aurore/ansible
aurore/ansible
11
2
Fork 0
Code Issues 1 Pull requests 13 Releases Wiki Activity
604 commits 31 branches 0 tags 3 MiB
Commit graph

367 commits

Author SHA1 Message Date
otthorn
f01533409f Add (initial) postfix role 2021-02-06 12:46:39 +01:00
ynerant
f9e83e514e Merge pull request 'Captive portal' (#11) from accueil into master
Some checks failed
continuous-integration/drone/push Build is failing
Details 
Reviewed-on: Aurore/ansible#11
 2021-02-05 20:39:50 +01:00
Yohann D'ANELLO
0e224df41f
Install ipset on each router
Some checks failed
continuous-integration/drone/pr Build is failing
Details
continuous-integration/drone/push Build is failing
Details 
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
 2021-02-05 20:39:26 +01:00
Yohann D'ANELLO
c527ce16b0
Use good output interface for the main router 
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
 2021-02-05 20:39:25 +01:00
Yohann D'ANELLO
a82edc3e24
Firewall configuration without MASQUERADE 
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
 2021-02-05 20:39:25 +01:00
Yohann D'ANELLO
bbac76023c
Update masquerade configuration for the captive portal 
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
 2021-02-05 20:39:25 +01:00
Yohann D'ANELLO
7e4a2d20c0
Clone nginx role from Crans 
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
 2021-02-05 20:39:25 +01:00
Yohann D'ANELLO
889cb764c1
Clone certbot role from Crans 
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
 2021-02-05 20:39:25 +01:00
Yohann D'ANELLO
154cbedec2
Deploy firewall config for the captive portal 
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
 2021-02-05 20:39:25 +01:00
Yohann D'ANELLO
9bd06520fb
Add reverse-proxy for Re2o on the portal VM 
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
 2021-02-05 20:39:25 +01:00
Jeltz
e02670afb0
Les caches unbound renvoie les addresses en 10/8 2021-02-05 20:38:50 +01:00
Yohann D'ANELLO
a7b073e1cc
Add captive portal firewall configuration 
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
 2021-02-05 20:38:50 +01:00
Yohann D'ANELLO
89ebbd423e
Use the local firewall repository 
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
 2021-02-05 20:38:50 +01:00
Yohann D'ANELLO
5a09b77070
Resolve DNS for the accueil vlan 
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
 2021-02-05 20:38:49 +01:00
Jeltz
5fc2d0a3f9
Ajout d'accueil dans keepalived 2021-02-05 20:38:49 +01:00
Jeltz
7cdef7ee96
Fix: keep the logs for 90 days 2021-02-05 20:38:49 +01:00
Yohann D'ANELLO
3eb48edccd
Tmux everywhere
Some checks failed
continuous-integration/drone/push Build is failing
Details
continuous-integration/drone/pr Build is failing
Details 
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
 2021-02-02 23:17:47 +01:00
otthorn
f6c9208a41 Merge pull request 'Limit floats in alerts to 2 decimal places' (#5) from human_readable_altermanager into master
Some checks failed
continuous-integration/drone/push Build is failing
Details 
Reviewed-on: Aurore/ansible#5
 2021-01-29 20:48:43 +01:00
otthorn
c9352fb9ab Merge pull request 'Use unattended-upgrades for Debian-Security' (#4) from unattended into master
Some checks failed
continuous-integration/drone/push Build is failing
Details 
Reviewed-on: Aurore/ansible#4
 2021-01-29 20:42:24 +01:00
otthorn
a8af3c9c72 Merge branch 'master' into monitoring_pdu
Some checks failed
continuous-integration/drone/push Build is failing
Details
continuous-integration/drone/pr Build is failing
Details
2021-01-29 20:29:28 +01:00
pz2891
eecf807b53 Delte main.yml.save
Some checks failed
continuous-integration/drone/push Build is failing
Details
continuous-integration/drone/pr Build is failing
Details
2021-01-29 20:15:21 +01:00
pz2891
a12bcbc97f Correct yamlint
Some checks failed
continuous-integration/drone/push Build is failing
Details
2021-01-29 20:12:14 +01:00
Solal Nathan
6ec89b88d8 Limit floats in alerts to 2 decimal places
Some checks failed
continuous-integration/drone/push Build is failing
Details
continuous-integration/drone/pr Build is failing
Details
2021-01-29 19:33:38 +01:00
Jeltz
d59cb41d5e Use unattended-upgrades for Debian-Security
Some checks failed
continuous-integration/drone/push Build is failing
Details
continuous-integration/drone/pr Build is failing
Details
2021-01-28 03:42:07 +01:00
pz2891
e3ae912f44 Add prometheus-aurore to monitor all service VM and physical servers. Modifying monitoring role to exclude wireless access points when running the role on all hosts
Some checks failed
continuous-integration/drone/push Build is failing
Details
2021-01-23 22:10:57 +01:00
pz2891
bac377f634 Update alert rules of UPS
Some checks failed
continuous-integration/drone/push Build is failing
Details
2021-01-23 19:01:27 +01:00
Solal Nathan
fff6ec5807 fix typo: restart -> reload
Some checks failed
continuous-integration/drone/push Build is failing
Details
continuous-integration/drone/pr Build is failing
Details
2021-01-23 16:04:09 +01:00
Solal Nathan
795ee3846f fix indent 2021-01-23 16:02:10 +01:00
Solal Nathan
e6af0f2bd7 fix typo: groupe -> group
Some checks failed
continuous-integration/drone/pr Build is failing
Details
continuous-integration/drone/push Build is failing
Details
2021-01-23 15:59:03 +01:00
Solal Nathan
e1a961273d fix typo: dst -> dest
Some checks failed
continuous-integration/drone/pr Build is failing
Details
continuous-integration/drone/push Build is failing
Details
2021-01-23 15:42:52 +01:00
Otthorn
73142dbe03 Fix yaml syntax
Some checks failed
continuous-integration/drone/push Build is failing
Details
continuous-integration/drone/pr Build is failing
Details
2021-01-23 14:41:25 +01:00
Otthorn
43274ef2ec Add the ansible_managed var at the begining of the config file 2021-01-23 14:40:29 +01:00
Otthorn
66c2ff6305 full path to logrotate for command 2021-01-23 14:37:18 +01:00
Otthorn
05326c15d3 Enforce logrotate rules 2021-01-23 14:27:09 +01:00
Otthorn
ddd69e04c0 create logrotate role 2021-01-23 14:25:35 +01:00
pz2891
c7a3495ae5 Alert rules for UPS
Some checks failed
continuous-integration/drone/push Build is failing
Details
2021-01-22 12:16:36 +01:00
pz2891
40d3c22276 Setup config snmp for Prometheus, to monitore Aurore's PDU
Some checks failed
continuous-integration/drone/push Build is failing
Details
2021-01-21 21:26:40 +01:00
Otthorn
f0e3bd78c9 use command instead of shell when you don't need sh features (pipes, env, etc...)
Some checks failed
continuous-integration/drone/push Build is failing
Details
continuous-integration/drone/pr Build is failing
Details
2021-01-19 23:27:17 +01:00
Otthorn
4a57dad8a6 use handlers
Some checks failed
continuous-integration/drone/push Build is failing
Details
2021-01-19 23:19:25 +01:00
otthorn
facfe3c169 Attempt to fix ansible lint
Some checks failed
continuous-integration/drone/push Build is failing
Details
2021-01-17 18:21:29 +01:00
otthorn
ee1726589a Linter should pass now!
Some checks failed
continuous-integration/drone/push Build is failing
Details
2021-01-17 17:06:59 +01:00
Yohann D'ANELLO
0364006062
Install curl and net-tools by default
Some checks failed
continuous-integration/drone/push Build is failing
Details 
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
 2021-01-17 12:13:30 +01:00
Yohann D'ANELLO
02e4e7d48f
Sort APT packages 
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
 2021-01-17 12:12:53 +01:00
pz2891
078d141236 Add task to remove smartmontools of the VM
Some checks failed
continuous-integration/drone/push Build is failing
Details
2021-01-08 22:43:18 +01:00
otthorn
07f9ee1fbb yes -> true to please yaml linter (truthy)
Some checks failed
continuous-integration/drone/push Build is failing
Details
2021-01-07 11:21:53 +01:00
Paul Ziolkowski
37e3fe2231 Add ldap replica rives
Some checks failed
continuous-integration/drone/push Build is failing
Details
2020-11-09 18:53:47 +01:00
Paul Ziolkowski
b232d6b40b Renommage re2o_service en re2o-service 2020-11-09 18:10:34 +01:00
chirac
8bf080dbf7 Fix radius permission bug 2020-11-08 18:50:38 +01:00
chirac
5b56f9cfc9 Revert "Use command instead of shell" 
This reverts commit 0f9169284f.
 2020-11-08 18:13:21 +01:00
Yohann D'ANELLO
24ab53675a Automatically renew certificates if a new domain was added 2020-11-04 23:58:27 +01:00
Yohann D'ANELLO
03d48a2d82 Add possibility to configure port forwarding, like SSH for Gitea 2020-11-04 23:49:35 +01:00
Yohann D'ANELLO
ac7696c81f User cerbot-nginx to create certificates 2020-11-04 23:07:51 +01:00
Yohann D'ANELLO
f9b7e052b9 Store reverse proxy data in proxy host vars 2020-11-04 22:38:54 +01:00
Yohann D'ANELLO
26427665f3 Fix indentation 2020-11-04 20:11:31 +01:00
Yohann D'ANELLO
9505e87113 Use true instead of yes 2020-11-04 20:00:35 +01:00
Yohann D'ANELLO
0f9169284f Use command instead of shell 2020-11-04 19:49:49 +01:00
Yohann D'ANELLO
4c8e05e08f Use underscore instead of dashes 2020-11-04 19:36:40 +01:00
Yohann D'ANELLO
9b8dee098e Always set file permissions 2020-11-04 19:31:50 +01:00
Yohann D'ANELLO
3c405db661 Add Drone 2020-11-04 00:29:31 +01:00
Yohann D'ANELLO
2a6c005190 Replace ansible_header by ansible_managed 2020-11-03 23:29:30 +01:00
chirac
518560b392 Add new ldap replica at ovh 2020-11-03 14:21:26 +01:00
chirac
a213e18d9c Update Ldap priority 2020-11-02 17:25:38 +01:00
chirac
4a43c0f0db Update re2o ip 2020-11-02 17:25:26 +01:00
Jeltz
3d64f22c39 Modification du keepalive d'OpenSSHd. 
Les serveurs OpenSSH détectent désormais la déconnexion du client et
peuvent terminer la session.
 2020-10-24 19:12:35 +02:00
chirac
68f7fd5b59 Isc-dhcp-server config for banni/accueil vlans 2020-10-17 19:48:34 +02:00
chirac
0d7bfbd872 Create group for non pve physical server 2020-10-17 19:48:17 +02:00
Yohaï-Eliel BERREBY
8adf6b8105 add ipv6-edge-router role 2020-09-28 18:15:03 +02:00
chirac
ba2baa3020 Return routes now handled by keepalived 2020-09-27 13:55:56 +02:00
Gabriel Detraz
bba144ef14 Inverse les opérations de lecture/ecriture par defaut -> rw 
Ce fix corrige le problème des opérations d'écritures dans la bdd master remote,
qui marchaient mal, désormais les lignes de logs historiques sont correctement écrites.
Il semblerait que django avait du mal à savoir que ces opérations reversion sont bien des opérations
d'écriture.
 2020-09-19 14:02:53 +02:00
chirac
773f39cede Fichier inutile 2020-09-16 21:04:10 +02:00
chirac
dac049f125 Tous les cron dhcp sont décalés de 2 minutes 2020-09-16 21:02:44 +02:00
Yohaï-Eliel BERREBY
91157d80c1 dhcp: run re2o service as root in cron / directly 2020-09-13 17:54:46 +02:00
Yohaï-Eliel BERREBY
6dd6168d2a dhcp: upgrade role for dhcp-aurore-backup 2020-09-12 16:03:33 +02:00
Yohaï-Eliel BERREBY
9b07fc9001 dhcp: manage dhcp-aurore 2020-09-11 15:13:11 +02:00
chirac
26743b464d Add Radius-aurore.adm.auro.re to ansible managed radius servers 2020-09-09 23:17:15 +02:00
chirac
53842e4c2f Add ipv6 Radius AURORE address 2020-09-09 23:16:35 +02:00
Yohaï-Eliel BERREBY
e48425300a Merge branch 'ansible-2.10' into master 2020-09-08 22:35:30 +02:00
Yohann D'ANELLO
5c46191389 Register camelot and gitea, make camelot accessible for everyone 2020-09-04 09:56:02 +02:00
Yohaï-Eliel BERREBY
646ebd3ba9 router: ansibilize routeur-aurore{,backup} 2020-08-08 20:45:38 +02:00
Yohaï-Eliel BERREBY
12b0bc91dc radvd: cosmetic changes 2020-08-08 11:32:34 +02:00
Yohaï-Eliel BERREBY
b199c45d97 fix broken radius role 
Would crash if called from anything other than the nuke radius DBs
playbook
 2020-08-08 11:32:06 +02:00
Yohaï-Eliel BERREBY
af3c3dc132 enable radvd service 2020-08-08 11:19:16 +02:00
Yohaï-Eliel BERREBY
30e503458e add ability to nuke radius DBs 2020-08-06 09:57:54 +02:00
Yohaï-Eliel BERREBY
e762091435 explain fe80::1 keepalived/radvd magic 2020-08-02 12:15:27 +02:00
Yohaï-Eliel BERREBY
de36a3bb95 announce IPv6 recursive resolver (untested) 2020-08-02 12:15:15 +02:00
Yohaï-Eliel BERREBY
3a8112bf0d roll out (private) IPv6 on George Sand 2020-08-01 17:48:39 +02:00
Yohaï-Eliel BERREBY
361fd54414 keepalived: add IPv6 virtual route 2020-08-01 16:07:27 +02:00
Yohaï-Eliel BERREBY
2e6306b61e radvd: advertise keepalived VIP 2020-08-01 16:05:41 +02:00
Yohaï-Eliel BERREBY
56808e4e60 wip: begin updating 'router' role for IPv6 
pending: update virtual routes
 2020-08-01 15:46:41 +02:00
Yohaï-Eliel BERREBY
194c19fbf3 fix wrong hardcoded email for keepalived monitoring 2020-08-01 15:34:49 +02:00
Yohaï-Eliel BERREBY
713c93ac44 update unbound role for IPv6 2020-08-01 14:32:02 +02:00
Yohaï-Eliel BERREBY
d54da8d2b9 add ipv6_base_prefix variable 2020-08-01 14:31:49 +02:00
Yohaï-Eliel BERREBY
f09b0906c6 radvd: fix wifi interface, comment out APs for now 2020-08-01 14:20:08 +02:00
Yohaï-Eliel BERREBY
a4841e6947 add radvd role, deploy in routers 2020-08-01 12:56:23 +02:00
Alexandre Iooss
c7c6e50dd9 Remove matrix mxisd 2020-07-22 10:04:25 +02:00
Yohaï-Eliel BERREBY
337906c6c0 add gs dhcp, dns, routing 
and add thor to inventory
 2020-07-06 18:40:54 +02:00
Yohaï-Eliel BERREBY
fe62055cdd radius: enable service, fix details 2020-05-21 19:25:30 +02:00
Yohaï-Eliel BERREBY
8ce63d14b6 radius: fix settings_local.py 2020-05-21 18:39:50 +02:00
Yohaï-Eliel BERREBY
99070ed5ef radius: step 2 of deployment (WIP) 2020-05-21 18:06:37 +02:00
Yohaï-Eliel BERREBY
e2fa1964af radius: change proxy.conf password, use vault 
and also actually template it... it wasn't being
uploaded.
 2020-05-21 14:19:28 +02:00