infra
/
ansible
4
5
Fork 5
Code Issues 6 Pull Requests Activity
919 Commits 3 Branches 0 Tags 1.5 MiB
Commit Graph

788 Commits

Author SHA1 Message Date
Markus f19e8af40f common: don't show diff for large zsh config files 2021-08-02 12:05:53 +02:00
Markus 1f967c2925 move installation of apt-transport-https to common 2021-08-02 12:04:14 +02:00
Markus 2eb5440c3c common: install chrony (instead of ntp) 2021-08-02 09:24:13 +02:00
Markus 0d288bf6e1 common: remove now unused files 2021-08-01 11:31:41 +02:00
Markus 865c58bd4c dns_*: initialize sqlite database 2021-07-31 09:11:31 +02:00
Markus 1b0db12005 common: enable serial console on KVM VMs 2021-07-31 00:12:22 +02:00
Markus 36b75e1c6a dns_intern: fix role for non-clustered setups 2021-07-30 23:44:00 +02:00
Markus 0dd467e564 dns_intern: fix typo 2021-07-30 23:32:47 +02:00
Markus 26bdefaa10 dhcpd: make compatible with bullseye 2021-07-30 23:31:54 +02:00
Markus de1a36efb1 dhcpd: dns_intern: add dhcp ranged for auweg 2021-07-30 23:31:04 +02:00
Markus ead1afc293 common: don't force old-style interface names 
old style interface names are not really useful anymore
but for now we don't want to force new-style names either
 2021-07-30 23:08:24 +02:00
Markus 869a84dc3d common: don't install unneeded ldap.conf anymore 2021-07-30 23:06:53 +02:00
Markus 7ac10f0e7d new host: aeron 2021-07-30 23:05:53 +02:00
Markus 5e9360bd48 new VM host at auweg: weizen 2021-07-30 22:42:49 +02:00
Markus 2f6ae888b5 fileserver: minor improvements 2021-07-29 12:38:06 +02:00
Markus 3be8cce6d8 workadventure: new role for workadventure 2021-07-22 16:51:57 +02:00
Markus 41a94d7142 gitea: bump to version 1.14.5 2021-07-19 09:49:48 +02:00
Markus e03d7ab821 common: drop FreeBSD support 2021-07-14 17:41:24 +02:00
Markus f0c55693a8 new host: epona (running netbox) 2021-07-14 17:38:28 +02:00
Markus 241c706625 gitea: bump to version 1.14.4 2021-07-09 10:16:55 +02:00
Markus 1b9b5badd3 dns_intern: update VPN related DNS records 2021-07-06 08:18:12 +02:00
Markus 7a4ec7aae1 matrix: disable reverse proxy access log 2021-06-30 12:50:21 +02:00
Markus 09043f39ca dhcpd: dns_intern: new device ap06 2021-06-30 12:48:11 +02:00
Markus cbee52e0bc gitea: bump to version 1.14.3 2021-06-19 15:25:15 +02:00
Markus f96090ca5d fileserver: add basic samba config 2021-06-15 21:57:58 +02:00
Markus 046fe91aef fileserver: fix typo 2021-06-09 20:57:05 +02:00
Markus 1b34fd4944 drone_runner: pull container on deployment 2021-06-09 20:03:53 +02:00
Markus d2c46eae8c docker: use python3-docker (for ansible) 2021-06-09 15:52:30 +02:00
Markus b2442be2d8 fileserver: new wip role for bowle (now on Debian) 2021-06-07 13:05:34 +02:00
Markus 7b1f998af2 use auto discovered python instead of legacy 2021-06-03 15:14:55 +02:00
Markus 3e1cdb6bf5 matrix: rebase homeserver.yaml.j2 on upstream 1.34.0 2021-05-20 18:36:05 +02:00
Markus e8dcf169e2 dhcpd, dns_intern: provide dynamic dns entries 
clients in the 172.23.3.0/24 subnet are now provided with dynamic dns
entries in the users.binary.kitchen domain - forward entries only
 2021-05-16 18:35:29 +02:00
Markus e0a5d012ee icinga: create host entries for all hosts known to ansible 2021-05-14 13:32:45 +02:00
Markus 1aebd59435 hackmd: rename vars to hedgedoc and bump version to 1.8.2 2021-05-14 12:20:09 +02:00
Markus 66ee1f011e hackmd: bump to version 1.8.1 2021-05-11 17:04:32 +02:00
Markus be3c4f3cf7 gitea: bump to version 1.14.2 2021-05-10 20:50:57 +02:00
Markus 0c1e89c24e dns_intern: add forgotten host bob 2021-05-08 13:58:49 +02:00
Markus f18c07e9fa icinga: rename config template 2021-05-08 13:57:13 +02:00
Markus a5620befbe gitea: bump to version 1.14.1 2021-05-07 10:23:51 +02:00
Markus c93b864f03 icinga: first attept at monitoring with icinga 2021-05-06 20:39:40 +02:00
Markus 19242491f5 gitea: bump to version 1.14.0 2021-04-12 13:01:57 +02:00
Markus 1a5f7b7e3f gitea: bump to version 1.13.6 2021-03-24 20:11:03 +01:00
Markus ae725e673c gitea: bump to version 1.13.5 2021-03-22 15:58:27 +01:00
Markus 8a27fe96b1 matrix: adjust vhost settings for 1.29 2021-03-14 12:16:55 +01:00
Markus b03c92eba0 gitea: bump to version 1.13.4 2021-03-07 17:32:32 +01:00
Markus 90cbfdb435 hackmd: upgrade to HedgeDoc 1.7.2 2021-02-11 12:35:29 +01:00
Markus dae9ba85e4 gitea: bump to version 1.13.2 2021-02-11 12:24:43 +01:00
Markus 57709979eb mail: fix escaping in /etc/default/postsrsd 2021-02-10 19:04:15 +01:00
Markus a7373f86f3 matrix: rebase homeserver.yml against upstream 2021-02-10 09:51:42 +01:00
Markus 4cc75159d2 gitea: bump to version 1.13.1 2020-12-28 19:58:21 +01:00
Markus ac892a93cb hackmd: upgrade to HedgeDoc 1.7.1 2020-12-28 17:53:02 +01:00
Markus 15fbe6c29c web_mc: fix typo 2020-12-24 13:05:44 +01:00
Markus 39e5ad9e20 web_mc: webserver for minecraft map 2020-12-24 12:38:42 +01:00
Markus 2514396745 member_sw: add gcc 2020-12-02 19:40:06 +01:00
Markus b1589a0ec1 gitea: bump to version 1.13.0 2020-12-02 19:37:50 +01:00
Markus df78e0119f uau: remove DL-Limit 
This setting also affects interactive downloads
 2020-11-24 20:00:11 +01:00
Markus 30652ebe5d gitea: bump to version 1.12.6 2020-11-16 16:11:39 +01:00
Markus 777d56712e web_plk: also get a cert for www. 2020-11-15 22:31:34 +01:00
Markus 39d252a2bc web_plk: do a few steps manually for now 2020-11-15 22:30:07 +01:00
Markus 23c80e75ba nextcloud: use correct php version 2020-11-15 20:42:48 +01:00
Markus ada1a968ff nextcloud: update php dependencies 2020-11-15 20:37:46 +01:00
Markus 8edc26cc74 uau: make reboot configurable 2020-11-15 16:12:44 +01:00
Markus 25ef1394f4 partdb: remove role 2020-11-14 11:36:01 +01:00
Markus dfe0804a3d librenms: comment out broken mysql_user statement 
The used mysql_user statement seems to be broken. Since the service is
currently running the statement is commented out in order to still be
able to run this role.
 2020-11-14 10:59:32 +01:00
Markus 6249d9d62f uau: reboot if needed (e.g. on kernel update) 
Manually rebooting is tedious and nothing bad happend over the last few
years. Also important VMs are still on manual update.
 2020-11-14 10:44:55 +01:00
Markus 8ef5789f4a nextcloud: use list instead of with_items 2020-11-13 21:35:15 +01:00
Markus 4e87db5364 dns_extern: use list instead of with_items 2020-11-13 21:34:36 +01:00
Markus 770dbc4779 dns_inten: use list instead of with_items 2020-11-13 21:34:04 +01:00
Markus e592ebbf4b dns_extern: rename from dns-extern 2020-11-13 21:31:44 +01:00
Markus 47bea1eb41 dns_intern: rename from dns-intern 2020-11-13 21:31:11 +01:00
Markus 3db745797a partdb: use list instead of with_items 2020-11-13 21:29:56 +01:00
Markus 0ea7576e80 hackmd: use list instead of with_items 2020-11-13 18:29:32 +01:00
Markus a5bef39ba4 member_sw: use list instead of with_items 2020-11-13 18:28:53 +01:00
Markus 421785c336 coturn: use simple statement instead of with_items 2020-11-13 18:27:52 +01:00
Markus d8ab59accc web: use list instead of with_items 2020-11-13 18:26:10 +01:00
Markus 28c9d8ad3a prosody: use list instead of with_items 2020-11-13 18:25:34 +01:00
Markus 64a557ab85 matirx: use list instead of with_items 2020-11-13 18:25:01 +01:00
Markus b3b5129cc4 mail: use list instead of with_items 2020-11-13 18:24:23 +01:00
Markus cf52cc9932 librenms: use list instead of with_items 2020-11-13 18:23:17 +01:00
Markus 6b4dbb9177 drone_runner: rename from drone-runner 2020-11-13 18:20:55 +01:00
Markus 989db7f961 bk_dss: rename from bk-dss 2020-11-13 18:19:36 +01:00
Markus 7de38a4602 common: use list instead of with_items 2020-11-13 17:39:47 +01:00
Markus 364d9428d8 web_plk: new role (on technetium.binary-kitchen.net) 2020-11-13 17:32:43 +01:00
Christian 5492048623 jitsi: complete setup 2020-11-12 21:01:18 +01:00
Markus f36e4f491d member-sw: rename to member_sw 2020-10-12 20:22:27 +02:00
Markus fd3dd75be2 ldap-pam: rename to ldap_pam 2020-10-12 20:20:09 +02:00
Markus ebef95fd2e root-keys: rename to root_keys 2020-10-06 10:08:29 +02:00
Markus 0e4a13aa37 uau: change apt to new syntax 2020-10-05 08:38:50 +02:00
Markus 6f2267ce56 gitea: change apt to new syntax 2020-10-05 08:38:36 +02:00
Markus 16a66b5731 drone: change apt to new syntax 2020-10-05 08:38:25 +02:00
Markus b519f6de07 gitea: update to version 1.12.5 2020-10-05 08:33:42 +02:00
Markus 38bd0328b7 bk-dss: change apt to new syntax 2020-10-05 08:31:16 +02:00
Thomas Basler c4101bc585 Nice URLs for dokuwiki 2020-09-12 19:01:28 +02:00
Thomas Basler 78dc0938bf Better caching for static dokuwiki images 2020-09-12 18:59:35 +02:00
Markus 500a89161d matrix: rebase config against 1.19.1 2020-09-04 08:42:48 +02:00
Markus e720608d00 gitea: update to version 1.12.4 2020-09-04 08:12:15 +02:00
Markus 76e9e6cac5 new host: molybdenum (Telefonzelle) 2020-07-31 21:38:33 +02:00
Markus d2454e27fc gitea: update to version 1.12.3 2020-07-29 07:35:10 +02:00
Markus 6a9c4aedae gitea: implement fetching binary 2020-06-23 16:32:00 +02:00
Jan 22372c931d Update role acertmgr add var acertmgr_version 
Defining variable acertmgr_version from role defaults, allows version
string to be overridden. Role defaults are set in connection: local scope.
This also shortens long line to make this role linter compliant
 2020-06-22 13:27:26 +02:00
Markus a42b34b3ec nginx: don't use "== True" 2020-06-20 17:22:23 +02:00
Markus 47cccdd42a cleanup: use systemd module for daemon-reloaed 2020-06-20 14:51:13 +02:00
Markus 40e8445679 matrix: increase file size limit 2020-06-20 00:20:48 +02:00
Markus fe10cde96b acertmgr: ansible style fix 2020-06-20 00:20:19 +02:00
Markus 080c3fb495 drone-runner: fix another syntax error 2020-06-20 00:10:46 +02:00
Markus d0d3fe230a drone-runner: set password, fix syntax error 2020-06-20 00:07:46 +02:00
Markus 84de43d428 gitea: disable gravatar, less log spam, persistent sessions 2020-06-19 23:42:22 +02:00
Markus d612d1ac28 nginx: enable gzip for proxied responses 2020-06-19 23:41:50 +02:00
Markus a065fd4bc8 drone: install runner onto bob 2020-06-19 23:41:16 +02:00
Markus fe5bdab253 drone: move onto gitea server and adjust for gitea 2020-06-19 23:39:58 +02:00
Markus c2b529345e nginx: hide version 2020-06-18 22:39:30 +02:00
Markus 488fb29275 gitea: migrate from gogs 2020-06-18 22:34:30 +02:00
Markus 7a58869a2f fix path of acertmgr handler 2020-06-07 15:16:49 +02:00
Markus 86bf87405a new host for drone.io 
fix path of acertmgr handler
 2020-06-07 15:16:25 +02:00
Markus 9bb3111efc matrix: rebase config against 1.14.0 2020-05-30 14:47:22 +02:00
Markus 8e5ccda050 prometheus: basic proxmox monitoring 2020-05-25 16:15:29 +02:00
Markus 5a2b3559db jitsi: new role (on host zirconium.binary-kitchen.net) 2020-05-20 09:57:18 +02:00
Markus dcadf88ada mail: cleanup 2020-05-20 08:37:09 +02:00
Markus 3f920c731d mail: don't apply logrotate settings 2020-05-20 08:36:25 +02:00
Markus d96e3f20ec mail: fix sieve path name and permissions 2020-05-20 08:35:44 +02:00
Markus 5067e5371e mail: move vault mapping to group_vars 2020-05-20 08:34:22 +02:00
Markus 0790c0b737 acertmgr: cleanup 2020-05-18 19:49:59 +02:00
Markus fb215fdd82 mail: make mail_trusted an array 2020-05-18 19:10:32 +02:00
Markus 9d6ed20d9f librenms: update dependencies 2020-05-11 17:42:07 +02:00
Markus 35fda6124a dns-intern: openvpn -> wireguard 2020-05-11 16:16:07 +02:00
Markus 088ee7c6bf matrix: increase max size to 10M 2020-04-09 21:38:29 +02:00
Markus 11bd9019d9 matrix: update config and set max_body_size 2020-03-29 11:48:38 +02:00
Markus 453537697d coturn: new role for a TURN server to be used with matrix 2020-03-16 20:18:59 +01:00
Markus a04c216abe acertmgr: Use latest package from github instead of git checkout 2020-02-17 20:44:21 +01:00
Kishi85 fd04a750a5 Add excludes to logrotate.d config and update to correct paths 2020-02-04 18:35:09 +01:00
Kishi85 4a11950728 Update logrotate configs to preserve last 7 days 2020-02-03 19:37:43 +01:00
Markus 786ecd554f slapd: use root password from vault 2020-02-03 19:08:09 +01:00
Markus 3e27ad3bde dhcpd: use new secret omapi key 2020-02-03 18:38:01 +01:00
Markus f184ca15fe common: limit syslog retention to 7 days 2020-02-02 20:57:28 +01:00
Markus d97524798b bk-dss: use ldap_uri instead of ldap_host 2020-01-31 19:55:15 +01:00
Markus 66d6af74f0 matrix: reduce logging 2020-01-30 16:31:04 +01:00
Markus 1029f41bdc dhcp: replace ap05 mac addr 2020-01-27 20:35:45 +01:00
Markus 611a14fffb common: set journald retention time to 7days 2020-01-27 20:35:23 +01:00
Markus 8a25f21a87 matrix: rebase homeserver.yaml against 1.9.0 2020-01-27 15:28:49 +01:00
Markus 9ff516e089 matrix: set proper collation/ctype for DB 2020-01-22 13:12:21 +01:00
Markus 84189d95a1 matrix: default name to username 2020-01-20 20:49:00 +01:00
Markus 6b82d3d92b new host: sodium (matrix) and new role matrix 2020-01-20 15:56:29 +01:00
Markus 7950c96da2 grafana: new role 2020-01-08 12:08:06 +01:00
Markus f23d71aa6a new host: strontium (Rocket.Chat) 2020-01-08 12:03:28 +01:00
Markus 871add3b0e dns/dhcp: add ap05 for testing 2019-11-30 22:12:25 +01:00
Markus 3ab962ba4d web: add binary.kitchen to vhost config 2019-11-30 22:11:40 +01:00
Markus ef9e4352d3 slapd: add openssh public key schema 2019-11-28 22:40:51 +01:00
Markus 7acbf3d066 web: add more domains to certificates 2019-11-15 16:31:07 +01:00
Markus a4e32cb79b bk-dss: update to 0.8.4 2019-11-07 22:32:54 +01:00
Markus 909c9ebca6 new host: fusilli 2019-10-31 19:43:26 +01:00
Markus 91d95b190c dns-intern: use future-proof pdns config 2019-10-14 18:34:43 +02:00
Markus 986392237c uau: install more updates 2019-10-14 08:15:37 +02:00
Markus b2f56c709b common: install ipmitool on Proxmox hosts 2019-10-09 21:08:48 +02:00
Markus a86081d6d7 acertmgr: update to version 1.0.0 2019-10-01 08:05:32 +02:00
Markus 25fca48dc8 new alias: 3dprinter 2019-09-30 18:50:41 +02:00
Markus 411243aeef new host: noodlehub 2019-09-30 18:44:44 +02:00
Markus 133838e586 radius: fix symlinks that break with debian buster 2019-09-23 18:47:23 +02:00
Markus a3675c0cc8 hackmd: new upstream URL and version 1.5.0 2019-09-18 13:08:08 +02:00
Markus fbe1ac33c3 mail: cleanup 2019-09-17 13:29:59 +02:00
Markus e0cbf2b760 common: remove snmpd 2019-09-17 10:16:05 +02:00
Markus 939b9ccb4c partdb: update to debian buster / PHP 7.3 2019-09-17 08:51:03 +02:00
Markus e31abbb8bb web: switch to PHP 7.3 2019-09-12 13:34:05 +02:00
Markus 772df6c630 common: also clear motd on Proxmox hosts 2019-09-12 13:22:19 +02:00
Markus bd06590301 nginx: enable TLSv1.3 (relevant VMs have buster) 2019-09-12 13:09:52 +02:00
Markus fb81c5ce02 common: remove snmp, add acpid (on VMs) 2019-09-12 12:00:59 +02:00
Markus ef7177f0ec common: set vm.swappiness on Proxmox hosts 2019-09-10 19:14:55 +02:00
Markus 3d1a681850 librenms: debian buster 2019-09-09 19:33:47 +02:00
Markus a6a973c034 prosody: make it work with buster 2019-09-09 19:09:44 +02:00
Markus 8a2ade46cb Remove host apfelkuchen 2019-09-07 20:45:11 +02:00
Markus c763264ccd hackmd: update and fix uploads folder link creation 2019-09-06 16:17:34 +02:00
Markus 4c7d472f2f remove racktables and partially remove snmpd 2019-09-03 13:13:03 +02:00
Kishi85 6945b4918c mail: Enable subject privacy for the history module 2019-09-03 11:50:08 +02:00
Markus 6e593d0feb gogs: switch to debian buster 2019-08-30 11:20:40 +02:00
Kishi85 6ce23ca253 mail: disable rspamd actions for mail from localhost 2019-07-24 10:11:38 +02:00
Kishi85 83afecfd72 mail: use srs only for forwards and MDA, not for incoming mails 2019-07-24 09:38:01 +02:00
Kishi85 5faf9de93e mail: fix redis config 2019-07-23 17:23:14 +02:00
Kishi85 5df4457b0e mail: add postsrsd to stop breaking forwards for SPF domains 2019-07-23 16:06:16 +02:00
Markus 43f1633a22 cleanup roles 2019-07-23 12:00:59 +02:00
Kishi85 2153438ec5 mail: allow any sender from our internal networks 2019-07-23 11:29:34 +02:00
Markus 85c2a90431 bk-dss: enable admin menu for zaesa 2019-07-22 13:18:46 +02:00
Kishi85 884bbbfbae mail: use rspamd with automatic learning using sieve + managesieve 2019-07-16 09:37:50 +02:00
Markus 4b1952a6e0 uau: minimize diff to default config 2019-07-10 18:43:08 +02:00
Markus 5ead59ce14 acertmgr: update to version 0.9.8 2019-07-09 12:39:31 +02:00
Markus f1dec82592 prometheus: only support Debian buster 2019-07-09 12:38:32 +02:00
Markus 909e767b36 dhcp/dns: add new hosts and IP ranges 2019-06-27 10:09:39 +02:00
Markus 2a417cdee2 acertmgr: update to version 0.9.7 2019-06-18 15:13:05 +02:00
Markus f8daa11de1 nextcloud: first step towards handling php from ansible again 2019-05-20 21:35:58 +02:00
Markus 477441585d owncloud: rename to nextcloud 2019-05-20 20:55:50 +02:00
Markus 7f689e1a82 owncloud: rename to nextcloud 2019-05-20 20:55:05 +02:00
Markus 06dcb1b082 mail: fix SSL CA settings 2019-05-20 20:09:07 +02:00
Markus 4ee7c6ad16 acertmgr: migrate from legacy paths 2019-05-20 19:49:08 +02:00
Markus 17f25f2c32 acertmgr: migrate from legacy paths 2019-05-20 19:38:32 +02:00
Markus b6f0b9417d bk-dss: update to version 0.8.3 2019-05-17 08:29:40 +02:00
Markus 8a33cdc4ad slapd: fix ACLs 2019-05-17 08:25:14 +02:00
Markus b4f95eefc8 bk-dss: fix typo 2019-05-16 15:52:49 +02:00
Markus e99c8d34dd pvessl: nginx based reverse proxy w/ certs for PVE 2019-05-13 21:46:37 +02:00
Markus c4bcc13ccd slapd: simplify ACL 2019-05-13 21:45:37 +02:00
Markus 45917de310 bk-dss: add new admin 2019-05-13 21:44:27 +02:00
Kishi85 cc7d959435 mail: dovecot verify password by binding to ldap 2019-05-13 21:30:13 +02:00
Markus 2abc3819ac acme-dnskey-generate: handle empty san list 2019-05-13 21:00:50 +02:00
Markus e5ca7f59db replace hard coded values by variables 2019-05-13 20:22:02 +02:00
Markus 00826a8d14 slapd: implement proper ACL 2019-05-13 20:03:20 +02:00
Markus 6fec0e62bc mail: fix aliases 2019-04-23 08:07:35 +02:00
Markus 9f3923f494 acertmgr: update to 0.9.5 2019-04-01 18:51:01 +02:00
Markus ad2e2dca6b dns-intern: move cannelloni to user vlan, add tmp 2019-04-01 18:35:27 +02:00
Markus 5c07927012 Remove BKCA for good 2019-03-25 21:08:23 +01:00
Markus 50cab2429d raduis: use LE certificate via dns 2019-03-25 21:08:19 +01:00
Markus c6c91d7256 Migrate LDAP from BKCA to Let's Encrypt 2019-03-25 19:58:06 +01:00
Markus c0070e042b acertmgr: update to 0.9.4 2019-03-25 19:25:56 +01:00
Markus 606851de76 slapd: use LE certificate via dns 2019-03-25 19:05:31 +01:00
Markus 3471c0ca34 bk-dss: update to 0.8.2 2019-03-22 13:09:58 +01:00
Markus e72ee8fb74 acertmgr: update to 0.8.2 2019-03-21 22:33:05 +01:00
Markus 218ae6c4dd bk-dss: restart uwsgi on changes (fixes #28) 2019-03-18 22:18:43 +01:00
Markus cefabcaa7f web: no longer server binary-kitchen.space 2019-03-09 18:39:27 +01:00
Markus 654c2c0122 cleanup whitespace 2019-03-09 18:38:07 +01:00
Markus e7375cac3e new host: mpcnc 2019-03-09 18:33:00 +01:00
Markus 97cb51efbf hackmd: increase max upload size 2019-03-07 21:17:19 +01:00
Markus e1e110e704 acertmgr: update to 0.8.1 2019-03-07 15:01:06 +01:00
Markus 56df920ec0 bk-dss: update to 0.8.1 2019-02-28 11:17:08 +01:00
Markus 7fb5ac8875 acertmgr: fix typo 2019-02-25 18:10:56 +01:00
Markus 476df56fcc acertmgr: rename vars, introduce version 2019-02-25 08:34:21 +01:00
Markus a2e6267ec8 slapd: use base from variables 2019-02-23 23:55:35 +01:00
Markus 9bffa36a33 acertmgr: rename from certmgr, run on config change 2019-02-23 23:54:24 +01:00
Markus 407409010e bk-dss: use vault for secret, use tagged version, use correct certificate for ldap 2019-02-23 23:34:23 +01:00
Markus 845a9f3c76 dss: remove unused role (replaced by bk-dss) 2019-02-19 09:31:33 +01:00
Markus 905f86f2df gogs: apt repo key location has changed 2019-02-18 19:15:34 +01:00
Markus f576ebe615 common: forgot to remove gentoo prompt from Debian 2019-02-18 18:39:12 +01:00
Markus d5c98eb13c common: don't use gentoo prompt anymore 2019-02-18 18:35:54 +01:00
Markus 41784f514f Cleanup whitespace 2019-02-13 16:01:32 +01:00
Markus b47be3287a librenms & racktables: use LE certificates 2019-02-13 15:57:46 +01:00
Markus 766ece5b10 acme-dnskey-generate: fix naming inconsistencies 2019-02-13 15:40:12 +01:00
Markus 275b9a6071 Cleanup whitespace 2019-02-13 14:28:16 +01:00
Markus cffa318bea Remove acme.sh client 2019-02-13 14:05:27 +01:00
Markus 82b5f9cdf3 dns-intern: sync A/PTR, use RR for radius, fix erx-rz loopback 2019-02-13 13:38:08 +01:00
Markus 82181c2eb2 Remove forseti/checkmk 2019-02-13 13:30:16 +01:00
Markus d52b5c0b76 bk-dss: update to current version 2019-02-12 09:45:10 +01:00
Markus fa7fec4a93 certmgr: update to latest version, adjust config 2019-02-11 19:36:35 +01:00
Kishi85 06760bf9f7 Add role to generate dns keys for acme/cermgr 2019-02-11 18:38:41 +01:00
Markus 40efa84fcf dovecot: add logrotate config 2019-02-04 20:31:13 +01:00
Markus 8b0be8cc6f dns: host ffrgb (offloader) 2019-02-04 18:33:06 +01:00
Markus 7b53f00a5e new hosts: maccaroni & spaghetti 2019-01-20 14:47:55 +01:00
Kishi85 3425fdeac9 new host: magnesium (partdb/partkeepr) 2018-12-17 19:25:15 +01:00
Markus 5fae8fa02c dns-intern: update loopback addresses 2018-10-30 12:31:34 +01:00
Markus 543ffce274 dhcpd: dhcp for Aruba APs 2018-10-26 18:43:18 +02:00
Markus 2f1ed864cd dns-extern: update documentation 2018-10-22 21:03:18 +02:00
Markus ae65e438dc dns-extern: role for primary nameserver 2018-10-22 20:58:34 +02:00
Kishi85 e3c7c0cc1b Change updatepolicy.aliases format 2018-10-22 20:30:12 +02:00
Markus 267557f068 common: install software on proxmox 2018-10-15 21:47:26 +02:00
Markus 65786edf03 common: run apt task to ensure python-apt is installed 2018-10-15 21:47:03 +02:00
Markus e88a6e5691 further updates wrt changed ntp server 2018-10-15 21:46:30 +02:00
Kishi85 271305ad34 Proxmox handling 2018-10-15 21:08:06 +02:00
Markus 67d4340ba6 hackmd: fix owner, persistent upload path, allow anon edits 2018-10-15 18:46:34 +02:00
Markus 22c1b0d469 bk-dss: new role to be deployed on LDAP host 2018-10-15 18:25:30 +02:00
Markus 32f976a163 hackmd: fix when 2018-10-08 21:46:29 +02:00
Markus 4a93fab603 hackmd: update database scheme 2018-10-08 20:29:18 +02:00
Markus 9b19d93bf9 hackmd: update version to codimd 1.2.1 2018-10-08 20:28:06 +02:00
Markus ebecd957b2 hackmd: reload systemd before restarting hackmd 2018-10-08 20:14:33 +02:00
Markus e2fd44eb53 prometheus: new role 2018-10-06 22:19:37 +02:00
Markus 634b952321 common: update zsh path for FreeBSDH 2018-10-06 22:18:40 +02:00
Markus b6605467fa dhcpd: new lock IP 2018-10-06 20:37:41 +02:00
Markus 1b25547d97 dns: remove old hosts 2018-10-04 21:38:59 +02:00
Kishi ca86d25ed5 Fix dovecot ldaps 2018-10-04 21:29:16 +02:00
Markus 59cca157e2 web: new domain makerspace-regensburg.de 2018-10-02 18:35:30 +02:00
Markus d434e9e70d hackmd: only rebuild if changed (properly this time) 2018-09-20 22:57:51 +02:00
Markus 9e0e5923a8 dns-intern: renumber RZ 2018-09-20 22:31:12 +02:00
Kishi 482d67ebb1 Change BKCA to a system CA for migration to Let's Encrypt 2018-09-20 18:55:17 +02:00
Markus 1a511a9faf root-keys: new role to set ssh authorized keys for the root user 2018-09-17 22:03:35 +02:00
Markus 0a2f85459d common: update FreeBSD zsh location 2018-09-16 11:50:45 +02:00
Markus 3be1e06242 hackmd: disable anon usage 2018-09-16 11:49:53 +02:00
Kishi 9f608c886d Change certificate locations, update powerdns aliases 2018-09-11 13:58:24 +02:00
Kishi 9dcdbdf983 acme.sh role 2018-09-10 22:52:41 +02:00
Markus b3d3888518 dchpd: don't use global ntp servers 2018-08-27 23:31:29 +02:00
Markus d571ff6827 dns-intern: new hosts 2018-08-27 23:30:49 +02:00
Markus 6a73265d79 dhcp: increase lease times 2018-08-21 12:59:41 +02:00
Markus 8d7d6f6765 dns-intern: fix typo in hostname 2018-08-21 12:59:22 +02:00
Markus 008f64cb08 dns-intern: new host sw03 2018-08-20 15:46:09 +02:00
Kishi 6c7014e7fc Set sane default for DMARC_MODERATION_ACTION 2018-07-30 21:32:09 +02:00
Kishi 9baad14c37 Remove, rename and preserve DKIM headers (mode=3) 2018-07-24 12:21:57 +02:00
Markus 74aa02420e mail: make mailman work with postfix again 2018-07-23 22:36:54 +02:00
Markus 6db9b2eafd dns-intern: new hosts (ap04 and modem) 2018-07-23 21:54:27 +02:00
Kishi ede83b43a1 Mailman: Remove (wrong) DKIM headers 2018-07-23 18:47:56 +02:00
Markus bfe0d994d0 common: fix regex 2018-07-17 13:26:45 +02:00
Markus b456e13542 radius: update to freeradius 3 (and no more LDAP) 2018-07-17 10:43:31 +02:00
Tom 4204334e3d Clean cmk server 2018-07-16 21:03:25 +02:00
Tom ff98616d94 new agent ver 2018-07-16 21:02:50 +02:00
Tom 2876acf4d6 Check_MK for bacon, new cmk version 2018-07-16 20:52:33 +02:00
Markus e4b07bc43b dns/dhcp: reserved host mirror 2018-07-08 16:38:16 +02:00
Markus 4aa681ff70 common: udpate zsh prompt path 2018-07-06 12:12:29 +02:00
Tom 26ed972c00 Check_MK update p33 to p34 2018-06-27 21:09:12 +02:00
Markus 66bdb9ec16 dns-intern: style fix 2018-06-27 20:27:00 +02:00
Markus 66c36c4896 common: fix network interfaces names 
(ensXX -> ethX) in consistent way with systems upgraded
from debian 8
 2018-06-27 20:04:45 +02:00
Markus 0622787e0c new host: neon, rename dns to dns-intern 2018-06-27 19:35:30 +02:00
Tom 8ae92ce745 Add alias for forseti, checkmk.bk 2018-06-13 17:29:37 +02:00
Tom 69edc1d5bf Downloaded file mode 0755 -> 0644 2018-06-13 16:56:19 +02:00
Tom a025bc0301 Merge branch 'master' of git.binary-kitchen.de:moepman/infra 2018-06-13 16:48:27 +02:00
Tom b5b06841d1 Add check_mk tasks and roles 2018-06-13 16:47:18 +02:00
Markus 0cafa543aa run unattented updates on non-critial hosts 2018-06-13 15:08:04 +02:00
Markus 4ae4cb8b13 member-sw: install ansible 2018-06-13 14:53:59 +02:00
Markus b570b30ad2 common: prevent normal users from running su 2018-06-13 14:43:13 +02:00
Tom 2417bf1302 Add forseti check_mk VM 2018-06-11 21:08:37 +02:00
Markus 850f813079 hackmd: fix service file (missing working dir) 2018-06-04 15:59:11 +02:00
Markus b68232cea4 hackmd: improve (csp, hsts, version bump) and start to use vault 2018-06-04 14:00:55 +02:00
Markus 197af9ee3f dns: update IPs 2018-05-14 20:02:18 +02:00
Markus ce8959a1d2 gogs: use debian stretch packages 2018-05-08 23:15:06 +02:00
Markus cc5611ca37 common: use ansible facts to detect KVM VMs 2018-05-02 12:11:31 +02:00
Markus d3a50a75d6 hackmd: SSL, temporary CSP'fix 2018-05-01 11:49:42 +02:00
Markus e24a9ede41 DNS and DHCP update: obazda, garlic 2018-05-01 11:48:55 +02:00
Markus 2bebcc16a3 common: install qemu-agent on VMs 2018-05-01 11:47:57 +02:00
Markus 2a15de42cf gogs: style fix 2018-05-01 11:43:51 +02:00
Markus 7806c6b9e9 DNS and DHCP updates 2018-05-01 11:43:51 +02:00
Markus 95084d6cc6 mail: reduce dovecot logging 2018-04-18 15:07:58 +02:00
Markus b9086690dc hackmd: LDAP and vhost 2018-04-12 18:30:30 +02:00
Markus 344139e75c hackmd: new role (not finished yet) 2018-04-09 21:28:36 +02:00
Markus 67af76cbda prosody: enable modules to improve user experience (XEP 0065, 0124, 0191, 0352, 0357, 0363) 2018-03-20 12:59:49 +01:00
Markus f13bf4d466 dns: remove host ups2 2018-02-03 22:52:13 +01:00
Markus 718657fc15 New host: bowle (punsch replacement) 2018-02-03 22:40:48 +01:00
Markus d281b083bc dns: remove non working update check 2018-01-23 18:29:16 +01:00
Markus 42b741a139 common: install psmisc (for killall) 2018-01-14 19:06:25 +01:00
Markus 7a004e4d8f certmgr: update to current version 2018-01-14 18:40:19 +01:00
Markus f2dca81c28 Update dns & dhcp (remove sushi) 2018-01-11 19:37:57 +01:00
Markus d975523f4d common: install net-tools (for netstat) 2018-01-10 12:28:20 +01:00
Markus 5b5fa52e53 Modify dns for debian stretch. 2017-10-10 09:48:48 +02:00
Markus 4db79176e5 Update zsh path for FreeBSD. 2017-10-10 09:46:57 +02:00
Markus bc653331f6 Fix gogs repository url. 2017-10-02 12:15:56 +02:00
Markus 19f4984b1b Make sure less is installed (needed by journalctl). 2017-10-02 12:15:17 +02:00
Markus 983189fb46 Make snmpd less verbose on debian Stretch. 2017-10-02 12:14:50 +02:00
Markus 683acac84e Add DHCP options for VoIP phones. 2017-10-02 12:13:04 +02:00
Markus dba3a3fa71 DHCP for schweinshaxn. 2017-09-30 16:44:19 +02:00
Markus 99b0279cac Disable mouse in vim (debian). 2017-09-20 13:24:30 +02:00
Markus 47ecaa9a74 New hosts/IPs in dns. 2017-09-18 20:52:22 +02:00
Markus 261c053c93 IP, DNS and DHCP for spaghetti (octopi). 2017-09-12 19:41:36 +02:00
Markus b6132e8720 Fetch letsencrypt root cert for certmgr. 2017-09-09 11:25:16 +02:00
Markus 008b0efd1b Modify certmgr for Debian stretch. 2017-09-09 11:23:30 +02:00
Markus c43a927779 Modify nginx for Debian stretch. 2017-09-09 11:22:43 +02:00
Markus fef4ea1c13 Fix dovecot ssl config (no longer worked with Debian stretch). 2017-09-04 15:36:55 +02:00
Markus 103512faae Add php7.0-xml to web role. 2017-09-03 14:37:23 +02:00
Markus afc6b3f57f Modify librenms and racktables for Debian stretch. 2017-09-03 14:35:56 +02:00
Markus 021aa8df96 Add new devices and IPs. 2017-09-03 14:26:05 +02:00
Markus 88c23c3693 Clean up, specify eth0 as dhcp interface. 2017-07-07 07:49:17 +02:00
Markus fd6abd2dd2 Modify web role for debian stretch. 2017-07-03 09:49:18 +02:00
Markus 313a27e20d Handle incorrectly enabled hibernation/resume. 2017-07-03 09:48:25 +02:00
Markus 7e856c2923 Cleanup (mostly apt: state=present). 2017-07-02 22:17:32 +02:00
Markus c7e4dd4173 Forgot to add opcache.ini. 2017-07-01 16:36:41 +02:00
Markus 37aef461cf Modify owncloud role for debian stretch. 2017-07-01 16:33:15 +02:00
Markus becadd373f New hosts: nbe-w13b, nbe-tr8, sw01, sw02 2017-07-01 14:25:43 +02:00
Markus 438ed4e24e Reserve DNS/IPs for new network equipment. 2017-06-05 21:39:41 +02:00
Markus 05e54ced02 Change mac address of lock. 2017-06-05 21:38:47 +02:00
Markus 5feacf313f Prosody: enable XEP-0313 (for OMEMO). 2017-04-03 12:25:18 +02:00
Markus fa23c6281b New hosts: ap03, klopi. 2017-03-21 20:45:16 +01:00
Markus 1cbb6e7f1d New host: cannelloni. 2017-03-21 20:45:16 +01:00