Commit graph

423 commits

Author SHA1 Message Date
750753f16d Starting the dovecot task 2021-02-06 12:46:39 +01:00
673d77d1be fix yaml lint 2021-02-06 12:46:39 +01:00
5377378bf7 Add (initial) mail-utils role 2021-02-06 12:46:39 +01:00
f01533409f Add (initial) postfix role 2021-02-06 12:46:39 +01:00
ynerant
f9e83e514e Merge pull request 'Captive portal' (#11) from accueil into master
Some checks failed
continuous-integration/drone/push Build is failing
Reviewed-on: Aurore/ansible#11
2021-02-05 20:39:50 +01:00
0e224df41f
Install ipset on each router
Some checks failed
continuous-integration/drone/pr Build is failing
continuous-integration/drone/push Build is failing
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
2021-02-05 20:39:26 +01:00
c527ce16b0
Use good output interface for the main router
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
2021-02-05 20:39:25 +01:00
a82edc3e24
Firewall configuration without MASQUERADE
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
2021-02-05 20:39:25 +01:00
bbac76023c
Update masquerade configuration for the captive portal
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
2021-02-05 20:39:25 +01:00
7e4a2d20c0
Clone nginx role from Crans
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
2021-02-05 20:39:25 +01:00
889cb764c1
Clone certbot role from Crans
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
2021-02-05 20:39:25 +01:00
154cbedec2
Deploy firewall config for the captive portal
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
2021-02-05 20:39:25 +01:00
9bd06520fb
Add reverse-proxy for Re2o on the portal VM
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
2021-02-05 20:39:25 +01:00
e02670afb0
Les caches unbound renvoie les addresses en 10/8 2021-02-05 20:38:50 +01:00
a7b073e1cc
Add captive portal firewall configuration
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
2021-02-05 20:38:50 +01:00
89ebbd423e
Use the local firewall repository
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
2021-02-05 20:38:50 +01:00
5a09b77070
Resolve DNS for the accueil vlan
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
2021-02-05 20:38:49 +01:00
5fc2d0a3f9
Ajout d'accueil dans keepalived 2021-02-05 20:38:49 +01:00
7cdef7ee96
Fix: keep the logs for 90 days 2021-02-05 20:38:49 +01:00
faba1d2005 Correct typo, this one was sneaky!
Some checks failed
continuous-integration/drone/push Build is failing
continuous-integration/drone/pr Build is failing
2021-02-05 01:50:56 +01:00
5f48a46522 Add postfix quota check
Some checks failed
continuous-integration/drone/push Build is failing
continuous-integration/drone/pr Build is failing
2021-02-05 01:35:46 +01:00
b35922346e Remove file since I did not git mv correclty...
Some checks failed
continuous-integration/drone/push Build is failing
continuous-integration/drone/pr Build is failing
2021-02-05 00:09:12 +01:00
77918e00ce move files to the right place and fix small typo
Some checks failed
continuous-integration/drone/push Build is failing
continuous-integration/drone/pr Build is failing
2021-02-05 00:07:36 +01:00
256d2d5df4 Post renewal hook for certbot to reload dovecot and postfix
Some checks failed
continuous-integration/drone/push Build is failing
continuous-integration/drone/pr Build is failing
2021-02-05 00:05:26 +01:00
43053e57f9 Fix broken vars
Some checks failed
continuous-integration/drone/push Build is failing
continuous-integration/drone/pr Build is failing
2021-02-04 23:44:32 +01:00
e316679e13 Add additional role for mailserver 2021-02-04 23:34:53 +01:00
2c531d1af2 Postfix conf add certs and other security related modifications
Some checks failed
continuous-integration/drone/push Build is failing
continuous-integration/drone/pr Build is failing
2021-02-04 23:18:23 +01:00
27cfcc1320 Don't reinvent the whell, use existing roles (have to be tested)
Some checks failed
continuous-integration/drone/push Build is failing
continuous-integration/drone/pr Build is failing
2021-02-04 14:47:40 +01:00
1c7b4f8560 add re2o service mail cron
Some checks failed
continuous-integration/drone/push Build is failing
2021-02-04 01:46:55 +01:00
9e91f2e9d5 Re2o API config 2021-02-04 01:38:49 +01:00
cf58c2bac5 Add re2o mail server
Some checks failed
continuous-integration/drone/push Build is failing
2021-02-04 01:30:14 +01:00
c85b2b58fe Add quota to dovecot
Some checks failed
continuous-integration/drone/push Build is failing
2021-02-03 23:20:10 +01:00
2673f771d9 Enable Dovecot sieve 2021-02-03 20:18:46 +01:00
3eb48edccd
Tmux everywhere
Some checks failed
continuous-integration/drone/push Build is failing
continuous-integration/drone/pr Build is failing
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
2021-02-02 23:17:47 +01:00
52a29ff010 Fix syntax: don't forget the underscore
Some checks failed
continuous-integration/drone/push Build is failing
2021-01-30 01:14:53 +01:00
b2a49c1e42 Add LMTP for Postfix-Dovecot communication
Some checks failed
continuous-integration/drone/push Build is failing
2021-01-30 01:10:31 +01:00
809f5f9cc9 Add config in the right section
Some checks failed
continuous-integration/drone/push Build is failing
2021-01-30 01:05:37 +01:00
c45dab323a Don't add conf.d/*.conf into a file that is itself already there! dumb dumb
Some checks failed
continuous-integration/drone/push Build is failing
2021-01-30 00:56:17 +01:00
af4d66c85b remove non-existant conf file from the role
Some checks failed
continuous-integration/drone/push Build is failing
2021-01-30 00:46:00 +01:00
fcb53b7cf5 Add sane logging timestamp format
Some checks failed
continuous-integration/drone/push Build is failing
2021-01-30 00:41:30 +01:00
b50ef60e8a fix conf.d template files path
Some checks failed
continuous-integration/drone/push Build is failing
2021-01-30 00:38:15 +01:00
d05425745f Fix indentation... again 2021-01-30 00:34:54 +01:00
8612f835af fix typo and indentation problem
Some checks failed
continuous-integration/drone/push Build is failing
2021-01-30 00:30:35 +01:00
99a46af244 User handlers to run when something changed
Some checks failed
continuous-integration/drone/push Build is failing
2021-01-30 00:02:28 +01:00
8b66ba059b use command instead of shell when no shell functionality is required 2021-01-29 23:59:53 +01:00
otthorn
f6c9208a41 Merge pull request 'Limit floats in alerts to 2 decimal places' (#5) from human_readable_altermanager into master
Some checks failed
continuous-integration/drone/push Build is failing
Reviewed-on: Aurore/ansible#5
2021-01-29 20:48:43 +01:00
otthorn
c9352fb9ab Merge pull request 'Use unattended-upgrades for Debian-Security' (#4) from unattended into master
Some checks failed
continuous-integration/drone/push Build is failing
Reviewed-on: Aurore/ansible#4
2021-01-29 20:42:24 +01:00
otthorn
a8af3c9c72 Merge branch 'master' into monitoring_pdu
Some checks failed
continuous-integration/drone/push Build is failing
continuous-integration/drone/pr Build is failing
2021-01-29 20:29:28 +01:00
eecf807b53 Delte main.yml.save
Some checks failed
continuous-integration/drone/push Build is failing
continuous-integration/drone/pr Build is failing
2021-01-29 20:15:21 +01:00
a12bcbc97f Correct yamlint
Some checks failed
continuous-integration/drone/push Build is failing
2021-01-29 20:12:14 +01:00
6ec89b88d8 Limit floats in alerts to 2 decimal places
Some checks failed
continuous-integration/drone/push Build is failing
continuous-integration/drone/pr Build is failing
2021-01-29 19:33:38 +01:00
094334e069 Fix mode, shoudl always be set
Some checks failed
continuous-integration/drone/push Build is failing
2021-01-29 01:03:18 +01:00
de2758f4d6 rename roles to match regex set by linter 2021-01-29 01:01:10 +01:00
58064df056 fix typo 2021-01-29 00:57:24 +01:00
bd8942eff2 reload -> restart 2021-01-29 00:56:08 +01:00
ad1a1602eb dovecot ldap conf
Some checks failed
continuous-integration/drone/push Build is failing
2021-01-29 00:16:42 +01:00
d59cb41d5e Use unattended-upgrades for Debian-Security
Some checks failed
continuous-integration/drone/push Build is failing
continuous-integration/drone/pr Build is failing
2021-01-28 03:42:07 +01:00
1297884ce1 Add ssl conf
Some checks failed
continuous-integration/drone/push Build is failing
2021-01-28 03:15:45 +01:00
026e35adc7 Add IMAP/POP/SMTP auth conf
Some checks failed
continuous-integration/drone/push Build is failing
2021-01-28 01:34:09 +01:00
f991befbc6 renamed to fit jinja template
Some checks failed
continuous-integration/drone/push Build is failing
2021-01-28 01:27:22 +01:00
79b75cae00 maildir conf
Some checks failed
continuous-integration/drone/push Build is failing
2021-01-28 01:24:50 +01:00
765ce39625 auth config 2021-01-28 01:11:32 +01:00
d3cf2c7e5f dovecot handlers
Some checks failed
continuous-integration/drone/push Build is failing
2021-01-28 00:15:51 +01:00
e1d8382fed fix typo
Some checks failed
continuous-integration/drone/push Build is failing
2021-01-28 00:13:08 +01:00
241997396b Config outside of conf.d
Some checks failed
continuous-integration/drone/push Build is failing
2021-01-28 00:11:36 +01:00
a54c5832a3 Apt retry mechanism 2021-01-28 00:07:23 +01:00
e3ae912f44 Add prometheus-aurore to monitor all service VM and physical servers. Modifying monitoring role to exclude wireless access points when running the role on all hosts
Some checks failed
continuous-integration/drone/push Build is failing
2021-01-23 22:10:57 +01:00
bac377f634 Update alert rules of UPS
Some checks failed
continuous-integration/drone/push Build is failing
2021-01-23 19:01:27 +01:00
fff6ec5807 fix typo: restart -> reload
Some checks failed
continuous-integration/drone/push Build is failing
continuous-integration/drone/pr Build is failing
2021-01-23 16:04:09 +01:00
795ee3846f fix indent 2021-01-23 16:02:10 +01:00
e6af0f2bd7 fix typo: groupe -> group
Some checks failed
continuous-integration/drone/pr Build is failing
continuous-integration/drone/push Build is failing
2021-01-23 15:59:03 +01:00
e1a961273d fix typo: dst -> dest
Some checks failed
continuous-integration/drone/pr Build is failing
continuous-integration/drone/push Build is failing
2021-01-23 15:42:52 +01:00
73142dbe03 Fix yaml syntax
Some checks failed
continuous-integration/drone/push Build is failing
continuous-integration/drone/pr Build is failing
2021-01-23 14:41:25 +01:00
43274ef2ec Add the ansible_managed var at the begining of the config file 2021-01-23 14:40:29 +01:00
66c2ff6305 full path to logrotate for command 2021-01-23 14:37:18 +01:00
05326c15d3 Enforce logrotate rules 2021-01-23 14:27:09 +01:00
ddd69e04c0 create logrotate role 2021-01-23 14:25:35 +01:00
c7a3495ae5 Alert rules for UPS
Some checks failed
continuous-integration/drone/push Build is failing
2021-01-22 12:16:36 +01:00
40d3c22276 Setup config snmp for Prometheus, to monitore Aurore's PDU
Some checks failed
continuous-integration/drone/push Build is failing
2021-01-21 21:26:40 +01:00
f0e3bd78c9 use command instead of shell when you don't need sh features (pipes, env, etc...)
Some checks failed
continuous-integration/drone/push Build is failing
continuous-integration/drone/pr Build is failing
2021-01-19 23:27:17 +01:00
4a57dad8a6 use handlers
Some checks failed
continuous-integration/drone/push Build is failing
2021-01-19 23:19:25 +01:00
851e459b6f Starting to try out postfix config
Some checks failed
continuous-integration/drone/push Build is failing
2021-01-17 23:48:36 +01:00
facfe3c169 Attempt to fix ansible lint
Some checks failed
continuous-integration/drone/push Build is failing
2021-01-17 18:21:29 +01:00
ee1726589a Linter should pass now!
Some checks failed
continuous-integration/drone/push Build is failing
2021-01-17 17:06:59 +01:00
ee16220591 Please linter
Some checks failed
continuous-integration/drone/push Build is failing
2021-01-17 17:02:52 +01:00
9d4c630c7e Add the mail-certificate role
Some checks failed
continuous-integration/drone/push Build is failing
2021-01-17 17:02:05 +01:00
06917ce46b Agree to Letsencrypt TOS
Some checks failed
continuous-integration/drone/push Build is failing
2021-01-17 16:40:28 +01:00
72d486119e fix typo 2021-01-17 13:27:43 +01:00
7e03eafeaa dashes are evil, use underscore in var names 2021-01-17 13:27:24 +01:00
e77047a532 add sain defaults for NFS client
Some checks failed
continuous-integration/drone/push Build is failing
2021-01-17 13:03:09 +01:00
5c9ae10a8c Fix yaml lint 2021-01-17 12:47:58 +01:00
f901669341 fix var names for better hierarchy
Some checks failed
continuous-integration/drone/push Build is failing
2021-01-17 12:34:25 +01:00
1847a5a698 Add nfs-client role
Some checks failed
continuous-integration/drone/push Build is failing
2021-01-17 12:31:30 +01:00
0364006062
Install curl and net-tools by default
Some checks failed
continuous-integration/drone/push Build is failing
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
2021-01-17 12:13:30 +01:00
02e4e7d48f
Sort APT packages
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
2021-01-17 12:12:53 +01:00
9a04934bd2 Starting the dovecot task 2021-01-14 22:47:29 +01:00
bb8bd718a9 fix yaml lint
Some checks failed
continuous-integration/drone/push Build is failing
2021-01-14 12:25:23 +01:00
846665961a Add (initial) mail-utils role 2021-01-14 12:16:00 +01:00
b412210d56 Add (initial) postfix role 2021-01-14 12:15:48 +01:00
078d141236 Add task to remove smartmontools of the VM
Some checks failed
continuous-integration/drone/push Build is failing
2021-01-08 22:43:18 +01:00