Commit Graph

678 Commits (1e651977e3a0882634038de9d3456e28533d3a40)

Author SHA1 Message Date
Yohann D'ANELLO 13c97d3e07 [scripts] Ansible is buggy, git has no change if the commit hash did not change
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
2021-03-01 16:20:04 +00:00
Yohann D'ANELLO 5aeefd730e [root] Sputnik is using deb.debian.org
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
2021-03-01 16:20:04 +00:00
Yohann D'ANELLO 13b0367d46 [prometheus-nginx] Change exposed port for a non-standard port
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
2021-03-01 16:20:04 +00:00
_shirenn f5e7405188 [root] split root play and deploy root password 2021-03-01 16:20:04 +00:00
Yohann D'ANELLO 0c3e56fc2c [ldap] ldap_server is slapd
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
2021-03-01 16:20:04 +00:00
Yohann D'ANELLO 4f8cf7f901 [prometheus] Add missing webhook for alertmanager
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
2021-03-01 16:20:04 +00:00
Yohann D'ANELLO 0a794d590c [prometheus] Restart nginx before prometheus-nginx-exporter
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
2021-03-01 16:20:04 +00:00
Yohann D'ANELLO b171d58e4c [borg] Don't bin borgbackup from bullseye if we are already under bullseye
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
2021-03-01 16:20:04 +00:00
ynerant 02faa09e61 [ntp-client] Install systemd-timesyncd on Bullseye
Signed-off-by: ynerant <ynerant@crans.org>
2021-03-01 16:20:04 +00:00
ynerant 61cf1eb892 [prometheus] Install prometheus-node-exporter-collectors on bullseye
Signed-off-by: ynerant <ynerant@crans.org>
2021-03-01 16:20:04 +00:00
_benjamin 6026f8d84e [inspircd] Deploy InspIRCd on irc 2021-02-28 09:10:21 +01:00
_benjamin 83e2460b65 [home] Use full path for zfs 2021-02-26 17:00:13 +01:00
_benjamin a40404314f [ssh_known_hosts] Add hostname to ssh_known_hosts 2021-02-25 14:50:57 +01:00
_shirenn 5661bb4bf6 [dhcp] Restart isc-dhcp-server only if it is already running 2021-02-23 23:28:20 +01:00
Yohann D'ANELLO 2844df31b2
[gitlab] Fix irker configuration
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
2021-02-22 23:35:17 +01:00
Yohann D'ANELLO 98eaeaa53b
[gitlab] Install irker from Debian Sid to add IRC webhooks
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
2021-02-22 23:29:58 +01:00
ynerant 7eae75a470
[gitlab] Enable local nginx server, don't server HTTPS port
Signed-off-by: ynerant <ynerant@crans.org>
2021-02-22 23:29:57 +01:00
ynerant 5786663cfb
[gitlab] Disable grafana server
Signed-off-by: ynerant <ynerant@crans.org>
2021-02-22 23:29:57 +01:00
ynerant a8e90e1ea9
[gitlab] Update gitlab default configuration
Signed-off-by: ynerant <ynerant@crans.org>
2021-02-22 23:29:57 +01:00
ynerant 065fe78435
[gitlab] Import Gitlab GPG public key
Signed-off-by: ynerant <ynerant@crans.org>
2021-02-22 23:29:57 +01:00
_shirenn b152c48ed3
[gitlab] smtp server and https push 2021-02-22 23:29:56 +01:00
Yohann D'ANELLO 46f1627c02
[gitlab] Fix gitlab configuration file path
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
2021-02-22 23:29:56 +01:00
Yohann D'ANELLO 73a6b5afb4
[gitlab] Install gitlab
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
2021-02-22 23:29:56 +01:00
Yohann D'ANELLO f07bb8b749
[Gitlab] Reconfigure Gitlab after deploying its configuration
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
2021-02-22 23:29:56 +01:00
Yohann D'ANELLO ae30c0593a
display_name -> email_display_name
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
2021-02-22 23:29:55 +01:00
ynerant 63d4164ba0
Cransible Gitlab configuration
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
2021-02-22 23:29:55 +01:00
Yohann D'ANELLO 6d35dcd7e8 [nginx/mailman] Fix configuration
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
2021-02-22 22:26:31 +00:00
Yohann D'ANELLO f83b34191a [nginx/statping] Drop old statping configuration
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
2021-02-22 22:26:31 +00:00
Yohann D'ANELLO 978c265c03 [nginx/statping] Extract nginx configuration from statping and gitea
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
2021-02-22 22:26:31 +00:00
Yohann D'ANELLO 6b8fb0916f [nginx/moinmoin] Extract nginx configuration
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
2021-02-22 22:26:31 +00:00
Yohann D'ANELLO d6f15d4210 [nginx/cas] Factorize nginx configuration
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
2021-02-22 22:26:31 +00:00
Yohann D'ANELLO 82119c746e [nginx] Define proper set_realip_from
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
2021-02-22 22:26:31 +00:00
Yohann D'ANELLO 8d8c212f49 [nginx/roundcube] Factorize configuration
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
2021-02-22 22:26:31 +00:00
Yohann D'ANELLO 4c115a8b34 [thelounge] Don't load ldap configuration if it is disabled
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
2021-02-22 22:26:31 +00:00
Yohann D'ANELLO 201dbd6ee0 [thelounge] Download debian package
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
2021-02-22 22:26:31 +00:00
Yohann D'ANELLO 44cf074a39 [nginx] Add feature to add additional params to a nginx server
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
2021-02-22 22:26:31 +00:00
Yohann D'ANELLO 19beb34227 [nginx/certbot] Remove obsolete files
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
2021-02-22 22:26:31 +00:00
Yohann D'ANELLO de58138a22 [nginx] Multiple certficates are compatible with reverse-proxy
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
2021-02-22 22:26:31 +00:00
Yohann D'ANELLO 72238d79ed [nginx] Add feature to manage multiple certificates, for example for crans.org and for adm.crans.org
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
2021-02-22 22:26:31 +00:00
Yohann D'ANELLO 96d5f945e3 [nginx] Update configuration for default servers
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
2021-02-22 22:26:31 +00:00
Yohann D'ANELLO 9d5a080fc5 [thelounge] Support zamok configuration
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
2021-02-22 22:26:31 +00:00
Yohann D'ANELLO af33ff7d56 [thelounge] Temporary not download automatically the thelounge packet
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
2021-02-22 22:26:31 +00:00
Yohann D'ANELLO 2360b992c4 Restart the lounge at the end of the playbook
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
2021-02-22 22:26:31 +00:00
Yohann D'ANELLO 334b4ace02 [thelounge] Uncomment the download of the Debian package, but for now the package must be manually downloaded because of redirection issues
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
2021-02-22 22:26:31 +00:00
Yohann D'ANELLO 3f4a66eb7c [thelounge] Copy ldap configuration for zamok
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
2021-02-22 22:26:31 +00:00
Yohann D'ANELLO f039121e21 [thelounge] Download the Debian package and install it, and deploy
configuration

Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
2021-02-22 22:26:31 +00:00
Yohann D'ANELLO c3d58d9ca9 [nginx] Fix default configuration
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
2021-02-22 22:26:31 +00:00
Yohann D'ANELLO a16208b1c3 [nginx] Add template permissions
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
2021-02-22 22:26:31 +00:00
Yohann D'ANELLO dd249f2a30 [nginx] Disable default site
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
2021-02-22 22:26:31 +00:00
Yohann D'ANELLO 9f21a7ad79 [nginx] Drop nginx-pubftp role
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
2021-02-22 22:26:31 +00:00