aurore/ansible
aurore/ansible
11
2
Fork 0
Code Issues 1 Pull requests 13 Releases Wiki Activity
397 commits 31 branches 0 tags 3.8 MiB
Commit graph

244 commits

Author SHA1 Message Date
Yohaï-Eliel BERREBY b94c62d710 unbound-control: no certificates for local use 2020-05-02 16:37:21 +02:00
Yohaï-Eliel BERREBY 3695a3d771 unbound: attempt to fix spurious blacklisting 2020-04-28 23:14:43 +02:00
Yohaï-Eliel BERREBY b4482b6d3b unbound: configure unbound-control 2020-04-28 20:21:47 +02:00
Yohaï-Eliel BERREBY bac131791b unbound: bump verbosity up to 3 
Some users are having issues resolving *.auro.re domains from our
network, and the bug does not show itself reliably. Increased verbosity
should help us pinpoint its source.
 2020-04-28 20:13:56 +02:00
Yohaï-Eliel BERREBY ded5f38aec unbound: name set_fact tasks 2020-04-18 17:36:25 +02:00
Yohaï-Eliel BERREBY 662452065f dhcp: remove Cloudflare from backup DNS 
and rename variable, since these are not technically
upstream DNS servers
(unbound will ask the root servers, not these)
 2020-04-18 17:06:38 +02:00
Yohaï-Eliel BERREBY a0651d7703 unbound: bind to the right addresses on backup hosts 2020-04-18 16:56:34 +02:00
Yohaï-Eliel BERREBY b57fa6e356 dhcp: use backup DNS servers too 2020-04-18 16:56:34 +02:00
Yohaï-Eliel BERREBY 22166bc69b unbound: log to journalctl 2020-04-18 16:56:17 +02:00
Yohaï-Eliel BERREBY 1777d0e154 unbound: log to /var/log/unbound.log, errors only 2020-04-18 15:42:31 +02:00
Yohaï-Eliel BERREBY 7275ebda47 dhcp: ask clients to use our DNS servers 2020-04-18 15:39:32 +02:00
Yohaï-Eliel BERREBY f05e92dc5e unbound: remove unchecked configuration keys 2020-04-13 18:42:02 +02:00
Yohaï-Eliel BERREBY b3712ed335 unbound: initial deployment 2020-04-13 18:41:12 +02:00
Yohaï-Eliel BERREBY 8fee0857c1 re2o-service: force clone git repository 2020-04-06 19:03:38 +02:00
Yohaï-Eliel BERREBY 8579b99b2e dhcp: cron.d entry + let main.py restart the server 2020-04-06 19:03:10 +02:00
Yohaï-Eliel BERREBY 6cce62850d dhcp: configure log rotation 2020-04-06 17:58:14 +02:00
Yohaï-Eliel BERREBY 7347829494 tackle logs 2020-04-06 17:48:56 +02:00
Yohaï-Eliel BERREBY 51fdb89940 extract dhcp-failover.conf into separate file 2020-04-06 17:28:04 +02:00
Yohaï-Eliel BERREBY d323b78c16 fix bogus dhcpd config 
- move failover peer declaration to beginning of file
- set split only on primary
- fix re2o-service hostname
- add /etc/default/isc-dhcp-server
 2020-04-06 17:22:50 +02:00
Yohaï-Eliel BERREBY 34b448faec dhcp: implement failover peer configuration 2020-04-06 14:41:34 +02:00
Yohaï-Eliel BERREBY 2a0a2e2ac6 dhcp: fix silly mix-ups 2020-04-06 13:20:52 +02:00
Yohaï-Eliel BERREBY 709e4614c2 suppression d'une déclaration DNS redondante 2020-04-05 19:04:03 +02:00
Yohaï-Eliel BERREBY e6b2f80b49 templatisation de la config dhcpd 
non encore testé
 2020-04-05 18:44:37 +02:00
fpoutre 40e915a7e0 happy little mistakes 2020-03-22 19:06:38 +01:00
fpoutre 23f1b7a4a1 added support for edc and gs in ldap replica backup configuration 2020-03-22 18:42:00 +01:00
fpoutre 3a399bd04c added ldap-replica support for ldap-clients of pacaterie and fleming 2020-02-20 18:42:34 +01:00
Alexandre Iooss 5061a029e0
Do not ask why, it was not there 2019-12-05 14:07:48 +01:00
Alexandre Iooss ccbd7d3770
Failover VMs 2019-11-01 15:38:35 +01:00
Alexandre Iooss 6dec3ed0d1
Proxmox playbook and unifi ap 2019-11-01 15:17:59 +01:00
Alexandre Iooss 5b3ac2a21a
Merge crans version 2019-11-01 14:16:32 +01:00
Alexandre Iooss e91d47ea8d
Update matrix conf 2019-08-29 07:04:37 +02:00
Alexandre Iooss 6cc0a6a6b7
Remove appservice Discord 2019-08-29 07:03:54 +02:00
Alexandre Iooss 743e902e85
Refractor ldap 2019-08-29 07:03:05 +02:00
Alexandre Iooss e15ea7854a
Base config sync with crans 2019-08-29 07:02:15 +02:00
Alexandre Iooss 044e8af3aa
Move EtherPad to Docker 2019-07-26 08:50:07 +02:00
Alexandre Iooss b488007578
[docker] Install docker-compose 2019-07-25 19:10:50 +02:00
Alexandre Iooss 24331ca25b
Fix CI 2019-07-22 21:04:58 +02:00
Alexandre Iooss 2e753db873
Indicate unifi role 2019-07-22 21:00:13 +02:00
Alexandre Iooss 694501dfa3
Merge crans monitoring 2019-07-22 20:56:43 +02:00
Alexandre Iooss a45ca1a890
Move CodiMD to Docker 2019-07-22 19:14:43 +02:00
Alexandre Iooss 9a35650166
Move Riot web to docker 2019-07-22 10:32:34 +02:00
Alexandre Iooss 66d870ce36
Add docker role 2019-07-22 10:32:01 +02:00
Alexandre Iooss 9018c69da3
Fix matrix v1 2019-07-22 09:12:55 +02:00
Alexandre Iooss 1ed6228728
Simplify help message on server login 2019-05-26 13:03:09 +02:00
Alexandre Iooss 2e0679a973
[passbolt] Add some dep 2019-05-26 12:52:41 +02:00
Alexandre Iooss a986ecd36a
Passbolt playbook 2019-05-23 07:28:44 +02:00
Alexandre Iooss 72a60a988b
Unifi playbook 2019-05-07 18:52:07 +02:00
Alexandre Iooss b6573e68ae
Exclude Stretch from node config 2019-05-05 16:24:04 +02:00
Alexandre Iooss c53d62712f
Make prometheus node exporter listen only on adm 2019-05-05 16:17:52 +02:00
Alexandre Iooss c1c995e38d
Prometheus role 2019-05-05 14:07:04 +02:00
Alexandre Iooss 8dc40ecb1e
Specify git branch 2019-05-04 18:43:20 +02:00
Alexandre Iooss 8b7d4207b8
Autogenerate service config 2019-05-04 11:46:54 +02:00
Alexandre Iooss 5939d434fd
Beginning of isc-dhcp-server config 2019-05-04 10:54:51 +02:00
Alexandre Iooss 41eb131e69
Fix true values being yes 2019-05-03 22:50:48 +02:00
Alexandre Iooss 81ca7a177d
Initial DHCP re2o service 2019-05-03 22:42:55 +02:00
Alexandre Iooss aab2daf5b7
Fix Riot depo key 2019-05-03 22:42:12 +02:00
Alexandre Iooss 5e738f40a7
Uniformize motd 2019-05-03 15:52:50 +02:00
Alexandre IOOSS 1cc6bc744b Merge branch 'change_default_soft' into 'master' 
Add screen and remove iPython2

See merge request aurore/ansible!20
 2019-05-03 14:38:49 +02:00
Alexandre Iooss 0c8763c702
Create VM with Proxmox API 2019-05-03 13:06:26 +02:00
Alexandre Iooss 55cf8b801d
Remove useless systemd handler 2019-04-06 15:19:52 +02:00
Alexandre Iooss 1b3a6f7bf8
Configure IRC Matrix appservice 2019-04-01 18:53:37 +02:00
Alexandre Iooss 84694900e4
Annonce the right Webhook URL for Matrix 2019-04-01 17:57:43 +02:00
Alexandre Iooss 2158c5c6b9
Pass Matrix Webhook through reverse proxy 2019-04-01 17:57:20 +02:00
Alexandre Iooss 88b9356f7d
Make CodiMD role more generic 2019-03-30 13:34:25 +01:00
Alexandre Iooss 48d521fb00
Use generic service model for matrix appservices 2019-03-30 13:26:20 +01:00
Alexandre Iooss 5ccb94e621
Simplify Matrix appservices 2019-03-29 19:25:11 +01:00
Alexandre Iooss d4d6baed1a
Fix so everything is working fine today 2019-03-26 09:17:46 +01:00
Alexandre IOOSS 00ccc4c377 Merge branch 'refactor' into 'master' 
Refactor

See merge request aurore/ansible!30
 2019-03-26 08:36:21 +01:00
Alexandre Iooss ee4f144b4a
Default configuration for Riot 2019-03-26 08:30:02 +01:00
Alexandre Iooss 7950191a53
Fix PVE unable to mount vfat at boot 2019-03-25 10:55:51 +01:00
Alexandre Iooss 11e084a104
Switch discord appservice to develop 2019-03-24 17:05:24 +01:00
Alexandre IOOSS 40e63ba89e Merge branch 'discord_matrix' into 'master' 
Discord matrix

See merge request aurore/ansible!31
 2019-03-24 12:44:23 +01:00
Alexandre Iooss bbc04d971f
Working appservice Discord 2019-03-24 12:10:35 +01:00
Hadrien Patte 66f7b1061a
Feat: migrate from with_X to loop 
Signed-off-by: Hadrien Patte <hadrien.patte@protonmail.com>
 2019-03-23 20:11:27 +01:00
Hadrien Patte c20d4fbf18
Feat: expand YAML syntax 
Signed-off-by: Hadrien Patte <hadrien.patte@protonmail.com>
 2019-03-23 20:05:45 +01:00
Hadrien Patte 8a48110c21
Feat: add validate for sudoers 
Signed-off-by: Hadrien Patte <hadrien.patte@protonmail.com>
 2019-03-23 20:05:45 +01:00
Hadrien Patte 737ca7b996
Feat: add state 
Signed-off-by: Hadrien Patte <hadrien.patte@protonmail.com>
 2019-03-23 20:05:42 +01:00
Hadrien Patte e4a60341c5
Feat: simplify one item lists 
Signed-off-by: Hadrien Patte <hadrien.patte@protonmail.com>
 2019-03-23 20:04:35 +01:00
Hadrien Patte 5551fb5c16
Fix: remove unnecessary quotes 
Signed-off-by: Hadrien Patte <hadrien.patte@protonmail.com>
 2019-03-23 20:04:33 +01:00
Hadrien Patte 8463f1cf96
Feat: use ini_file module 
Signed-off-by: Hadrien Patte <hadrien.patte@protonmail.com>
 2019-03-23 19:21:59 +01:00
Alexandre Iooss 489bb5ddcf
sudo group by location 2019-03-23 13:49:53 +01:00
Alexandre Iooss 01ad50ef95
Whitelist proxy 2019-03-23 13:00:18 +01:00
Alexandre Iooss bd229fb11e
Update matrix-appservice-discord config 2019-03-23 12:52:39 +01:00
Alexandre Iooss 3198a50c93
Changed URL to make the Webhooks appservice work 2019-03-17 10:42:43 +01:00
Alexandre IOOSS 2b79f9117e Merge branch 'debsums_security' into 'master' 
Configure SSH and add debsums

See merge request aurore/ansible!25
 2019-03-16 22:09:40 +01:00
Alexandre Iooss 724db5f8c8 Configure SSH and add debsums 2019-03-16 22:06:50 +01:00
Alexandre Iooss a3b7cf6270 Hotfix HTTP 2019-03-16 21:10:00 +01:00
Alexandre Iooss 221be36085 Fail2ban by default 2019-03-14 15:45:19 +01:00
Alexandre Iooss fb11981e8a Follow Mozilla guidelines 2019-03-14 12:25:27 +01:00
Alexandre Iooss af07bb7c0a Better SSL conf 2019-03-14 11:53:55 +01:00
Alexandre Iooss a8fa5d69ff Add proxy snippets and use nginx-light 2019-03-14 10:53:44 +01:00
Alexandre Iooss 0cc36a107c Fix CI 2019-03-12 19:58:55 +01:00
Alexandre Iooss c9761e53dd Connect to Synapse 2019-03-12 18:33:32 +01:00
Alexandre Iooss 1a447b3807 Add matrix-appservice-webhooks and move nodejs tasks 2019-03-12 18:03:23 +01:00
Alexandre IOOSS fa7aa8ea75 Merge branch 'master' into 'change_default_soft' 
# Conflicts:
#   roles/baseconfig/tasks/main.yml
 2019-03-12 17:27:23 +01:00
Alexandre Iooss bc1459bc51 Fix various yamllint warnings 2019-03-12 17:22:42 +01:00
Alexandre Iooss 5dfd8eacc5 Replace 'yes' by 'true' 2019-03-12 17:04:06 +01:00
Alexandre Iooss 431b063db7 Maybe last fix for the CI 2019-03-12 16:56:01 +01:00
Alexandre Iooss cc48990798 Use NPM module in matrix-appservice-discord 2019-03-12 16:51:27 +01:00
Alexandre Iooss 4a6da11837 Clean up EtherPad dep install 2019-03-12 16:34:35 +01:00