Commit graph

471 commits

Author SHA1 Message Date
8e95f29f61 mkhomedir: Initial version of role 2021-03-01 21:42:43 +00:00
fabcc2fe88 mirror/thinlinc: Link data directory to web root 2021-02-24 04:49:50 +00:00
9afdda987e mirror/base: Convert everything to run on Apache 2021-02-24 04:49:08 +00:00
b2de68ebac Use weak ciphers for boot.foo.sh
iPXE doesn't support modern ciphers so use older ones.
2021-02-12 07:12:13 +00:00
353e7facf7 base: Mount /tmp using tmpfs on CentOS hosts 2021-02-12 06:48:21 +00:00
c9040a4529 sendmail: Initial version of module 2021-02-12 06:31:09 +00:00
af061d0083 nginx/server: Validate certificate before installing 2021-02-12 06:26:25 +00:00
d017446a0e ldap/server: Index username (uid) attributes 2021-02-12 05:21:40 +00:00
612875ca44 syslogd: Restart server when new certs are deployed 2021-02-10 07:02:42 +00:00
0d693da604 mirror: Disable progress bar when downloading thinlinc packages 2021-02-08 06:40:22 +00:00
eaa0e25b41 zfs: Remove unused role 2020-12-13 16:08:39 +00:00
c1198880bb ldap/server: Include chain files to certificates tag 2020-12-08 08:02:32 +00:00
36cbc1dd48 syslogd: Fix log rotation command 2020-11-27 08:58:22 +00:00
5d10282cdb autofs: Use mkdir instead of install command 2020-11-24 07:24:07 +00:00
aca3b191e6 nfs-client: Disable using raw uid/gid mapping
Fixes error:

kernel: NFS: v4 server nas02.home.foo.sh does not accept raw uid/gids. Reenabling the idmapper.

Hopefully also makes logins faster.
2020-11-19 18:16:34 +00:00
0ba135be52 sssd: Disable unused services and enumeration
We are not using autofs or sudo via LDAP so disable them. Enumeration
doesn't seem to help getting all users via getent so disable it.
2020-11-17 18:15:23 +00:00
74b58f9313 sssd: Enable sssd as authentication backend 2020-11-17 16:50:49 +00:00
0d40ff3e92 nfs-client: Allow gssproxy to connect krb5 over https 2020-11-17 16:49:21 +00:00
b3329efbeb mirror: Add git as depency to report mirror 2020-11-15 16:53:24 +00:00
9e3b204b3a sssd: More specific config options to sssd.conf 2020-11-15 16:52:09 +00:00
4f98c287ab mirror: Print postcmd output only when running verbose 2020-11-15 16:50:39 +00:00
f89672dd59 autofs: Fix cache path when xdg runtime is not set 2020-11-14 17:13:56 +00:00
277630dcf9 thinlinc-server: Add missing policy file 2020-11-14 13:48:05 +00:00
019dd4978e sssd: Initial version of module 2020-11-14 13:46:54 +00:00
b317e5b12e autofs: Move users .cache directory out from home direcotry
No need to store users local .cache directory on NFS home directories.
Use tmpfs which is much faster.
2020-11-13 18:35:28 +00:00
93c1ae2e89 network: Configure DNS servers
EL systems use DNS servers from interface configs so support it.
2020-11-13 18:31:24 +00:00
d2befe152b google-chrome: Lint fixes 2020-11-13 18:10:16 +00:00
326caa417d autofs: Disable ssh authorized keys from users
When home directories are mounted using NFS and Kerberos the system
doesn't have access to authorized_keys file before user logs in.
2020-11-13 17:19:25 +00:00
962787dc04 thinlinc-server: disable auth dialogs during login 2020-11-13 16:19:23 +00:00
7fc06236e4 mirror: Shellcheck fixes for sync-mirrors 2020-11-13 05:35:41 +00:00
5f8723c9c9 mirror: Print postcmd output to log and console 2020-11-12 19:24:57 +00:00
4807166c85 rpm-build: Add rpmlint 2020-11-12 19:01:09 +00:00
855b3b8063 mirror: Fix postcmd handling for mirrors 2020-11-12 19:00:26 +00:00
142025eafc mirror: Install report_mirror script from git 2020-11-12 18:57:31 +00:00
e2b18c7f36 mirror: Fix warnings from cron jobs 2020-11-12 18:15:05 +00:00
795a00e5c4 collab: Update MoinMoin to 1.9.11 2020-11-12 16:48:03 +00:00
f2bc7f5d82 google-chrome: Install stable version of Chrome 2020-10-19 17:44:49 +00:00
703cf49eb5 rpm-build: Initial version of role 2020-09-30 19:27:12 +00:00
f543d599af Tag all certificate and key copying 2020-09-28 15:17:26 +00:00
04c9be96a4 dovecot: Initial version of role 2020-09-27 12:41:08 +00:00
54b0b1da21 clamav: Refresh socket directory permission after config change 2020-09-24 20:22:25 +00:00
f8762c5a00 clamav: Allow all logged users to scan files 2020-09-24 19:58:22 +00:00
acdb465539 spamassassin-razor: Add razor configurations 2020-09-24 19:32:01 +00:00
49bb954ec6 spamassassin-textcat: Fix library path 2020-09-24 19:31:34 +00:00
e0e38075f3 spamassassin-textcat: Initial version of role 2020-09-24 19:06:34 +00:00
e775b965c3 saslauthd: Change default mech to ldap 2020-09-24 19:00:52 +00:00
6915b013a1 base: Fix ansible warning from postfix install 2020-09-24 18:46:53 +00:00
3fdfd92304 spamassassin-clamav: Add spamassassin to dependencies 2020-09-24 18:46:11 +00:00
757553ef89 spamassassin-clamav: Initial version of role 2020-09-24 18:43:06 +00:00
8cea9f7e5f clamav: Initial version of role 2020-09-24 18:37:40 +00:00