crans
/
ansible
mirror of http://gitlab.adm.crans.org/nounous/ansible.git
19
0
Fork 0
Code Issues Projects Releases Wiki Activity
1,274 Commits
12 Branches
0 Tags
7.9 MiB
Commit Graph

705 Commits (23a02adf11bf5a85600b6105ae4ec2738d6a73df)

Author SHA1 Message Date
Yohann D'ANELLO f07bb8b749
[Gitlab] Reconfigure Gitlab after deploying its configuration 
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
 2021-02-22 23:29:56 +01:00
Yohann D'ANELLO ae30c0593a
display_name -> email_display_name 
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
 2021-02-22 23:29:55 +01:00
ynerant 63d4164ba0
Cransible Gitlab configuration 
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
 2021-02-22 23:29:55 +01:00
Yohann D'ANELLO 6d35dcd7e8 [nginx/mailman] Fix configuration 
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
 2021-02-22 22:26:31 +00:00
Yohann D'ANELLO f83b34191a [nginx/statping] Drop old statping configuration 
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
 2021-02-22 22:26:31 +00:00
Yohann D'ANELLO 978c265c03 [nginx/statping] Extract nginx configuration from statping and gitea 
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
 2021-02-22 22:26:31 +00:00
Yohann D'ANELLO 6b8fb0916f [nginx/moinmoin] Extract nginx configuration 
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
 2021-02-22 22:26:31 +00:00
Yohann D'ANELLO d6f15d4210 [nginx/cas] Factorize nginx configuration 
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
 2021-02-22 22:26:31 +00:00
Yohann D'ANELLO 82119c746e [nginx] Define proper set_realip_from 
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
 2021-02-22 22:26:31 +00:00
Yohann D'ANELLO 8d8c212f49 [nginx/roundcube] Factorize configuration 
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
 2021-02-22 22:26:31 +00:00
Yohann D'ANELLO 4c115a8b34 [thelounge] Don't load ldap configuration if it is disabled 
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
 2021-02-22 22:26:31 +00:00
Yohann D'ANELLO 201dbd6ee0 [thelounge] Download debian package 
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
 2021-02-22 22:26:31 +00:00
Yohann D'ANELLO 44cf074a39 [nginx] Add feature to add additional params to a nginx server 
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
 2021-02-22 22:26:31 +00:00
Yohann D'ANELLO 19beb34227 [nginx/certbot] Remove obsolete files 
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
 2021-02-22 22:26:31 +00:00
Yohann D'ANELLO de58138a22 [nginx] Multiple certficates are compatible with reverse-proxy 
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
 2021-02-22 22:26:31 +00:00
Yohann D'ANELLO 72238d79ed [nginx] Add feature to manage multiple certificates, for example for crans.org and for adm.crans.org 
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
 2021-02-22 22:26:31 +00:00
Yohann D'ANELLO 96d5f945e3 [nginx] Update configuration for default servers 
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
 2021-02-22 22:26:31 +00:00
Yohann D'ANELLO 9d5a080fc5 [thelounge] Support zamok configuration 
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
 2021-02-22 22:26:31 +00:00
Yohann D'ANELLO af33ff7d56 [thelounge] Temporary not download automatically the thelounge packet 
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
 2021-02-22 22:26:31 +00:00
Yohann D'ANELLO 2360b992c4 Restart the lounge at the end of the playbook 
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
 2021-02-22 22:26:31 +00:00
Yohann D'ANELLO 334b4ace02 [thelounge] Uncomment the download of the Debian package, but for now the package must be manually downloaded because of redirection issues 
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
 2021-02-22 22:26:31 +00:00
Yohann D'ANELLO 3f4a66eb7c [thelounge] Copy ldap configuration for zamok 
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
 2021-02-22 22:26:31 +00:00
Yohann D'ANELLO f039121e21 [thelounge] Download the Debian package and install it, and deploy 
configuration

Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
 2021-02-22 22:26:31 +00:00
Yohann D'ANELLO c3d58d9ca9 [nginx] Fix default configuration 
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
 2021-02-22 22:26:31 +00:00
Yohann D'ANELLO a16208b1c3 [nginx] Add template permissions 
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
 2021-02-22 22:26:31 +00:00
Yohann D'ANELLO dd249f2a30 [nginx] Disable default site 
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
 2021-02-22 22:26:31 +00:00
Yohann D'ANELLO 9f21a7ad79 [nginx] Drop nginx-pubftp role 
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
 2021-02-22 22:26:31 +00:00
Yohann D'ANELLO 2b8e0dbbff [nginx] Fix nginx template, this is now usable 
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
 2021-02-22 22:26:31 +00:00
ynerant a9897ec3c0 [nginx] Load global and local nginx configuration 
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
 2021-02-22 22:26:31 +00:00
Yohann D'ANELLO ec262bd5c1 [nginx] Drop role nginx-mailman 
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
 2021-02-22 22:26:31 +00:00
Yohann D'ANELLO dafa3685ce [nginx] Copy 401 error page if we use credentials 
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
 2021-02-22 22:26:31 +00:00
Yohann D'ANELLO 0eaee6c78f [nginx] Copy robots.txt 
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
 2021-02-22 22:26:31 +00:00
Yohann D'ANELLO 3fceaeb836 [nginx] allow setting credentials to a nginx server 2021-02-22 22:26:31 +00:00
Yohann D'ANELLO 6ee4d8b44d Deploy nginx configuration 
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
 2021-02-22 22:26:31 +00:00
ynerant 244e1c284b Cransible mailman nginx configuration 
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
 2021-02-22 22:26:31 +00:00
Yohann D'ANELLO 84fb96eab6 Create generic Nginx template 
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
 2021-02-22 22:26:31 +00:00
Yohann D'ANELLO f09ec69ef1 Remove unused role nginx-rtmp 2021-02-22 22:26:31 +00:00
Yohann D'ANELLO 51c54e4b86 Install reverse proxy sites only if necessary 2021-02-22 22:26:31 +00:00
Yohann D'ANELLO 454ca95edf Rename nginx-reverseproxy to nginx 
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
 2021-02-22 22:26:31 +00:00
Yohann D'ANELLO 82818b732f
Reload apache after deploying its configuration 
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
 2021-02-22 14:10:44 +01:00
Yohann D'ANELLO 408c857f81
[zamok_apache] Pepcransification 
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
 2021-02-22 14:07:35 +01:00
Yohann D'ANELLO 6774cca43c
[zamok_apache] Fix role 
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
 2021-02-22 14:06:53 +01:00
ynerant 3f84bb5628
[zamok] Apache is listening on its private interface only 
Signed-off-by: ynerant <ynerant@crans.org>
 2021-02-22 13:55:31 +01:00
Yohann D'ANELLO 634369ad62
[zamok] export apache2 + php custom configuration 
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
 2021-02-22 13:55:29 +01:00
Yohann D'ANELLO ae163d6bc9
[nullmailer] Define allmailfrom to always send mails as root 
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
 2021-02-22 12:31:30 +01:00
Yohann D'ANELLO 601a52132e
[belenios] Move ocsigenserver command pipe 
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
 2021-02-22 12:31:30 +01:00
Yohann D'ANELLO 2bdd00b385
[belenios] Don't need to link the ocsidb file 
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
 2021-02-22 12:31:30 +01:00
ynerant 094bb497f4
[belenios] Sort APT dependencies 
Signed-off-by: ynerant <ynerant@crans.org>
 2021-02-22 12:31:30 +01:00
ynerant 359b6a4553
[belenios] Deploy belenios 
Signed-off-by: ynerant <ynerant@crans.org>
 2021-02-22 12:31:30 +01:00
_shirenn 6e6dd56e4d [borg] lets filter-out shit and backup cameron 2021-02-22 12:13:23 +01:00
_shirenn 59bc91dc9d [vault] Changing cranspasswords to pass crans 2021-02-22 12:01:03 +01:00
_shirenn fc76317aec [oldinfra] cleanup 2021-02-22 11:54:30 +01:00
_shirenn 262696970f [network-interfaces] PEPCRANSED 2021-02-22 11:51:44 +01:00
_shirenn c5c7e16d07 [root-config] Rajoute un fichier de configuration pour vim 2021-02-22 11:34:55 +01:00
_shirenn 02df5674b1 [slapd] soyouz, query and regex 2021-02-22 01:30:02 +01:00
_benjamin f4dd6fe242 [ssh_known_hosts] Use LDAP to deploy ssh_known_hosts 2021-02-18 14:36:34 +01:00
ynerant 009e7b42cb
[certbot] Generate multiple certificates (useful for adm) 
Signed-off-by: ynerant <ynerant@crans.org>
 2021-02-16 15:35:07 +01:00
ynerant 167818eb90
[ldap] libpam-ldapd is required to use ldap authentication and is not automatically installed on bullseye 
Signed-off-by: ynerant <ynerant@crans.org>
 2021-02-15 23:38:28 +01:00
_shirenn d03eed8abe [re2o-services] PEPCRANSIFIED 2021-02-11 09:57:10 +01:00
_shirenn f5cf25c9b7 [dhcp] dont clone git from /tmp 2021-02-11 09:57:10 +01:00
_shirenn acd8e3da2a [nullmailer] PEPCRANSED BRO 2021-02-10 11:30:07 +01:00
_shirenn 7cd62269a3 pepcrans :) 2021-02-08 15:02:14 +01:00
_benjamin bc486b5570 Merge branch 'linx' into 'newinfra' 
[linx] Add linx server, role and playbook

See merge request nounous/ansible!206
 2021-02-08 13:37:42 +00:00
_benjamin 1d5310127e [linx] Add linx server, role and playbook 2021-02-08 14:37:05 +01:00
pa d7660e8333 [cas] CRANSIBLEISED bro 2021-02-07 18:16:43 +01:00
_shirenn 33e43c8815 [framadate] Moving to version 1.1.11 2021-02-06 11:30:00 +01:00
_shirenn dfb995e958 [ldap] Petit nettoyage 2021-02-03 16:17:38 +01:00
_benjamin 76114488e3 Merge branch 'slapd' into 'newinfra' 
[slapd] Petit ménage

See merge request nounous/ansible!202
 2021-02-03 14:28:19 +00:00
_benjamin 43b5f28c29 [rsyslog-client] Restart rsyslog 2021-01-31 19:38:16 +01:00
pa b064590f2b Nettoyage de printemps 2021-01-18 09:52:53 +01:00
_shirenn 7702e3ff3a [slapd] Petit ménage 2021-01-17 22:22:40 +01:00
_shirenn 29222acf56 [crans_scripts] PEPCRANSIFICATION 2021-01-17 21:39:18 +01:00
_shirenn 1eba54f3ec [ntp-client] On continue à PEPCRANSIFIER 2021-01-17 20:59:45 +01:00
_shirenn 4987bbaf02 [sudo] Autorise les cableurs à qm list 2021-01-17 20:23:09 +01:00
pa 28fa6e0a94 [keepalived] Rafraichissement de la conf 2021-01-17 20:13:30 +01:00
_shirenn 54d88729cf [zamok-tools] Coucou bat 2021-01-17 18:58:05 +01:00
Alexandre Iooss e7226ad7a5
Procurve suffix for SNMP monitoring 2021-01-16 18:57:33 +01:00
Alexandre Iooss f3c38819ef
Prometheus on bullseye 2021-01-13 16:37:48 +01:00
_pollion 854f483af7 Enable configuring network interfaces 2021-01-10 21:34:47 +01:00
_pollion 32e0c220f0 configure re2o-ldap and re2o-dev 2021-01-10 14:15:41 +01:00
_benjamin 3b81f9d758 [re2o-front] Install re2o frontend dependancies 2021-01-10 14:02:40 +01:00
_benjamin 9628a7ece0 [re2o] Fix typo 2021-01-10 13:43:47 +01:00
_benjamin 44b3eec6ea [re2o] Install version 1.6.0 of django-macaddress 2021-01-10 13:03:16 +01:00
_benjamin d98518f295 [radvd] Add a line feed after each block 2021-01-08 16:43:21 +01:00
_benjamin c22afa2adc [sysctl-forwarding] Allow even more routes in IPv6 :) 2021-01-08 15:08:14 +01:00
_benjamin b01779a351 [sysctl-forwarding] Allow more routes in IPv6 2021-01-08 15:05:44 +01:00
_benjamin 30ecc05a52 [bird] Use bird instead of quagga 2021-01-08 14:48:55 +01:00
Alexandre Iooss c6e11e398f
mtail for tealc from the future 2021-01-06 21:26:06 +01:00
Alexandre Iooss b71f4d3635
Monitor all websites 2021-01-06 13:43:20 +01:00
Yohann D'ANELLO b9f0bbb460
[redisdead] Replace very old crans logo and remove all crans-specific options in the config template 
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
 2021-01-05 22:29:49 +01:00
Yohann D'ANELLO 4507d367bd
[grafana] Move crans icon file 
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
 2021-01-05 22:09:50 +01:00
Yohann D'ANELLO 2f7205aafd
[grafana] Replace Crans image 
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
 2021-01-05 21:39:29 +01:00
erdnaxe 91b8f5e6d6 Merge branch 'grafana_newinfra' into 'newinfra' 
Grafana newinfra

See merge request nounous/ansible!176
 2021-01-05 19:26:57 +01:00
Alexandre Iooss b7f64f33ac
More scotch to fix ldap 2021-01-05 19:26:03 +01:00
Alexandre Iooss 648a35a36b
Change Grafana LDAP configuration 2021-01-05 19:09:15 +01:00
Alexandre Iooss 9899a32739
Make grafana public 2021-01-05 19:01:47 +01:00
_benjamin c9accd6be4 [arp-proxy] delete arp proxy 2021-01-05 17:33:26 +01:00
_benjamin 6a094a5913 [rsyslog-client] install relp module 2021-01-04 20:35:25 +01:00
_benjamin 8eafa78df6 [rsyslog-server] do a line feed 2021-01-03 19:32:35 +01:00
_benjamin 935be638bf [rsyslog-server] rotate logs and install relp module 2021-01-03 11:01:49 +01:00