use 'update_motd' in 'prometheus' 2021-03-06 04:32:06 +01:00
Jeltz
b81600aef8 Use 'update_motd' in 'baseconfig' 2021-03-06 04:31:20 +01:00
Jeltz
7e92fdfab7 Create an 'update_motd' role 2021-03-06 04:30:32 +01:00
Jeltz
cf07de4ec4 Fetch switch_snmp jobs
All checks were successful
continuous-integration/drone/push Build is passing
Details
continuous-integration/drone/pr Build is passing
Details
2021-03-06 02:41:58 +01:00
Jeltz
8abca7916f Add switch_snmp job for prometheus 2021-03-06 01:57:32 +01:00
Jeltz
763cc2eb51 Generate targets_switch_snmp.json 2021-03-06 01:57:08 +01:00
Jeltz
eaa0d2e0fc Fix bad indent in snmp.yml.j2 2021-03-06 01:56:18 +01:00
Jeltz
21fed6ae3f Add useful lookups for switchs interfaces 2021-03-06 00:58:46 +01:00
Jeltz
52124d2cad Cleanup prometheus_federate's prometheus.yml.j2
All checks were successful
continuous-integration/drone/push Build is passing
Details
continuous-integration/drone/pr Build is passing
Details
2021-03-06 00:46:13 +01:00
Jeltz
7d527be1c0 Remove duplicate alerts from 'prometheus-federate' 2021-03-06 00:45:43 +01:00
Jeltz
32669e1fb1 Don't load Django rules prometheus-federate 2021-03-06 00:44:22 +01:00
Jeltz
4ca7ebd144 Add a unique exported label (useful for federation) 2021-03-06 00:40:44 +01:00
Jeltz
802bfcc698 'prometheus-federate' must not retrieve its own federated metrics 2021-03-06 00:38:36 +01:00
Jeltz
958eaa1bcb Use label federated_instance instead of instance
All checks were successful
continuous-integration/drone/push Build is passing
Details
continuous-integration/drone/pr Build is passing
Details
2021-03-05 00:54:44 +01:00
Jeltz
6525508401 Forward journald logs to rsyslog
Some checks failed
continuous-integration/drone/push Build is failing
Details
continuous-integration/drone/pr Build is failing
Details
2021-03-02 01:24:53 +01:00
Jeltz
77a5fdac6f Remove some duplicate logs from syslog.log 2021-03-02 00:56:28 +01:00
Jeltz
529550f594 Don't use 'imjournal' ('imuxsock' is already used) 
I still don't understand why it increased the size of the firewall logs
by a factor of 5 to 10, but we don't really need structured logs from
systemd-journald and the author seems to discourage it's use, so I will
not investigate further.
 2021-03-02 00:46:16 +01:00
Jeltz
ee041b9ead Use 'simple' instead of 'oneshot' (rotate service) 2021-03-02 00:14:25 +01:00
Jeltz
1f6bfeee23 Fix broadcast address on routeur-aurore
Some checks failed
continuous-integration/drone/push Build is failing
Details
2021-03-01 20:04:38 +01:00
Jeltz
0f55b90de9 Remove 10.129.0.1 gateway on routeur-aurore-* 2021-03-01 20:04:02 +01:00
Jeltz
b13b22da05 Add ignored destinations for firewall logs
Some checks failed
continuous-integration/drone/push Build is failing
Details
2021-03-01 19:39:11 +01:00
Jeltz
8f815a30c5 Remove useless date (already added by journald)
Some checks failed
continuous-integration/drone/push Build is failing
Details
2021-03-01 17:47:12 +01:00
Jeltz
acd5721a5b Fix typos in rotate-remote-logs.service.j2 2021-03-01 17:45:17 +01:00
Jeltz
9547868c7d Send nginx logs to local syslog
Some checks failed
continuous-integration/drone/push Build is failing
Details
2021-03-01 17:40:05 +01:00
Jeltz
cdb9f88614 Do not rate limit collection of journald logs
Some checks failed
continuous-integration/drone/push Build is failing
Details
2021-03-01 16:31:52 +01:00
Jeltz
9eeb8ccd73 Remove non-Ansible SSH root keys
Some checks failed
continuous-integration/drone/push Build is failing
Details
continuous-integration/drone/pr Build is failing
Details
2021-03-01 16:08:08 +01:00
Jeltz
9252249d18 Use 'true' instead of 'yes'
Some checks failed
continuous-integration/drone/push Build is failing
Details
2021-03-01 04:15:54 +01:00
Jeltz
e4b58c0bf4 Fix typo in 20-collector.conf.j2
Some checks failed
continuous-integration/drone/push Build is failing
Details
2021-03-01 04:07:17 +01:00
Jeltz
c65b3f090b Compress and delete old remote logs
Some checks failed
continuous-integration/drone/push Build is failing
Details 
Logrotate is not used because I didn't found an easy way to configure it
to handle the compression/deletion of log files already rotated by
rsyslog (it is probably possible, but I found the script to be easier).
 2021-03-01 03:58:58 +01:00
Jeltz
f7183095c1 Add explicit permissions for directories
Some checks failed
continuous-integration/drone/push Build is failing
Details
2021-03-01 02:26:22 +01:00
Jeltz
ba8b4e8c29 Fix the ordering of rsyslog.d files
Some checks failed
continuous-integration/drone/push Build is failing
Details 
A call to sendLogsToRemote for logs received through RELP/UDP has
been added (to send them to Logstash/Redis/…), so common.conf's prefix
must be lower than collector.conf's.

Note: future "third-party" config files will also call sendLogsToRemote
and thus will also have to use a prefix higher than 10.
 2021-03-01 02:15:28 +01:00
Jeltz
7fd1b5ff5d Add rsyslog_collector role 2021-03-01 01:27:56 +01:00
Jeltz
6263c31785 Add rsyslog_common role 2021-03-01 01:27:30 +01:00
Yohann D'ANELLO
ba6da939ab
[certbot] Fix certificates for auro.re
All checks were successful
continuous-integration/drone/push Build is passing
Details
continuous-integration/drone/pr Build is passing
Details 
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
 2021-02-24 13:57:59 +01:00
Yohann D'ANELLO
ae151321db
[nginx/certbot] Clone roles from Crans
All checks were successful
continuous-integration/drone/push Build is passing
Details
continuous-integration/drone/pr Build is passing
Details 
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
 2021-02-24 11:46:37 +01:00
pz2891
d7d0676f5e Remove .save file; remove fo fleming prometheus
All checks were successful
continuous-integration/drone/push Build is passing
Details
continuous-integration/drone/pr Build is passing
Details
2021-02-18 17:53:15 +01:00
pz2891
74c30b81df Merge branch 'master' into Global_monitoring
All checks were successful
continuous-integration/drone/push Build is passing
Details
continuous-integration/drone/pr Build is passing
Details
2021-02-17 19:41:06 +01:00
pz2891
b278b02bc2 Remove percentage sign for load alert
Some checks failed
continuous-integration/drone/push Build is failing
Details
2021-02-17 19:37:33 +01:00
pz2891
0b90c9944b Fix CI warning from last commit
Some checks failed
continuous-integration/drone/push Build is failing
Details
2021-02-17 18:15:31 +01:00
pz2891
61001e09f5 Add alert for load usage
Some checks failed
continuous-integration/drone/push Build is failing
Details
2021-02-17 18:08:39 +01:00
pz2891
a5b4deacee Rename federate role; update of alerts of federate prometheus; update of configuration of federate prometheus
Some checks failed
continuous-integration/drone/push Build is failing
Details
2021-02-17 17:42:24 +01:00
Solal Nathan
5b2580056d 🐛 Final fix, should stop sending ill-formed mail from now on
Some checks failed
continuous-integration/drone/push Build is failing
Details
continuous-integration/drone/pr Build is failing
Details
2021-02-16 18:10:39 +01:00
Solal Nathan
f607a76ec8 🐛 Fix a small bug. Postfix does not accept trailing comments
Some checks failed
continuous-integration/drone/push Build is failing
Details
continuous-integration/drone/pr Build is failing
Details
2021-02-16 13:13:26 +01:00
Solal Nathan
3fceeff74f Fix ansible lint for rule [208] always specify mode and owner for template
Some checks failed
continuous-integration/drone/push Build is failing
Details
continuous-integration/drone/pr Build is failing
Details
2021-02-16 02:47:04 +01:00
Solal Nathan
3925e32188 Repect ansible-lint [106] for role names 2021-02-16 02:45:35 +01:00
Solal Nathan
69d732e612 Fix case 2021-02-16 02:42:08 +01:00
Solal Nathan
ab3659adc2 Also config hostname just in case 2021-02-16 02:32:46 +01:00
Solal Nathan
1ca75ccfb0 Add postfix non mailhost conf 2021-02-16 02:22:41 +01:00
Solal Nathan
f08b11445d Add postfix non mailhost task 2021-02-16 02:15:52 +01:00
Solal Nathan
a9b03aed82 Add postfix non mailhost handlers 2021-02-16 02:02:15 +01:00
pz2891
6ec449c3b3 Fix restarting prometheus snmp (not installed)
Some checks failed
continuous-integration/drone/push Build is failing
Details
2021-02-10 20:43:43 +01:00
pz2891
d8924abe66 Add prometheus-federate role 2021-02-10 20:42:37 +01:00
pz2891
4308bedf8f Monitoring of docker containers 2021-02-10 19:06:28 +01:00
pz2891
bd5b88c4fc Correcting format of percentage
Some checks failed
continuous-integration/drone/pr Build is failing
Details
continuous-integration/drone/push Build is failing
Details
2021-02-08 18:22:08 +01:00
pz2891
428b6f5733 Correcting grafana stats for wireless 2021-02-08 13:57:32 +01:00
pz2891
8bfe83f73c Adaptation of UPS alerts 2021-02-08 13:52:17 +01:00
Otthorn
faf5fc7362 fix re2o-service -> re2o_service role name
All checks were successful
continuous-integration/drone/push Build is passing
Details
continuous-integration/drone/pr Build is passing
Details
2021-02-07 17:39:04 +01:00
Otthorn
e6b853a552 fix role name 2021-02-07 17:33:29 +01:00
Otthorn
679daa633f Fix ansible lint 2021-02-07 17:32:44 +01:00
Otthorn
1e136e3736 Remove rules from warn list when it is not needed 2021-02-07 17:31:21 +01:00
ynerant
f9e83e514e Merge pull request 'Captive portal' (#11) from accueil into master
Some checks failed
continuous-integration/drone/push Build is failing
Details 
Reviewed-on: Aurore/ansible#11
 2021-02-05 20:39:50 +01:00
Yohann D'ANELLO
0e224df41f
Install ipset on each router
Some checks failed
continuous-integration/drone/pr Build is failing
Details
continuous-integration/drone/push Build is failing
Details 
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
 2021-02-05 20:39:26 +01:00
Yohann D'ANELLO
c527ce16b0
Use good output interface for the main router 
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
 2021-02-05 20:39:25 +01:00
Yohann D'ANELLO
a82edc3e24
Firewall configuration without MASQUERADE 
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
 2021-02-05 20:39:25 +01:00
Yohann D'ANELLO
bbac76023c
Update masquerade configuration for the captive portal 
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
 2021-02-05 20:39:25 +01:00
Yohann D'ANELLO
7e4a2d20c0
Clone nginx role from Crans 
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
 2021-02-05 20:39:25 +01:00
Yohann D'ANELLO
889cb764c1
Clone certbot role from Crans 
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
 2021-02-05 20:39:25 +01:00
Yohann D'ANELLO
154cbedec2
Deploy firewall config for the captive portal 
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
 2021-02-05 20:39:25 +01:00
Yohann D'ANELLO
9bd06520fb
Add reverse-proxy for Re2o on the portal VM 
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
 2021-02-05 20:39:25 +01:00
Jeltz
e02670afb0
Les caches unbound renvoie les addresses en 10/8 2021-02-05 20:38:50 +01:00
Yohann D'ANELLO
a7b073e1cc
Add captive portal firewall configuration 
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
 2021-02-05 20:38:50 +01:00
Yohann D'ANELLO
89ebbd423e
Use the local firewall repository 
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
 2021-02-05 20:38:50 +01:00
Yohann D'ANELLO
5a09b77070
Resolve DNS for the accueil vlan 
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
 2021-02-05 20:38:49 +01:00
Jeltz
5fc2d0a3f9
Ajout d'accueil dans keepalived 2021-02-05 20:38:49 +01:00
Jeltz
7cdef7ee96
Fix: keep the logs for 90 days 2021-02-05 20:38:49 +01:00
Yohann D'ANELLO
3eb48edccd
Tmux everywhere
Some checks failed
continuous-integration/drone/push Build is failing
Details
continuous-integration/drone/pr Build is failing
Details 
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
 2021-02-02 23:17:47 +01:00
otthorn
f6c9208a41 Merge pull request 'Limit floats in alerts to 2 decimal places' (#5) from human_readable_altermanager into master
Some checks failed
continuous-integration/drone/push Build is failing
Details 
Reviewed-on: Aurore/ansible#5
 2021-01-29 20:48:43 +01:00
otthorn
c9352fb9ab Merge pull request 'Use unattended-upgrades for Debian-Security' (#4) from unattended into master
Some checks failed
continuous-integration/drone/push Build is failing
Details 
Reviewed-on: Aurore/ansible#4
 2021-01-29 20:42:24 +01:00
otthorn
a8af3c9c72 Merge branch 'master' into monitoring_pdu
Some checks failed
continuous-integration/drone/push Build is failing
Details
continuous-integration/drone/pr Build is failing
Details
2021-01-29 20:29:28 +01:00
pz2891
eecf807b53 Delte main.yml.save
Some checks failed
continuous-integration/drone/push Build is failing
Details
continuous-integration/drone/pr Build is failing
Details
2021-01-29 20:15:21 +01:00
pz2891
a12bcbc97f Correct yamlint
Some checks failed
continuous-integration/drone/push Build is failing
Details
2021-01-29 20:12:14 +01:00
Solal Nathan
6ec89b88d8 Limit floats in alerts to 2 decimal places
Some checks failed
continuous-integration/drone/push Build is failing
Details
continuous-integration/drone/pr Build is failing
Details
2021-01-29 19:33:38 +01:00
Jeltz
d59cb41d5e Use unattended-upgrades for Debian-Security
Some checks failed
continuous-integration/drone/push Build is failing
Details
continuous-integration/drone/pr Build is failing
Details
2021-01-28 03:42:07 +01:00
pz2891
e3ae912f44 Add prometheus-aurore to monitor all service VM and physical servers. Modifying monitoring role to exclude wireless access points when running the role on all hosts
Some checks failed
continuous-integration/drone/push Build is failing
Details
2021-01-23 22:10:57 +01:00
pz2891
bac377f634 Update alert rules of UPS
Some checks failed
continuous-integration/drone/push Build is failing
Details
2021-01-23 19:01:27 +01:00
Solal Nathan
fff6ec5807 fix typo: restart -> reload
Some checks failed
continuous-integration/drone/push Build is failing
Details
continuous-integration/drone/pr Build is failing
Details
2021-01-23 16:04:09 +01:00
Solal Nathan
795ee3846f fix indent 2021-01-23 16:02:10 +01:00
Solal Nathan
e6af0f2bd7 fix typo: groupe -> group
Some checks failed
continuous-integration/drone/pr Build is failing
Details
continuous-integration/drone/push Build is failing
Details
2021-01-23 15:59:03 +01:00
Solal Nathan
e1a961273d fix typo: dst -> dest
Some checks failed
continuous-integration/drone/pr Build is failing
Details
continuous-integration/drone/push Build is failing
Details
2021-01-23 15:42:52 +01:00
Otthorn
73142dbe03 Fix yaml syntax
Some checks failed
continuous-integration/drone/push Build is failing
Details
continuous-integration/drone/pr Build is failing
Details
2021-01-23 14:41:25 +01:00
Otthorn
43274ef2ec Add the ansible_managed var at the begining of the config file 2021-01-23 14:40:29 +01:00
Otthorn
66c2ff6305 full path to logrotate for command 2021-01-23 14:37:18 +01:00
Otthorn
05326c15d3 Enforce logrotate rules 2021-01-23 14:27:09 +01:00
Otthorn
ddd69e04c0 create logrotate role 2021-01-23 14:25:35 +01:00
pz2891
c7a3495ae5 Alert rules for UPS
Some checks failed
continuous-integration/drone/push Build is failing
Details
2021-01-22 12:16:36 +01:00
pz2891
40d3c22276 Setup config snmp for Prometheus, to monitore Aurore's PDU
Some checks failed
continuous-integration/drone/push Build is failing
Details
2021-01-21 21:26:40 +01:00
Otthorn
f0e3bd78c9 use command instead of shell when you don't need sh features (pipes, env, etc...)
Some checks failed
continuous-integration/drone/push Build is failing
Details
continuous-integration/drone/pr Build is failing
Details
2021-01-19 23:27:17 +01:00
Otthorn
4a57dad8a6 use handlers
Some checks failed
continuous-integration/drone/push Build is failing
Details
2021-01-19 23:19:25 +01:00
otthorn
facfe3c169 Attempt to fix ansible lint
Some checks failed
continuous-integration/drone/push Build is failing
Details
2021-01-17 18:21:29 +01:00
otthorn
ee1726589a Linter should pass now!
Some checks failed
continuous-integration/drone/push Build is failing
Details
2021-01-17 17:06:59 +01:00
Yohann D'ANELLO
0364006062
Install curl and net-tools by default
Some checks failed
continuous-integration/drone/push Build is failing
Details 
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
 2021-01-17 12:13:30 +01:00
Yohann D'ANELLO
02e4e7d48f
Sort APT packages 
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
 2021-01-17 12:12:53 +01:00
pz2891
078d141236 Add task to remove smartmontools of the VM
Some checks failed
continuous-integration/drone/push Build is failing
Details
2021-01-08 22:43:18 +01:00
otthorn
07f9ee1fbb yes -> true to please yaml linter (truthy)
Some checks failed
continuous-integration/drone/push Build is failing
Details
2021-01-07 11:21:53 +01:00
Paul Ziolkowski
37e3fe2231 Add ldap replica rives
Some checks failed
continuous-integration/drone/push Build is failing
Details
2020-11-09 18:53:47 +01:00
Paul Ziolkowski
b232d6b40b Renommage re2o_service en re2o-service 2020-11-09 18:10:34 +01:00
chirac
8bf080dbf7 Fix radius permission bug 2020-11-08 18:50:38 +01:00
chirac
5b56f9cfc9 Revert "Use command instead of shell" 
This reverts commit 0f9169284f.
 2020-11-08 18:13:21 +01:00
Yohann D'ANELLO
24ab53675a Automatically renew certificates if a new domain was added 2020-11-04 23:58:27 +01:00
Yohann D'ANELLO
03d48a2d82 Add possibility to configure port forwarding, like SSH for Gitea 2020-11-04 23:49:35 +01:00
Yohann D'ANELLO
ac7696c81f User cerbot-nginx to create certificates 2020-11-04 23:07:51 +01:00
Yohann D'ANELLO
f9b7e052b9 Store reverse proxy data in proxy host vars 2020-11-04 22:38:54 +01:00
Yohann D'ANELLO
26427665f3 Fix indentation 2020-11-04 20:11:31 +01:00
Yohann D'ANELLO
9505e87113 Use true instead of yes 2020-11-04 20:00:35 +01:00
Yohann D'ANELLO
0f9169284f Use command instead of shell 2020-11-04 19:49:49 +01:00
Yohann D'ANELLO
4c8e05e08f Use underscore instead of dashes 2020-11-04 19:36:40 +01:00
Yohann D'ANELLO
9b8dee098e Always set file permissions 2020-11-04 19:31:50 +01:00
Yohann D'ANELLO
3c405db661 Add Drone 2020-11-04 00:29:31 +01:00
Yohann D'ANELLO
2a6c005190 Replace ansible_header by ansible_managed 2020-11-03 23:29:30 +01:00
chirac
518560b392 Add new ldap replica at ovh 2020-11-03 14:21:26 +01:00
chirac
a213e18d9c Update Ldap priority 2020-11-02 17:25:38 +01:00
chirac
4a43c0f0db Update re2o ip 2020-11-02 17:25:26 +01:00
Jeltz
3d64f22c39 Modification du keepalive d'OpenSSHd. 
Les serveurs OpenSSH détectent désormais la déconnexion du client et
peuvent terminer la session.
 2020-10-24 19:12:35 +02:00
chirac
68f7fd5b59 Isc-dhcp-server config for banni/accueil vlans 2020-10-17 19:48:34 +02:00
chirac
0d7bfbd872 Create group for non pve physical server 2020-10-17 19:48:17 +02:00
Yohaï-Eliel BERREBY
8adf6b8105 add ipv6-edge-router role 2020-09-28 18:15:03 +02:00
chirac
ba2baa3020 Return routes now handled by keepalived 2020-09-27 13:55:56 +02:00