449 commits

Author	SHA1	Message	Date
Solal Nathan	495f4c4343	User handlers to run when something changed	2021-02-06 12:54:00 +01:00
Solal Nathan	486216b8ff	use command instead of shell when no shell functionality is required	2021-02-06 12:54:00 +01:00
Otthorn	522d286bdd	Fix mode, shoudl always be set	2021-02-06 12:54:00 +01:00
Otthorn	5732fef21e	rename roles to match regex set by linter	2021-02-06 12:54:00 +01:00
Otthorn	b8aa507166	fix typo	2021-02-06 12:54:00 +01:00
Otthorn	8436e64b3a	reload -> restart	2021-02-06 12:54:00 +01:00
Otthorn	637d7b02d3	dovecot ldap conf	2021-02-06 12:51:12 +01:00
Otthorn	910838c416	Add ssl conf	2021-02-06 12:51:12 +01:00
Otthorn	f0a2bfd740	Add IMAP/POP/SMTP auth conf	2021-02-06 12:51:12 +01:00
Otthorn	f3eeb243bb	renamed to fit jinja template	2021-02-06 12:51:12 +01:00
Otthorn	05e16f3226	maildir conf	2021-02-06 12:51:12 +01:00
Otthorn	9260b902d6	auth config	2021-02-06 12:51:12 +01:00
Otthorn	1ec03eda87	dovecot handlers	2021-02-06 12:51:12 +01:00
Otthorn	74e722fef8	fix typo	2021-02-06 12:51:12 +01:00
Otthorn	46c8b82a57	Config outside of conf.d	2021-02-06 12:51:12 +01:00
Otthorn	946b3c973e	Apt retry mechanism	2021-02-06 12:51:12 +01:00
otthorn	cbdde70c2a	Starting to try out postfix config	2021-02-06 12:51:12 +01:00
otthorn	facb7365fc	Please linter	2021-02-06 12:51:12 +01:00
otthorn	769dc5619b	Add the mail-certificate role	2021-02-06 12:51:12 +01:00
otthorn	155daedd24	Agree to Letsencrypt TOS	2021-02-06 12:51:05 +01:00
otthorn	3a2f073db5	fix typo	2021-02-06 12:47:49 +01:00
otthorn	9543c2f10d	dashes are evil, use underscore in var names	2021-02-06 12:47:49 +01:00
otthorn	a0a6124481	add sain defaults for NFS client	2021-02-06 12:47:49 +01:00
otthorn	f7ee1403d9	Fix yaml lint	2021-02-06 12:47:49 +01:00
otthorn	2605266137	fix var names for better hierarchy	2021-02-06 12:46:39 +01:00
otthorn	991e306320	Add nfs-client role	2021-02-06 12:46:39 +01:00
otthorn	750753f16d	Starting the dovecot task	2021-02-06 12:46:39 +01:00
otthorn	673d77d1be	fix yaml lint	2021-02-06 12:46:39 +01:00
otthorn	5377378bf7	Add (initial) mail-utils role	2021-02-06 12:46:39 +01:00
otthorn	f01533409f	Add (initial) postfix role	2021-02-06 12:46:39 +01:00
ynerant	f9e83e514e	Merge pull request 'Captive portal' (#11) from accueil into master ... Reviewed-on: Aurore/ansible#11	2021-02-05 20:39:50 +01:00
Yohann D'ANELLO	0e224df41f	Install ipset on each router ... Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>	2021-02-05 20:39:26 +01:00
Yohann D'ANELLO	c527ce16b0	Use good output interface for the main router ... Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>	2021-02-05 20:39:25 +01:00
Yohann D'ANELLO	a82edc3e24	Firewall configuration without MASQUERADE ... Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>	2021-02-05 20:39:25 +01:00
Yohann D'ANELLO	bbac76023c	Update masquerade configuration for the captive portal ... Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>	2021-02-05 20:39:25 +01:00
Yohann D'ANELLO	7e4a2d20c0	Clone nginx role from Crans ... Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>	2021-02-05 20:39:25 +01:00
Yohann D'ANELLO	889cb764c1	Clone certbot role from Crans ... Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>	2021-02-05 20:39:25 +01:00
Yohann D'ANELLO	154cbedec2	Deploy firewall config for the captive portal ... Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>	2021-02-05 20:39:25 +01:00
Yohann D'ANELLO	9bd06520fb	Add reverse-proxy for Re2o on the portal VM ... Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>	2021-02-05 20:39:25 +01:00
Jeltz	e02670afb0	Les caches unbound renvoie les addresses en 10/8	2021-02-05 20:38:50 +01:00
Yohann D'ANELLO	a7b073e1cc	Add captive portal firewall configuration ... Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>	2021-02-05 20:38:50 +01:00
Yohann D'ANELLO	89ebbd423e	Use the local firewall repository ... Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>	2021-02-05 20:38:50 +01:00
Yohann D'ANELLO	5a09b77070	Resolve DNS for the accueil vlan ... Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>	2021-02-05 20:38:49 +01:00
Jeltz	5fc2d0a3f9	Ajout d'accueil dans keepalived	2021-02-05 20:38:49 +01:00
Jeltz	7cdef7ee96	Fix: keep the logs for 90 days	2021-02-05 20:38:49 +01:00
Solal Nathan	faba1d2005	Correct typo, this one was sneaky!	2021-02-05 01:50:56 +01:00
Solal Nathan	5f48a46522	Add postfix quota check	2021-02-05 01:35:46 +01:00
Solal Nathan	b35922346e	Remove file since I did not git mv correclty...	2021-02-05 00:09:12 +01:00
Solal Nathan	77918e00ce	move files to the right place and fix small typo	2021-02-05 00:07:36 +01:00
Solal Nathan	256d2d5df4	Post renewal hook for certbot to reload dovecot and postfix	2021-02-05 00:05:26 +01:00
Solal Nathan	43053e57f9	Fix broken vars	2021-02-04 23:44:32 +01:00
Solal Nathan	e316679e13	Add additional role for mailserver	2021-02-04 23:34:53 +01:00
Otthorn	2c531d1af2	Postfix conf add certs and other security related modifications	2021-02-04 23:18:23 +01:00
Otthorn	27cfcc1320	Don't reinvent the whell, use existing roles (have to be tested)	2021-02-04 14:47:40 +01:00
Otthorn	1c7b4f8560	add re2o service mail cron	2021-02-04 01:46:55 +01:00
Otthorn	9e91f2e9d5	Re2o API config	2021-02-04 01:38:49 +01:00
Otthorn	cf58c2bac5	Add re2o mail server	2021-02-04 01:30:14 +01:00
Otthorn	c85b2b58fe	Add quota to dovecot	2021-02-03 23:20:10 +01:00
Otthorn	2673f771d9	Enable Dovecot sieve	2021-02-03 20:18:46 +01:00
Yohann D'ANELLO	3eb48edccd	Tmux everywhere ... Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>	2021-02-02 23:17:47 +01:00
Solal Nathan	52a29ff010	Fix syntax: don't forget the underscore	2021-01-30 01:14:53 +01:00
Solal Nathan	b2a49c1e42	Add LMTP for Postfix-Dovecot communication	2021-01-30 01:10:31 +01:00
Solal Nathan	809f5f9cc9	Add config in the right section	2021-01-30 01:05:37 +01:00
Solal Nathan	c45dab323a	Don't add conf.d/*.conf into a file that is itself already there! dumb dumb	2021-01-30 00:56:17 +01:00
Solal Nathan	af4d66c85b	remove non-existant conf file from the role	2021-01-30 00:46:00 +01:00
Solal Nathan	fcb53b7cf5	Add sane logging timestamp format	2021-01-30 00:41:30 +01:00
Solal Nathan	b50ef60e8a	fix conf.d template files path	2021-01-30 00:38:15 +01:00
Solal Nathan	d05425745f	Fix indentation... again	2021-01-30 00:34:54 +01:00
Solal Nathan	8612f835af	fix typo and indentation problem	2021-01-30 00:30:35 +01:00
Solal Nathan	99a46af244	User handlers to run when something changed	2021-01-30 00:02:28 +01:00
Solal Nathan	8b66ba059b	use command instead of shell when no shell functionality is required	2021-01-29 23:59:53 +01:00
otthorn	f6c9208a41	Merge pull request 'Limit floats in alerts to 2 decimal places' (#5) from human_readable_altermanager into master ... Reviewed-on: Aurore/ansible#5	2021-01-29 20:48:43 +01:00
otthorn	c9352fb9ab	Merge pull request 'Use unattended-upgrades for Debian-Security' (#4) from unattended into master ... Reviewed-on: Aurore/ansible#4	2021-01-29 20:42:24 +01:00
otthorn	a8af3c9c72	Merge branch 'master' into monitoring_pdu	2021-01-29 20:29:28 +01:00
pz2891	eecf807b53	Delte main.yml.save	2021-01-29 20:15:21 +01:00
pz2891	a12bcbc97f	Correct yamlint	2021-01-29 20:12:14 +01:00
Solal Nathan	6ec89b88d8	Limit floats in alerts to 2 decimal places	2021-01-29 19:33:38 +01:00
Otthorn	094334e069	Fix mode, shoudl always be set	2021-01-29 01:03:18 +01:00
Otthorn	de2758f4d6	rename roles to match regex set by linter	2021-01-29 01:01:10 +01:00
Otthorn	58064df056	fix typo	2021-01-29 00:57:24 +01:00
Otthorn	bd8942eff2	reload -> restart	2021-01-29 00:56:08 +01:00
Otthorn	ad1a1602eb	dovecot ldap conf	2021-01-29 00:16:42 +01:00
Jeltz	d59cb41d5e	Use unattended-upgrades for Debian-Security	2021-01-28 03:42:07 +01:00
Otthorn	1297884ce1	Add ssl conf	2021-01-28 03:15:45 +01:00
Otthorn	026e35adc7	Add IMAP/POP/SMTP auth conf	2021-01-28 01:34:09 +01:00
Otthorn	f991befbc6	renamed to fit jinja template	2021-01-28 01:27:22 +01:00
Otthorn	79b75cae00	maildir conf	2021-01-28 01:24:50 +01:00
Otthorn	765ce39625	auth config	2021-01-28 01:11:32 +01:00
Otthorn	d3cf2c7e5f	dovecot handlers	2021-01-28 00:15:51 +01:00
Otthorn	e1d8382fed	fix typo	2021-01-28 00:13:08 +01:00
Otthorn	241997396b	Config outside of conf.d	2021-01-28 00:11:36 +01:00
Otthorn	a54c5832a3	Apt retry mechanism	2021-01-28 00:07:23 +01:00
pz2891	e3ae912f44	Add prometheus-aurore to monitor all service VM and physical servers. Modifying monitoring role to exclude wireless access points when running the role on all hosts	2021-01-23 22:10:57 +01:00
pz2891	bac377f634	Update alert rules of UPS	2021-01-23 19:01:27 +01:00
Solal Nathan	fff6ec5807	fix typo: restart -> reload	2021-01-23 16:04:09 +01:00
Solal Nathan	795ee3846f	fix indent	2021-01-23 16:02:10 +01:00
Solal Nathan	e6af0f2bd7	fix typo: groupe -> group	2021-01-23 15:59:03 +01:00
Solal Nathan	e1a961273d	fix typo: dst -> dest	2021-01-23 15:42:52 +01:00
Otthorn	73142dbe03	Fix yaml syntax	2021-01-23 14:41:25 +01:00
Otthorn	43274ef2ec	Add the ansible_managed var at the begining of the config file	2021-01-23 14:40:29 +01:00