e7aa1c9b73
apache: Drop back to Mozilla intermediate
...
Looks like our proxies don't support modern settings yet.
2020-08-28 10:13:29 +00:00
47da9470a6
apache: Allow access to web root
2020-08-28 10:10:57 +00:00
bace8a39b4
apache: Just use Mozilla recommended settings
...
Removed all RedHat default settings and just added Mozilla recommended
modern settings.
2020-08-28 10:05:44 +00:00
affeddd2cc
apache: Require client certificate authentication
2020-08-28 09:58:36 +00:00
480822619d
apache: Initial version of module
2020-08-28 09:52:02 +00:00
677db41af0
Add devel01 to proxy infra
2020-08-28 08:27:50 +00:00
a3b3e91b09
Store only ed25519 key during provisioning
2020-08-28 08:17:48 +00:00
026e077fc7
Add devel01.home.foo.sh host for dev purposes
...
This host is intended for development purposes and is not included
in default playbooks. Start with:
ansible-playbook playbooks/devel.yml -i hosts.devel
2020-08-28 07:52:56 +00:00
9532fa165e
ansible-host: Add missing bashrc file
2020-08-28 07:32:56 +00:00
18919643d9
base: Really disable rsa key and not just say so
2020-08-28 07:29:59 +00:00
cf76184a12
Fix CentOS 7 mirror location
2020-08-27 19:01:31 +00:00
526a192018
ansible-host: Make sure that ssh-agent is running for root
2020-08-27 18:47:49 +00:00
8ecbc19c75
ansible-host: Remove some packages not related to ansible
2020-08-27 18:26:57 +00:00
d759e5d4db
Rename private directory
2020-08-27 18:16:28 +00:00
602cc4dfc6
certbot: Add missing config file and lint fixes
2020-08-27 21:14:36 +03:00
b81950c5b2
ansible-host: Don't update local ansible repo
2020-08-27 21:13:31 +03:00
fa43cc36da
Add certbot role to adm hosts
2020-08-27 20:51:15 +03:00
5e1f521eb6
certbot: Initial version of role
2020-08-27 20:50:57 +03:00
cb51dc186c
network: Fix default network_interfaces variable
2020-08-27 17:47:09 +00:00
c80eca3d85
New implementation of network interfaces
...
Combine interfaces and network_ether_interfaces into one common
variable network_interfaces. Provisioning uses format:
network_interfaces:
- device: device name eg. vio0 or eth0
vlan: vlan id for this interface
mac: mac address for interface (optional)
Additionally network role will use more settings to configure
interface.
2020-08-27 17:42:07 +00:00
78c9a2eaf1
Don't hardcode private dir to vm-create
2020-08-27 12:41:16 +00:00
fc25e0a108
Add support to provision OpenBSD KVM guests
2020-08-27 12:40:17 +00:00
d9f009565c
ansible-host: Don't print skipped hosts
2020-08-27 14:59:37 +03:00
ee03bd3cb7
ansible-host: More fixes to support out of box install
2020-08-27 14:43:19 +03:00
00bdcfb7de
selinux: Fix python package name for EL8
2020-08-27 14:35:31 +03:00
098ab32a78
Don't hardcode private directory path
2020-08-27 14:29:35 +03:00
f14bb25ade
nginx/site: Add support for self signed certs
2020-08-27 13:45:19 +03:00
e672015a1f
nginx: Use alias for certbot host
2020-08-27 12:00:28 +03:00
ee23e2120b
ansible-host: Add missing virt-install
2020-08-26 23:46:18 +03:00
398bbf5a32
ansible-host: Install more tools
2020-08-26 23:40:52 +03:00
d09ad303dc
ansible-host: Fix private directory link
2020-08-26 23:31:20 +03:00
eb92f9f7bd
add adm01.home.foo.sh
...
Temporarily running in vmhost02
2020-08-26 23:26:00 +03:00
f05112b125
ansible-host: Initial version of role
2020-08-26 23:25:20 +03:00
858a7d30d7
epel-repo: Initial version of role
2020-08-26 23:11:51 +03:00
964b70f978
base: Add more base packages
2020-08-26 23:04:16 +03:00
74edead676
base: Remove all depencies to other than base packages
2020-08-26 22:54:47 +03:00
a1c96a5369
Support OpenSMTPd only on OpenBSD
2020-08-26 22:53:11 +03:00
c8f65fc7bd
Initial version of postfix role
2020-08-26 22:47:04 +03:00
f490804106
Disable rsa key from ssh host keys
2020-08-26 22:03:18 +03:00
b7e0ef18c5
Reorder installs to get selinux support earlier
...
Ansible cannot set file contexts unless selinux python bindings are installed.
2020-08-26 21:53:48 +03:00
47e5fe321c
More lint fixes
2020-08-26 21:53:35 +03:00
d4a11404fd
Lint fixes
2020-08-26 21:38:18 +03:00
65fcb4035e
Aggressive line shortening to get past yamllint
2020-08-26 21:22:22 +03:00
18df5f418c
Fix typo, rename disk vars and cleanup
2020-08-26 21:03:05 +03:00
6798c71285
Make vars more readable and fix one lint error
2020-08-26 20:28:15 +03:00
d54fe7975c
Don't set password for root. Just lock account.
2020-08-26 20:24:08 +03:00
54b5a74f54
Use cpu cores instead of sockets for kvm guests
2020-08-26 20:20:04 +03:00
6bf4815503
Store console output to logfile on kvm guests
2020-08-26 20:12:12 +03:00
40963ea620
Relocate kvm guest disk images
2020-08-26 20:07:55 +03:00
af6e3098d5
fix centos8 mirror location
2020-08-26 19:53:03 +03:00
