Commit Graph

217 Commits (0a5836e8246c1a2cd4ca95ba139c089aa9bd32d9)

Author SHA1 Message Date
Yohann D'ANELLO f6b2ff4804
[ntp_server] Update adm restriction for Cachan
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
2021-06-24 21:51:52 +02:00
Yohann D'ANELLO 20ba82fa4e
[nfs_mount] Fix configuration
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
2021-06-24 21:39:42 +02:00
Yohann D'ANELLO fa460b06a4
[mirror] OpenStack is not Openstack
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
2021-06-24 17:36:55 +02:00
Yohann D'ANELLO 7e23337032
[horde] Fix IPv6
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
2021-06-24 17:09:50 +02:00
Yohann D'ANELLO 55c46352f9
[re2o] Select optional apps
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
2021-06-22 15:26:05 +02:00
Yohann D'ANELLO 16cf470df5
[re2o] Fix Re2o configuration
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
2021-06-22 15:20:38 +02:00
Yohann D'ANELLO 57165293db
[Galène] Update Nginx configuration
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
2021-06-22 14:33:52 +02:00
Yohann D'ANELLO 489d189725
Fix mirrors
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
2021-06-22 13:58:28 +02:00
Yohann D'ANELLO a602075c17
[ntp] Add NTP server on eclat
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
2021-06-22 13:58:28 +02:00
Yohann D'ANELLO c7bf246b2b
[network_interfaces] Add zamok-tmtc, put MTU of san to 9000
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
2021-06-22 13:58:28 +02:00
Yohann D'ANELLO 239a95c1de
Add cachan group to factorize configuration
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
2021-06-22 13:58:28 +02:00
Yohann D'ANELLO 1c23ef255d
[apt] Use custom Proxmox mirror
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
2021-06-22 13:58:28 +02:00
Yohann D'ANELLO 87af08abf1 [reverseproxy] ftps -> ptf, mirrors -> charybde
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
2021-06-22 11:56:38 +00:00
Yohann D'ANELLO bf1b944fa5 [reverseproxy] Reorder entries
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
2021-06-22 11:56:38 +00:00
Yohann D'ANELLO 0cdd43facb [nginx] Fix subnets for real_ip_from
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
2021-06-22 11:56:38 +00:00
Yohann D'ANELLO 06498604ac [reverseproxy] ftps.crans.org points to charybde
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
2021-06-22 11:56:38 +00:00
Yohann D'ANELLO 0cffdd1c4c [reverseproxy] Add missing servers
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
2021-06-22 11:56:38 +00:00
Yohann D'ANELLO 8eb813ce0e
[mailman3] Adapt OpenDKIM configuration
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
2021-06-21 21:18:56 +02:00
Yohann D'ANELLO 9f75189f9c
[mailman3] nounou@lists.crans.org is the default from email
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
2021-06-21 20:55:33 +02:00
Yohann D'ANELLO 7d4f4bf9ec
[opendkim] Add localhost in trusted hosts
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
2021-06-21 16:37:18 +02:00
_shirenn 5c76d526d2 [borgmatic] Don't backup this 2021-06-21 12:29:24 +00:00
Yohann D'ANELLO bdf84760ab
[sssd] Support multiple LDAP uris for resilience
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
2021-06-21 13:24:14 +02:00
_shirenn df8baa6651 [sssd] Optional enumerate 2021-06-21 12:11:16 +02:00
_shirenn b444ba646f [sssd] Double ldap auth 2021-06-21 12:04:17 +02:00
Yohann D'ANELLO 3d0f7a5f5f
[docker] Add firewall between Docker containers and adm network
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
2021-06-21 11:24:56 +02:00
_shirenn f053558e07
[hosts] charybde reste à chanca 2021-06-21 10:53:57 +02:00
_shirenn d0ff9cc204
[apt] MàJ 2021-06-21 10:53:55 +02:00
_shirenn 37ea941a8d
[keepalived] https://www.youtube.com/watch?v=fNFzfwLM72c please dont die 2021-06-21 10:53:12 +02:00
_shirenn 2299dbd8f4
[service] make cron optional 2021-06-21 10:53:12 +02:00
Yohann D'ANELLO 305c61b2fe
Add ArchLinux mirror
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
2021-06-21 10:53:12 +02:00
_shirenn 6fa8f17d0c
[nfs-mount] generic systemd nfs mount service 2021-06-21 10:53:11 +02:00
_shirenn 6491256620
[ptf] nginx installation 2021-06-21 10:53:11 +02:00
_shirenn 833f4a3afb
[postgres] 2021-06-21 10:53:10 +02:00
_shirenn 4a4526506d
[vsftpd] 2021-06-21 10:53:10 +02:00
_shirenn 0c3e15852d
[rsyncd] 2021-06-21 10:53:10 +02:00
_shirenn 3fa8c60c6d
[mirror_backend] 2021-06-21 10:53:10 +02:00
Yohann D'ANELLO 4b70700526
[mtail] More configuration to select what should be monitored
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
2021-06-21 10:53:10 +02:00
Yohann D'ANELLO 610bcfbe23
[re2o-ldap] Deploy re2o-ldap-replica on re2o-dev, use terenez as main server
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
2021-06-21 10:53:09 +02:00
Yohann D'ANELLO 741a13b402
[re2o-ldap-replica] Support LDAPS
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
2021-06-21 10:53:09 +02:00
Yohann D'ANELLO 05c641fa7e
[re2o-ldap-replica] Deploy a re2o-ldap-replica
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
2021-06-21 10:53:09 +02:00
_shirenn b14fd01ce0
migration routage 2021-06-21 10:53:09 +02:00
_shirenn 9e5d931b06
[rsyslog-client] PEPCRANS + cachan 2021-06-21 10:53:09 +02:00
_shirenn f7347e41d2
[monitoring] PEPCRANS + monitoring of cachan infra 2021-06-21 10:53:08 +02:00
_shirenn 3d528a1891
[borg] Migration of zephir and omnomnom 2021-06-21 10:53:08 +02:00
_shirenn 1837a8a90d
[crans-scripts] move the scripts to /usr/local/src/scripts 2021-06-21 10:53:08 +02:00
_shirenn fccda8d486
[routeurs] playbook to deploy routing 2021-06-21 10:53:08 +02:00
_shirenn 0e396ce23b
[radius] update 2021-06-21 10:53:07 +02:00
_shirenn 03a0dbfdca
[bird] PEPED 2021-06-21 10:53:07 +02:00
_shirenn b8e57e9627
[service] create a generic role for services and apply it to dhcp 2021-06-21 10:53:07 +02:00
_shirenn 821330bf99
[radvd] pep-crans 2021-06-21 10:53:07 +02:00