ansible

foo.sh/ansible

Fork 0

Commit graph

fa36a96bfc mariadb: Fix backup directory permissions Timo Makinen 2021-09-28 07:13:11 +00:00
1d2bba5c85 sftpbackup: Use absolute path for ssh key Timo Makinen 2021-09-26 13:25:10 +00:00
701a0c5309 web-logs: Fix logsync ssh keys Timo Makinen 2021-09-26 13:24:47 +00:00
981ad490d4 rclone: Use ssh key from user's home directory by default Timo Makinen 2021-09-26 13:16:33 +00:00
893a1c5417 Add sshsign hosts Timo Makinen 2021-09-26 13:15:27 +00:00
d516a33079 nginx-server: Make logs readable on CentOS 7 Timo Makinen 2021-09-26 13:14:06 +00:00
f86928ae3f mariadb: Export db backups to backup server Timo Makinen 2021-09-25 13:03:39 +00:00
68705b2034 Fix logsync ssh public key Timo Makinen 2021-09-24 15:32:02 +00:00
6dad143ee6 ldap_netdb: Return error if no hosts found Timo Makinen 2021-09-24 05:28:22 +00:00
708b5b5e3a postfix: Fix CentOS 7 mail sending Timo Makinen 2021-09-23 19:49:23 +00:00
867154b69f Update site.yml with new playbooks Timo Makinen 2021-09-22 17:14:46 +00:00
f269f16f77 rclone: Make sure cron mails are delivered Timo Makinen 2021-09-21 16:41:31 +00:00
a23f9bdca2 rclone: Use absolute path for ssh key Timo Makinen 2021-09-21 16:40:35 +00:00
8bfeef5bae ldap-server: yamllint fixes Timo Makinen 2021-09-19 20:23:21 +00:00
061fe4da54 web-logs: Move sync cron job to rclone role Timo Makinen 2021-09-19 19:28:59 +00:00
4a291d7552 rclone: Add cron job to run syncs daily Timo Makinen 2021-09-19 19:28:33 +00:00
5d18eed63d Install sftpbackup role to backup hosts Timo Makinen 2021-09-19 19:20:44 +00:00
0d56e7589a Add ldap hosts to sftpbackups Timo Makinen 2021-09-19 19:20:22 +00:00
68d903e31c ldap-server: Autodetect ldap data directory Timo Makinen 2021-09-19 19:19:41 +00:00
64e2b45d6f sftpbackup: Initial version of role Timo Makinen 2021-09-19 19:18:57 +00:00
06f4645127 rclone: Move more generic stuff away from web-logs role Timo Makinen 2021-09-19 19:16:24 +00:00
06f173cba2 base: Add custom fact to detect /export directory Timo Makinen 2021-09-19 19:13:04 +00:00
27496d1820 rclone: Fix comment from template Timo Makinen 2021-09-19 17:15:46 +00:00
92d8478324 Move rclone to own role Timo Makinen 2021-09-19 17:08:43 +00:00
ffbe68294b Move ssh_known_hosts generation to own role Timo Makinen 2021-09-19 16:29:32 +00:00
b406b64782 Add ssh public key for backups Timo Makinen 2021-09-19 16:19:19 +00:00
ff3b5a924c Add ldap servers to web servers group Timo Makinen 2021-09-19 16:18:12 +00:00
6492a7de03 ldap-server: Run backups as root and share them via sftp Timo Makinen 2021-09-19 16:17:37 +00:00
a90b1f814f ldap-server: Add backups also to slave servers Timo Makinen 2021-09-19 15:42:19 +00:00
887b4170cd mariadb: Loosen backup permissions Timo Makinen 2021-09-19 15:34:04 +00:00
283a16a97b web-logs: Use logsync user for syncing logs Timo Makinen 2021-09-19 15:00:58 +00:00
663038ced2 web-logs: Use absolute path for rclone binary Timo Makinen 2021-09-19 09:49:32 +00:00
74a75772c2 Add webservers group Timo Makinen 2021-09-18 18:48:29 +00:00
e8882e3249 Add web log handling to log hosts Timo Makinen 2021-09-18 18:48:12 +00:00
8f54421d17 web-logs: Initial version of role Timo Makinen 2021-09-18 18:46:12 +00:00
8a2471f932 keytab: Force to use ldap master when generating keytab Timo Makinen 2021-09-18 18:44:57 +00:00
8e4a7f1777 Add script for refreshing cached facts Timo Makinen 2021-09-18 18:28:59 +00:00
fbe8af9a3b keytab: Use argv for kadmin.local command options Timo Makinen 2021-09-18 18:07:55 +00:00
7373510902 sftpuser: Use custom marker when editing sshd config Timo Makinen 2021-09-18 16:56:46 +00:00
2a269c8f0d autofs: Set custom marker when editing sshd config Timo Makinen 2021-09-18 16:56:24 +00:00
e6e8fd835d apache: Add logsync support Timo Makinen 2021-09-17 16:29:51 +00:00
855234f77c nginx/server: Fix logs and rotation for CentOS Timo Makinen 2021-09-17 16:19:31 +00:00
b51601515e nginx/server: Allow logsync user to copy logfiles Timo Makinen 2021-09-16 19:48:44 +00:00
7819982044 Add logsync user ssh public keys Timo Makinen 2021-09-16 19:48:24 +00:00
4b10d1c00c Increase memory size for proxy sservers Timo Makinen 2021-09-16 19:45:20 +00:00
0c6f57c183 Remove unused sites from proxy servers Timo Makinen 2021-09-16 19:44:58 +00:00
c6faecb1b1 sftpuser: Initial version of role Timo Makinen 2021-09-16 19:44:29 +00:00
5d8bf1c994 nginx: Add log rotation script and cron job Timo Makinen 2021-09-16 17:49:42 +00:00
287e8264fc nginx/server: Disaable system logrotate on OpenBSD Timo Makinen 2021-09-16 17:32:25 +00:00
f9f194b3a2 nginx: Set error log level to warn Timo Makinen 2021-09-16 17:14:49 +00:00
d7026bff3b Add podman to adm hosts for building container images Timo Makinen 2021-09-16 16:49:59 +00:00
155d121da9 nginx/site: Use seperate access logs for virtual hosts Timo Makinen 2021-09-16 16:49:17 +00:00
ed538d3371 nginx/server: Use combined log format for access log Timo Makinen 2021-09-16 16:48:57 +00:00
005cd1a706 nginx/site: Add extra options to registry.foo.sh Timo Makinen 2021-09-15 17:55:27 +00:00
c2e6c0f59d nginx/site: Include extra snippets to template Timo Makinen 2021-09-15 17:49:55 +00:00
22470d8a49 base: Add tmpwatch to Lnux hosts Timo Makinen 2021-09-15 16:44:13 +00:00
270161dc4b ldap-server: Add yubikey schema Timo Makinen 2021-09-15 14:50:15 +00:00
69b80d133d Add httpd-tools to adm hosts Timo Makinen 2021-09-14 20:03:09 +00:00
8eb2c46e9b Add secret and htpasswd to docker registry servers Timo Makinen 2021-09-14 20:02:49 +00:00
5bfe966f49 docker-distribution: Change secret to role parameter Timo Makinen 2021-09-14 20:02:28 +00:00
951711bf07 docker-registry: Add basic auth support Timo Makinen 2021-09-14 20:00:00 +00:00
c2107bb294 docker-distribution: Allow setting static secret Timo Makinen 2021-09-14 19:14:50 +00:00
3a8802d240 Reserve uid 1004 for docker distribution Timo Makinen 2021-09-14 18:46:10 +00:00
85b242c056 Run handlers to get gluster volume mounted Timo Makinen 2021-09-14 18:45:46 +00:00
d0bbac1761 glusterfs: Aallow to create glusterfs into root volume Timo Makinen 2021-09-14 18:45:19 +00:00
4d444dfafc Drop second disk from registry hosts Timo Makinen 2021-09-14 18:44:55 +00:00
7cba6b9616 docker-registry: Limit access to registry base directory Timo Makinen 2021-09-14 17:51:07 +00:00
8c0c2eeff1 docker-distribution: Create files with 027 umask Timo Makinen 2021-09-14 17:48:05 +00:00
7dd942fe2a docker-distribution: Add unit drop-in file Timo Makinen 2021-09-14 17:44:17 +00:00
08d395078d docker-distribution: Run service as docker instead of root Timo Makinen 2021-09-14 17:43:25 +00:00
82a4c66575 Add registry.foo.sh to proxy servers Timo Makinen 2021-09-14 16:54:24 +00:00
c8114b2594 Add docker-distribution to registry hosts Timo Makinen 2021-09-14 16:54:04 +00:00
6193276604 nginx/site: Add support for port in failover backend Timo Makinen 2021-09-14 16:52:48 +00:00
74f828edf2 gluster: Add notes for removing members Timo Makinen 2021-09-14 16:27:43 +00:00
fd8e0e8558 docker-distribution: Initial version of role Timo Makinen 2021-09-14 16:25:58 +00:00
4547044a07 gluster: Fix redploying glusterfs peers Timo Makinen 2021-09-13 22:24:15 +00:00
0404bafac2 Don't open firewall for self in registry hosts Timo Makinen 2021-09-12 12:37:39 +00:00
90833d6513 Add glusterfs to registry hosts Timo Makinen 2021-09-11 17:36:24 +00:00
7fa7d45e0a Add gluster firewall rules for registry hosts Timo Makinen 2021-09-11 17:35:53 +00:00
50a1a63f81 ansible-host: Add support for resolving IP/domain names Timo Makinen 2021-09-11 17:09:15 +00:00
d6eda5f722 Add second registry host Timo Makinen 2021-09-11 17:09:00 +00:00
a97f2b5c79 iptables: Allow hostnames in iptables rules Timo Makinen 2021-09-11 17:07:35 +00:00
9566266c5c base: Add psmisc package to EL hosts Timo Makinen 2021-09-11 16:26:31 +00:00
d3befb983a glusterfs: Restart glusterfs volume after changes For some reason when adding client.ssl option glusterfs goes into foobar state. Only restarting volume seems to help Timo Makinen 2021-09-10 15:51:56 +00:00
15acc934e0 glusterfs: Add CentOS support Timo Makinen 2021-09-09 19:18:26 +00:00
8da3e45c56 glusterfs: Add restart handler Timo Makinen 2021-09-09 15:25:16 +00:00
5ab4713568 glusterfs: Initial version of role Timo Makinen 2021-09-09 15:23:46 +00:00
38890e468d Add registry hosts Timo Makinen 2021-09-08 17:45:21 +00:00
d9366b6c96 Update Fedora to 34 and increase default vcpu count Timo Makinen 2021-09-08 17:44:03 +00:00
21d1424d14 Use backup-server role for backup hosts Timo Makinen 2021-09-08 17:11:06 +00:00
bf2f2e1f92 backup-server: Initial version of role Timo Makinen 2021-09-08 17:10:48 +00:00
3c4034f80b nginx: Remove deprecated ssl option Timo Makinen 2021-09-03 15:42:09 +00:00
e522ef0e53 nginx: Enable TLSv3 for conencting to upstream Timo Makinen 2021-09-03 15:27:16 +00:00
e571d171da apache: Use only TLS1.3 where available Timo Makinen 2021-09-03 14:56:15 +00:00
baf0b53d97 Add sslcheck to adm hosts Timo Makinen 2021-09-03 14:20:21 +00:00
8f52f07a8a cups-server: Fix task name Timo Makinen 2021-09-02 22:21:07 +00:00
bba8c8e446 cups-server: Require SSL when connecting to CUPS Timo Makinen 2021-09-02 22:19:12 +00:00
838efc0554 Add dhcp server to print servers Timo Makinen 2021-09-02 19:11:19 +00:00
465a1a9eeb Add http/https endpoints for relayed hosts Timo Makinen 2021-09-02 16:55:44 +00:00
198a9ba630 Use role for installing Lynx into shell hosts Timo Makinen 2021-09-02 16:36:42 +00:00