Commit Graph

340 Commits (4a633de4526f968e4dfd2018918ff91bfbbff6bc)

Author SHA1 Message Date
_shirenn 4a633de452 ldap-adm → wall-e 2022-11-28 11:39:08 +01:00
_shirenn 356f574a31 [gitea] Role to deploy git2 2022-11-25 11:10:54 +01:00
_shirenn 0bd8604717 [prometheus] Synchronizing configuration 2022-11-23 16:35:30 +01:00
_shirenn a78146e506 [prometheus-postfix-exporter] Deploy new prometheus exporter 2022-11-23 16:14:05 +01:00
_shirenn 47c27ac5a6 [ldap] tealc is no more an ldap 2022-11-19 19:41:10 +01:00
_shirenn d757753a23 [interfaces] un peu de zef ça décoiffe 2022-11-19 15:32:20 +01:00
_shirenn 24ff9e9584 Use query rather than specify ip directly 2022-11-14 16:58:03 +01:00
_shirenn e55ed5e112 servers should access dns through adm using romanesco, and internet through srv(-nat)? 2022-11-14 15:06:24 +01:00
_shirenn 3054012a46 [bind] +zef -cachan-adm -admissibles 2022-11-14 14:53:39 +01:00
_shirenn c83ab55174 Add certbot configuration for proxmox 2022-11-08 14:59:28 +01:00
_benjamin 80dfca01e8 Change tealc realm for sssd 2022-11-04 21:52:39 +01:00
_benjamin c0c0a2c97b Remove tealc from LDAP server list 2022-11-04 21:38:45 +01:00
_benjamin 90f4028597 Add ldap-adm.adm.crans.org as main slapd server 2022-11-04 19:35:59 +01:00
_shirenn 9377f67598 [ceph] Starting to lay out some stuff 2022-11-04 11:56:58 +01:00
Yohann D'ANELLO e21dbc7781
[prometheus] Replace targets deployment by a service
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
2022-08-04 11:30:32 +02:00
Yohann D'ANELLO d935de80b9
Rename monitoring into fyre
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
2022-08-04 10:38:51 +02:00
Yohann D'ANELLO 6aafd88ab1
[bird] Deploy prometheus-bird-exporter on routers to monitor routes
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
2022-08-04 10:36:44 +02:00
Yohann D'ANELLO d51c211e1a
Use local LDAP for services
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
2022-08-04 10:18:08 +02:00
Yohann D'ANELLO 6fbdeed7e2 Backup on ft + thot
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
2022-08-04 08:15:14 +00:00
_shirenn a0ac6e7293 ip → ansible.utils.ip 2022-07-04 23:53:01 +02:00
_shirenn 55e1fdc184 [ssh_known_hosts] ssh_known_hosts is a service not a role 2022-07-04 21:57:24 +02:00
Yohann D'ANELLO d372ece97a
[dropbear] Move default interface to ens2f0
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
2022-06-30 14:20:50 +02:00
Yohann D'ANELLO 0a3fc11aeb
[dropbear] Move default port to 80
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
2022-06-30 14:19:42 +02:00
Yohann D'ANELLO 3a3aa48dd3
[dropbear] Add dropbear to add an SSH server on the initramfs and unlock the disks
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
2022-06-29 11:07:24 +02:00
Yohann D'ANELLO 4ef3f912a9
Add missing YAML header
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
2022-06-28 23:25:20 +02:00
Yohann D'ANELLO 4fe189f248
[proxy] Enable IP forwarding and ARP and NDP proxies
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
2022-06-28 23:12:03 +02:00
Yohann D'ANELLO bac8ffdc72
Deploy arpproxy service
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
2022-06-28 13:39:34 +02:00
Yohann D'ANELLO f7a2b1174b
[network_interfaces] Allow having auto-configurated interfaces
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
2022-06-28 12:03:18 +02:00
Yohann D'ANELLO 34ee6d2eef
[thot] Prepare Ansible configuration for thot
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
2022-06-28 11:41:14 +02:00
Yohann D'ANELLO 070e69cccd
[proxmox] Deploy service-proxmox-user on virtus to sync the list of users
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
2022-06-28 11:35:20 +02:00
Yohann D'ANELLO 0f84e0da18
[ft] Deploy root playbook on ft
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
2022-06-28 11:33:27 +02:00
Yohann D'ANELLO eec977ebe8
Add specific configuration for ft and ViaRezo
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
2022-06-28 10:27:01 +02:00
Yohann D'ANELLO b34a5ceb15
Drop unusued networks
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
2022-06-28 10:17:56 +02:00
Yohann D'ANELLO 991f49aa57
[backup-ft] Hello backup-ft!
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
2022-06-28 09:46:01 +02:00
Yohann D'ANELLO 3dfdf5cb4f
[borg] Backups are now managed by backup-ft
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
2022-06-27 20:02:04 +02:00
_shirenn e9d1dea911 [borg] vault path 2022-06-22 15:42:28 +02:00
_shirenn 36dc7429a3 [bind9] At last usable ! 2022-06-06 21:59:11 +02:00
Yohann D'ANELLO 1fbfb2f9a6
[viarezo] Second link is now working, with IPv6
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
2022-06-06 15:37:44 +02:00
_shirenn 75b6008738 ansible_vault → ansible/: roundcube 2022-05-24 19:02:25 +02:00
_shirenn 399c988780 ansible_vault → ansible/: snmp 2022-05-24 19:01:25 +02:00
_shirenn 28eb549727 ansible_vault → ansible/: re2o 2022-05-24 19:01:12 +02:00
_shirenn 1bd6242601 ansible_vault → ansible/: radius 2022-05-24 19:01:01 +02:00
_shirenn af9b30edfe ansible_vault → ansible/: root 2022-05-24 19:00:52 +02:00
_shirenn eb0116c47f ansible_vault → ansible/: opendkim 2022-05-24 17:36:44 +02:00
_shirenn 4beb6cc1c2 ansible_vault → ansible/: mailman3 2022-05-24 17:30:38 +02:00
_shirenn cb3d87d63c ansible_vault → ansible/: slapd/sssd 2022-05-24 17:29:20 +02:00
_shirenn 9dd47f5123 ansible_vault → ansible/: slapd/re2o 2022-05-24 17:29:00 +02:00
_shirenn 26a4ba5e72 ansible_vault → ansible/: thelounge 2022-05-24 17:28:20 +02:00
_shirenn 809c21621b ansible_vault → ansible/: slapd 2022-05-24 17:12:22 +02:00
_shirenn dd6c9c1b67 ansible_vault → ansible/: gitlab 2022-05-24 16:57:02 +02:00