Commit Graph

229 Commits (58dfdc0822ccfb65fab54cc12a8f0c59a4d631b6)

Author SHA1 Message Date
_shirenn 24243c9acb [keepalived] routeur-daniel should burn in hell 2021-07-10 20:41:22 +02:00
Yohann D'ANELLO bb86beb241
[mirror] Proxmox 7 (bullseye) got released
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
2021-07-07 19:33:03 +02:00
Yohann D'ANELLO af0fe7d282
Don't hardcode gulp IP
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
2021-07-01 19:16:22 +02:00
Yohann D'ANELLO 9e5ff5e71e
[rsyslog] Wrong IP address
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
2021-07-01 15:12:49 +02:00
Yohann D'ANELLO 70d335e1b8
[wireguard] Refactor role
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
2021-06-26 01:04:37 +02:00
Yohann D'ANELLO 7ff3532bba
[grafana] Re-enable Grafana, fix logo deployment
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
2021-06-25 12:05:20 +02:00
_shirenn 62a00a877e [ethercalc] PEPCRANSED 2021-06-25 11:29:14 +02:00
_shirenn 23768ec2bc [ntp] allow multiple whitelists 2021-06-25 10:40:05 +02:00
Yohann D'ANELLO 59234d6de8
[django_cas] Configure mail server
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
2021-06-25 01:08:54 +02:00
Yohann D'ANELLO 198eee1287
[roundcube] Roundcube plugin filters
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
2021-06-24 23:56:48 +02:00
Yohann D'ANELLO e9ce85086c
[roundcube] Clone custom plugins by adm
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
2021-06-24 23:28:03 +02:00
Yohann D'ANELLO e6b77a65e2
[prometheus] Define Prometheus Nginx exporter address globally to make easier the separation saclay/cachan
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
2021-06-24 23:12:43 +02:00
Yohann D'ANELLO f6b2ff4804
[ntp_server] Update adm restriction for Cachan
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
2021-06-24 21:51:52 +02:00
Yohann D'ANELLO 20ba82fa4e
[nfs_mount] Fix configuration
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
2021-06-24 21:39:42 +02:00
Yohann D'ANELLO fa460b06a4
[mirror] OpenStack is not Openstack
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
2021-06-24 17:36:55 +02:00
Yohann D'ANELLO 7e23337032
[horde] Fix IPv6
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
2021-06-24 17:09:50 +02:00
Yohann D'ANELLO 55c46352f9
[re2o] Select optional apps
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
2021-06-22 15:26:05 +02:00
Yohann D'ANELLO 16cf470df5
[re2o] Fix Re2o configuration
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
2021-06-22 15:20:38 +02:00
Yohann D'ANELLO 57165293db
[Galène] Update Nginx configuration
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
2021-06-22 14:33:52 +02:00
Yohann D'ANELLO 489d189725
Fix mirrors
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
2021-06-22 13:58:28 +02:00
Yohann D'ANELLO a602075c17
[ntp] Add NTP server on eclat
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
2021-06-22 13:58:28 +02:00
Yohann D'ANELLO c7bf246b2b
[network_interfaces] Add zamok-tmtc, put MTU of san to 9000
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
2021-06-22 13:58:28 +02:00
Yohann D'ANELLO 239a95c1de
Add cachan group to factorize configuration
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
2021-06-22 13:58:28 +02:00
Yohann D'ANELLO 1c23ef255d
[apt] Use custom Proxmox mirror
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
2021-06-22 13:58:28 +02:00
Yohann D'ANELLO 87af08abf1 [reverseproxy] ftps -> ptf, mirrors -> charybde
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
2021-06-22 11:56:38 +00:00
Yohann D'ANELLO bf1b944fa5 [reverseproxy] Reorder entries
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
2021-06-22 11:56:38 +00:00
Yohann D'ANELLO 0cdd43facb [nginx] Fix subnets for real_ip_from
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
2021-06-22 11:56:38 +00:00
Yohann D'ANELLO 06498604ac [reverseproxy] ftps.crans.org points to charybde
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
2021-06-22 11:56:38 +00:00
Yohann D'ANELLO 0cffdd1c4c [reverseproxy] Add missing servers
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
2021-06-22 11:56:38 +00:00
Yohann D'ANELLO 8eb813ce0e
[mailman3] Adapt OpenDKIM configuration
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
2021-06-21 21:18:56 +02:00
Yohann D'ANELLO 9f75189f9c
[mailman3] nounou@lists.crans.org is the default from email
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
2021-06-21 20:55:33 +02:00
Yohann D'ANELLO 7d4f4bf9ec
[opendkim] Add localhost in trusted hosts
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
2021-06-21 16:37:18 +02:00
_shirenn 5c76d526d2 [borgmatic] Don't backup this 2021-06-21 12:29:24 +00:00
Yohann D'ANELLO bdf84760ab
[sssd] Support multiple LDAP uris for resilience
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
2021-06-21 13:24:14 +02:00
_shirenn df8baa6651 [sssd] Optional enumerate 2021-06-21 12:11:16 +02:00
_shirenn b444ba646f [sssd] Double ldap auth 2021-06-21 12:04:17 +02:00
Yohann D'ANELLO 3d0f7a5f5f
[docker] Add firewall between Docker containers and adm network
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
2021-06-21 11:24:56 +02:00
_shirenn f053558e07
[hosts] charybde reste à chanca 2021-06-21 10:53:57 +02:00
_shirenn d0ff9cc204
[apt] MàJ 2021-06-21 10:53:55 +02:00
_shirenn 37ea941a8d
[keepalived] https://www.youtube.com/watch?v=fNFzfwLM72c please dont die 2021-06-21 10:53:12 +02:00
_shirenn 2299dbd8f4
[service] make cron optional 2021-06-21 10:53:12 +02:00
Yohann D'ANELLO 305c61b2fe
Add ArchLinux mirror
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
2021-06-21 10:53:12 +02:00
_shirenn 6fa8f17d0c
[nfs-mount] generic systemd nfs mount service 2021-06-21 10:53:11 +02:00
_shirenn 6491256620
[ptf] nginx installation 2021-06-21 10:53:11 +02:00
_shirenn 833f4a3afb
[postgres] 2021-06-21 10:53:10 +02:00
_shirenn 4a4526506d
[vsftpd] 2021-06-21 10:53:10 +02:00
_shirenn 0c3e15852d
[rsyncd] 2021-06-21 10:53:10 +02:00
_shirenn 3fa8c60c6d
[mirror_backend] 2021-06-21 10:53:10 +02:00
Yohann D'ANELLO 4b70700526
[mtail] More configuration to select what should be monitored
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
2021-06-21 10:53:10 +02:00
Yohann D'ANELLO 610bcfbe23
[re2o-ldap] Deploy re2o-ldap-replica on re2o-dev, use terenez as main server
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
2021-06-21 10:53:09 +02:00