Commit graph

579 commits

Author SHA1 Message Date
e7a32718f4 Fix sssd/mkhomedir order from nms hosts 2021-03-19 22:23:02 +00:00
02d23a723c Add unzip for nms hosts (to extract firmware packages) 2021-03-19 21:48:58 +00:00
07c8054e8b Add RCS to shell hosts 2021-03-19 21:47:16 +00:00
11daf618fa Add wget to nms hosts 2021-03-19 21:45:58 +00:00
c91db784e1 network: Use insecure password for keepalived
Using AH based authentication generates duplicate announces from master:

  IPSEC-AH : sequence number 34831 already processed. Packet dropped.

Use insecure (unencrypted) authentication for announcement pakets until
this is sorted out.
2021-03-19 21:21:27 +00:00
ba97c88303 Add initial NTP server support to nms hosts 2021-03-19 20:54:04 +00:00
8f30553fd8 Add ssh config to shell hosts for connecting servers 2021-03-19 20:46:47 +00:00
b726e2e029 Add UDP logging support from oob network 2021-03-19 20:02:55 +00:00
31bb8d1158 rsyslog: Add optional UDP listener support 2021-03-19 20:02:24 +00:00
a17cb88c1e iptables: Don't set empty defaults, check if var is defined 2021-03-19 18:36:48 +00:00
6acefc9178 pf: Don't set empty defaults, check if var is defined 2021-03-19 18:35:58 +00:00
5417be177a Add nms group to master playbook 2021-03-19 18:27:59 +00:00
87001613ed network: Document network_vip_interfaces usage 2021-03-19 18:23:32 +00:00
43c4602ed4 iptables: Don't use ipv4 raw rules on ipv6 firewall 2021-03-19 18:22:19 +00:00
1c9df4f36f Add nms01/02 hosts 2021-03-19 18:21:38 +00:00
c7d8c1e677 Convert OpenBSD hosts with CARP to use new VIP interfaces 2021-03-19 18:19:03 +00:00
d63f828e8b network: Move OpenBSD CARP to use network_vip_interfaces
This will also change advskew option to priority and inverse functionality
so greatest value wins instead of lowest.
2021-03-19 18:17:02 +00:00
f8fe21c4a1 network: Don't explicitly set network_carp_interfaces 2021-03-19 17:17:57 +00:00
d187472f27 network: Add keepalived support 2021-03-19 17:09:17 +00:00
a1d4d732ba Link foo.sh repository to web root on mirror hosts 2021-03-19 16:56:13 +00:00
675d7af7a4 base: Store date and time for bash history on RedHat hosts 2021-03-19 16:49:37 +00:00
a0031b05ac Fix mirror01 mac address according to ip allocation plan 2021-03-19 16:44:59 +00:00
d43e4bfbe3 munin-server: Move data directory to /export/munin 2021-03-19 08:28:20 +00:00
6c4d42341c munin-server: Add all hosts to munin from inventory 2021-03-19 07:01:23 +00:00
58c1add726 Rename munin-master to munin-server 2021-03-19 06:35:24 +00:00
63f19f7d27 Open munin from all hosts firewll 2021-03-19 06:32:08 +00:00
f96f3f6789 base: Add munin-node and update policy
munin-node adds depency to external repos so also update package
policy.
2021-03-19 00:17:46 +00:00
d381e4f3b7 ldap_netdb: Fix warnings from cron job 2021-03-19 00:05:02 +00:00
1872cd24f5 Add munin playbook to master playbook 2021-03-18 23:57:26 +00:00
ce17dfbe70 munin-node: Fix dependencies for CentOS 8 2021-03-18 23:55:26 +00:00
b4e1edbf5d munin-node: Run munin-node-configure when needed 2021-03-18 23:45:35 +00:00
7e6d2e241a munin-node: Add EPEL repo as depency for EL systems 2021-03-18 23:37:11 +00:00
2f72664231 munin-node: Add OpenBSD support 2021-03-18 23:20:50 +00:00
b287591b32 munin-node: Initial version of munin-node role 2021-03-18 22:35:11 +00:00
64db5ca467 Fix fsol-gw playbook name from master playbook 2021-03-18 22:32:11 +00:00
6ef17adfa2 munin-master: Fix graph generation from cgi script 2021-03-18 22:31:28 +00:00
f5782ad361 apache: Change admin contact address 2021-03-18 22:27:05 +00:00
033265fa00 Add more cpu's to munin for creating graphs 2021-03-18 21:22:09 +00:00
5d83306491 munin-master: Force TLS when connecting to nodes 2021-03-18 16:55:34 +00:00
15fec6b391 munin-master: Start munin cron job not just enable 2021-03-18 11:29:56 +00:00
5752bed415 munin-master: Remove localhost node 2021-03-18 11:07:47 +00:00
3e6c523b2f Require authentication on munin web interface 2021-03-18 11:02:29 +00:00
9f3ff39286 mod_auth_gssapi: SELinux fixes for CentOS 8 2021-03-18 11:02:01 +00:00
5eda17494d mod_auth_gssapi: Set keytab path in environment variables 2021-03-18 11:01:19 +00:00
40e4157349 Add lynx and elinks text browsers to shell hosts 2021-03-18 06:47:52 +00:00
5edd1f2a48 Add powertools repo to shell hosts 2021-03-18 06:31:15 +00:00
3ae49d7277 Add support for GSSAPI auth to munin 2021-03-18 00:36:07 +00:00
5d9bc1608f mod_auth_gssapi: Fix keytab path config for CentOS 8
CentOS 8 doesn't apache doesn't read /etc/sysconfig/httpd anymore so
try to set keytab path location in apache config files.
2021-03-18 00:28:33 +00:00
a591bd7e0e Add munin.foo.sh site to proxies 2021-03-18 00:01:48 +00:00
ff87fa1151 Add munin host 2021-03-18 00:01:15 +00:00