Commit Graph

542 Commits (628485a24cdb89efc57409234c0fd64f68713965)

Author SHA1 Message Date
_benjamin 7d68f56e91 [arp-proxy] Deploy ARP proxy on routeur-sam 2020-08-18 16:01:01 +02:00
_benjamin 884076186f Merge branch 'home-nounous' into 'newinfra'
[home-nounous] Fixed mount file mode

See merge request nounous/ansible!53
2020-08-17 14:00:40 +02:00
_benjamin 2004d07a19 [home-nounous] Fixed mount file mode 2020-08-17 14:00:15 +02:00
_benjamin 2a191b0622 [dhcp][keepalived] Enables dhcp on adh and infra 2020-08-16 17:03:28 +02:00
_benjamin 7f12145fe6 [baie] Add extension to backports apt list file 2020-08-16 14:51:52 +02:00
_benjamin 3b305d4866 [sysctl-fowarding] Enable IP forwarding on routers 2020-08-16 10:09:29 +02:00
_pollion 58425a8081 Merge branch 'freeradius' into 'newinfra'
Freeradius

See merge request nounous/ansible!48
2020-08-11 23:30:32 +02:00
_benjamin 80f0d3686f [quagga] Merge ipv4 and ipv6 2020-08-11 18:43:39 +02:00
_benjamin 297cef0453 [baie] Playbook pour setup la baie 2020-08-11 17:00:28 +02:00
_benjamin 2c42757620 [iproute2] name table 26 2020-08-11 14:22:37 +02:00
_benjamin 1837c85b3a [root-config] tabs are tabs 2020-08-11 14:09:41 +02:00
_benjamin 884e6f8d09 [dns] handle LDAP zones 2020-08-11 14:05:24 +02:00
_benjamin 7c0cdb4e5a [firewall] Install python dependencies 2020-08-11 13:57:17 +02:00
_benjamin a5f5a6a52a [vm] Activate serial tty 2020-08-11 11:44:58 +02:00
_benjamin 1f9e65e6fb [dns] Deploy dns on silice 2020-08-11 08:44:15 +02:00
_benjamin a27a641ab8 [dns] Deploy dns 2020-08-11 08:37:56 +02:00
_benjamin c0140d5911 [re2o-services] Fix config file header 2020-08-11 08:29:29 +02:00
_pollion a7d67b1f87 Role freeradius 2020-08-11 04:04:41 +02:00
_pollion 44a6022885 Configure freeradius 2020-08-11 02:31:42 +02:00
_pollion c7a4049903 [Draft] Install freeradius with rlm_python3 2020-08-10 04:56:14 +02:00
_benjamin 6ae814e1e1 Merge branch 'firewall' into 'newinfra'
[firewall] Deploy firewall

See merge request nounous/ansible!37
2020-08-10 03:51:22 +02:00
_benjamin eb84bca7a8 [firewall] Deploy firewall 2020-08-10 03:48:24 +02:00
_pollion aacd9e1e31 Install re2o on new infra 2020-08-10 02:25:54 +02:00
_pollion 84fc337722 [postgresql] Configure psql database 2020-08-09 19:39:53 +02:00
vulcain 26ae5d595a Merge branch 'newinfra' into 'nano'
# Conflicts:
#   roles/root-config/templates/nanorc.j2
2020-08-09 02:09:20 +02:00
vulcain 2cf9fe0743 patch source of python.nanorc 2020-08-08 15:29:49 +02:00
vulcain 45a84cf91d Merge branch 'nano' into 'newinfra'
patch source of python.nanorc

See merge request nounous/ansible!29
2020-08-08 15:23:10 +02:00
vulcain b14088da0b patch source of python.nanorc 2020-08-08 15:19:16 +02:00
_benjamin dc35709d86 [slapd] Deploy LDAP certificate 2020-08-08 14:57:43 +02:00
pa 63b06fc02c Merge branch 'keepalived' into 'newinfra'
Keepalived

See merge request nounous/ansible!27
2020-08-07 17:43:32 +02:00
_shirenn ea0d140a66 [keepalived][unsafe] PEP CRANS + dhcp notify 2020-08-07 17:30:20 +02:00
_benjamin f93829267d [qemu-guest-agent] Install qemu-guest-agent on VMs 2020-08-07 16:52:26 +02:00
_shirenn dc17f75f90 Merge Pollion cherry pick 2020-08-07 12:59:56 +02:00
_shirenn 2c72c8c6c9 [proxmox] tout pleins de nouveaux copains 2020-08-07 12:42:42 +02:00
_shirenn 5c7569cce2 [proxmox][safe] Configuration CRANS 2020-08-07 12:42:40 +02:00
_shirenn 7024617206 [home-nounous][unsafe] Documentation + rennomage variables 2020-08-07 12:41:26 +02:00
_shirenn 194a725228 [ldap][unsafe] Documentation 2020-08-07 12:34:34 +02:00
_shirenn 3c1a94822b [slapd][unsafe] Rennomage variables et doc 2020-08-07 12:34:34 +02:00
_shirenn 34985f5558 [slapd] Check-mode safe 2020-08-07 12:34:34 +02:00
_shirenn 0b47e83b28 [ntp-client] Check-mode safe 2020-08-07 12:34:34 +02:00
_shirenn aa552f55b6 [common-tools] Check-mode safe 2020-08-07 12:34:34 +02:00
_shirenn 8f0f082139 [proxmox] Role for proxmox repositories 2020-08-07 12:34:34 +02:00
_benjamin 70f180e9a9 [slapd] fix role 2020-08-07 12:34:34 +02:00
_benjamin 2d1a5211c1 [slapd] Use password from vault 2020-08-07 12:34:34 +02:00
_benjamin 8bbec61350 [slapd] Change replication settings 2020-08-07 12:34:34 +02:00
_benjamin 19685dc466 [slapd] added slapd role 2020-08-07 12:34:34 +02:00
_pollion 7011f816ef [ldap-client] host looks into ldap before making a dns request 2020-08-07 12:34:02 +02:00
_pollion 52e237b0cf [New-infra] Deploy ldap and nfs with base system. 2020-08-07 12:34:01 +02:00
_benjamin 2310a08594 [home-nounous] install nfs-common 2020-08-07 12:32:59 +02:00
_benjamin 391d855fa7 [ldap-client] use nounous ldap 2020-08-07 12:32:59 +02:00
_benjamin 76421036b2 [home-nounous] added home-nounous role 2020-08-07 12:32:59 +02:00
_pollion 18d01d9cc8 [roles/re2o-services] OTL 2020-08-07 00:14:46 +02:00
_shirenn c06e3b5ee5 [horde] Adds motd 2020-08-05 20:16:21 +02:00
_shirenn 98a86d021f [framadate][unsafe] PEP-CRANS compliance 2020-08-05 19:57:27 +02:00
_shirenn b888bfb204 [horde] configuration complete 2020-08-05 00:15:02 +02:00
_shirenn 995cf4d67b [horde] Horde initial configuration 2020-08-04 04:36:40 +02:00
_pollion 5cab753ea8 [dhcp] Sanitize dhcp configuration 2020-08-03 01:21:50 +02:00
_pollion 5cf704f4b7 [dhcp] Configure /etc/default/isc-dhcp-server 2020-08-02 19:59:04 +02:00
_pollion d2176be40e [dhcp] Make use of handlers to restart the server only when needed 2020-08-02 19:03:05 +02:00
_pollion a37ced87aa [dhcp] Generate dhcpd.conf 2020-08-02 18:58:08 +02:00
_pollion 3e81a90787 [moimoi-gendoc] Update cache before installing python3-dmidecode. 2020-08-02 01:59:16 +02:00
_benjamin 700ff275af [quagga] Create log directory 2020-08-02 01:28:14 +02:00
_pollion 2612bfe332 [rsyncd] Do not hardcode anything in rsyncd.conf 2020-08-02 00:32:30 +02:00
_benjamin d9e1731ba1 Keepalived 2020-08-01 18:58:44 +02:00
_benjamin d7dc4398d5 [keepalived] Use zayo as default route 2020-08-01 14:32:42 +02:00
Alexandre Iooss 2690fd4600
Upgrade roundcube config 2020-07-31 07:48:59 +02:00
Alexandre Iooss 0027c844d5
Deploy roundcube conf and plugins 2020-07-30 22:15:17 +02:00
Alexandre Iooss 239c05e01c Add some cool deps to roundcube 2020-07-30 19:50:17 +02:00
Alexandre Iooss 1cb9021bd9
Beginning of roundcube role 2020-07-30 19:46:30 +02:00
Alexandre Iooss 9632039df8
Fix etherpad service enable 2020-07-26 22:49:56 +02:00
Alexandre Iooss cfac25a515
Etherpad role 2020-07-26 22:48:36 +02:00
Alexandre Iooss b1f1de3a9c Moinmoin: Use smtp.adm.crans.org as mail server 2020-07-17 12:45:24 +02:00
Alexandre Iooss 3eaca766ff Install bsd-mailx with nullmailer 2020-07-17 12:40:25 +02:00
Alexandre Iooss a1e0e35dca
Add moinmoin crons 2020-07-15 09:29:44 +02:00
Alexandre Iooss fdb2675d8d
Moinmoin mywiki conf 2020-07-15 09:24:00 +02:00
Alexandre Iooss acb8e3f972
Add mailman3 fix 2020-07-14 20:07:50 +02:00
Alexandre Iooss 2641dcd9c5
Move reverse-proxy in plays/ 2020-07-14 19:42:19 +02:00
vulcain ab4f15c61d add role for root config file deployment 2020-07-14 19:25:14 +02:00
Alexandre Iooss 18d8065155 Better generation of doc 2020-07-14 18:54:20 +02:00
Alexandre Iooss fcf0ebf4c9
Certbot on mailman3 2020-07-13 12:02:06 +02:00
Alexandre Iooss 4bce1f93cf
Link hyperkitty to mailman 2020-07-13 09:51:23 +02:00
Alexandre Iooss 77bf6ecc9e
Postfix mailman3 configuration 2020-07-12 23:59:14 +02:00
Alexandre Iooss e48a440b7e
Install postfix on mailman3 vm 2020-07-12 23:15:52 +02:00
Alexandre Iooss ed40b871dc Mailman3: Working cas 2020-07-11 17:30:25 +02:00
Alexandre Iooss ae36169565
Mailman3 web config 2020-07-11 15:12:32 +02:00
Alexandre Iooss 1fcf1fa8b3
Configure mailman3.cfg 2020-07-11 14:44:44 +02:00
Alexandre Iooss f337548b4b
Role mailman3 2020-07-11 13:29:53 +02:00
Alexandre Iooss 86fdedf5c2 Minor fix in cas motd 2020-07-11 12:49:56 +02:00
Alexandre Iooss 34b8671545
Edit wiki from controller 2020-07-01 11:49:35 +02:00
Alexandre Iooss 21db69864c
Add SSH pub key and fix ProLiant link 2020-07-01 11:37:35 +02:00
Alexandre Iooss 1e28c82ca8
Lazy SysAdmin strikes back 2020-07-01 11:17:03 +02:00
Alexandre Iooss 6d5cd2a567
Fix moinmoin-gendoc regex 2020-07-01 09:25:36 +02:00
Alexandre Iooss 14f02b8d76 Move moinmoin htdocs 2020-07-01 08:26:54 +02:00
Alexandre Iooss 4be7621670
Add nginx conf to moinmoin role 2020-07-01 07:50:16 +02:00
Alexandre Iooss 9ed6b68f55
moinmoin role 2020-06-30 17:30:00 +02:00
Alexandre Iooss ad8cffd4ea
moinmoin-server -> moinmoin-gendoc role 2020-06-30 17:08:04 +02:00
Fardale 1d5bd09fca [owncloud]: better fix for permission problem 2020-06-10 12:24:12 +02:00
Fardale 5cf60b7cce [owncloud]: fix permission problem
Do not crash if the Owncloud folder exist with the wrong permissions
2020-06-09 09:53:44 +02:00
Alexandre Iooss 3d834ff77a
Backup monitoring 2020-06-05 17:34:48 +02:00
Michaël Paulon a4e09e92f9 Merge branch 'master' into framadate 2020-06-02 23:12:34 +02:00
_shirenn c5d60fcf1e [framadate] les erreurs php … 2020-06-02 22:50:20 +02:00
_shirenn 45b65cd9b9 [framadate] … 2020-06-02 22:11:40 +02:00
_shirenn 8b6ca864d6 [framadate] on prie 2020-06-02 22:06:16 +02:00
_shirenn 49e7217485 [framadate] coucou mika 2020-06-02 21:07:18 +02:00
_shirenn 4c50bedaa3 [framadate] python-mysql 2020-06-02 21:03:02 +02:00
_shirenn 7b571dee03 [framadate] python-mysql 2020-06-02 21:02:40 +02:00
_shirenn 394016b06f [framadate] python-mysql 2020-06-02 21:00:38 +02:00
_shirenn cc36ef653b [framadate] Mysql package list 2020-06-02 20:56:04 +02:00
_shirenn 3dc27fa1da [framadate] Creation de la base de données mysql 2020-06-02 20:52:04 +02:00
_shirenn 3c05a6439e [framadate] phpv2 … 2020-06-02 20:42:14 +02:00
_shirenn ac40717cea [framadate] php … 2020-06-02 20:40:54 +02:00
_shirenn 9c8c5c1c05 [framadate] Ansible comment … 2020-06-02 20:39:06 +02:00
_pollion b6d15e85ea [freeradius] LE certificate with DNS challenge 2020-06-02 18:06:05 +02:00
Alexandre Iooss 0d36ac644c
[monitoring] Use ip filter for adm 2020-06-01 19:42:47 +02:00
_shirenn 481b7e8a9f Removes unnecessary become 2020-05-29 21:09:38 +02:00
_shirenn 34035fd687 pouet 2020-05-29 20:29:12 +02:00
_shirenn e776bee6eb [Framadate] corrects a missing 0 in .htpasswd permission 2020-05-27 12:11:00 +02:00
_shirenn 17abd936c1 Changes framadate to version 1.1.10 2020-05-27 00:23:49 +02:00
_pollion 5cb249c5cc [Alerts] Please stop yelling, it's not so hot (yet) ... But we keep watching you. 2020-05-26 13:09:33 +02:00
Alexandre Iooss 67ffa3c893
[prometheus] use dig lookup for adm ip 2020-05-25 12:43:12 +02:00
Alexandre Iooss ec3da3b8e5
[mtail] Add radiusd 2020-05-24 11:23:25 +02:00
Alexandre Iooss 55ad4a87a4
Copy dhparam only if does not already exist 2020-05-19 19:00:06 +02:00
_benjamin 7c049d2c17 [postfix] Add header to sender_login_maps 2020-05-19 12:49:11 +02:00
Michaël Paulon f3a3eda192 on envoie des alertes quand le load de zbee est à 7 et pas 5 pour arrêter le spam 2020-05-19 11:02:45 +02:00
_pollion 1080857f26 [Policyd] Fix policyd deployment. 2020-05-17 21:10:54 +02:00
_pollion 9e4e71dbbd Configuration for policyd 2020-05-17 20:31:00 +02:00
_benjamin aed4b4fadf [sqlgrey] Deploy sqlgrey on redisdead 2020-05-17 19:51:39 +02:00
_benjamin 20effc46e7 [opendkim] Install and configure opendkim 2020-05-17 17:29:51 +02:00
_pollion bb134fd1ff Add debsums to common packages 2020-05-17 15:36:00 +02:00
_pollion d34bb5b68b [Postfix] Creates letsencrypt renewal hook directory. 2020-05-17 14:15:05 +02:00
_benjamin eac1d0b7e0 [postfix] Better with the script 2020-05-17 14:06:58 +02:00
_benjamin 1333bda7ed [postfix] fix hook path 2020-05-17 13:58:33 +02:00
_benjamin 6692386c7a [postfix] Reload postfix after certificate renewal 2020-05-17 13:52:44 +02:00
_pollion a1828b52aa [Postfix] Fanciness. 2020-05-17 13:29:14 +02:00
_pollion bb9ce4fb57 [Postfix] Allows to filter connection to smtp based on client IP. 2020-05-17 13:28:32 +02:00
_pollion 9f15e2115c [Postfix] Configuration for master smtp. 2020-05-17 13:26:50 +02:00
_pollion a81cf43364 [Postfix] Get rid of canonical address mapping. 2020-05-17 12:09:01 +02:00
_benjamin a04fa9f2cf Merge branch 'master' of https://gitlab.crans.org/nounous/ansible 2020-05-17 11:23:58 +02:00
_benjamin 0227e5c823 [postfix] Use direct certificate path 2020-05-17 11:23:51 +02:00
_pollion 4ebcfa287a Huge clean up in mailman configuration 2020-05-17 11:09:23 +02:00
_pollion e585efb9af Add apt-file to common tools 2020-05-17 09:06:20 +02:00
Alexandre Iooss 41e941034e
[reverseproxy] Do not install nginx certbot 2020-05-17 08:32:29 +02:00
Alexandre Iooss 6862b26d17
Use adm ipv4 for monitoring 2020-05-17 08:15:46 +02:00
Michaël Paulon 801811ffa8
on backup la partition var/lib/mailman sur redisdead 2020-05-17 03:59:09 +02:00
Michaël Paulon 4b627c6e75
on met des templates corrects pour chsh (et chsh.ldap sert à rien) 2020-05-17 03:58:20 +02:00
_benjamin 22cdae2d0d [re2o-mail-server] Au revoir LXir 2020-05-15 15:45:13 +02:00
_pollion a761100b28 Why the hell would you use non ascii characters ? 2020-05-10 13:43:19 +02:00
Alexandre Iooss 90d25818e1
DU EtherCalc 2020-05-10 09:35:38 +02:00
Alexandre Iooss c5617f4c77
[ethercalc] NPM install 2020-05-09 10:45:36 +02:00
Alexandre Iooss 21fd284cc5
EtherCalc role 2020-05-09 10:40:50 +02:00