|
|
7b35cb159b
|
Add GSSAPI authentication to collab hosts
|
2020-09-04 13:37:45 +00:00 |
|
|
|
70bf4bf846
|
Open NFS port for nas hosts
|
2020-09-04 13:37:23 +00:00 |
|
|
|
f1a4424067
|
mod_auth_gssapi: Initial version of role
|
2020-09-04 13:36:56 +00:00 |
|
|
|
878de962f6
|
kvm-host: Initial version of role
|
2020-09-04 12:00:02 +00:00 |
|
|
|
f7fc9e97c6
|
selinux: Lint fixes
|
2020-09-04 09:28:21 +00:00 |
|
|
|
e117fa23c5
|
postfix: Lint fixes
|
2020-09-04 09:25:55 +00:00 |
|
|
|
9a2cd1e646
|
Add nas02.home.foo.sh host
|
2020-09-04 08:32:31 +00:00 |
|
|
|
f920c8f09a
|
zfs: Initial version of role
|
2020-09-04 08:31:49 +00:00 |
|
|
|
7f63f03ac1
|
Open DoT port 853 for public dns servers
|
2020-09-04 07:00:00 +00:00 |
|
|
|
533b48204f
|
ldap_netdb: Add -v option to cron job and skip localhost
|
2020-09-04 06:58:48 +00:00 |
|
|
|
8ca459430c
|
nsd: Restart nsd after certificate update
|
2020-09-04 06:37:53 +00:00 |
|
|
|
bdb2d9adb9
|
Rework site.yml to include tested groups
|
2020-09-03 20:41:17 +00:00 |
|
|
|
46bdda437d
|
Add nginx to ns group
Used to authenticate certficates from letsencrypt.
|
2020-09-03 20:24:57 +00:00 |
|
|
|
e10d84305a
|
base: Install curl to all hosts
|
2020-09-03 20:24:25 +00:00 |
|
|
|
5edbeef97a
|
Rename certbot.foo.sh to certbot.home.foo.sh
|
2020-09-03 20:23:53 +00:00 |
|
|
|
7de9a9a6ae
|
nsd: Remove secondary dns servers
We run all as masters at the moment.
|
2020-09-03 20:04:17 +00:00 |
|
|
|
b4e260b1e1
|
nsd: Fix typo
|
2020-09-03 20:04:05 +00:00 |
|
|
|
db35937a67
|
Don't lock myself out from external hosts
|
2020-09-03 19:39:42 +00:00 |
|
|
|
4b49e9e486
|
Add atl01.vultr.foo.sh host
|
2020-09-03 19:37:06 +00:00 |
|
|
|
905e7f8485
|
Rename generic vm-create to deploy-kvm-guest
|
2020-09-03 18:13:52 +00:00 |
|
|
|
c9f3b7d0b7
|
Add ns02.home.foo.sh host
|
2020-09-03 17:59:43 +00:00 |
|
|
|
69c17d7e12
|
nsd: Initial version of role (WIP)
|
2020-09-03 17:58:53 +00:00 |
|
|
|
c1c74dc5c4
|
network: Fix type warning from net.inet.carp.preempt
|
2020-09-03 16:09:18 +00:00 |
|
|
|
525d8b72f9
|
Add certbot support for outside server network
|
2020-09-03 07:55:32 +00:00 |
|
|
|
5f17ae2964
|
Add proto=static to proxies network interfaces
|
2020-09-03 07:54:49 +00:00 |
|
|
|
35b1487d2a
|
postfix: Verify peer certificate for stunnel
|
2020-09-03 07:48:42 +00:00 |
|
|
|
63890bcb72
|
opensmtpd: Redirect all local mails to relay
|
2020-09-03 07:34:20 +00:00 |
|
|
|
58aa3e80db
|
Add route to old puppet infra from adm hosts
|
2020-09-03 07:29:31 +00:00 |
|
|
|
108660e297
|
network: Require proto=static for static ip address
|
2020-09-03 06:51:07 +00:00 |
|
|
|
2312e0b038
|
ldap_netdb: Fix typo
|
2020-09-03 06:07:33 +00:00 |
|
|
|
5b24509081
|
postfix: Fix email sending to local addresses
CentOS 7 sendmail and postfix doesn't have support for sending to SMTPs
server on port 465 so use stunnel for those.
|
2020-09-02 21:07:21 +00:00 |
|
|
|
574916dfaf
|
postfix: Fix local mail delivery to relayhost
|
2020-09-02 17:13:13 +00:00 |
|
|
|
8d1fed8695
|
pf: Fix indentation from pf.conf
|
2020-09-01 20:37:00 +00:00 |
|
|
|
6d63bda3ff
|
network: Fix OpenBSD interface with empty settings
|
2020-09-01 20:22:48 +00:00 |
|
|
|
bec7f3a84d
|
base: Use copy instead of file
|
2020-09-01 20:18:14 +00:00 |
|
|
|
f1468b0f1f
|
base: Use explicit package names for OpenBSD
|
2020-09-01 20:16:33 +00:00 |
|
|
|
f60fb7f88c
|
Force python3 install when provisioning OpenBSD
|
2020-09-01 20:15:15 +00:00 |
|
|
|
51aa0a709e
|
selinux: lint fixes
|
2020-09-01 19:21:18 +00:00 |
|
|
|
55d7d954b3
|
ldap_netdb: Initial version of role
|
2020-09-01 18:12:21 +00:00 |
|
|
|
7b201b31da
|
collab: Add missing srcdir and remove swap file
|
2020-08-31 00:21:37 +00:00 |
|
|
|
9dd83a8146
|
Lint fixes
|
2020-08-31 00:20:22 +00:00 |
|
|
|
c9b21a3286
|
Add ansible_certificate custom fact
|
2020-08-29 15:55:51 +00:00 |
|
|
|
0ae634aed2
|
Add vmhost02.home.foo.sh
|
2020-08-29 15:55:16 +00:00 |
|
|
|
aac14db657
|
ansible-host: Publish ansible facts with nginx
|
2020-08-29 13:43:21 +00:00 |
|
|
|
88157dcc91
|
collab: Initial version of role
|
2020-08-28 16:09:53 +00:00 |
|
|
|
99a88e1baa
|
Add temporary ssh config for adm hosts
* Route vmhost01 through ssh until it gets relocated
* Disable ip host key checking until we get ssh host certificates
|
2020-08-28 15:44:29 +00:00 |
|
|
|
acbe47c53f
|
Add make to adm hosts
|
2020-08-28 15:34:03 +00:00 |
|
|
|
13d07b7a6d
|
Rename moin group/hosts to collab
|
2020-08-28 12:58:54 +00:00 |
|
|
|
f6aed5faad
|
Add collab.foo.sh site to proxies
|
2020-08-28 12:56:05 +00:00 |
|
|
|
dd2b5c6a69
|
apache: Remove Procotols option
CentOS 7 doesn't support Protocols definition at all. Also as we
are running Apache only behind proxies all requests are HTTP/1.1
anyway.
|
2020-08-28 10:57:39 +00:00 |
|
