ansible

foo.sh/ansible

Fork 0

Commit graph

849b4ab887 mariadb: Migrate to use backup_base Timo Makinen 2024-06-22 19:25:04 +00:00
b692084f16 Add mongodb hosts to sftp backups Timo Makinen 2024-06-22 19:11:36 +00:00
1534104bf4 Migrate from backup_server to backup_base Timo Makinen 2024-06-22 19:10:42 +00:00
db996daf14 rclone: Migrate to use backup_base role Timo Makinen 2024-06-22 19:10:18 +00:00
5e5ebf937c backup_base: More restrictive permissions Timo Makinen 2024-06-22 19:09:43 +00:00
788c9fa453 backup_base: Add sftp ssh config when needed Timo Makinen 2024-06-22 19:09:20 +00:00
e233860b7b mongodb: Add database backups Timo Makinen 2024-06-22 18:51:49 +00:00
195d9c3b03 backup_base: Rename role Timo Makinen 2024-06-22 18:11:04 +00:00
6dd5cfa681 mariadb: Style fixes and store 30 days of backups Timo Makinen 2024-06-21 15:20:02 +00:00
0eeed22092 ldap_server: Style fixes for backup script Timo Makinen 2024-06-21 15:17:39 +00:00
750b3bab7d ldap_server: Store backups for 30 days Timo Makinen 2024-06-21 15:14:44 +00:00
8ef5f5b18e Rotate dkim keys Timo Makinen 2024-06-18 16:38:45 +00:00
813146b106 minecraft: Change uid and gid Timo Makinen 2024-06-16 20:48:31 +00:00
023257ae55 Remove unneeded option Timo Makinen 2024-06-15 20:59:01 +00:00
66c25d20b8 nginx_site: Disable support for custom tls config Timo Makinen 2024-06-15 20:57:58 +00:00
1b9b9962a7 base: Set LC_TIME correctly to get 24h clock Timo Makinen 2024-06-12 13:27:49 +00:00
c08a8158f7 Update software versions Timo Makinen 2024-06-11 16:48:25 +00:00
9f69d421f2 frigate: Store events for 1 month Timo Makinen 2024-06-06 19:31:40 +00:00
20d91ff1b0 Add blackbox_exporter to external ns host Timo Makinen 2024-06-06 19:30:05 +00:00
dc2a6f5788 blackbox_exporter: Initial version of role Timo Makinen 2024-06-06 19:29:38 +00:00
bb8b486263 Increase os disk size for oci-nodes Timo Makinen 2024-05-18 19:54:43 +00:00
2d7113f6e6 Update software versions Timo Makinen 2024-05-18 19:29:41 +00:00
5fd1b776be rclone: Disable checksumming Timo Makinen 2024-05-11 19:27:13 +00:00
62463860e4 rclone: Fix extra spaces Timo Makinen 2024-05-11 19:17:23 +00:00
eb4a2fa842 Open port 80 from adm hosts for certbot Timo Makinen 2024-05-11 19:13:29 +00:00
ce72d0d17a nginx_site: Fix certbot virtual host Timo Makinen 2024-05-11 19:13:04 +00:00
d0f8144753 Convert mail hosts to Rocky Linux 9 Timo Makinen 2024-05-11 19:03:14 +00:00
96f28d63cc grossd: Fix install on EL9 Timo Makinen 2024-05-11 19:01:37 +00:00
a2fe24955b nginx_site: Use plain http for certbot Timo Makinen 2024-05-11 19:01:13 +00:00
a25cd83e94 Revert "nginx: Fix crash on el9 with plain text http" Timo Makinen 2024-05-11 19:00:51 +00:00
e20873cbd3 network: Set netmask in correct format Timo Makinen 2024-05-11 17:29:29 +00:00
f4b34de6c4 Continue el9 upgrades Timo Makinen 2024-05-11 09:03:22 +00:00
da371980aa nginx: Fix crash on el9 with plain text http Timo Makinen 2024-05-10 16:22:42 +00:00
c06d3cdc7e nginx: Fix typo Timo Makinen 2024-05-10 16:14:33 +00:00
91f1fe3fbc Don't enable plain text web server on nms hosts Timo Makinen 2024-05-10 15:15:41 +00:00
2a750a57f3 nginx_site: Add support for disabling plain text Timo Makinen 2024-05-10 15:14:53 +00:00
42fddcc278 nginx: Enable nginx 1.24 module for EL9 Timo Makinen 2024-05-10 15:12:03 +00:00
e35f425d07 Update bunch of hosts to rocky linux 9 Timo Makinen 2024-05-10 01:46:28 +00:00
8aa7a8aaa2 network: Fix setting DNS server priorities Timo Makinen 2024-05-10 01:08:04 +00:00
2ac7370613 network: Fix empty nameserver list Timo Makinen 2024-05-10 00:25:24 +00:00
7c7b632fc8 network: Add missing template Timo Makinen 2024-05-10 00:17:50 +00:00
ce46c5fb90 Remove sshscan and sslscan from nms hosts Timo Makinen 2024-05-09 20:08:34 +00:00
eb1b324c8d network: Add support for NetworkManager Timo Makinen 2024-05-09 19:42:35 +00:00
fd495036f2 unbound: Don't hardcode zones Timo Makinen 2024-05-09 18:42:42 +00:00
3b2c2a453e unbound: Add support for copying zone files Timo Makinen 2024-05-09 18:23:21 +00:00
2329b5d5e6 Increase memory for log hosts Timo Makinen 2024-05-09 18:22:06 +00:00
cdbd70ec1d Update homeassistant Timo Makinen 2024-05-09 15:52:59 +00:00
8c93ba043d Drop aarch64 architecture from epel mirror Timo Makinen 2024-04-25 05:19:19 +00:00
885c01ebaa mongodb: Limit max connections to database Timo Makinen 2024-04-23 15:30:22 +00:00
b2da9de4d6 syslogd: Fix local logging on servers Timo Makinen 2024-04-23 07:19:30 +00:00
191e322e9e Remove tftp daemon from nms hosts Timo Makinen 2024-04-20 15:18:30 +00:00
d7527a8a6f rclone: Fix config directory permissions Timo Makinen 2024-04-18 09:27:01 +00:00
518e522a50 Update gitea to latest version Timo Makinen 2024-04-16 07:15:42 +00:00
80b7a7c97f google_spell_pspell: Initial version of role Timo Makinen 2024-04-13 20:20:58 +00:00
f08c478bf6 Run roundcube on all oci-node instances Timo Makinen 2024-04-13 18:47:40 +00:00
a275cadcbd roundcube: Store uploads to databse Timo Makinen 2024-04-13 18:43:56 +00:00
4ae88c17a0 dhcpd: Hotfix broken ISC DHCPd for OpenBSD Timo Makinen 2024-04-09 19:52:36 +00:00
9309a901e3 Monthly software updates Timo Makinen 2024-04-09 19:51:56 +00:00
f512d8e83e rclone: Include ssh_known_hosts role Timo Makinen 2024-04-07 18:15:33 +00:00
8cd80becd7 rclone: Don't randomize cron job start time Timo Makinen 2024-04-07 18:06:06 +00:00
5ba21ae4bf sftpuser: Set default chroot path Timo Makinen 2024-04-07 18:02:14 +00:00
29c989711c sftpuser: Prefix variables correctly Timo Makinen 2024-04-07 17:57:05 +00:00
9cb17a88c7 rclone: Hardcode hostgroup for sftp backups Timo Makinen 2024-04-07 17:42:57 +00:00
8ef3592786 sftpuser: Hardcode username Timo Makinen 2024-04-07 17:38:03 +00:00
567691c3c4 rclone: Use hardcoded user on remote host Timo Makinen 2024-04-07 17:37:46 +00:00
d050c5c723 sftpbackup: Remove wrapper role Timo Makinen 2024-04-07 17:36:56 +00:00
4d127f05e7 Don't include backup ssh key in git Timo Makinen 2024-04-07 17:24:06 +00:00
646aada779 sftpuser: Read ssh key from correct place Timo Makinen 2024-04-07 17:22:58 +00:00
0a724359dc rclone: Add ssh key generation and run as backup Timo Makinen 2024-04-07 17:21:41 +00:00
5dc08701b2 backup_server: Allow backup user to write Timo Makinen 2024-04-07 16:31:06 +00:00
f3293d4b05 rclone: Don't use template for backup script Timo Makinen 2024-04-07 16:15:38 +00:00
cd8e979ded Add github backups Timo Makinen 2024-04-07 14:35:26 +00:00
febee5c72e backup_github: New role Timo Makinen 2024-04-07 14:35:04 +00:00
5cd6edc1b1 Update to OpenBSD 7.5 Timo Makinen 2024-04-07 14:09:24 +00:00
8752c36391 backup_server: Move data to new UID/GID Timo Makinen 2024-04-07 14:09:00 +00:00
1a3e1dbeeb Add bitbucket backups Timo Makinen 2024-04-07 13:43:07 +00:00
1520f8dabf backup_server: Move bitbucket backup to own role Timo Makinen 2024-04-07 13:42:32 +00:00
0d72e9e920 backup_bitbucket: New role Timo Makinen 2024-04-07 13:38:21 +00:00
7496125098 routeros_firmware: Show changelog after download Timo Makinen 2024-04-06 18:30:53 +00:00
e2fb492195 routeros_firmware: Fix download for new html Timo Makinen 2024-04-06 18:27:35 +00:00
e57cd06891 nginx_site: Add security headers for movies.foo.sh Timo Makinen 2024-04-02 18:01:02 +00:00
583b106d39 nginx_site: Add more strict headers to collab Timo Makinen 2024-04-02 16:47:49 +00:00
50f02e85ac routeros_firmware: Give error if checksum fetch fails Timo Makinen 2024-03-30 13:55:20 +00:00
604ae20554 mongodb: Lint fixes Timo Makinen 2024-03-24 19:24:28 +00:00
6d3b1e1538 tests: Use new naming for tests Timo Makinen 2024-03-24 19:04:41 +00:00
433a9114df mysql_exporter: Lint fixes Timo Makinen 2024-03-24 18:58:52 +00:00
5aa57c8358 snmp_exporter: Lint fixes Timo Makinen 2024-03-24 18:56:19 +00:00
ea8db3ab6b nginx_exporter: Lint fixes Timo Makinen 2024-03-24 18:52:31 +00:00
d8cf025fbe sshd_cert: Fix lint errors Timo Makinen 2024-03-24 18:23:46 +00:00
315d89c750 Add ssh host aliases for shell and dna-gw hosts Timo Makinen 2024-03-24 11:55:27 +00:00
5f4f8e35aa sshd_cert: Fix checking certificate status Timo Makinen 2024-03-24 11:55:08 +00:00
61e8ebdd20 sshd_cert: Sign if pubkey is newer than cert Timo Makinen 2024-03-23 21:33:13 +00:00
55aed1a36d sshd_cert: Add support for aliases in certificate Timo Makinen 2024-03-23 20:29:53 +00:00
365d0af6a6 Add global ssh_known_hosts to adm hosts Timo Makinen 2024-03-23 19:54:57 +00:00
b1c3597fa9 ssh_known_hosts: Use ssh certificate authority Timo Makinen 2024-03-23 19:51:32 +00:00
7ce6d58923 sshd_cert: First version of role Timo Makinen 2024-03-23 19:18:30 +00:00
df2573a650 sshd: Fix crypto configs for el8 systems Timo Makinen 2024-03-23 18:28:23 +00:00
917674bac8 sshca: First version of role Timo Makinen 2024-03-23 18:19:00 +00:00
0618cde4d1 mysqld_exporter: Don't hardcode prometheus servers Timo Makinen 2024-03-20 20:48:07 +00:00
122e27518b snmp_exporter: Don't hardcode prometheus servers Timo Makinen 2024-03-20 20:47:41 +00:00