ansible

foo.sh/ansible

Fork 0

Commit graph

f8fe21c4a1 network: Don't explicitly set network_carp_interfaces Timo Makinen 2021-03-19 17:17:57 +00:00
d187472f27 network: Add keepalived support Timo Makinen 2021-03-19 17:09:17 +00:00
a1d4d732ba Link foo.sh repository to web root on mirror hosts Timo Makinen 2021-03-19 16:56:13 +00:00
675d7af7a4 base: Store date and time for bash history on RedHat hosts Timo Makinen 2021-03-19 16:49:37 +00:00
a0031b05ac Fix mirror01 mac address according to ip allocation plan Timo Makinen 2021-03-19 16:44:59 +00:00
d43e4bfbe3 munin-server: Move data directory to /export/munin Timo Makinen 2021-03-19 08:28:20 +00:00
6c4d42341c munin-server: Add all hosts to munin from inventory Timo Makinen 2021-03-19 07:01:23 +00:00
58c1add726 Rename munin-master to munin-server Timo Makinen 2021-03-19 06:35:24 +00:00
63f19f7d27 Open munin from all hosts firewll Timo Makinen 2021-03-19 06:32:08 +00:00
f96f3f6789 base: Add munin-node and update policy Timo Makinen 2021-03-19 00:17:46 +00:00
d381e4f3b7 ldap_netdb: Fix warnings from cron job Timo Makinen 2021-03-19 00:05:02 +00:00
1872cd24f5 Add munin playbook to master playbook Timo Makinen 2021-03-18 23:57:26 +00:00
ce17dfbe70 munin-node: Fix dependencies for CentOS 8 Timo Makinen 2021-03-18 23:55:26 +00:00
b4e1edbf5d munin-node: Run munin-node-configure when needed Timo Makinen 2021-03-18 23:45:35 +00:00
7e6d2e241a munin-node: Add EPEL repo as depency for EL systems Timo Makinen 2021-03-18 23:37:11 +00:00
2f72664231 munin-node: Add OpenBSD support Timo Makinen 2021-03-18 23:20:50 +00:00
b287591b32 munin-node: Initial version of munin-node role Timo Makinen 2021-03-18 22:35:11 +00:00
64db5ca467 Fix fsol-gw playbook name from master playbook Timo Makinen 2021-03-18 22:32:11 +00:00
6ef17adfa2 munin-master: Fix graph generation from cgi script Timo Makinen 2021-03-18 22:31:28 +00:00
f5782ad361 apache: Change admin contact address Timo Makinen 2021-03-18 22:27:05 +00:00
033265fa00 Add more cpu's to munin for creating graphs Timo Makinen 2021-03-18 21:22:09 +00:00
5d83306491 munin-master: Force TLS when connecting to nodes Timo Makinen 2021-03-18 16:55:34 +00:00
15fec6b391 munin-master: Start munin cron job not just enable Timo Makinen 2021-03-18 11:29:56 +00:00
5752bed415 munin-master: Remove localhost node Timo Makinen 2021-03-18 11:07:47 +00:00
3e6c523b2f Require authentication on munin web interface Timo Makinen 2021-03-18 11:02:29 +00:00
9f3ff39286 mod_auth_gssapi: SELinux fixes for CentOS 8 Timo Makinen 2021-03-18 11:02:01 +00:00
5eda17494d mod_auth_gssapi: Set keytab path in environment variables Timo Makinen 2021-03-18 11:01:19 +00:00
40e4157349 Add lynx and elinks text browsers to shell hosts Timo Makinen 2021-03-18 06:47:52 +00:00
5edd1f2a48 Add powertools repo to shell hosts Timo Makinen 2021-03-18 06:31:15 +00:00
3ae49d7277 Add support for GSSAPI auth to munin Timo Makinen 2021-03-18 00:36:07 +00:00
5d9bc1608f mod_auth_gssapi: Fix keytab path config for CentOS 8 Timo Makinen 2021-03-18 00:28:33 +00:00
a591bd7e0e Add munin.foo.sh site to proxies Timo Makinen 2021-03-18 00:01:48 +00:00
ff87fa1151 Add munin host Timo Makinen 2021-03-18 00:01:15 +00:00
cab7f424d5 munin-master: Initial version of role, WIP Timo Makinen 2021-03-18 00:00:01 +00:00
71d392a556 powertools: Initial version of module Timo Makinen 2021-03-17 22:45:13 +00:00
1a148b957f Add gnupg1 to shell hosts Timo Makinen 2021-03-17 22:22:14 +00:00
9675485eda git/server: Fix typo from task name Timo Makinen 2021-03-17 21:32:34 +00:00
58de72e85a git: Convert to CentOS 8 and Apache Timo Makinen 2021-03-17 21:29:47 +00:00
51aede7c00 Rename fsol?? hosts to fsol-gw?? Timo Makinen 2021-03-17 21:28:49 +00:00
77ee001c54 Don't store shell host ip to known_hosts in adm Timo Makinen 2021-03-17 21:03:14 +00:00
3d885de573 ifstated: Fix fireall problems when fsol-gw is booted Timo Makinen 2021-03-17 20:31:41 +00:00
4072abf55e Use random mac for fsol01 in dna interface Timo Makinen 2021-03-17 20:18:00 +00:00
887d4872d9 ifstated: Cannot validate config during provisioning Timo Makinen 2021-03-17 19:05:01 +00:00
37ef5eb504 ifstated: Validate config before restarting Timo Makinen 2021-03-17 18:48:41 +00:00
18a4c592ce bird: Restart bird after config changes Timo Makinen 2021-03-17 18:44:11 +00:00
00c204912f bird: Remove leftover vim swap file Timo Makinen 2021-03-17 18:42:02 +00:00
7b9c0b1f4d Add ifstated to fsol-gw hosts Timo Makinen 2021-03-17 18:41:25 +00:00
9d03799d40 Add pfsync0 interface to fsol-gw hosts Timo Makinen 2021-03-17 18:36:00 +00:00
7175dc85b8 pf: Allow carp traffic on fsol-gw hosts Timo Makinen 2021-03-17 18:30:09 +00:00
e37fd4eb8f Move future pfsync to different subnet/vlan Timo Makinen 2021-03-17 18:13:52 +00:00
01dc86e3e2 bird: Use dynamic router id Timo Makinen 2021-03-17 18:13:23 +00:00
46281c0ca7 Dont store vim swap files to git Timo Makinen 2021-03-17 18:07:10 +00:00
8c5770c79a Fix warnings from git data directory mount options Timo Makinen 2021-03-17 05:58:00 +00:00
635a867068 syslog: Fix syntax warnings from log backup cron job Timo Makinen 2021-03-17 05:41:12 +00:00
08c62bd21b ldap/server: Fix syntax warnings about cron job Timo Makinen 2021-03-17 05:40:20 +00:00
72dabd40d1 Fix warnings from ldap01 mount Timo Makinen 2021-03-17 05:37:10 +00:00
a745cdb3ee sshd: Remove some unused and potentially dangerous features Timo Makinen 2021-03-17 05:20:41 +00:00
282fbcb932 sshd: Disable CentOS 8+ crypto policies for sshd Timo Makinen 2021-03-17 05:17:53 +00:00
6858706c0b base: Remove ssh handler as it's now in own role Timo Makinen 2021-03-17 05:16:11 +00:00
0172750ca1 sshd: Move ssh deamon configuration to own role Timo Makinen 2021-03-17 05:15:05 +00:00
c99efeab61 Lint fixes Timo Makinen 2021-03-16 23:07:26 +00:00
b1c135974e Add production ready playbooks to master playbook Timo Makinen 2021-03-16 23:01:49 +00:00
6a712f7737 sendmail: Add newalises handler support Timo Makinen 2021-03-16 22:46:42 +00:00
7febf3bda5 nginx/server: Use mozilla recommended ssl settings Timo Makinen 2021-03-16 22:45:21 +00:00
55855d7c15 Start working on replicated fsol gw Timo Makinen 2021-03-16 22:41:58 +00:00
d41d59a0d4 Move loghost to vmhost01 and increase data disk size Timo Makinen 2021-03-16 21:02:33 +00:00
1ad8a4e3f8 ldap_netdb: Fix dependencies Timo Makinen 2021-03-16 20:17:56 +00:00
cad340750b ldap_gravatar: Fix dependencies Timo Makinen 2021-03-16 20:17:28 +00:00
c7bc132d11 Add ldap_gravatar role to primary ldap server Timo Makinen 2021-03-16 19:19:23 +00:00
015de5a8df ldap_gravatar: Initial version of role Timo Makinen 2021-03-16 19:18:55 +00:00
b841119e1a Don't hardcode ip addressses. Use netgroups instead. Timo Makinen 2021-03-16 17:54:52 +00:00
5783675589 sendmail: Restart sendmail after config changes Timo Makinen 2021-03-16 17:22:54 +00:00
bfc59bfb2d sendmail: Fix hostname part from kerberos principal Timo Makinen 2021-03-16 17:21:51 +00:00
35b919910f sendmail: Remove duplicate config option Timo Makinen 2021-03-16 17:21:30 +00:00
c1ee7e81d0 saslauthd: Convert ldap to use fastbind Timo Makinen 2021-03-16 11:51:10 +00:00
0f6d33072e sendmail: Better ordering for auth mechanisms Timo Makinen 2021-03-16 09:26:47 +00:00
e5a47f1511 Add ns01.home.foo.sh Timo Makinen 2021-03-16 08:45:50 +00:00
ded4730735 sendmail: Add dhparams Timo Makinen 2021-03-16 08:31:15 +00:00
ac3ac750c1 sendmail: Don't hardcode tls key and cert paths Timo Makinen 2021-03-16 08:27:23 +00:00
183208afff dovecot: Use Mozilla intermediate ssl settings Timo Makinen 2021-03-16 07:30:29 +00:00
2f2db828b2 dhparams: Helper role to copy dhparams file to hosts Timo Makinen 2021-03-16 07:30:02 +00:00
9acebe47c6 Add irssi to shell hosts Timo Makinen 2021-03-16 03:05:50 +00:00
a7795193e7 dovecot: Fix permissons from kerberos keytab Timo Makinen 2021-03-16 02:57:20 +00:00
b87092ccca Add static01.home.foo.sh Timo Makinen 2021-03-16 02:30:16 +00:00
9ffe1dc3c0 Add shell01.home.foo.sh Timo Makinen 2021-03-16 02:15:24 +00:00
2f39d6ebf9 kvm-host: Add virt-top Timo Makinen 2021-03-16 01:19:23 +00:00
7fbd201242 kvm-host: Add base libvirt packages not just daemon Timo Makinen 2021-03-16 01:09:23 +00:00
190d09e783 Use sssd instead of nslcd on nas hosts Timo Makinen 2021-03-16 01:00:55 +00:00
5495eb0827 Preallocate data disks when during privisioning Timo Makinen 2021-03-16 01:00:11 +00:00
46e8a2444d Move mailhost to correct ip address Timo Makinen 2021-03-16 00:57:27 +00:00
3ad51924eb Add fsol02.home.foo.sh Timo Makinen 2021-03-16 00:56:59 +00:00
f73ca08805 bird: Initial version of role Timo Makinen 2021-03-16 00:56:00 +00:00
644299f49a openvpn: Initial version of role Timo Makinen 2021-03-16 00:55:43 +00:00
e0c70ad530 Add vmhost01.home.foo.sh Timo Makinen 2021-03-16 00:54:22 +00:00
5e60aa56aa Remove jumphosts from adm ssh config Timo Makinen 2021-03-16 00:24:03 +00:00
a5f846720f Add roles-lists to mail hosts Timo Makinen 2021-03-12 17:10:19 +00:00
32e4f82ff2 roles-lists: Initial version of role Timo Makinen 2021-03-12 17:09:46 +00:00
cb4292f5d0 clamav: Fix enabling and starting service Timo Makinen 2021-03-12 16:17:50 +00:00
2f01f32259 selinux: Create drop-in directory for custom selinx modules Timo Makinen 2021-03-12 15:57:26 +00:00
05ba87ae88 Add opencollab to shell hosts Timo Makinen 2021-03-12 15:46:05 +00:00