535 commits

This branch

This branch

All branches

Author	SHA1	Message	Date
Jeltz	f24a3e1d29	Use group vars and rename some nftables vars	2021-03-10 08:29:15 +01:00
Jeltz	93c229203a	Add config vars for nftables_router	2021-03-10 08:28:16 +01:00
Jeltz	8e7701423d	Add internet access to signup network	2021-03-10 06:57:59 +01:00
Jeltz	2a57b43184	Reload sysctl (wireguard_endpoint)	2021-03-10 06:23:21 +01:00
Jeltz	94c49143ac	Use '{{ ansible_managed | comment }}'	2021-03-10 05:44:10 +01:00
Jeltz	1d4e03d521	Remove nftables config from wireguard_endpoint	2021-03-10 05:43:44 +01:00
Jeltz	bdcd5095ed	Rename 'wireguard-endpoint' to 'wireguard_endpoint'	2021-03-10 05:40:33 +01:00
Jeltz	fed9c9f6cc	Typo 'prerouting' v. 'postrouting'	2021-03-10 04:08:10 +01:00
Jeltz	a9a734f51d	Typo 'udp' v. 'tcp' for SMTP	2021-03-10 03:41:38 +01:00
Jeltz	ba171135b1	Add explicit permissions for nftables config	2021-03-10 03:27:19 +01:00
Jeltz	592d3a630a	Create role for nftables router	2021-03-10 03:17:35 +01:00
Jeltz	22c970d9b4	Add missing ';' in bird config	2021-03-07 23:49:37 +01:00
Jeltz	9954c9e7d5	Configure bird daemons on VPNs	2021-02-24 22:11:50 +01:00
Jeltz	259c2afeab	Create bird role for OSPF.	2021-02-24 22:09:23 +01:00
Jeltz	85c1d905e7	Use different interfaces for GS and EdC tunnels	2021-02-21 10:57:44 +01:00
Jeltz	227c585b88	Configure vpn-ng-backup	2021-02-20 23:41:10 +01:00
Jeltz	63a26b74d0	Notify ifreload handler on wg config change	2021-02-20 23:40:19 +01:00
Jeltz	f1605415fe	Configure endpoints + "point-to-point" network	2021-02-20 21:03:35 +01:00
Jeltz	d1822b3b21	Restore 'no_log' in Wireguard role	2021-02-20 21:03:06 +01:00
Jeltz	5c7360aded	Add support for 'Endpoint' in Wireguard role	2021-02-20 21:02:24 +01:00
Jeltz	0fbcd687d3	Temporarily disable nftables configuration	2021-02-20 17:06:31 +01:00
Jeltz	7d7444183f	Configure Wireguard endpoints for vpn(-ovh)?-ng	2021-02-20 17:05:10 +01:00
Jeltz	40527da466	FIX: Use 'peer' in place of 'item'	2021-02-20 17:03:34 +01:00
Yohaï-Eliel BERREBY	8399078c2f	set up base on vpn-ng{,-backup}	2021-02-20 16:16:47 +01:00
Jeltz	ea87aa7ec1	WIP: Create a role for a Wireguard VPN endpoint	2021-01-31 06:07:05 +01:00
otthorn	f6c9208a41	Merge pull request 'Limit floats in alerts to 2 decimal places' (#5) from human_readable_altermanager into master ... Reviewed-on: Aurore/ansible#5	2021-01-29 20:48:43 +01:00
otthorn	c9352fb9ab	Merge pull request 'Use unattended-upgrades for Debian-Security' (#4) from unattended into master ... Reviewed-on: Aurore/ansible#4	2021-01-29 20:42:24 +01:00
otthorn	3da5dde917	Merge pull request 'monitoring_pdu' (#3) from monitoring_pdu into master ... Reviewed-on: Aurore/ansible#3	2021-01-29 20:32:12 +01:00
otthorn	a8af3c9c72	Merge branch 'master' into monitoring_pdu	2021-01-29 20:29:28 +01:00
pz2891	eecf807b53	Delte main.yml.save	2021-01-29 20:15:21 +01:00
pz2891	a12bcbc97f	Correct yamlint	2021-01-29 20:12:14 +01:00
Solal Nathan	6ec89b88d8	Limit floats in alerts to 2 decimal places	2021-01-29 19:33:38 +01:00
Jeltz	d59cb41d5e	Use unattended-upgrades for Debian-Security	2021-01-28 03:42:07 +01:00
pz2891	3d05acbd03	Add Loki server	2021-01-26 19:18:35 +01:00
pz2891	e3ae912f44	Add prometheus-aurore to monitor all service VM and physical servers. Modifying monitoring role to exclude wireless access points when running the role on all hosts	2021-01-23 22:10:57 +01:00
pz2891	bac377f634	Update alert rules of UPS	2021-01-23 19:01:27 +01:00
Solal Nathan	57d997536a	Merge branch 'master' of ssh://gitea.auro.re:2222/Aurore/ansible	2021-01-23 16:22:58 +01:00
Solal Nathan	be0c2f8e4a	If you want to ONLY run the logrotate role	2021-01-23 16:22:36 +01:00
otthorn	a3794e9f7d	Merge pull request 'Logrotate' (#2) from logrotate into master ... Reviewed-on: Aurore/ansible#2	2021-01-23 16:16:57 +01:00
Solal Nathan	fff6ec5807	fix typo: restart -> reload	2021-01-23 16:04:09 +01:00
Solal Nathan	795ee3846f	fix indent	2021-01-23 16:02:10 +01:00
Solal Nathan	e6af0f2bd7	fix typo: groupe -> group	2021-01-23 15:59:03 +01:00
Solal Nathan	e1a961273d	fix typo: dst -> dest	2021-01-23 15:42:52 +01:00
Solal Nathan	d50288ccff	fix host syntax	2021-01-23 15:12:28 +01:00
Otthorn	73142dbe03	Fix yaml syntax	2021-01-23 14:41:25 +01:00
Otthorn	43274ef2ec	Add the ansible_managed var at the begining of the config file	2021-01-23 14:40:29 +01:00
Otthorn	66c2ff6305	full path to logrotate for command	2021-01-23 14:37:18 +01:00
Otthorn	0d9fd16030	Add logrotate to the base playbook	2021-01-23 14:35:03 +01:00
Otthorn	0122a293eb	Add the unify group	2021-01-23 14:34:13 +01:00
Otthorn	05326c15d3	Enforce logrotate rules	2021-01-23 14:27:09 +01:00