Commit graph

570 commits

Author SHA1 Message Date
5c7537f4ac Add dovecot role to the mailserver 2021-02-06 12:54:00 +01:00
482bf1f8bc Add dovecot bind password into the vault 2021-02-06 12:53:50 +01:00
f14da45305 dovecot vars 2021-02-06 12:51:12 +01:00
637d7b02d3 dovecot ldap conf 2021-02-06 12:51:12 +01:00
910838c416 Add ssl conf 2021-02-06 12:51:12 +01:00
f0a2bfd740 Add IMAP/POP/SMTP auth conf 2021-02-06 12:51:12 +01:00
f3eeb243bb renamed to fit jinja template 2021-02-06 12:51:12 +01:00
05e16f3226 maildir conf 2021-02-06 12:51:12 +01:00
9260b902d6 auth config 2021-02-06 12:51:12 +01:00
1ec03eda87 dovecot handlers 2021-02-06 12:51:12 +01:00
74e722fef8 fix typo 2021-02-06 12:51:12 +01:00
46c8b82a57 Config outside of conf.d 2021-02-06 12:51:12 +01:00
946b3c973e Apt retry mechanism 2021-02-06 12:51:12 +01:00
cbdde70c2a Starting to try out postfix config 2021-02-06 12:51:12 +01:00
facb7365fc Please linter 2021-02-06 12:51:12 +01:00
769dc5619b Add the mail-certificate role 2021-02-06 12:51:12 +01:00
155daedd24 Agree to Letsencrypt TOS 2021-02-06 12:51:05 +01:00
d49ad0f8d8 oupsie, reverse this 2021-02-06 12:47:49 +01:00
3a2f073db5 fix typo 2021-02-06 12:47:49 +01:00
9543c2f10d dashes are evil, use underscore in var names 2021-02-06 12:47:49 +01:00
a0a6124481 add sain defaults for NFS client 2021-02-06 12:47:49 +01:00
ed9557d342 fix ansible-lint 2021-02-06 12:47:49 +01:00
f7ee1403d9 Fix yaml lint 2021-02-06 12:47:49 +01:00
8cb8548139 mail is no longer in adm 2021-02-06 12:46:39 +01:00
b6355ebb0a Added NFS host_var for mail.auro.re 2021-02-06 12:46:39 +01:00
2605266137 fix var names for better hierarchy 2021-02-06 12:46:39 +01:00
991e306320 Add nfs-client role 2021-02-06 12:46:39 +01:00
40df593f11 Added the certificates gestion 2021-02-06 12:46:39 +01:00
3714396b6b commented unused tasks for the moment 2021-02-06 12:46:39 +01:00
750753f16d Starting the dovecot task 2021-02-06 12:46:39 +01:00
673d77d1be fix yaml lint 2021-02-06 12:46:39 +01:00
de83af936d Add (initial) mailserver playbook 2021-02-06 12:46:39 +01:00
5377378bf7 Add (initial) mail-utils role 2021-02-06 12:46:39 +01:00
f01533409f Add (initial) postfix role 2021-02-06 12:46:39 +01:00
4b3e491983 Add mail vars 2021-02-06 12:46:39 +01:00
ynerant
71d7358bd7 Merge pull request 'Update re2o-service password' (#12) from change-password into master
Some checks failed
continuous-integration/drone/push Build is failing
Reviewed-on: Aurore/ansible#12
2021-02-05 22:19:30 +01:00
4ecb6ed7be
Update re2o-service password
Some checks failed
continuous-integration/drone/push Build is failing
continuous-integration/drone/pr Build is failing
Signed-off-by: ynerant <ynerant@crans.org>
2021-02-05 21:18:26 +01:00
ynerant
f9e83e514e Merge pull request 'Captive portal' (#11) from accueil into master
Some checks failed
continuous-integration/drone/push Build is failing
Reviewed-on: Aurore/ansible#11
2021-02-05 20:39:50 +01:00
0e224df41f
Install ipset on each router
Some checks failed
continuous-integration/drone/pr Build is failing
continuous-integration/drone/push Build is failing
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
2021-02-05 20:39:26 +01:00
ce00d5e50f
Authorize comnpay urls in the captive portal
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
2021-02-05 20:39:26 +01:00
c527ce16b0
Use good output interface for the main router
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
2021-02-05 20:39:25 +01:00
3f62644927
Use production server
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
2021-02-05 20:39:25 +01:00
a82edc3e24
Firewall configuration without MASQUERADE
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
2021-02-05 20:39:25 +01:00
bbac76023c
Update masquerade configuration for the captive portal
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
2021-02-05 20:39:25 +01:00
a808e3c793
Update captive portal nginx configuration
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
2021-02-05 20:39:25 +01:00
7e4a2d20c0
Clone nginx role from Crans
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
2021-02-05 20:39:25 +01:00
889cb764c1
Clone certbot role from Crans
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
2021-02-05 20:39:25 +01:00
154cbedec2
Deploy firewall config for the captive portal
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
2021-02-05 20:39:25 +01:00
ba9e60dba8
Update the nginx configuration of the captive portal
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
2021-02-05 20:39:25 +01:00
9bd06520fb
Add reverse-proxy for Re2o on the portal VM
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
2021-02-05 20:39:25 +01:00