Commit graph

32 commits

Author SHA1 Message Date
db91fe6345 base: Refactor export mount fact 2025-02-02 15:18:47 +00:00
0530194ac0 base: Add ansible_server fact 2025-01-31 18:56:03 +00:00
ec4812a157 Add group based on domainname if found 2025-01-15 20:04:17 +00:00
7ce6d58923 sshd_cert: First version of role 2024-03-23 19:18:30 +00:00
86d076ebc6 Fix "Forbidden implicit octal value" lint errors 2023-10-12 19:14:54 +00:00
946c7d0772 Add node_exporter to all hosts 2023-08-20 14:33:39 +00:00
c58406959e base: Remove munin from all hosts 2023-05-20 18:41:13 +00:00
186cd19cd1 base: ansible-lint fixes 2022-10-30 17:01:07 +00:00
b7d52607d8 base: Better check for physical hosts 2022-08-13 17:35:07 +00:00
c5eafdbd04 base: Fix setting hostname on OpenBSD hosts
ansible.builtin.hostname seems to be broken on OpenBSD so set hostname
directly using /etc/myname
2022-07-11 11:10:22 +00:00
711cec9b54 base: Convert modules to use FQCN and use smartd role 2022-04-14 13:29:44 +00:00
c67990e462 munin_node: Rename role 2022-02-25 00:43:44 +00:00
efd813252a base: Fix guest detection 2022-01-30 15:56:12 +00:00
06f173cba2 base: Add custom fact to detect /export directory 2021-09-19 19:13:04 +00:00
169750eb0e base: Add S.M.A.R.T disk monitoring to physical hosts 2021-03-23 22:36:52 +00:00
226c624328 base: Add lm_sensors to physical hosts 2021-03-23 22:29:11 +00:00
f96f3f6789 base: Add munin-node and update policy
munin-node adds depency to external repos so also update package
policy.
2021-03-19 00:17:46 +00:00
0172750ca1 sshd: Move ssh deamon configuration to own role 2021-03-17 05:15:05 +00:00
c9b21a3286 Add ansible_certificate custom fact 2020-08-29 15:55:51 +00:00
18919643d9 base: Really disable rsa key and not just say so 2020-08-28 07:29:59 +00:00
74edead676 base: Remove all depencies to other than base packages 2020-08-26 22:54:47 +03:00
f490804106 Disable rsa key from ssh host keys 2020-08-26 22:03:18 +03:00
faaddffce4 more fiddling with ssh security now relying on mozilla recommendations 2019-05-28 20:30:03 +03:00
dd19c94511 create network role and include it into base (only openbsd does something) 2019-05-28 00:25:06 +03:00
f06707ce6b tighten sshd settings (ciphers, kex, macs) 2019-05-27 20:59:36 +03:00
1d0636dfa4 enable psacct on all hosts 2019-05-23 02:27:39 +03:00
078e00f054 force correct hostname 2019-05-22 23:46:25 +03:00
745b4a5a77 initial support for openbsd 2019-05-22 22:35:43 +03:00
b18bcedb59 install local ca signed host certificates for all hosts 2019-05-14 22:18:37 +03:00
76f0f6b741 initial version of opensmtpd which is applied to all hosts 2019-05-11 00:14:03 +03:00
7e9f86b089 disable at use from all users on all hosts 2019-05-10 16:57:54 +03:00
2ceee43d40 first version of base role 2019-05-10 15:25:38 +03:00