314 commits

Author	SHA1	Message	Date
Jeltz	bdcd5095ed	Rename 'wireguard-endpoint' to 'wireguard_endpoint'	2021-03-10 05:40:33 +01:00
Jeltz	fed9c9f6cc	Typo 'prerouting' v. 'postrouting'	2021-03-10 04:08:10 +01:00
Jeltz	a9a734f51d	Typo 'udp' v. 'tcp' for SMTP	2021-03-10 03:41:38 +01:00
Jeltz	ba171135b1	Add explicit permissions for nftables config	2021-03-10 03:27:19 +01:00
Jeltz	592d3a630a	Create role for nftables router	2021-03-10 03:17:35 +01:00
Jeltz	22c970d9b4	Add missing ';' in bird config	2021-03-07 23:49:37 +01:00
Jeltz	259c2afeab	Create bird role for OSPF.	2021-02-24 22:09:23 +01:00
Jeltz	85c1d905e7	Use different interfaces for GS and EdC tunnels	2021-02-21 10:57:44 +01:00
Jeltz	63a26b74d0	Notify ifreload handler on wg config change	2021-02-20 23:40:19 +01:00
Jeltz	d1822b3b21	Restore 'no_log' in Wireguard role	2021-02-20 21:03:06 +01:00
Jeltz	5c7360aded	Add support for 'Endpoint' in Wireguard role	2021-02-20 21:02:24 +01:00
Jeltz	0fbcd687d3	Temporarily disable nftables configuration	2021-02-20 17:06:31 +01:00
Jeltz	40527da466	FIX: Use 'peer' in place of 'item'	2021-02-20 17:03:34 +01:00
Jeltz	ea87aa7ec1	WIP: Create a role for a Wireguard VPN endpoint	2021-01-31 06:07:05 +01:00
otthorn	f6c9208a41	Merge pull request 'Limit floats in alerts to 2 decimal places' (#5) from human_readable_altermanager into master ... Reviewed-on: Aurore/ansible#5	2021-01-29 20:48:43 +01:00
otthorn	c9352fb9ab	Merge pull request 'Use unattended-upgrades for Debian-Security' (#4) from unattended into master ... Reviewed-on: Aurore/ansible#4	2021-01-29 20:42:24 +01:00
otthorn	a8af3c9c72	Merge branch 'master' into monitoring_pdu	2021-01-29 20:29:28 +01:00
pz2891	eecf807b53	Delte main.yml.save	2021-01-29 20:15:21 +01:00
pz2891	a12bcbc97f	Correct yamlint	2021-01-29 20:12:14 +01:00
Solal Nathan	6ec89b88d8	Limit floats in alerts to 2 decimal places	2021-01-29 19:33:38 +01:00
Jeltz	d59cb41d5e	Use unattended-upgrades for Debian-Security	2021-01-28 03:42:07 +01:00
pz2891	e3ae912f44	Add prometheus-aurore to monitor all service VM and physical servers. Modifying monitoring role to exclude wireless access points when running the role on all hosts	2021-01-23 22:10:57 +01:00
pz2891	bac377f634	Update alert rules of UPS	2021-01-23 19:01:27 +01:00
Solal Nathan	fff6ec5807	fix typo: restart -> reload	2021-01-23 16:04:09 +01:00
Solal Nathan	795ee3846f	fix indent	2021-01-23 16:02:10 +01:00
Solal Nathan	e6af0f2bd7	fix typo: groupe -> group	2021-01-23 15:59:03 +01:00
Solal Nathan	e1a961273d	fix typo: dst -> dest	2021-01-23 15:42:52 +01:00
Otthorn	73142dbe03	Fix yaml syntax	2021-01-23 14:41:25 +01:00
Otthorn	43274ef2ec	Add the ansible_managed var at the begining of the config file	2021-01-23 14:40:29 +01:00
Otthorn	66c2ff6305	full path to logrotate for command	2021-01-23 14:37:18 +01:00
Otthorn	05326c15d3	Enforce logrotate rules	2021-01-23 14:27:09 +01:00
Otthorn	ddd69e04c0	create logrotate role	2021-01-23 14:25:35 +01:00
pz2891	c7a3495ae5	Alert rules for UPS	2021-01-22 12:16:36 +01:00
pz2891	40d3c22276	Setup config snmp for Prometheus, to monitore Aurore's PDU	2021-01-21 21:26:40 +01:00
Otthorn	f0e3bd78c9	use command instead of shell when you don't need sh features (pipes, env, etc...)	2021-01-19 23:27:17 +01:00
Otthorn	4a57dad8a6	use handlers	2021-01-19 23:19:25 +01:00
otthorn	facfe3c169	Attempt to fix ansible lint	2021-01-17 18:21:29 +01:00
otthorn	ee1726589a	Linter should pass now!	2021-01-17 17:06:59 +01:00
Yohann D'ANELLO	0364006062	Install curl and net-tools by default ... Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>	2021-01-17 12:13:30 +01:00
Yohann D'ANELLO	02e4e7d48f	Sort APT packages ... Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>	2021-01-17 12:12:53 +01:00
pz2891	078d141236	Add task to remove smartmontools of the VM	2021-01-08 22:43:18 +01:00
otthorn	07f9ee1fbb	yes -> true to please yaml linter (truthy)	2021-01-07 11:21:53 +01:00
Paul Ziolkowski	37e3fe2231	Add ldap replica rives	2020-11-09 18:53:47 +01:00
Paul Ziolkowski	b232d6b40b	Renommage re2o_service en re2o-service	2020-11-09 18:10:34 +01:00
chirac	8bf080dbf7	Fix radius permission bug	2020-11-08 18:50:38 +01:00
chirac	5b56f9cfc9	Revert "Use command instead of shell" ... This reverts commit 0f9169284f.	2020-11-08 18:13:21 +01:00
Yohann D'ANELLO	24ab53675a	Automatically renew certificates if a new domain was added	2020-11-04 23:58:27 +01:00
Yohann D'ANELLO	03d48a2d82	Add possibility to configure port forwarding, like SSH for Gitea	2020-11-04 23:49:35 +01:00
Yohann D'ANELLO	ac7696c81f	User cerbot-nginx to create certificates	2020-11-04 23:07:51 +01:00
Yohann D'ANELLO	f9b7e052b9	Store reverse proxy data in proxy host vars	2020-11-04 22:38:54 +01:00