3f26e7d4b4
routeur de la pacaterie en ...254 au lieu de ...240 pour keepalived
2020-05-08 18:39:05 +02:00
a4d0f051b6
dhcp: restart server on config update
2020-05-08 16:44:32 +02:00
223578eefa
keepalived: no ansible_managed
...
Used to restart keepalived needlessly
2020-05-08 16:43:49 +02:00
4372b21976
dhcp: allow different router IP suffix
...
This variable is only needed because we're in the process of deploying
keepalived. For now it's only at EDC.
2020-05-08 16:36:07 +02:00
e58ee1c4b5
keepalived: initial config
2020-05-08 16:25:02 +02:00
26524eccc5
ansible-list: allow lack of idempotence
2020-05-07 20:33:25 +02:00
e45bdcbba8
network.yml: ensure safety without --limit
2020-05-07 20:27:36 +02:00
fea73a13aa
aurore-firewall: correct backup router ip
2020-05-07 20:23:30 +02:00
8ba2de1698
aurore-firewall: fix repo address + branch
2020-05-07 20:01:44 +02:00
44be43e528
aurore-firewall: add config after cloning
2020-05-07 19:57:00 +02:00
1a10729b67
hosts: manage dhcp-edc
2020-05-07 19:48:07 +02:00
5ee7bb3069
ansible.cfg: unset scp_if_ssh
2020-05-07 19:48:07 +02:00
c77ae7f4c3
aurore-firewall: initial setup
...
group_vars: add apartment_block_id var
dhcp: move vars to role
2020-05-07 19:47:50 +02:00
268c4d2419
hosts: manage recursive DNS on EDC
2020-05-07 18:51:45 +02:00
e4d428d1dc
unbound: change task order
...
Seems to be necessary to restart unbound manually for some reason?...
2020-05-07 18:49:31 +02:00
3d742c391c
hosts: add routeur-edc-backup
2020-05-07 17:06:48 +02:00
4f224ee817
re2o-service: install Python dependencies
2020-05-07 14:55:12 +02:00
24a6063a91
baseconfig: fix resolv.conf
2020-05-07 14:51:02 +02:00
3f5e0d0035
edc: add group vars required for dhcp deployment
2020-05-07 13:03:44 +02:00
0db7713bbf
hosts: add dhcp-edc-backup
2020-05-07 12:55:19 +02:00
7c7abb6be5
baseconfig: set up /etc/resolv.conf
2020-05-07 12:53:59 +02:00
7e9c4352a0
base: group name is ldap_replica
...
It's an underscore, not a hyphen
2020-05-04 18:49:51 +02:00
9c1f186682
hosts: s/physical/pve/g, add new backup hosts
2020-05-04 18:48:00 +02:00
ef88d0a42b
Some clean up in hosts
2020-05-03 20:50:29 +02:00
36343d90fd
BangShebang!
2020-05-03 18:45:07 +02:00
dc2db3d6a3
Decomment hosts
2020-05-03 18:40:26 +02:00
3b72e2fe2d
Remove SSH blacklist
2020-05-03 17:26:10 +02:00
e42bdd53a8
Merge branch 'aurore-dev' into 'master'
...
Aurore dev
See merge request aurore/ansible!47
2020-05-03 16:11:29 +02:00
81592fa986
Merge branch 'master' into 'aurore-dev'
...
# Conflicts:
# .gitignore
# hosts
# network.yml
# proxmox.yml
2020-05-03 16:11:19 +02:00
29991141f5
misc: add script to copy SSH keys
...
This one has the advantage of actually working :)
I had to blacklist some hosts because they would either outright refuse
connections or would refuse my LDAP credentials.
2020-05-03 11:26:53 +02:00
a77b2c4f0f
unbound: fix MTU settings
...
That was the root cause of all our DNSSEC issues.
Now that this was fixed, we're not having these anymore,
so the relaxed checks can be restored back to their original state.
2020-05-02 18:59:22 +02:00
aae7e0120a
unbound: drop verbosity but log SERVFAILs
...
TODO: less frequent log rotation because of decreased log volume
2020-05-02 18:06:58 +02:00
c54e8f5d67
unbound: smarter logging
...
- stop using journald, write to /var/log/unbound/
- set up frequent log rotation for the huge log files
we are producing
2020-05-02 17:13:01 +02:00
1dca5d2259
unbound: use handlers
...
Only restart unbound if the configuration
was actually updated.
2020-05-02 16:43:44 +02:00
b94c62d710
unbound-control: no certificates for local use
2020-05-02 16:37:21 +02:00
3695a3d771
unbound: attempt to fix spurious blacklisting
2020-04-28 23:14:43 +02:00
b4482b6d3b
unbound: configure unbound-control
2020-04-28 20:21:47 +02:00
bac131791b
unbound: bump verbosity up to 3
...
Some users are having issues resolving *.auro.re domains from our
network, and the bug does not show itself reliably. Increased verbosity
should help us pinpoint its source.
2020-04-28 20:13:56 +02:00
ded5f38aec
unbound: name set_fact tasks
2020-04-18 17:36:25 +02:00
yberreby
7234d90fae
Merge branch 'dns' into 'aurore-dev'
...
Finalisation du déploiement d'unbound
See merge request aurore/ansible!46
2020-04-18 17:10:22 +02:00
662452065f
dhcp: remove Cloudflare from backup DNS
...
and rename variable, since these are not technically
upstream DNS servers
(unbound will ask the root servers, not these)
2020-04-18 17:06:38 +02:00
12022389c4
hosts: enable dhcp deployment on fleming
2020-04-18 16:57:18 +02:00
a0651d7703
unbound: bind to the right addresses on backup hosts
2020-04-18 16:56:34 +02:00
b57fa6e356
dhcp: use backup DNS servers too
2020-04-18 16:56:34 +02:00
22166bc69b
unbound: log to journalctl
2020-04-18 16:56:17 +02:00
bfc7d542df
hosts: add all DNS VMs from fleming and pacaterie
2020-04-18 15:43:39 +02:00
1777d0e154
unbound: log to /var/log/unbound.log, errors only
2020-04-18 15:42:31 +02:00
7275ebda47
dhcp: ask clients to use our DNS servers
2020-04-18 15:39:32 +02:00
59b9059116
Merge branch 'dns' into 'aurore-dev'
...
Déploiement basique de serveur DNS récursif
See merge request aurore/ansible!45
2020-04-13 19:08:32 +02:00
f05e92dc5e
unbound: remove unchecked configuration keys
2020-04-13 18:42:02 +02:00
Pierre
yberreby