db35937a67
Don't lock myself out from external hosts
2020-09-03 19:39:42 +00:00
4b49e9e486
Add atl01.vultr.foo.sh host
2020-09-03 19:37:06 +00:00
905e7f8485
Rename generic vm-create to deploy-kvm-guest
2020-09-03 18:13:52 +00:00
c9f3b7d0b7
Add ns02.home.foo.sh host
2020-09-03 17:59:43 +00:00
69c17d7e12
nsd: Initial version of role (WIP)
2020-09-03 17:58:53 +00:00
c1c74dc5c4
network: Fix type warning from net.inet.carp.preempt
2020-09-03 16:09:18 +00:00
525d8b72f9
Add certbot support for outside server network
2020-09-03 07:55:32 +00:00
5f17ae2964
Add proto=static to proxies network interfaces
2020-09-03 07:54:49 +00:00
35b1487d2a
postfix: Verify peer certificate for stunnel
2020-09-03 07:48:42 +00:00
63890bcb72
opensmtpd: Redirect all local mails to relay
2020-09-03 07:34:20 +00:00
58aa3e80db
Add route to old puppet infra from adm hosts
2020-09-03 07:29:31 +00:00
108660e297
network: Require proto=static for static ip address
2020-09-03 06:51:07 +00:00
2312e0b038
ldap_netdb: Fix typo
2020-09-03 06:07:33 +00:00
5b24509081
postfix: Fix email sending to local addresses
...
CentOS 7 sendmail and postfix doesn't have support for sending to SMTPs
server on port 465 so use stunnel for those.
2020-09-02 21:07:21 +00:00
574916dfaf
postfix: Fix local mail delivery to relayhost
2020-09-02 17:13:13 +00:00
8d1fed8695
pf: Fix indentation from pf.conf
2020-09-01 20:37:00 +00:00
6d63bda3ff
network: Fix OpenBSD interface with empty settings
2020-09-01 20:22:48 +00:00
bec7f3a84d
base: Use copy instead of file
2020-09-01 20:18:14 +00:00
f1468b0f1f
base: Use explicit package names for OpenBSD
2020-09-01 20:16:33 +00:00
f60fb7f88c
Force python3 install when provisioning OpenBSD
2020-09-01 20:15:15 +00:00
51aa0a709e
selinux: lint fixes
2020-09-01 19:21:18 +00:00
55d7d954b3
ldap_netdb: Initial version of role
2020-09-01 18:12:21 +00:00
7b201b31da
collab: Add missing srcdir and remove swap file
2020-08-31 00:21:37 +00:00
9dd83a8146
Lint fixes
2020-08-31 00:20:22 +00:00
c9b21a3286
Add ansible_certificate custom fact
2020-08-29 15:55:51 +00:00
0ae634aed2
Add vmhost02.home.foo.sh
2020-08-29 15:55:16 +00:00
aac14db657
ansible-host: Publish ansible facts with nginx
2020-08-29 13:43:21 +00:00
88157dcc91
collab: Initial version of role
2020-08-28 16:09:53 +00:00
99a88e1baa
Add temporary ssh config for adm hosts
...
* Route vmhost01 through ssh until it gets relocated
* Disable ip host key checking until we get ssh host certificates
2020-08-28 15:44:29 +00:00
acbe47c53f
Add make to adm hosts
2020-08-28 15:34:03 +00:00
13d07b7a6d
Rename moin group/hosts to collab
2020-08-28 12:58:54 +00:00
f6aed5faad
Add collab.foo.sh site to proxies
2020-08-28 12:56:05 +00:00
dd2b5c6a69
apache: Remove Procotols option
...
CentOS 7 doesn't support Protocols definition at all. Also as we
are running Apache only behind proxies all requests are HTTP/1.1
anyway.
2020-08-28 10:57:39 +00:00
fbc8fa55c5
Add moin host group
2020-08-28 10:41:27 +00:00
5c62106142
ansible-host: Use ssh pipelining
2020-08-28 10:40:57 +00:00
e7aa1c9b73
apache: Drop back to Mozilla intermediate
...
Looks like our proxies don't support modern settings yet.
2020-08-28 10:13:29 +00:00
47da9470a6
apache: Allow access to web root
2020-08-28 10:10:57 +00:00
bace8a39b4
apache: Just use Mozilla recommended settings
...
Removed all RedHat default settings and just added Mozilla recommended
modern settings.
2020-08-28 10:05:44 +00:00
affeddd2cc
apache: Require client certificate authentication
2020-08-28 09:58:36 +00:00
480822619d
apache: Initial version of module
2020-08-28 09:52:02 +00:00
677db41af0
Add devel01 to proxy infra
2020-08-28 08:27:50 +00:00
a3b3e91b09
Store only ed25519 key during provisioning
2020-08-28 08:17:48 +00:00
026e077fc7
Add devel01.home.foo.sh host for dev purposes
...
This host is intended for development purposes and is not included
in default playbooks. Start with:
ansible-playbook playbooks/devel.yml -i hosts.devel
2020-08-28 07:52:56 +00:00
9532fa165e
ansible-host: Add missing bashrc file
2020-08-28 07:32:56 +00:00
18919643d9
base: Really disable rsa key and not just say so
2020-08-28 07:29:59 +00:00
cf76184a12
Fix CentOS 7 mirror location
2020-08-27 19:01:31 +00:00
526a192018
ansible-host: Make sure that ssh-agent is running for root
2020-08-27 18:47:49 +00:00
8ecbc19c75
ansible-host: Remove some packages not related to ansible
2020-08-27 18:26:57 +00:00
d759e5d4db
Rename private directory
2020-08-27 18:16:28 +00:00
602cc4dfc6
certbot: Add missing config file and lint fixes
2020-08-27 21:14:36 +03:00
