ansible

foo.sh/ansible

Fork 0

Commit graph

905e7f8485 Rename generic vm-create to deploy-kvm-guest Timo Makinen 2020-09-03 18:13:52 +00:00
c9f3b7d0b7 Add ns02.home.foo.sh host Timo Makinen 2020-09-03 17:59:43 +00:00
69c17d7e12 nsd: Initial version of role (WIP) Timo Makinen 2020-09-03 17:58:53 +00:00
c1c74dc5c4 network: Fix type warning from net.inet.carp.preempt Timo Makinen 2020-09-03 16:09:18 +00:00
525d8b72f9 Add certbot support for outside server network Timo Makinen 2020-09-03 07:55:32 +00:00
5f17ae2964 Add proto=static to proxies network interfaces Timo Makinen 2020-09-03 07:54:49 +00:00
35b1487d2a postfix: Verify peer certificate for stunnel Timo Makinen 2020-09-03 07:48:42 +00:00
63890bcb72 opensmtpd: Redirect all local mails to relay Timo Makinen 2020-09-03 07:34:20 +00:00
58aa3e80db Add route to old puppet infra from adm hosts Timo Makinen 2020-09-03 07:29:31 +00:00
108660e297 network: Require proto=static for static ip address Timo Makinen 2020-09-03 06:51:07 +00:00
2312e0b038 ldap_netdb: Fix typo Timo Makinen 2020-09-03 06:07:33 +00:00
5b24509081 postfix: Fix email sending to local addresses Timo Makinen 2020-09-02 21:07:21 +00:00
574916dfaf postfix: Fix local mail delivery to relayhost Timo Makinen 2020-09-02 17:13:13 +00:00
8d1fed8695 pf: Fix indentation from pf.conf Timo Makinen 2020-09-01 20:37:00 +00:00
6d63bda3ff network: Fix OpenBSD interface with empty settings Timo Makinen 2020-09-01 20:22:48 +00:00
bec7f3a84d base: Use copy instead of file Timo Makinen 2020-09-01 20:18:14 +00:00
f1468b0f1f base: Use explicit package names for OpenBSD Timo Makinen 2020-09-01 20:16:33 +00:00
f60fb7f88c Force python3 install when provisioning OpenBSD Timo Makinen 2020-09-01 20:15:15 +00:00
51aa0a709e selinux: lint fixes Timo Makinen 2020-09-01 19:21:18 +00:00
55d7d954b3 ldap_netdb: Initial version of role Timo Makinen 2020-09-01 18:12:21 +00:00
7b201b31da collab: Add missing srcdir and remove swap file Timo Makinen 2020-08-31 00:21:37 +00:00
9dd83a8146 Lint fixes Timo Makinen 2020-08-31 00:20:22 +00:00
c9b21a3286 Add ansible_certificate custom fact Timo Makinen 2020-08-29 15:55:51 +00:00
0ae634aed2 Add vmhost02.home.foo.sh Timo Makinen 2020-08-29 15:55:16 +00:00
aac14db657 ansible-host: Publish ansible facts with nginx Timo Makinen 2020-08-29 13:43:21 +00:00
88157dcc91 collab: Initial version of role Timo Makinen 2020-08-28 16:09:53 +00:00
99a88e1baa Add temporary ssh config for adm hosts Timo Makinen 2020-08-28 15:44:29 +00:00
acbe47c53f Add make to adm hosts Timo Makinen 2020-08-28 15:34:03 +00:00
13d07b7a6d Rename moin group/hosts to collab Timo Makinen 2020-08-28 12:58:54 +00:00
f6aed5faad Add collab.foo.sh site to proxies Timo Makinen 2020-08-28 12:56:05 +00:00
dd2b5c6a69 apache: Remove Procotols option Timo Makinen 2020-08-28 10:57:39 +00:00
fbc8fa55c5 Add moin host group Timo Makinen 2020-08-28 10:41:27 +00:00
5c62106142 ansible-host: Use ssh pipelining Timo Makinen 2020-08-28 10:40:57 +00:00
e7aa1c9b73 apache: Drop back to Mozilla intermediate Timo Makinen 2020-08-28 10:13:29 +00:00
47da9470a6 apache: Allow access to web root Timo Makinen 2020-08-28 10:10:57 +00:00
bace8a39b4 apache: Just use Mozilla recommended settings Timo Makinen 2020-08-28 10:05:44 +00:00
affeddd2cc apache: Require client certificate authentication Timo Makinen 2020-08-28 09:58:36 +00:00
480822619d apache: Initial version of module Timo Makinen 2020-08-28 09:52:02 +00:00
677db41af0 Add devel01 to proxy infra Timo Makinen 2020-08-28 08:27:50 +00:00
a3b3e91b09 Store only ed25519 key during provisioning Timo Makinen 2020-08-28 08:17:48 +00:00
026e077fc7 Add devel01.home.foo.sh host for dev purposes Timo Makinen 2020-08-28 07:52:56 +00:00
9532fa165e ansible-host: Add missing bashrc file Timo Makinen 2020-08-28 07:32:56 +00:00
18919643d9 base: Really disable rsa key and not just say so Timo Makinen 2020-08-28 07:29:59 +00:00
cf76184a12 Fix CentOS 7 mirror location Timo Makinen 2020-08-27 19:01:31 +00:00
526a192018 ansible-host: Make sure that ssh-agent is running for root Timo Makinen 2020-08-27 18:47:49 +00:00
8ecbc19c75 ansible-host: Remove some packages not related to ansible Timo Makinen 2020-08-27 18:26:57 +00:00
d759e5d4db Rename private directory Timo Makinen 2020-08-27 18:16:28 +00:00
602cc4dfc6 certbot: Add missing config file and lint fixes Timo Makinen 2020-08-27 21:14:36 +03:00
b81950c5b2 ansible-host: Don't update local ansible repo Timo Makinen 2020-08-27 21:13:31 +03:00
fa43cc36da Add certbot role to adm hosts Timo Makinen 2020-08-27 20:51:15 +03:00
5e1f521eb6 certbot: Initial version of role Timo Makinen 2020-08-27 20:50:57 +03:00
cb51dc186c network: Fix default network_interfaces variable Timo Makinen 2020-08-27 17:47:09 +00:00
c80eca3d85 New implementation of network interfaces Timo Makinen 2020-08-27 17:42:07 +00:00
78c9a2eaf1 Don't hardcode private dir to vm-create Timo Makinen 2020-08-27 12:41:16 +00:00
fc25e0a108 Add support to provision OpenBSD KVM guests Timo Makinen 2020-08-27 12:40:17 +00:00
d9f009565c ansible-host: Don't print skipped hosts Timo Makinen 2020-08-27 14:59:37 +03:00
ee03bd3cb7 ansible-host: More fixes to support out of box install Timo Makinen 2020-08-27 14:43:19 +03:00
00bdcfb7de selinux: Fix python package name for EL8 Timo Makinen 2020-08-27 14:35:31 +03:00
098ab32a78 Don't hardcode private directory path Timo Makinen 2020-08-27 14:29:35 +03:00
f14bb25ade nginx/site: Add support for self signed certs Timo Makinen 2020-08-27 13:45:19 +03:00
e672015a1f nginx: Use alias for certbot host Timo Makinen 2020-08-27 12:00:28 +03:00
ee23e2120b ansible-host: Add missing virt-install Timo Makinen 2020-08-26 23:46:18 +03:00
398bbf5a32 ansible-host: Install more tools Timo Makinen 2020-08-26 23:40:52 +03:00
d09ad303dc ansible-host: Fix private directory link Timo Makinen 2020-08-26 23:31:20 +03:00
eb92f9f7bd add adm01.home.foo.sh Timo Makinen 2020-08-26 23:26:00 +03:00
f05112b125 ansible-host: Initial version of role Timo Makinen 2020-08-26 23:25:20 +03:00
858a7d30d7 epel-repo: Initial version of role Timo Makinen 2020-08-26 23:11:51 +03:00
964b70f978 base: Add more base packages Timo Makinen 2020-08-26 23:04:16 +03:00
74edead676 base: Remove all depencies to other than base packages Timo Makinen 2020-08-26 22:54:47 +03:00
a1c96a5369 Support OpenSMTPd only on OpenBSD Timo Makinen 2020-08-26 22:53:11 +03:00
c8f65fc7bd Initial version of postfix role Timo Makinen 2020-08-26 22:47:04 +03:00
f490804106 Disable rsa key from ssh host keys Timo Makinen 2020-08-26 22:03:18 +03:00
b7e0ef18c5 Reorder installs to get selinux support earlier Timo Makinen 2020-08-26 21:53:48 +03:00
47e5fe321c More lint fixes Timo Makinen 2020-08-26 21:53:35 +03:00
d4a11404fd Lint fixes Timo Makinen 2020-08-26 21:38:18 +03:00
65fcb4035e Aggressive line shortening to get past yamllint Timo Makinen 2020-08-26 21:22:22 +03:00
18df5f418c Fix typo, rename disk vars and cleanup Timo Makinen 2020-08-26 21:03:05 +03:00
6798c71285 Make vars more readable and fix one lint error Timo Makinen 2020-08-26 20:28:15 +03:00
d54fe7975c Don't set password for root. Just lock account. Timo Makinen 2020-08-26 20:24:08 +03:00
54b5a74f54 Use cpu cores instead of sockets for kvm guests Timo Makinen 2020-08-26 20:20:04 +03:00
6bf4815503 Store console output to logfile on kvm guests Timo Makinen 2020-08-26 20:12:12 +03:00
40963ea620 Relocate kvm guest disk images Timo Makinen 2020-08-26 20:07:55 +03:00
af6e3098d5 fix centos8 mirror location Timo Makinen 2020-08-26 19:53:03 +03:00
08d1495026 syslogd: lint fixes Timo Makinen 2020-02-28 00:09:17 +02:00
302427c85f selinux: update module to support centos 8 Timo Makinen 2020-02-28 00:07:10 +02:00
7a19cf852c add support for installing centos 8 virtual machines Timo Makinen 2020-02-27 14:24:16 +02:00
3dbb65302e base: fix warning of cron job hour value (should be string) Timo Makinen 2020-02-27 14:12:09 +02:00
08466f3143 base: remove rcs from default installs Timo Makinen 2020-02-27 14:08:12 +02:00
1fcc2dd407 add remote logging support to rsyslog Timo Makinen 2019-07-19 18:04:53 +03:00
53c31e62d1 add log.yml playbook to site wide playbook Timo Makinen 2019-07-19 17:59:10 +03:00
bc37d38eaf do not restrict syslog port by ip address Timo Makinen 2019-07-19 17:58:14 +03:00
6085718f5d enable remote logging for syslogd Timo Makinen 2019-07-19 17:55:54 +03:00
d11300df60 add syslog support for proxies Timo Makinen 2019-07-19 17:55:22 +03:00
afd81c714c add log01 host Timo Makinen 2019-07-19 17:20:15 +03:00
7088bc9b14 add server support for syslogd Timo Makinen 2019-07-19 17:16:59 +03:00
9b3bfe9bc8 nginx: use mozilla recommended ssl options Timo Makinen 2019-07-05 10:20:25 +03:00
6cd29b72a7 nginx: enable http2 protocol Timo Makinen 2019-07-05 10:20:00 +03:00
84db430875 add foo.sh layout to cups web interface Timo Makinen 2019-06-14 11:20:51 +03:00
a496da62b0 add more cups configuration Timo Makinen 2019-06-14 11:09:23 +03:00
5afff575c5 change cups authentication to use kerberos Timo Makinen 2019-06-14 10:12:07 +03:00