Commit Graph

74 Commits

Author SHA1 Message Date
pz2891 7ca7c27fec Add PDU snmp credentials 2021-08-20 13:28:19 +02:00
jeltz 6f927e30f3 Exclude docker and lxcfs folders from borgbackup 2021-03-16 15:05:07 +01:00
jeltz 6713b550b6 Merge branch 'master' into backups 2021-03-15 07:50:11 +01:00
otthorn e570ce67b3 [borgbackup_client] do not backup /var/log/ 2021-03-14 19:23:04 +01:00
otthorn c5afbdbde4 remove borg_host_dir 2021-03-14 18:22:17 +01:00
jeltz c99b611b8f Various fixes 2021-03-14 14:17:36 +01:00
jeltz f45cd77510 Merge branch 'master' into logs-first-phase 2021-03-13 05:02:30 +01:00
otthorn a01a2095d6 Add passwords in all and vault for postgres db for wikijs, gitea, nextcloud, drone 2021-03-13 03:07:35 +01:00
otthorn 904678d1ac [borgbackup_client] Add borg encryption passphrase to vault
continuous-integration/drone/push Build is passing Details
continuous-integration/drone/pr Build is passing Details
2021-03-12 01:49:04 +01:00
otthorn d16676bfb6 [borgbackup_client] hostname should also be unique, but more legible than fqdn 2021-03-12 01:05:58 +01:00
otthorn cdcfad7ac2 [borgbackup_client] backup /var/ also (for now) 2021-03-12 01:05:19 +01:00
otthorn 454bc66ae0 [borgbackup_client] backup /etc/ everywhere 2021-03-12 00:30:00 +01:00
jeltz 69516012a2 Add databases for Grafana and CAS
continuous-integration/drone/push Build is failing Details
continuous-integration/drone/pr Build is failing Details
2021-03-11 19:28:14 +01:00
jeltz df4bee2980 Add kanboard database to bdd-ovh
continuous-integration/drone/push Build is passing Details
continuous-integration/drone/pr Build is passing Details
2021-03-10 20:14:02 +01:00
otthorn b3fa8a455d Add/Update password for postgres db codimd, etherpad and synapse
continuous-integration/drone/push Build is passing Details
continuous-integration/drone/pr Build is passing Details
2021-03-10 17:13:56 +01:00
otthorn 5871e1cfb8 Add/Update password for postgres db codimd, etherpad and synapse 2021-03-10 17:13:13 +01:00
jeltz deb4372588 Merge branch 'master' into add-ssh-keys
continuous-integration/drone/push Build is failing Details
continuous-integration/drone/pr Build is failing Details
2021-03-07 21:29:57 +01:00
jeltz 2e912fc47a Add recovery SSH keys for ynerant and otthorn
continuous-integration/drone/pr Build is failing Details
continuous-integration/drone/push Build is failing Details
2021-03-07 21:23:09 +01:00
jeltz 8ae94fa8f8 Rename vault_snmp_switch{s,}_community 2021-03-06 01:08:51 +01:00
jeltz 5d319cf167 Define rsyslog_{inputs,outputs} for all hosts 2021-03-02 00:52:38 +01:00
jeltz 1fe8d1d28b Remove "Root Aurore" SSH key + add histausse key 2021-03-01 13:28:49 +01:00
jeltz c3d24c1cd0 Add SSH key for Jeltz
continuous-integration/drone/push Build is passing Details
2021-02-28 21:47:42 +01:00
ynerant ae151321db
[nginx/certbot] Clone roles from Crans
continuous-integration/drone/push Build is passing Details
continuous-integration/drone/pr Build is passing Details
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
2021-02-24 11:46:37 +01:00
ynerant 4ecb6ed7be
Update re2o-service password
continuous-integration/drone/push Build is failing Details
continuous-integration/drone/pr Build is failing Details
Signed-off-by: ynerant <ynerant@crans.org>
2021-02-05 21:18:26 +01:00
pz2891 88ffd2297f Add residence les rives
continuous-integration/drone/push Build is failing Details
2020-11-08 18:53:07 +01:00
Yohann D'ANELLO f9b7e052b9 Store reverse proxy data in proxy host vars 2020-11-04 22:38:54 +01:00
Yohann D'ANELLO c11b3bc20f Comments must start by a space 2020-11-04 20:08:51 +01:00
Yohann D'ANELLO 9505e87113 Use true instead of yes 2020-11-04 20:00:35 +01:00
chirac 4a43c0f0db Update re2o ip 2020-11-02 17:25:26 +01:00
chirac 68f7fd5b59 Isc-dhcp-server config for banni/accueil vlans 2020-10-17 19:48:34 +02:00
Yohaï-Eliel BERREBY 9b07fc9001 dhcp: manage dhcp-aurore 2020-09-11 15:13:11 +02:00
chirac 26743b464d Add Radius-aurore.adm.auro.re to ansible managed radius servers 2020-09-09 23:17:15 +02:00
Yohaï-Eliel BERREBY 646ebd3ba9 router: ansibilize routeur-aurore{,backup} 2020-08-08 20:45:38 +02:00
Yohaï-Eliel BERREBY 3a8112bf0d roll out (private) IPv6 on George Sand 2020-08-01 17:48:39 +02:00
Yohaï-Eliel BERREBY d54da8d2b9 add ipv6_base_prefix variable 2020-08-01 14:31:49 +02:00
Yohaï-Eliel BERREBY 337906c6c0 add gs dhcp, dns, routing
and add thor to inventory
2020-07-06 18:40:54 +02:00
Yohaï-Eliel BERREBY a6b15c0e10 vars: use apartment block id for subnets 2020-05-21 20:06:47 +02:00
Yohaï-Eliel BERREBY 63b4425a27 gs: fix vars 2020-05-21 19:45:35 +02:00
Yohaï-Eliel BERREBY 99070ed5ef radius: step 2 of deployment (WIP) 2020-05-21 18:06:37 +02:00
Yohaï-Eliel BERREBY e2fa1964af radius: change proxy.conf password, use vault
and also actually template it... it wasn't being
uploaded.
2020-05-21 14:19:28 +02:00
Yohaï-Eliel BERREBY 266b0dde6f radius: initial setup 2020-05-16 22:08:22 +02:00
Yohaï-Eliel BERREBY ba3aec348f keepalived: deploy to fleming w/ proper password 2020-05-09 16:07:04 +02:00
Alexandre Iooss a992612381
Add certbot challenge DNS-01 key 2020-05-09 13:03:31 +02:00
Alexandre IOOSS 81592fa986 Merge branch 'master' into 'aurore-dev'
# Conflicts:
#   .gitignore
#   hosts
#   network.yml
#   proxmox.yml
2020-05-03 16:11:19 +02:00
Yohaï-Eliel BERREBY a77b2c4f0f unbound: fix MTU settings
That was the root cause of all our DNSSEC issues.
Now that this was fixed, we're not having these anymore,
so the relaxed checks can be restored back to their original state.
2020-05-02 18:59:22 +02:00
Yohaï-Eliel BERREBY 662452065f dhcp: remove Cloudflare from backup DNS
and rename variable, since these are not technically
upstream DNS servers
(unbound will ask the root servers, not these)
2020-04-18 17:06:38 +02:00
Yohaï-Eliel BERREBY a0651d7703 unbound: bind to the right addresses on backup hosts 2020-04-18 16:56:34 +02:00
Yohaï-Eliel BERREBY 22166bc69b unbound: log to journalctl 2020-04-18 16:56:17 +02:00
Yohaï-Eliel BERREBY 7275ebda47 dhcp: ask clients to use our DNS servers 2020-04-18 15:39:32 +02:00
fpoutre b7b32dc496 modified the master_ldap_uri to use a ndd 2020-02-20 19:08:09 +01:00