Commit Graph

796 Commits (57165293dbfb559b2f98a32c0da5848f86fa1b38)

Author SHA1 Message Date
Yohann D'ANELLO 8fbe34e82b
[moinmoin] Remove some superusers, whitelist PC Kfet
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
2021-06-22 13:58:29 +02:00
Yohann D'ANELLO 213f618848
[prometheus] Update configuration
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
2021-06-22 13:58:28 +02:00
Yohann D'ANELLO 239a95c1de
Add cachan group to factorize configuration
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
2021-06-22 13:58:28 +02:00
Yohann D'ANELLO 1c23ef255d
[apt] Use custom Proxmox mirror
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
2021-06-22 13:58:28 +02:00
Yohann D'ANELLO e079121cc7
[apt] Fix apt sources template
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
2021-06-22 13:58:28 +02:00
Yohann D'ANELLO c1144ccff3
[mailman3] Typo in git URL
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
2021-06-21 21:22:59 +02:00
Yohann D'ANELLO 8eb813ce0e
[mailman3] Adapt OpenDKIM configuration
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
2021-06-21 21:18:56 +02:00
Yohann D'ANELLO 771b112d83
[mailman3] Clone custom modules on adm
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
2021-06-21 20:58:34 +02:00
Yohann D'ANELLO de0517426f
[mailman3] IPython is pretty
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
2021-06-21 20:57:06 +02:00
Yohann D'ANELLO 9f75189f9c
[mailman3] nounou@lists.crans.org is the default from email
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
2021-06-21 20:55:33 +02:00
Yohann D'ANELLO 21d3555f1d
[mailman3] Recent versions of Postfix use milter_protocol = 6
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
2021-06-21 20:33:44 +02:00
Yohann D'ANELLO 495646d113
[mailman3] Fix block to customize moderation messages
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
2021-06-21 20:32:12 +02:00
Yohann D'ANELLO 1f7a86d4a7
[mailman3] Patch sources to add moderation links in emails
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
2021-06-21 16:37:18 +02:00
Yohann D'ANELLO 7d4f4bf9ec
[opendkim] Add localhost in trusted hosts
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
2021-06-21 16:37:18 +02:00
ynerant 4339fb9673 [irker] Latest version of irker with Python 3 and TLSv1.3 is now available on Bullseye
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
2021-06-21 12:47:52 +00:00
Yohann D'ANELLO bdf84760ab
[sssd] Support multiple LDAP uris for resilience
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
2021-06-21 13:24:14 +02:00
_shirenn df8baa6651 [sssd] Optional enumerate 2021-06-21 12:11:16 +02:00
_shirenn b444ba646f [sssd] Double ldap auth 2021-06-21 12:04:17 +02:00
Alexandre Iooss fb674723b5
[prometheus] Antispam for templier 2021-06-21 11:28:40 +02:00
Yohann D'ANELLO 3d0f7a5f5f
[docker] Add firewall between Docker containers and adm network
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
2021-06-21 11:24:56 +02:00
_shirenn b8e0653b3f
[prometheus-node-exporter] create override directory 2021-06-21 10:53:57 +02:00
_shirenn 0ffca01fc3
[apt] # 2021-06-21 10:53:57 +02:00
_shirenn d0ff9cc204
[apt] MàJ 2021-06-21 10:53:55 +02:00
_shirenn 37ea941a8d
[keepalived] https://www.youtube.com/watch?v=fNFzfwLM72c please dont die 2021-06-21 10:53:12 +02:00
_shirenn 2299dbd8f4
[service] make cron optional 2021-06-21 10:53:12 +02:00
Alexandre Iooss ad81276ac9
Use quotes to escape YAML dicts 2021-06-21 10:53:12 +02:00
Alexandre Iooss 0b4c77eb0c
Update prometheus alert rules with upstream 2021-06-21 10:53:12 +02:00
_shirenn f76aaa84f4
[vsftpd] deployed on ptf and eclat 2021-06-21 10:53:11 +02:00
_shirenn 6fa8f17d0c
[nfs-mount] generic systemd nfs mount service 2021-06-21 10:53:11 +02:00
_shirenn b8b81f2ce4
[prometheus-node-exporter] wait for network-online.target before starting the unit 2021-06-21 10:53:11 +02:00
_shirenn b56d260a35
[prometheus] reordering 2021-06-21 10:53:10 +02:00
_shirenn 397ce6dd11
[logs] 2021-06-21 10:53:10 +02:00
_shirenn 833f4a3afb
[postgres] 2021-06-21 10:53:10 +02:00
_shirenn 4a4526506d
[vsftpd] 2021-06-21 10:53:10 +02:00
_shirenn 0c3e15852d
[rsyncd] 2021-06-21 10:53:10 +02:00
_shirenn 3fa8c60c6d
[mirror_backend] 2021-06-21 10:53:10 +02:00
Yohann D'ANELLO 4b70700526
[mtail] More configuration to select what should be monitored
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
2021-06-21 10:53:10 +02:00
Yohann D'ANELLO f0698dddcd
[re2o-ldap-replica] Add some comments
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
2021-06-21 10:53:09 +02:00
Yohann D'ANELLO 3e4aac76d6
[re2o-replica-ldap] Move files to /var/lib/slapd
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
2021-06-21 10:53:09 +02:00
Yohann D'ANELLO 741a13b402
[re2o-ldap-replica] Support LDAPS
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
2021-06-21 10:53:09 +02:00
Yohann D'ANELLO 05c641fa7e
[re2o-ldap-replica] Deploy a re2o-ldap-replica
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
2021-06-21 10:53:09 +02:00
_shirenn 24fdf21bb4
[logall-cachan] flemme de pepcrans 2021-06-21 10:53:09 +02:00
_shirenn 9e5d931b06
[rsyslog-client] PEPCRANS + cachan 2021-06-21 10:53:09 +02:00
_shirenn 2095ae8f19
[rsyslog_server] pep-cransified + gulp 2021-06-21 10:53:09 +02:00
_shirenn 44f7e0285c
[prefix_delegation] adds a service for prefix_delegation on routeur-gulp 2021-06-21 10:53:08 +02:00
_shirenn f7347e41d2
[monitoring] PEPCRANS + monitoring of cachan infra 2021-06-21 10:53:08 +02:00
_shirenn 3d528a1891
[borg] Migration of zephir and omnomnom 2021-06-21 10:53:08 +02:00
_shirenn 1837a8a90d
[crans-scripts] move the scripts to /usr/local/src/scripts 2021-06-21 10:53:08 +02:00
_shirenn 60c9f7579b
[re2o] install correct version of boostrap3 2021-06-21 10:53:08 +02:00
_shirenn 0e396ce23b
[radius] update 2021-06-21 10:53:07 +02:00