ansible

foo.sh/ansible

Fork 0

Commit graph

d72fbc76dd Add whois command to adm hosts Timo Makinen 2020-09-28 15:25:09 +00:00
a613d2f215 Add dovecot to mail servers Timo Makinen 2020-09-28 15:18:21 +00:00
f543d599af Tag all certificate and key copying Timo Makinen 2020-09-28 15:17:26 +00:00
939edd1cdd Fix typo and add nas hosts to site playbook Timo Makinen 2020-09-28 15:16:20 +00:00
04c9be96a4 dovecot: Initial version of role Timo Makinen 2020-09-27 12:41:08 +00:00
54b0b1da21 clamav: Refresh socket directory permission after config change Timo Makinen 2020-09-24 20:22:25 +00:00
f8762c5a00 clamav: Allow all logged users to scan files Timo Makinen 2020-09-24 19:58:22 +00:00
075be34b51 Add TextCat plugin to mail server spamassassin Timo Makinen 2020-09-24 19:33:21 +00:00
acdb465539 spamassassin-razor: Add razor configurations Timo Makinen 2020-09-24 19:32:01 +00:00
49bb954ec6 spamassassin-textcat: Fix library path Timo Makinen 2020-09-24 19:31:34 +00:00
e0e38075f3 spamassassin-textcat: Initial version of role Timo Makinen 2020-09-24 19:06:34 +00:00
e775b965c3 saslauthd: Change default mech to ldap Timo Makinen 2020-09-24 19:00:52 +00:00
6915b013a1 base: Fix ansible warning from postfix install Timo Makinen 2020-09-24 18:46:53 +00:00
70e3120374 Add spamassassin + plugins to mail servers Timo Makinen 2020-09-24 18:46:36 +00:00
3fdfd92304 spamassassin-clamav: Add spamassassin to dependencies Timo Makinen 2020-09-24 18:46:11 +00:00
757553ef89 spamassassin-clamav: Initial version of role Timo Makinen 2020-09-24 18:43:06 +00:00
8cea9f7e5f clamav: Initial version of role Timo Makinen 2020-09-24 18:37:40 +00:00
9fb67e5a8f spamassassin-razor: Initial version of role Timo Makinen 2020-09-24 18:11:25 +00:00
b23074f338 spamassin-pyzor: Initial version of role Timo Makinen 2020-09-24 17:58:40 +00:00
6c11060bac spamassassin-ixhash: Initial version of role Timo Makinen 2020-09-24 17:46:11 +00:00
a70fb0ae43 spamassassin: Initial version of role Timo Makinen 2020-09-24 17:36:18 +00:00
2db1a47b1a base: Don't install postfix on mail servers Timo Makinen 2020-09-24 16:28:38 +00:00
5bcc6cfde7 Don't use static ip for install when gateway is not defined Timo Makinen 2020-09-24 15:44:00 +00:00
c8387f759a Add nginx to mail servers for getting certificate Timo Makinen 2020-09-24 15:24:03 +00:00
83304f752c Use static ip for mail02 Timo Makinen 2020-09-24 15:23:42 +00:00
222e8c59ec Add mail02.home.foo.sh host Timo Makinen 2020-09-24 14:46:24 +00:00
8ef85fc318 ldap/nss: Add netgroup support Timo Makinen 2020-09-20 21:33:06 +00:00
5bc970fdd1 Add fedora support for deploying kvm guests Timo Makinen 2020-09-17 20:17:53 +00:00
fdb5cc437e Use boot_url variable when referencing to boot.foo.sh Timo Makinen 2020-09-17 20:09:57 +00:00
7d21e1bbf3 Use https when fetching data from boot.foo.sh Timo Makinen 2020-09-17 19:26:49 +00:00
ad230bd98b Use new boot.foo.sh for openbsd installs Timo Makinen 2020-09-17 19:20:25 +00:00
548cd8761b nfs-client: Configure idmapd domain Timo Makinen 2020-09-14 06:25:28 +00:00
d487c9a77f Add thinlinc to shell hosts Timo Makinen 2020-09-14 06:25:05 +00:00
dcb4e2a0aa thinlinc-server: Initial version of role Timo Makinen 2020-09-14 06:24:50 +00:00
4901a345c5 Start adding software to shell servers Timo Makinen 2020-09-11 17:00:59 +00:00
2a21d31628 google-chrome: Initial version of role Timo Makinen 2020-09-11 16:36:44 +00:00
b1e5023eac Set default gw correctly for shell02 Timo Makinen 2020-09-11 16:26:03 +00:00
f87df3b96d network: Add support for setting static IP on RedHat Timo Makinen 2020-09-11 16:25:30 +00:00
1a0a8ac1d2 Set default gateway in interface settings Timo Makinen 2020-09-11 16:24:58 +00:00
199e250562 Add shell hosts group Timo Makinen 2020-09-11 15:46:32 +00:00
d88f341d15 Finalize NFS server install Timo Makinen 2020-09-11 15:45:46 +00:00
bf47c6fab9 Fix roles path from www.foo.sh proxies Timo Makinen 2020-09-11 15:38:56 +00:00
3b0a04e516 Allow Apache to serve files from NFS in static hosts Timo Makinen 2020-09-11 15:38:24 +00:00
a52bb767dd Add support for installing CentOS with static IP address Timo Makinen 2020-09-11 15:27:05 +00:00
a64145a3de Add lan interface to nas hosts Timo Makinen 2020-09-11 14:49:53 +00:00
585f7e28be zfs: Import existing zpools automatically Timo Makinen 2020-09-11 14:46:59 +00:00
da549daaaa ldap/server: Add ACL support for netgroups Timo Makinen 2020-09-11 14:45:11 +00:00
8a7ad72442 kvm-host: Restrict permissions to KVM image directories Timo Makinen 2020-09-10 08:08:21 +00:00
c5c5707f67 Configure user and role dirs for static hosts Timo Makinen 2020-09-09 20:23:07 +00:00
0aa882f07a Proxy users and roles in www.foo.sh to backend server Timo Makinen 2020-09-09 20:10:22 +00:00
3b67903e4f nginx: Configure proxy key/cert globally and not in site Timo Makinen 2020-09-09 19:55:00 +00:00
852770b74a nfs-server: Disable NFS over UDP Timo Makinen 2020-09-09 18:34:40 +00:00
ef1ee545fe nfs-server: Restart nfs services after config change Timo Makinen 2020-09-09 18:34:07 +00:00
cfabd677a4 nfs-server: Let nfs-client depedency install packages Timo Makinen 2020-09-09 18:32:49 +00:00
2c79f6e801 Fix typos from proxy playbook Timo Makinen 2020-09-09 18:30:01 +00:00
c6ea27bf2d Add static host group Timo Makinen 2020-09-09 18:29:05 +00:00
09a6bcce84 autofs: Initial version of role Timo Makinen 2020-09-09 18:28:00 +00:00
dde5a9f61d ldap/client: Fix auth mech for root Timo Makinen 2020-09-09 15:49:41 +00:00
36e1c74b98 Add LDAP client utils to adm hosts Timo Makinen 2020-09-09 15:45:26 +00:00
b85e458781 Add redirects for www.foo.sh site Timo Makinen 2020-09-09 11:55:22 +00:00
e0fad56127 nfs-client: Initial version Timo Makinen 2020-09-09 11:40:02 +00:00
db085fd4ab Make OS disk larger on proxies Timo Makinen 2020-09-09 11:09:53 +00:00
5d33f46a11 nginx/server: Disable chroot on OpenBSD Timo Makinen 2020-09-09 11:09:22 +00:00
53d5f75f8e Add web-build role to adm hosts Timo Makinen 2020-09-09 10:43:38 +00:00
e4e9e6a692 web-build: Initial version Timo Makinen 2020-09-09 10:43:09 +00:00
bce775efd5 Add LDAP users to adm hosts Timo Makinen 2020-09-09 09:18:18 +00:00
3f05e6e50f Redirect collab.foo.sh root to collab Timo Makinen 2020-09-09 07:36:28 +00:00
a3492d4490 collab: Move theme install to different place Timo Makinen 2020-09-08 23:32:54 +00:00
07a5adafa6 Fix collab principal name Timo Makinen 2020-09-08 23:32:06 +00:00
3b957e5685 Use ansible for collab default settings Timo Makinen 2020-09-08 23:31:10 +00:00
61e9094657 collab: Set base collab permissions and default page Timo Makinen 2020-09-08 23:29:35 +00:00
42353b188c collab: Add foo.sh theme python script Timo Makinen 2020-09-08 20:19:29 +00:00
689ba57b72 collab: Don't overwrite already existing configs Timo Makinen 2020-09-08 19:48:52 +00:00
0621850db4 collab: Add foo.sh theme support Timo Makinen 2020-09-08 19:48:18 +00:00
40639ee1d0 iptables: Fix indentation from iptables templates Timo Makinen 2020-09-07 15:24:10 +00:00
28e7fa236b relayd: Fix permissions from config Timo Makinen 2020-09-07 06:20:31 +00:00
9e61fe3cbc kerberos/keytab: Add default keytab path Timo Makinen 2020-09-04 16:49:41 +00:00
d152c433f0 Add ldap client to collab for group memberships Timo Makinen 2020-09-04 16:38:00 +00:00
fe2b2bc7e9 Add nfs-server role to nas hosts Timo Makinen 2020-09-04 13:39:07 +00:00
93b241e8ed nfs-server: Initial version of role Timo Makinen 2020-09-04 13:38:57 +00:00
03cb591e21 Add kvm-host role to hypervisors group Timo Makinen 2020-09-04 13:38:26 +00:00
7b35cb159b Add GSSAPI authentication to collab hosts Timo Makinen 2020-09-04 13:37:45 +00:00
70bf4bf846 Open NFS port for nas hosts Timo Makinen 2020-09-04 13:37:23 +00:00
f1a4424067 mod_auth_gssapi: Initial version of role Timo Makinen 2020-09-04 13:36:56 +00:00
878de962f6 kvm-host: Initial version of role Timo Makinen 2020-09-04 12:00:02 +00:00
f7fc9e97c6 selinux: Lint fixes Timo Makinen 2020-09-04 09:28:21 +00:00
e117fa23c5 postfix: Lint fixes Timo Makinen 2020-09-04 09:25:55 +00:00
9a2cd1e646 Add nas02.home.foo.sh host Timo Makinen 2020-09-04 08:32:31 +00:00
f920c8f09a zfs: Initial version of role Timo Makinen 2020-09-04 08:31:49 +00:00
7f63f03ac1 Open DoT port 853 for public dns servers Timo Makinen 2020-09-04 07:00:00 +00:00
533b48204f ldap_netdb: Add -v option to cron job and skip localhost Timo Makinen 2020-09-04 06:58:48 +00:00
8ca459430c nsd: Restart nsd after certificate update Timo Makinen 2020-09-04 06:37:53 +00:00
bdb2d9adb9 Rework site.yml to include tested groups Timo Makinen 2020-09-03 20:41:17 +00:00
46bdda437d Add nginx to ns group Timo Makinen 2020-09-03 20:24:57 +00:00
e10d84305a base: Install curl to all hosts Timo Makinen 2020-09-03 20:24:25 +00:00
5edbeef97a Rename certbot.foo.sh to certbot.home.foo.sh Timo Makinen 2020-09-03 20:23:53 +00:00
7de9a9a6ae nsd: Remove secondary dns servers Timo Makinen 2020-09-03 20:04:17 +00:00
b4e260b1e1 nsd: Fix typo Timo Makinen 2020-09-03 20:04:05 +00:00
db35937a67 Don't lock myself out from external hosts Timo Makinen 2020-09-03 19:39:42 +00:00
4b49e9e486 Add atl01.vultr.foo.sh host Timo Makinen 2020-09-03 19:37:06 +00:00