Commit Graph

1369 Commits (7205d3b4ca78bc55c7bd98dae90e69de3d877923)

Author SHA1 Message Date
Yohann D'ANELLO 44cf074a39 [nginx] Add feature to add additional params to a nginx server
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
2021-02-22 22:26:31 +00:00
Yohann D'ANELLO 19beb34227 [nginx/certbot] Remove obsolete files
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
2021-02-22 22:26:31 +00:00
Yohann D'ANELLO de58138a22 [nginx] Multiple certficates are compatible with reverse-proxy
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
2021-02-22 22:26:31 +00:00
Yohann D'ANELLO 72238d79ed [nginx] Add feature to manage multiple certificates, for example for crans.org and for adm.crans.org
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
2021-02-22 22:26:31 +00:00
Yohann D'ANELLO 96d5f945e3 [nginx] Update configuration for default servers
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
2021-02-22 22:26:31 +00:00
Yohann D'ANELLO 7c1abf3aee [thelounge/nginx] Return is not redirect
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
2021-02-22 22:26:31 +00:00
Yohann D'ANELLO 9d5a080fc5 [thelounge] Support zamok configuration
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
2021-02-22 22:26:31 +00:00
Yohann D'ANELLO af33ff7d56 [thelounge] Temporary not download automatically the thelounge packet
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
2021-02-22 22:26:31 +00:00
Yohann D'ANELLO 2360b992c4 Restart the lounge at the end of the playbook
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
2021-02-22 22:26:31 +00:00
Yohann D'ANELLO 334b4ace02 [thelounge] Uncomment the download of the Debian package, but for now the package must be manually downloaded because of redirection issues
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
2021-02-22 22:26:31 +00:00
Yohann D'ANELLO 3f4a66eb7c [thelounge] Copy ldap configuration for zamok
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
2021-02-22 22:26:31 +00:00
Yohann D'ANELLO f039121e21 [thelounge] Download the Debian package and install it, and deploy
configuration

Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
2021-02-22 22:26:31 +00:00
Yohann D'ANELLO e3763a7121 [irc] Add redirections
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
2021-02-22 22:26:31 +00:00
Yohann D'ANELLO 70a78d06d1 [irc] Configure nginx for the lounge
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
2021-02-22 22:26:31 +00:00
Yohann D'ANELLO c3d58d9ca9 [nginx] Fix default configuration
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
2021-02-22 22:26:31 +00:00
Yohann D'ANELLO a16208b1c3 [nginx] Add template permissions
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
2021-02-22 22:26:31 +00:00
Yohann D'ANELLO dd249f2a30 [nginx] Disable default site
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
2021-02-22 22:26:31 +00:00
Yohann D'ANELLO 9f21a7ad79 [nginx] Drop nginx-pubftp role
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
2021-02-22 22:26:31 +00:00
Yohann D'ANELLO 2b8e0dbbff [nginx] Fix nginx template, this is now usable
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
2021-02-22 22:26:31 +00:00
ynerant a9897ec3c0 [nginx] Load global and local nginx configuration
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
2021-02-22 22:26:31 +00:00
Yohann D'ANELLO ec262bd5c1 [nginx] Drop role nginx-mailman
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
2021-02-22 22:26:31 +00:00
Yohann D'ANELLO dafa3685ce [nginx] Copy 401 error page if we use credentials
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
2021-02-22 22:26:31 +00:00
Yohann D'ANELLO 0eaee6c78f [nginx] Copy robots.txt
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
2021-02-22 22:26:31 +00:00
Yohann D'ANELLO 3fceaeb836 [nginx] allow setting credentials to a nginx server 2021-02-22 22:26:31 +00:00
Yohann D'ANELLO 6ee4d8b44d Deploy nginx configuration
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
2021-02-22 22:26:31 +00:00
Yohann D'ANELLO 6c8be2638c Add default global nginx configuration
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
2021-02-22 22:26:31 +00:00
Yohann D'ANELLO c0fbe6d000 Cransible charybde nginx configuration
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
2021-02-22 22:26:31 +00:00
ynerant 244e1c284b Cransible mailman nginx configuration
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
2021-02-22 22:26:31 +00:00
Yohann D'ANELLO 84fb96eab6 Create generic Nginx template
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
2021-02-22 22:26:31 +00:00
Yohann D'ANELLO f09ec69ef1 Remove unused role nginx-rtmp 2021-02-22 22:26:31 +00:00
Yohann D'ANELLO 51c54e4b86 Install reverse proxy sites only if necessary 2021-02-22 22:26:31 +00:00
Yohann D'ANELLO 454ca95edf Rename nginx-reverseproxy to nginx
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
2021-02-22 22:26:31 +00:00
Yohann D'ANELLO 82818b732f
Reload apache after deploying its configuration
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
2021-02-22 14:10:44 +01:00
Yohann D'ANELLO 408c857f81
[zamok_apache] Pepcransification
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
2021-02-22 14:07:35 +01:00
Yohann D'ANELLO 6774cca43c
[zamok_apache] Fix role
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
2021-02-22 14:06:53 +01:00
ynerant 3f84bb5628
[zamok] Apache is listening on its private interface only
Signed-off-by: ynerant <ynerant@crans.org>
2021-02-22 13:55:31 +01:00
Yohann D'ANELLO 634369ad62
[zamok] export apache2 + php custom configuration
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
2021-02-22 13:55:29 +01:00
_shirenn 366190e007 Upgrade targetted python and yamllint version 2021-02-22 12:48:24 +01:00
Yohann D'ANELLO ae163d6bc9
[nullmailer] Define allmailfrom to always send mails as root
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
2021-02-22 12:31:30 +01:00
Yohann D'ANELLO 601a52132e
[belenios] Move ocsigenserver command pipe
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
2021-02-22 12:31:30 +01:00
Yohann D'ANELLO 2bdd00b385
[belenios] Don't need to link the ocsidb file
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
2021-02-22 12:31:30 +01:00
Yohann D'ANELLO d83613c514
[belenios] Use proper network interface names
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
2021-02-22 12:31:30 +01:00
ynerant 094bb497f4
[belenios] Sort APT dependencies
Signed-off-by: ynerant <ynerant@crans.org>
2021-02-22 12:31:30 +01:00
ynerant 359b6a4553
[belenios] Deploy belenios
Signed-off-by: ynerant <ynerant@crans.org>
2021-02-22 12:31:30 +01:00
_shirenn 6e6dd56e4d [borg] lets filter-out shit and backup cameron 2021-02-22 12:13:23 +01:00
_shirenn 59bc91dc9d [vault] Changing cranspasswords to pass crans 2021-02-22 12:01:03 +01:00
_shirenn fc76317aec [oldinfra] cleanup 2021-02-22 11:54:30 +01:00
_shirenn 262696970f [network-interfaces] PEPCRANSED 2021-02-22 11:51:44 +01:00
Yohann D'ANELLO 289f0c6865 Remove dead servers
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
2021-02-22 11:51:44 +01:00
Yohann D'ANELLO cd2be1fb73 [network_interfaces] Register missing network interfaces
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
2021-02-22 11:51:44 +01:00