aurore/ansible
aurore/ansible
11
2
Fork 0
Code Issues 1 Pull requests 13 Releases Wiki Activity
1199 commits 31 branches 0 tags 3 MiB
Commit graph

638 commits

Author SHA1 Message Date
pz2891
0b90c9944b Fix CI warning from last commit
Some checks failed
continuous-integration/drone/push Build is failing
Details
2021-02-17 18:15:31 +01:00
pz2891
61001e09f5 Add alert for load usage
Some checks failed
continuous-integration/drone/push Build is failing
Details
2021-02-17 18:08:39 +01:00
pz2891
a5b4deacee Rename federate role; update of alerts of federate prometheus; update of configuration of federate prometheus
Some checks failed
continuous-integration/drone/push Build is failing
Details
2021-02-17 17:42:24 +01:00
Solal Nathan
5b2580056d 🐛 Final fix, should stop sending ill-formed mail from now on
Some checks failed
continuous-integration/drone/push Build is failing
Details
continuous-integration/drone/pr Build is failing
Details
2021-02-16 18:10:39 +01:00
Solal Nathan
f607a76ec8 🐛 Fix a small bug. Postfix does not accept trailing comments
Some checks failed
continuous-integration/drone/push Build is failing
Details
continuous-integration/drone/pr Build is failing
Details
2021-02-16 13:13:26 +01:00
Solal Nathan
3fceeff74f Fix ansible lint for rule [208] always specify mode and owner for template
Some checks failed
continuous-integration/drone/push Build is failing
Details
continuous-integration/drone/pr Build is failing
Details
2021-02-16 02:47:04 +01:00
Solal Nathan
3925e32188 Repect ansible-lint [106] for role names 2021-02-16 02:45:35 +01:00
Solal Nathan
69d732e612 Fix case 2021-02-16 02:42:08 +01:00
Solal Nathan
ab3659adc2 Also config hostname just in case 2021-02-16 02:32:46 +01:00
Solal Nathan
1ca75ccfb0 Add postfix non mailhost conf 2021-02-16 02:22:41 +01:00
Solal Nathan
f08b11445d Add postfix non mailhost task 2021-02-16 02:15:52 +01:00
Solal Nathan
a9b03aed82 Add postfix non mailhost handlers 2021-02-16 02:02:15 +01:00
pz2891
6ec449c3b3 Fix restarting prometheus snmp (not installed)
Some checks failed
continuous-integration/drone/push Build is failing
Details
2021-02-10 20:43:43 +01:00
pz2891
d8924abe66 Add prometheus-federate role 2021-02-10 20:42:37 +01:00
pz2891
4308bedf8f Monitoring of docker containers 2021-02-10 19:06:28 +01:00
pz2891
bd5b88c4fc Correcting format of percentage
Some checks failed
continuous-integration/drone/pr Build is failing
Details
continuous-integration/drone/push Build is failing
Details
2021-02-08 18:22:08 +01:00
pz2891
428b6f5733 Correcting grafana stats for wireless 2021-02-08 13:57:32 +01:00
pz2891
8bfe83f73c Adaptation of UPS alerts 2021-02-08 13:52:17 +01:00
Otthorn
faf5fc7362 fix re2o-service -> re2o_service role name
All checks were successful
continuous-integration/drone/push Build is passing
Details
continuous-integration/drone/pr Build is passing
Details
2021-02-07 17:39:04 +01:00
Otthorn
e6b853a552 fix role name 2021-02-07 17:33:29 +01:00
Otthorn
679daa633f Fix ansible lint 2021-02-07 17:32:44 +01:00
Otthorn
1e136e3736 Remove rules from warn list when it is not needed 2021-02-07 17:31:21 +01:00
ynerant
f9e83e514e Merge pull request 'Captive portal' (#11) from accueil into master
Some checks failed
continuous-integration/drone/push Build is failing
Details 
Reviewed-on: Aurore/ansible#11
 2021-02-05 20:39:50 +01:00
Yohann D'ANELLO
0e224df41f
Install ipset on each router
Some checks failed
continuous-integration/drone/pr Build is failing
Details
continuous-integration/drone/push Build is failing
Details 
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
 2021-02-05 20:39:26 +01:00
Yohann D'ANELLO
c527ce16b0
Use good output interface for the main router 
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
 2021-02-05 20:39:25 +01:00
Yohann D'ANELLO
a82edc3e24
Firewall configuration without MASQUERADE 
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
 2021-02-05 20:39:25 +01:00
Yohann D'ANELLO
bbac76023c
Update masquerade configuration for the captive portal 
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
 2021-02-05 20:39:25 +01:00
Yohann D'ANELLO
7e4a2d20c0
Clone nginx role from Crans 
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
 2021-02-05 20:39:25 +01:00
Yohann D'ANELLO
889cb764c1
Clone certbot role from Crans 
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
 2021-02-05 20:39:25 +01:00
Yohann D'ANELLO
154cbedec2
Deploy firewall config for the captive portal 
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
 2021-02-05 20:39:25 +01:00
Yohann D'ANELLO
9bd06520fb
Add reverse-proxy for Re2o on the portal VM 
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
 2021-02-05 20:39:25 +01:00
Jeltz
e02670afb0
Les caches unbound renvoie les addresses en 10/8 2021-02-05 20:38:50 +01:00
Yohann D'ANELLO
a7b073e1cc
Add captive portal firewall configuration 
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
 2021-02-05 20:38:50 +01:00
Yohann D'ANELLO
89ebbd423e
Use the local firewall repository 
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
 2021-02-05 20:38:50 +01:00
Yohann D'ANELLO
5a09b77070
Resolve DNS for the accueil vlan 
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
 2021-02-05 20:38:49 +01:00
Jeltz
5fc2d0a3f9
Ajout d'accueil dans keepalived 2021-02-05 20:38:49 +01:00
Jeltz
7cdef7ee96
Fix: keep the logs for 90 days 2021-02-05 20:38:49 +01:00
Yohann D'ANELLO
3eb48edccd
Tmux everywhere
Some checks failed
continuous-integration/drone/push Build is failing
Details
continuous-integration/drone/pr Build is failing
Details 
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
 2021-02-02 23:17:47 +01:00
otthorn
f6c9208a41 Merge pull request 'Limit floats in alerts to 2 decimal places' (#5) from human_readable_altermanager into master
Some checks failed
continuous-integration/drone/push Build is failing
Details 
Reviewed-on: Aurore/ansible#5
 2021-01-29 20:48:43 +01:00
otthorn
c9352fb9ab Merge pull request 'Use unattended-upgrades for Debian-Security' (#4) from unattended into master
Some checks failed
continuous-integration/drone/push Build is failing
Details 
Reviewed-on: Aurore/ansible#4
 2021-01-29 20:42:24 +01:00
otthorn
a8af3c9c72 Merge branch 'master' into monitoring_pdu
Some checks failed
continuous-integration/drone/push Build is failing
Details
continuous-integration/drone/pr Build is failing
Details
2021-01-29 20:29:28 +01:00
pz2891
eecf807b53 Delte main.yml.save
Some checks failed
continuous-integration/drone/push Build is failing
Details
continuous-integration/drone/pr Build is failing
Details
2021-01-29 20:15:21 +01:00
pz2891
a12bcbc97f Correct yamlint
Some checks failed
continuous-integration/drone/push Build is failing
Details
2021-01-29 20:12:14 +01:00
Solal Nathan
6ec89b88d8 Limit floats in alerts to 2 decimal places
Some checks failed
continuous-integration/drone/push Build is failing
Details
continuous-integration/drone/pr Build is failing
Details
2021-01-29 19:33:38 +01:00
Jeltz
d59cb41d5e Use unattended-upgrades for Debian-Security
Some checks failed
continuous-integration/drone/push Build is failing
Details
continuous-integration/drone/pr Build is failing
Details
2021-01-28 03:42:07 +01:00
pz2891
e3ae912f44 Add prometheus-aurore to monitor all service VM and physical servers. Modifying monitoring role to exclude wireless access points when running the role on all hosts
Some checks failed
continuous-integration/drone/push Build is failing
Details
2021-01-23 22:10:57 +01:00
pz2891
bac377f634 Update alert rules of UPS
Some checks failed
continuous-integration/drone/push Build is failing
Details
2021-01-23 19:01:27 +01:00
Solal Nathan
fff6ec5807 fix typo: restart -> reload
Some checks failed
continuous-integration/drone/push Build is failing
Details
continuous-integration/drone/pr Build is failing
Details
2021-01-23 16:04:09 +01:00
Solal Nathan
795ee3846f fix indent 2021-01-23 16:02:10 +01:00
Solal Nathan
e6af0f2bd7 fix typo: groupe -> group
Some checks failed
continuous-integration/drone/pr Build is failing
Details
continuous-integration/drone/push Build is failing
Details
2021-01-23 15:59:03 +01:00
Solal Nathan
e1a961273d fix typo: dst -> dest
Some checks failed
continuous-integration/drone/pr Build is failing
Details
continuous-integration/drone/push Build is failing
Details
2021-01-23 15:42:52 +01:00
Otthorn
73142dbe03 Fix yaml syntax
Some checks failed
continuous-integration/drone/push Build is failing
Details
continuous-integration/drone/pr Build is failing
Details
2021-01-23 14:41:25 +01:00
Otthorn
43274ef2ec Add the ansible_managed var at the begining of the config file 2021-01-23 14:40:29 +01:00
Otthorn
66c2ff6305 full path to logrotate for command 2021-01-23 14:37:18 +01:00
Otthorn
05326c15d3 Enforce logrotate rules 2021-01-23 14:27:09 +01:00
Otthorn
ddd69e04c0 create logrotate role 2021-01-23 14:25:35 +01:00
pz2891
c7a3495ae5 Alert rules for UPS
Some checks failed
continuous-integration/drone/push Build is failing
Details
2021-01-22 12:16:36 +01:00
pz2891
40d3c22276 Setup config snmp for Prometheus, to monitore Aurore's PDU
Some checks failed
continuous-integration/drone/push Build is failing
Details
2021-01-21 21:26:40 +01:00
Otthorn
f0e3bd78c9 use command instead of shell when you don't need sh features (pipes, env, etc...)
Some checks failed
continuous-integration/drone/push Build is failing
Details
continuous-integration/drone/pr Build is failing
Details
2021-01-19 23:27:17 +01:00
Otthorn
4a57dad8a6 use handlers
Some checks failed
continuous-integration/drone/push Build is failing
Details
2021-01-19 23:19:25 +01:00
otthorn
facfe3c169 Attempt to fix ansible lint
Some checks failed
continuous-integration/drone/push Build is failing
Details
2021-01-17 18:21:29 +01:00
otthorn
ee1726589a Linter should pass now!
Some checks failed
continuous-integration/drone/push Build is failing
Details
2021-01-17 17:06:59 +01:00
Yohann D'ANELLO
0364006062
Install curl and net-tools by default
Some checks failed
continuous-integration/drone/push Build is failing
Details 
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
 2021-01-17 12:13:30 +01:00
Yohann D'ANELLO
02e4e7d48f
Sort APT packages 
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
 2021-01-17 12:12:53 +01:00
pz2891
078d141236 Add task to remove smartmontools of the VM
Some checks failed
continuous-integration/drone/push Build is failing
Details
2021-01-08 22:43:18 +01:00
otthorn
07f9ee1fbb yes -> true to please yaml linter (truthy)
Some checks failed
continuous-integration/drone/push Build is failing
Details
2021-01-07 11:21:53 +01:00
Paul Ziolkowski
37e3fe2231 Add ldap replica rives
Some checks failed
continuous-integration/drone/push Build is failing
Details
2020-11-09 18:53:47 +01:00
Paul Ziolkowski
b232d6b40b Renommage re2o_service en re2o-service 2020-11-09 18:10:34 +01:00
chirac
8bf080dbf7 Fix radius permission bug 2020-11-08 18:50:38 +01:00
chirac
5b56f9cfc9 Revert "Use command instead of shell" 
This reverts commit 0f9169284f.
 2020-11-08 18:13:21 +01:00
Yohann D'ANELLO
24ab53675a Automatically renew certificates if a new domain was added 2020-11-04 23:58:27 +01:00
Yohann D'ANELLO
03d48a2d82 Add possibility to configure port forwarding, like SSH for Gitea 2020-11-04 23:49:35 +01:00
Yohann D'ANELLO
ac7696c81f User cerbot-nginx to create certificates 2020-11-04 23:07:51 +01:00
Yohann D'ANELLO
f9b7e052b9 Store reverse proxy data in proxy host vars 2020-11-04 22:38:54 +01:00
Yohann D'ANELLO
26427665f3 Fix indentation 2020-11-04 20:11:31 +01:00
Yohann D'ANELLO
9505e87113 Use true instead of yes 2020-11-04 20:00:35 +01:00
Yohann D'ANELLO
0f9169284f Use command instead of shell 2020-11-04 19:49:49 +01:00
Yohann D'ANELLO
4c8e05e08f Use underscore instead of dashes 2020-11-04 19:36:40 +01:00
Yohann D'ANELLO
9b8dee098e Always set file permissions 2020-11-04 19:31:50 +01:00
Yohann D'ANELLO
3c405db661 Add Drone 2020-11-04 00:29:31 +01:00
Yohann D'ANELLO
2a6c005190 Replace ansible_header by ansible_managed 2020-11-03 23:29:30 +01:00
chirac
518560b392 Add new ldap replica at ovh 2020-11-03 14:21:26 +01:00
chirac
a213e18d9c Update Ldap priority 2020-11-02 17:25:38 +01:00
chirac
4a43c0f0db Update re2o ip 2020-11-02 17:25:26 +01:00
Jeltz
3d64f22c39 Modification du keepalive d'OpenSSHd. 
Les serveurs OpenSSH détectent désormais la déconnexion du client et
peuvent terminer la session.
 2020-10-24 19:12:35 +02:00
chirac
68f7fd5b59 Isc-dhcp-server config for banni/accueil vlans 2020-10-17 19:48:34 +02:00
chirac
0d7bfbd872 Create group for non pve physical server 2020-10-17 19:48:17 +02:00
Yohaï-Eliel BERREBY
8adf6b8105 add ipv6-edge-router role 2020-09-28 18:15:03 +02:00
chirac
ba2baa3020 Return routes now handled by keepalived 2020-09-27 13:55:56 +02:00
Gabriel Detraz
bba144ef14 Inverse les opérations de lecture/ecriture par defaut -> rw 
Ce fix corrige le problème des opérations d'écritures dans la bdd master remote,
qui marchaient mal, désormais les lignes de logs historiques sont correctement écrites.
Il semblerait que django avait du mal à savoir que ces opérations reversion sont bien des opérations
d'écriture.
 2020-09-19 14:02:53 +02:00
chirac
773f39cede Fichier inutile 2020-09-16 21:04:10 +02:00
chirac
dac049f125 Tous les cron dhcp sont décalés de 2 minutes 2020-09-16 21:02:44 +02:00
Yohaï-Eliel BERREBY
91157d80c1 dhcp: run re2o service as root in cron / directly 2020-09-13 17:54:46 +02:00
Yohaï-Eliel BERREBY
6dd6168d2a dhcp: upgrade role for dhcp-aurore-backup 2020-09-12 16:03:33 +02:00
Yohaï-Eliel BERREBY
9b07fc9001 dhcp: manage dhcp-aurore 2020-09-11 15:13:11 +02:00
chirac
26743b464d Add Radius-aurore.adm.auro.re to ansible managed radius servers 2020-09-09 23:17:15 +02:00
chirac
53842e4c2f Add ipv6 Radius AURORE address 2020-09-09 23:16:35 +02:00
Yohaï-Eliel BERREBY
e48425300a Merge branch 'ansible-2.10' into master 2020-09-08 22:35:30 +02:00
Yohann D'ANELLO
5c46191389 Register camelot and gitea, make camelot accessible for everyone 2020-09-04 09:56:02 +02:00
Yohaï-Eliel BERREBY
646ebd3ba9 router: ansibilize routeur-aurore{,backup} 2020-08-08 20:45:38 +02:00
Yohaï-Eliel BERREBY
12b0bc91dc radvd: cosmetic changes 2020-08-08 11:32:34 +02:00
Yohaï-Eliel BERREBY
b199c45d97 fix broken radius role 
Would crash if called from anything other than the nuke radius DBs
playbook
 2020-08-08 11:32:06 +02:00
Yohaï-Eliel BERREBY
af3c3dc132 enable radvd service 2020-08-08 11:19:16 +02:00
Yohaï-Eliel BERREBY
30e503458e add ability to nuke radius DBs 2020-08-06 09:57:54 +02:00
Yohaï-Eliel BERREBY
e762091435 explain fe80::1 keepalived/radvd magic 2020-08-02 12:15:27 +02:00
Yohaï-Eliel BERREBY
de36a3bb95 announce IPv6 recursive resolver (untested) 2020-08-02 12:15:15 +02:00
Yohaï-Eliel BERREBY
3a8112bf0d roll out (private) IPv6 on George Sand 2020-08-01 17:48:39 +02:00
Yohaï-Eliel BERREBY
361fd54414 keepalived: add IPv6 virtual route 2020-08-01 16:07:27 +02:00
Yohaï-Eliel BERREBY
2e6306b61e radvd: advertise keepalived VIP 2020-08-01 16:05:41 +02:00
Yohaï-Eliel BERREBY
56808e4e60 wip: begin updating 'router' role for IPv6 
pending: update virtual routes
 2020-08-01 15:46:41 +02:00
Yohaï-Eliel BERREBY
194c19fbf3 fix wrong hardcoded email for keepalived monitoring 2020-08-01 15:34:49 +02:00
Yohaï-Eliel BERREBY
713c93ac44 update unbound role for IPv6 2020-08-01 14:32:02 +02:00
Yohaï-Eliel BERREBY
d54da8d2b9 add ipv6_base_prefix variable 2020-08-01 14:31:49 +02:00
Yohaï-Eliel BERREBY
f09b0906c6 radvd: fix wifi interface, comment out APs for now 2020-08-01 14:20:08 +02:00
Yohaï-Eliel BERREBY
a4841e6947 add radvd role, deploy in routers 2020-08-01 12:56:23 +02:00
Alexandre Iooss
c7c6e50dd9 Remove matrix mxisd 2020-07-22 10:04:25 +02:00
Yohaï-Eliel BERREBY
337906c6c0 add gs dhcp, dns, routing 
and add thor to inventory
 2020-07-06 18:40:54 +02:00
Yohaï-Eliel BERREBY
fe62055cdd radius: enable service, fix details 2020-05-21 19:25:30 +02:00
Yohaï-Eliel BERREBY
8ce63d14b6 radius: fix settings_local.py 2020-05-21 18:39:50 +02:00
Yohaï-Eliel BERREBY
99070ed5ef radius: step 2 of deployment (WIP) 2020-05-21 18:06:37 +02:00
Yohaï-Eliel BERREBY
e2fa1964af radius: change proxy.conf password, use vault 
and also actually template it... it wasn't being
uploaded.
 2020-05-21 14:19:28 +02:00
Yohaï-Eliel BERREBY
266b0dde6f radius: initial setup 2020-05-16 22:08:22 +02:00
Yohaï-Eliel BERREBY
6d00e2733b unbound: fix log rotation 
Was too frequent, now that we only log SERVFAILs.
Rotate according to file size.
Fix unbound-control binary path.
 2020-05-11 20:18:23 +02:00
Yohaï-Eliel BERREBY
ba3aec348f keepalived: deploy to fleming w/ proper password 2020-05-09 16:07:04 +02:00
Alexandre Iooss
9c226c680c
Certbot wildcard role 2020-05-09 12:54:38 +02:00
Alexandre Iooss
544498c81a
New reverse proxy role 2020-05-09 12:52:17 +02:00
Yohaï-Eliel BERREBY
dea4dda285 hosts: remove dhcp and recursive_dns groups 
Use patterns instead for now.
 2020-05-09 10:15:28 +02:00
Yohaï-Eliel BERREBY
a4d0f051b6 dhcp: restart server on config update 2020-05-08 16:44:32 +02:00
Yohaï-Eliel BERREBY
223578eefa keepalived: no ansible_managed 
Used to restart keepalived needlessly
 2020-05-08 16:43:49 +02:00
Yohaï-Eliel BERREBY
4372b21976 dhcp: allow different router IP suffix 
This variable is only needed because we're in the process of deploying
keepalived. For now it's only at EDC.
 2020-05-08 16:36:07 +02:00
Yohaï-Eliel BERREBY
e58ee1c4b5 keepalived: initial config 2020-05-08 16:25:02 +02:00
Yohaï-Eliel BERREBY
fea73a13aa aurore-firewall: correct backup router ip 2020-05-07 20:23:30 +02:00
Yohaï-Eliel BERREBY
8ba2de1698 aurore-firewall: fix repo address + branch 2020-05-07 20:01:44 +02:00
Yohaï-Eliel BERREBY
44be43e528 aurore-firewall: add config after cloning 2020-05-07 19:57:00 +02:00
Yohaï-Eliel BERREBY
c77ae7f4c3 aurore-firewall: initial setup 
group_vars: add apartment_block_id var
dhcp: move vars to role
 2020-05-07 19:47:50 +02:00
Yohaï-Eliel BERREBY
e4d428d1dc unbound: change task order 
Seems to be necessary to restart unbound manually for some reason?...
 2020-05-07 18:49:31 +02:00
Yohaï-Eliel BERREBY
4f224ee817 re2o-service: install Python dependencies 2020-05-07 14:55:12 +02:00
Yohaï-Eliel BERREBY
24a6063a91 baseconfig: fix resolv.conf 2020-05-07 14:51:02 +02:00
Yohaï-Eliel BERREBY
7c7abb6be5 baseconfig: set up /etc/resolv.conf 2020-05-07 12:53:59 +02:00
Alexandre IOOSS
81592fa986 Merge branch 'master' into 'aurore-dev' 
# Conflicts:
#   .gitignore
#   hosts
#   network.yml
#   proxmox.yml
 2020-05-03 16:11:19 +02:00
Yohaï-Eliel BERREBY
a77b2c4f0f unbound: fix MTU settings 
That was the root cause of all our DNSSEC issues.
Now that this was fixed, we're not having these anymore,
so the relaxed checks can be restored back to their original state.
 2020-05-02 18:59:22 +02:00
Yohaï-Eliel BERREBY
aae7e0120a unbound: drop verbosity but log SERVFAILs 
TODO: less frequent log rotation because of decreased log volume
 2020-05-02 18:06:58 +02:00
Yohaï-Eliel BERREBY
c54e8f5d67 unbound: smarter logging 
- stop using journald, write to /var/log/unbound/
- set up frequent log rotation for the huge log files
we are producing
 2020-05-02 17:13:01 +02:00
Yohaï-Eliel BERREBY
1dca5d2259 unbound: use handlers 
Only restart unbound if the configuration
was actually updated.
 2020-05-02 16:43:44 +02:00
Yohaï-Eliel BERREBY
b94c62d710 unbound-control: no certificates for local use 2020-05-02 16:37:21 +02:00
Yohaï-Eliel BERREBY
3695a3d771 unbound: attempt to fix spurious blacklisting 2020-04-28 23:14:43 +02:00
Yohaï-Eliel BERREBY
b4482b6d3b unbound: configure unbound-control 2020-04-28 20:21:47 +02:00
Yohaï-Eliel BERREBY
bac131791b unbound: bump verbosity up to 3 
Some users are having issues resolving *.auro.re domains from our
network, and the bug does not show itself reliably. Increased verbosity
should help us pinpoint its source.
 2020-04-28 20:13:56 +02:00
Yohaï-Eliel BERREBY
ded5f38aec unbound: name set_fact tasks 2020-04-18 17:36:25 +02:00
Yohaï-Eliel BERREBY
662452065f dhcp: remove Cloudflare from backup DNS 
and rename variable, since these are not technically
upstream DNS servers
(unbound will ask the root servers, not these)
 2020-04-18 17:06:38 +02:00
Yohaï-Eliel BERREBY
a0651d7703 unbound: bind to the right addresses on backup hosts 2020-04-18 16:56:34 +02:00
Yohaï-Eliel BERREBY
b57fa6e356 dhcp: use backup DNS servers too 2020-04-18 16:56:34 +02:00
Yohaï-Eliel BERREBY
22166bc69b unbound: log to journalctl 2020-04-18 16:56:17 +02:00
Yohaï-Eliel BERREBY
1777d0e154 unbound: log to /var/log/unbound.log, errors only 2020-04-18 15:42:31 +02:00
Yohaï-Eliel BERREBY
7275ebda47 dhcp: ask clients to use our DNS servers 2020-04-18 15:39:32 +02:00
Yohaï-Eliel BERREBY
f05e92dc5e unbound: remove unchecked configuration keys 2020-04-13 18:42:02 +02:00
Yohaï-Eliel BERREBY
b3712ed335 unbound: initial deployment 2020-04-13 18:41:12 +02:00
Yohaï-Eliel BERREBY
8fee0857c1 re2o-service: force clone git repository 2020-04-06 19:03:38 +02:00
Yohaï-Eliel BERREBY
8579b99b2e dhcp: cron.d entry + let main.py restart the server 2020-04-06 19:03:10 +02:00
Yohaï-Eliel BERREBY
6cce62850d dhcp: configure log rotation 2020-04-06 17:58:14 +02:00
Yohaï-Eliel BERREBY
7347829494 tackle logs 2020-04-06 17:48:56 +02:00
Yohaï-Eliel BERREBY
51fdb89940 extract dhcp-failover.conf into separate file 2020-04-06 17:28:04 +02:00
Yohaï-Eliel BERREBY
d323b78c16 fix bogus dhcpd config 
- move failover peer declaration to beginning of file
- set split only on primary
- fix re2o-service hostname
- add /etc/default/isc-dhcp-server
 2020-04-06 17:22:50 +02:00
Yohaï-Eliel BERREBY
34b448faec dhcp: implement failover peer configuration 2020-04-06 14:41:34 +02:00
Yohaï-Eliel BERREBY
2a0a2e2ac6 dhcp: fix silly mix-ups 2020-04-06 13:20:52 +02:00
Yohaï-Eliel BERREBY
709e4614c2 suppression d'une déclaration DNS redondante 2020-04-05 19:04:03 +02:00
Yohaï-Eliel BERREBY
e6b2f80b49 templatisation de la config dhcpd 
non encore testé
 2020-04-05 18:44:37 +02:00
fpoutre
40e915a7e0 happy little mistakes 2020-03-22 19:06:38 +01:00
fpoutre
23f1b7a4a1 added support for edc and gs in ldap replica backup configuration 2020-03-22 18:42:00 +01:00
fpoutre
3a399bd04c added ldap-replica support for ldap-clients of pacaterie and fleming 2020-02-20 18:42:34 +01:00
Alexandre Iooss
5061a029e0
Do not ask why, it was not there 2019-12-05 14:07:48 +01:00
Alexandre Iooss
ccbd7d3770
Failover VMs 2019-11-01 15:38:35 +01:00
Alexandre Iooss
6dec3ed0d1
Proxmox playbook and unifi ap 2019-11-01 15:17:59 +01:00
Alexandre Iooss
5b3ac2a21a
Merge crans version 2019-11-01 14:16:32 +01:00
Alexandre Iooss
e91d47ea8d
Update matrix conf 2019-08-29 07:04:37 +02:00
Alexandre Iooss
6cc0a6a6b7
Remove appservice Discord 2019-08-29 07:03:54 +02:00
Alexandre Iooss
743e902e85
Refractor ldap 2019-08-29 07:03:05 +02:00
Alexandre Iooss
e15ea7854a
Base config sync with crans 2019-08-29 07:02:15 +02:00
Alexandre Iooss
044e8af3aa
Move EtherPad to Docker 2019-07-26 08:50:07 +02:00
Alexandre Iooss
b488007578
[docker] Install docker-compose 2019-07-25 19:10:50 +02:00
Alexandre Iooss
24331ca25b
Fix CI 2019-07-22 21:04:58 +02:00
Alexandre Iooss
2e753db873
Indicate unifi role 2019-07-22 21:00:13 +02:00
Alexandre Iooss
694501dfa3
Merge crans monitoring 2019-07-22 20:56:43 +02:00
Alexandre Iooss
a45ca1a890
Move CodiMD to Docker 2019-07-22 19:14:43 +02:00
Alexandre Iooss
9a35650166
Move Riot web to docker 2019-07-22 10:32:34 +02:00
Alexandre Iooss
66d870ce36
Add docker role 2019-07-22 10:32:01 +02:00
Alexandre Iooss
9018c69da3
Fix matrix v1 2019-07-22 09:12:55 +02:00
Alexandre Iooss
1ed6228728
Simplify help message on server login 2019-05-26 13:03:09 +02:00
Alexandre Iooss
2e0679a973
[passbolt] Add some dep 2019-05-26 12:52:41 +02:00
Alexandre Iooss
a986ecd36a
Passbolt playbook 2019-05-23 07:28:44 +02:00
Alexandre Iooss
72a60a988b
Unifi playbook 2019-05-07 18:52:07 +02:00
Alexandre Iooss
b6573e68ae
Exclude Stretch from node config 2019-05-05 16:24:04 +02:00
Alexandre Iooss
c53d62712f
Make prometheus node exporter listen only on adm 2019-05-05 16:17:52 +02:00
Alexandre Iooss
c1c995e38d
Prometheus role 2019-05-05 14:07:04 +02:00
Alexandre Iooss
8dc40ecb1e
Specify git branch 2019-05-04 18:43:20 +02:00
Alexandre Iooss
8b7d4207b8
Autogenerate service config 2019-05-04 11:46:54 +02:00
Alexandre Iooss
5939d434fd
Beginning of isc-dhcp-server config 2019-05-04 10:54:51 +02:00
Alexandre Iooss
41eb131e69
Fix true values being yes 2019-05-03 22:50:48 +02:00
Alexandre Iooss
81ca7a177d
Initial DHCP re2o service 2019-05-03 22:42:55 +02:00
Alexandre Iooss
aab2daf5b7
Fix Riot depo key 2019-05-03 22:42:12 +02:00
Alexandre Iooss
5e738f40a7
Uniformize motd 2019-05-03 15:52:50 +02:00
Alexandre IOOSS
1cc6bc744b Merge branch 'change_default_soft' into 'master' 
Add screen and remove iPython2

See merge request aurore/ansible!20
 2019-05-03 14:38:49 +02:00
Alexandre Iooss
0c8763c702
Create VM with Proxmox API 2019-05-03 13:06:26 +02:00
Alexandre Iooss
55cf8b801d
Remove useless systemd handler 2019-04-06 15:19:52 +02:00
Alexandre Iooss
1b3a6f7bf8
Configure IRC Matrix appservice 2019-04-01 18:53:37 +02:00
Alexandre Iooss
84694900e4
Annonce the right Webhook URL for Matrix 2019-04-01 17:57:43 +02:00
Alexandre Iooss
2158c5c6b9
Pass Matrix Webhook through reverse proxy 2019-04-01 17:57:20 +02:00
Alexandre Iooss
88b9356f7d
Make CodiMD role more generic 2019-03-30 13:34:25 +01:00
Alexandre Iooss
48d521fb00
Use generic service model for matrix appservices 2019-03-30 13:26:20 +01:00
Alexandre Iooss
5ccb94e621
Simplify Matrix appservices 2019-03-29 19:25:11 +01:00
Alexandre Iooss
d4d6baed1a
Fix so everything is working fine today 2019-03-26 09:17:46 +01:00
Alexandre IOOSS
00ccc4c377 Merge branch 'refactor' into 'master' 
Refactor

See merge request aurore/ansible!30
 2019-03-26 08:36:21 +01:00
Alexandre Iooss
ee4f144b4a
Default configuration for Riot 2019-03-26 08:30:02 +01:00
Alexandre Iooss
7950191a53
Fix PVE unable to mount vfat at boot 2019-03-25 10:55:51 +01:00
Alexandre Iooss
11e084a104
Switch discord appservice to develop 2019-03-24 17:05:24 +01:00
Alexandre IOOSS
40e63ba89e Merge branch 'discord_matrix' into 'master' 
Discord matrix

See merge request aurore/ansible!31
 2019-03-24 12:44:23 +01:00
Alexandre Iooss
bbc04d971f
Working appservice Discord 2019-03-24 12:10:35 +01:00
Hadrien Patte
66f7b1061a
Feat: migrate from with_X to loop 
Signed-off-by: Hadrien Patte <hadrien.patte@protonmail.com>
 2019-03-23 20:11:27 +01:00
Hadrien Patte
c20d4fbf18
Feat: expand YAML syntax 
Signed-off-by: Hadrien Patte <hadrien.patte@protonmail.com>
 2019-03-23 20:05:45 +01:00
Hadrien Patte
8a48110c21
Feat: add validate for sudoers 
Signed-off-by: Hadrien Patte <hadrien.patte@protonmail.com>
 2019-03-23 20:05:45 +01:00
Hadrien Patte
737ca7b996
Feat: add state 
Signed-off-by: Hadrien Patte <hadrien.patte@protonmail.com>
 2019-03-23 20:05:42 +01:00
Hadrien Patte
e4a60341c5
Feat: simplify one item lists 
Signed-off-by: Hadrien Patte <hadrien.patte@protonmail.com>
 2019-03-23 20:04:35 +01:00
Hadrien Patte
5551fb5c16
Fix: remove unnecessary quotes 
Signed-off-by: Hadrien Patte <hadrien.patte@protonmail.com>
 2019-03-23 20:04:33 +01:00
Hadrien Patte
8463f1cf96
Feat: use ini_file module 
Signed-off-by: Hadrien Patte <hadrien.patte@protonmail.com>
 2019-03-23 19:21:59 +01:00
Alexandre Iooss
489bb5ddcf
sudo group by location 2019-03-23 13:49:53 +01:00
Alexandre Iooss
01ad50ef95
Whitelist proxy 2019-03-23 13:00:18 +01:00
Alexandre Iooss
bd229fb11e
Update matrix-appservice-discord config 2019-03-23 12:52:39 +01:00
Alexandre Iooss
3198a50c93
Changed URL to make the Webhooks appservice work 2019-03-17 10:42:43 +01:00
Alexandre IOOSS
2b79f9117e Merge branch 'debsums_security' into 'master' 
Configure SSH and add debsums

See merge request aurore/ansible!25
 2019-03-16 22:09:40 +01:00
Alexandre Iooss
724db5f8c8 Configure SSH and add debsums 2019-03-16 22:06:50 +01:00
Alexandre Iooss
a3b7cf6270 Hotfix HTTP 2019-03-16 21:10:00 +01:00
Alexandre Iooss
221be36085 Fail2ban by default 2019-03-14 15:45:19 +01:00
Alexandre Iooss
fb11981e8a Follow Mozilla guidelines 2019-03-14 12:25:27 +01:00
Alexandre Iooss
af07bb7c0a Better SSL conf 2019-03-14 11:53:55 +01:00
Alexandre Iooss
a8fa5d69ff Add proxy snippets and use nginx-light 2019-03-14 10:53:44 +01:00
Alexandre Iooss
0cc36a107c Fix CI 2019-03-12 19:58:55 +01:00
Alexandre Iooss
c9761e53dd Connect to Synapse 2019-03-12 18:33:32 +01:00
Alexandre Iooss
1a447b3807 Add matrix-appservice-webhooks and move nodejs tasks 2019-03-12 18:03:23 +01:00
Alexandre IOOSS
fa7aa8ea75 Merge branch 'master' into 'change_default_soft' 
# Conflicts:
#   roles/baseconfig/tasks/main.yml
 2019-03-12 17:27:23 +01:00
Alexandre Iooss
bc1459bc51 Fix various yamllint warnings 2019-03-12 17:22:42 +01:00
Alexandre Iooss
5dfd8eacc5 Replace 'yes' by 'true' 2019-03-12 17:04:06 +01:00
Alexandre Iooss
431b063db7 Maybe last fix for the CI 2019-03-12 16:56:01 +01:00
Alexandre Iooss
cc48990798 Use NPM module in matrix-appservice-discord 2019-03-12 16:51:27 +01:00
Alexandre Iooss
4a6da11837 Clean up EtherPad dep install 2019-03-12 16:34:35 +01:00
Alexandre Iooss
a8656251ab Tab is useless in sudoers 2019-03-12 07:48:09 +01:00
Alexandre Iooss
dd19efaecd Do not download rest_auth_provider.py 2019-03-12 07:47:07 +01:00
Alexandre Iooss
16ca4956dc Make EtherPad default text shorter 2019-03-11 18:15:17 +01:00
Alexandre Iooss
4b5631e60b Retry 3 times npm and yarn 2019-03-11 18:12:55 +01:00
Alexandre Iooss
b9d5601e36 Remove useless PRODUCTION var for webpack CodiMD 2019-03-11 18:10:35 +01:00
Alexandre Iooss
84263d7712 Do not use depreciated loop with APT 2019-03-11 18:02:29 +01:00
Alexandre Iooss
53b67acb07 Fix a error due to previous merge 2019-03-11 17:53:12 +01:00
Alexandre Iooss
b56ae30335 Use YARN module from Ansible 2.7 2019-03-11 17:49:48 +01:00
Alexandre Iooss
af81b41e83 Use NPM module for matrix-appservice-irc 2019-03-11 17:44:42 +01:00
Alexandre Iooss
4ebaa4f36f Add retries to APT modules in Matrix Appservices 2019-03-11 15:39:11 +01:00
Alexandre Iooss
1274ec4be4 Fix last line of CodiMD apt dep 2019-03-11 15:30:49 +01:00
Alexandre Iooss
f347daa408 Use systemd module rather than command 2019-03-11 15:12:58 +01:00
Alexandre Iooss
563d9658ed Add newline at end of 0_apt_dependencies.yml in CodiMD role 2019-03-11 15:10:17 +01:00
Alexandre IOOSS
1a4e41d318 Merge branch 'master' into 'ansible-lint' 
# Conflicts:
#   roles/codimd/tasks/0_apt_dependencies.yml
 2019-03-11 15:00:11 +01:00
Alexandre Iooss
ce40a5cb66 Add screen and remove iPython2 2019-03-11 14:55:21 +01:00
Alexandre Iooss
a08be12b41 Security policies based on ANSSI recommandations 2019-03-11 14:52:03 +01:00
Alexandre Iooss
0b887c2abb Add matrix-appservice-irc 2019-03-10 11:50:07 +01:00
Alexandre Iooss
d6627f5cce Add matrix-appservice-discord 2019-03-10 11:10:59 +01:00
Alexandre Iooss
c7f584cae9 Fix CodiMD build 2019-03-04 16:04:36 +01:00
Alexandre Iooss
68d246bb24 Update to CodiMD 1.3.0 2019-03-04 15:08:05 +01:00
Alexandre Iooss
bae6f4041d Add synapse conf to reverse proxy 2019-03-04 09:34:47 +01:00
Alexandre Iooss
fb21af51e2 Revert LDAP schema 2019-03-04 09:09:04 +01:00
Hadrien Patte
b55a2ee047
Fix: add a retry statement to remote package tasks 
Signed-off-by: Hadrien Patte <hadrien.patte@protonmail.com>
 2019-03-03 19:55:51 +01:00
Hadrien Patte
5c5195cc2c
Fix: use systemd instead of command module 
Signed-off-by: Hadrien Patte <hadrien.patte@protonmail.com>
 2019-03-03 19:32:42 +01:00
Alexandre Iooss
cf7e16d8b7 Define default input locale 2019-03-03 09:43:14 +01:00
Alexandre Iooss
775179b410 Update logo 2019-03-03 09:22:28 +01:00
Alexandre Iooss
eeb2e5a2ae Write become true rather than yes 2019-03-03 09:16:52 +01:00
Alexandre Iooss
ac3d2dee23 Write update_cache true rather than yes 2019-03-03 09:00:29 +01:00
Alexandre Iooss
b420d31b2f Remove last empty line in chsh 2019-03-03 08:54:48 +01:00
Alexandre Iooss
3892e49971 Move synapse rest auth url 2019-03-03 08:18:50 +01:00
Hadrien Patte
d54421b013
Fix: line length 
Signed-off-by: Hadrien Patte <hadrien.patte@protonmail.com>
 2019-03-02 13:31:51 +01:00
Hadrien Patte
58cb43d0d0
Fix: indentations and spaces 
Signed-off-by: Hadrien Patte <hadrien.patte@protonmail.com>
 2019-03-02 12:16:43 +01:00
Hadrien Patte
5f08a7522e
Fix: blank lines and trailing spaces 
Signed-off-by: Hadrien Patte <hadrien.patte@protonmail.com>
 2019-03-02 12:07:48 +01:00
Alexandre Iooss
11bc3b8e22 Configure Synapse provider 2019-02-26 18:04:46 +01:00
Alexandre Iooss
9ba730392e mxisd role 2019-02-26 16:49:18 +01:00
Alexandre Iooss
be6c9796e8 Change owner to matrix-synapse 2019-02-26 13:42:45 +01:00
Alexandre Iooss
21cfa2c404 Fix synapse templates 2019-02-26 13:34:30 +01:00
Alexandre Iooss
6237f3de46 Configure Matrix Synapse 2019-02-26 13:23:14 +01:00
Alexandre Iooss
c7dd68089a Name correctly LDAP userland scripts 2019-02-19 11:41:08 +01:00
Alexandre Iooss
4274194b95 Use ansible_managed tag 2019-02-19 11:10:05 +01:00
Alexandre Iooss
98622807e1 Clean tasks files 2019-02-19 10:49:18 +01:00
Alexandre Iooss
d4a187e449 Remove README per role 2019-02-19 10:43:55 +01:00
Alexandre Iooss
5cc4e5bbc0 Make templates end in .j2 2019-02-19 10:42:57 +01:00
Alexandre Iooss
36434e3323 Add Matrix synapse 2019-02-16 12:50:18 +01:00
Alexandre Iooss
feed96e103 Rename matrix riot role 2019-02-16 12:26:09 +01:00
Alexandre Iooss
69f633a83d Add LDAP on CodiMD 2019-02-09 11:47:09 +01:00
Alexandre Iooss
19c2eca917 Add systemd unit 2019-02-09 10:02:53 +01:00
Alexandre IOOSS
5f194f0e30 Merge branch 'vulcain_codimd' into 'master' 
Role Ansible pour setup de CodiMD

See merge request erdnaxe/ansible-aurore!2
 2019-02-09 09:32:33 +01:00
Alexandre Iooss
63804b56af Todo list 2019-02-09 09:29:14 +01:00
Alexandre Iooss
d3070b1611 Do not clone temporally 2019-02-09 09:26:05 +01:00
Alexandre Iooss
dc776a0ba4 Fix uws compilation 2019-02-09 08:59:48 +01:00
Alexandre Iooss
7e4d247e14 We need a C++ compiler 2019-02-09 08:46:16 +01:00
Alexandre Iooss
ebb716d5f2 Only rebuild when code changes 2019-02-09 08:45:16 +01:00
Alexandre Iooss
9cee4b5ada Remove useless comment 2019-02-09 08:39:16 +01:00
Alexandre Iooss
41c41d2f02 Add CodiMD database password 2019-02-09 08:29:50 +01:00
Alexandre Iooss
a316a5d461 Fix main.yml 2019-02-09 08:07:10 +01:00
Alexandre Iooss
d165343631 Add nodeJS pin file 2019-02-09 08:01:35 +01:00
Alexandre Iooss
fd7efc6775 Fix YML 2019-02-09 08:01:19 +01:00
Alexandre Iooss
fff8a1f2de Remove useless quotes 2019-02-09 07:58:06 +01:00
Alexandre IOOSS
9a866f549a Fix typo in nginx-riot.j2 2019-02-09 07:52:59 +01:00
Vulcain
c8229fee9b Role ansible pour setup de CodiMD 2019-02-07 13:37:11 +01:00
Alexandre Iooss
79266d2476 Uniformize 2019-02-07 13:04:46 +01:00
Otthorn
d58a356e71 Ansible rule for Riot 2019-02-07 13:37:03 +01:00
Alexandre Iooss
74c0d481a8 Prepare TP for newcomers 2019-02-07 09:37:47 +01:00
Alexandre Iooss
02d4c5684a Fix cert path 2019-02-07 09:33:20 +01:00
Alexandre Iooss
234c3556c6 Remove old ACME challenge 2019-02-06 21:32:14 +01:00
Alexandre Iooss
c8617e45cc Add CodiMD container 2019-02-05 12:42:05 +01:00
Alexandre Iooss
4a3c11d719 Beggining of Matrix Riot server 2019-02-05 11:39:58 +01:00
Alexandre Iooss
bdb4dadaa7 Don't use anymore submodules as there are too many 2019-02-05 08:35:45 +01:00
Alexandre Iooss
ce5bc76853 Add Debian backports role 2019-02-05 08:31:25 +01:00
Alexandre Iooss
9cb3d49678 Update hosts 2019-01-19 15:58:05 +01:00
Alexandre Iooss
cc496ad785 Update submodules 2019-01-08 11:04:54 +01:00
Alexandre Iooss
52d2163752 EtherPad 2019-01-07 13:29:06 +01:00
Alexandre Iooss
3711c66476 Make logo selectionnable 2019-01-07 07:41:03 +01:00
Alexandre Iooss
a2dd147a37 Add reverse conf for auro.re 2019-01-07 07:40:14 +01:00
Alexandre Iooss
221dc968a3 Add NGINX reverse proxy role 2019-01-06 11:36:41 +01:00
Alexandre Iooss
431306538f Fix molly-guard config 2019-01-05 10:31:04 +01:00
Alexandre Iooss
c06f12d321 Add EtherPad role 2019-01-04 13:54:52 +01:00
Alexandre Iooss
635b6ec410 Use local replica 2019-01-03 19:20:14 +01:00
Alexandre Iooss
c30a4eeff1 Dokuwiki role 2019-01-03 16:55:07 +01:00
Alexandre Iooss
27342aa406 LDAP replica working 2019-01-03 16:43:50 +01:00
Alexandre Iooss
ed10fc8241 Replication role 2019-01-03 14:52:52 +01:00
Alexandre Iooss
1ca4391c66 Rename some variables 2019-01-03 14:51:11 +01:00
Alexandre Iooss
e4da3088b4 Add LDAP replica role 2019-01-03 12:48:34 +01:00
Alexandre Iooss
3c4eafa0de Send mail to monitor apt changelog 2019-01-02 18:23:11 +01:00
Alexandre Iooss
2dd483e4a6 Add security on all servers to verify shutdowns 2019-01-02 18:10:17 +01:00
Alexandre Iooss
cd189b397b Fix perm on user dir 2018-12-27 17:51:30 +01:00
Alexandre Iooss
614b8d8142 Execute playbook with become activated 2018-12-27 10:27:20 +01:00
Alexandre Iooss
3f24f011c7 Do not use OVH mirrors 2018-12-26 09:58:56 +01:00
Alexandre Iooss
0eaee34ebb Horus uses OVH mirrors 2018-12-25 17:54:34 +01:00
Alexandre Iooss
9a94b9daaa Update submodules 2018-12-25 16:39:51 +01:00
Alexandre Iooss
599f0acb3d Add a way to test 2018-12-24 10:50:22 +01:00
Alexandre Iooss
42fd4e7c2e Inventory clean up 2018-12-23 16:09:12 +01:00
Alexandre Iooss
32aa3121ec Add roles as submodules 2018-12-23 12:25:52 +01:00