Commit Graph

990 Commits (84553c999ec61f6a7009b521de72933d31cf4b6a)

Author SHA1 Message Date
Yohann D'ANELLO 6aafd88ab1
[bird] Deploy prometheus-bird-exporter on routers to monitor routes
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
2022-08-04 10:36:44 +02:00
_shirenn a73d5892e4 Runned ansible-lint on this 2022-07-05 00:07:18 +02:00
_shirenn a0ac6e7293 ip → ansible.utils.ip 2022-07-04 23:53:01 +02:00
_shirenn 55e1fdc184 [ssh_known_hosts] ssh_known_hosts is a service not a role 2022-07-04 21:57:24 +02:00
Yoann Beaugnon 304f95c33b Adding Aeltheos & Bleizi as wiki superuser 2022-07-02 21:22:25 +02:00
Yohann D'ANELLO 3a3aa48dd3
[dropbear] Add dropbear to add an SSH server on the initramfs and unlock the disks
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
2022-06-29 11:07:24 +02:00
Yohann D'ANELLO 4fe189f248
[proxy] Enable IP forwarding and ARP and NDP proxies
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
2022-06-28 23:12:03 +02:00
Yohann D'ANELLO 80db7ec7aa
Add wireguard peers between boeing and routeur-ft/thot
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
2022-06-28 14:19:21 +02:00
Yohann D'ANELLO f7a2b1174b
[network_interfaces] Allow having auto-configurated interfaces
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
2022-06-28 12:03:18 +02:00
Yohann D'ANELLO 070e69cccd
[proxmox] Deploy service-proxmox-user on virtus to sync the list of users
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
2022-06-28 11:35:20 +02:00
Yohann D'ANELLO 991f49aa57
[backup-ft] Hello backup-ft!
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
2022-06-28 09:46:01 +02:00
_shirenn 36dc7429a3 [bind9] At last usable ! 2022-06-06 21:59:11 +02:00
_shirenn 34243f83cd [bird2] Now using bird2 2022-06-06 20:27:32 +02:00
_shirenn f9e1ed4a81 [prometheus-nginx-exporter] Wait for network to be up to start the exporter 2022-05-24 21:46:50 +02:00
Yohann D'ANELLO 74eaae5899
[sudo] Replace #include by the @include primitive
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
2022-04-19 14:55:48 +02:00
Arnaud DABY-SEESARAM b61421f5d6 [postfix] ajout du milter opendmarc 2022-04-08 21:09:40 +02:00
Yohann D'ANELLO 40d5e3a11a
[bind9] Fix tasks import
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
2022-04-04 18:00:47 +02:00
Yohann D'ANELLO 830afd1531
[grafana] More power!
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
2022-04-04 17:26:15 +02:00
Yohann D'ANELLO d19545cd84
[monitoring] Add permission to send pings to prometheus-blackbox-exporter
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
2022-04-04 16:39:32 +02:00
Yohann D'ANELLO 41d69e4f96
[re2o-ldap] Fix replication configuration
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
2022-04-04 16:33:04 +02:00
_shirenn 86a5681d8f
[re2o-ldap-replica] → [re2o-ldap] 2022-04-04 16:22:16 +02:00
_shirenn 2d918fe46d
[re2o-ldap-replica] remove uneccesary UUID creator and modifier informations 2022-04-04 16:22:15 +02:00
_shirenn 1a90541a80
[re2o-ldap-replica] allow nounou to bind to the ldap with full access 2022-04-04 16:22:15 +02:00
Yohann D'ANELLO 821ddcb9b9
Cachan is now legacy
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
2022-04-04 16:15:52 +02:00
_shirenn 09820c3b08
kes tu es borné⋅e toi ! 2022-04-04 16:06:41 +02:00
Arnaud DABY-SEESARAM 1e3d31d023 Merge branch 'unbound' 2022-03-24 11:27:21 +01:00
Arnaud DABY-SEESARAM 833c8ef905 [unbound] multi-threading 2022-03-24 11:25:58 +01:00
Yohann D'ANELLO dc021ba420 [helloworld] Fix Django pin
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
2022-03-22 22:15:58 +00:00
Alexandre Iooss 00fe348e92 Add matrix-synapse role 2022-03-22 22:14:56 +00:00
Yohann D'ANELLO 870238d9b3
Add printer monitoring
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
2022-03-21 16:54:29 +01:00
Yohann D'ANELLO 1987ffbbc1
Fix installation
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
2022-03-21 16:52:43 +01:00
Yohann D'ANELLO 0fbafdf4cb
Don't make a complex installation, it does not work and is not clean
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
2022-03-21 16:52:43 +01:00
Yohann D'ANELLO c87c860ae5
Update settings
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
2022-03-21 16:52:43 +01:00
Yohann D'ANELLO 068137d15a
[helloworld] Clean uWSGI configuration
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
2022-03-21 16:52:43 +01:00
Yohann D'ANELLO bd4d92e19f
[helloworld] Fix uWSGI configuration
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
2022-03-21 16:52:43 +01:00
Yohann D'ANELLO a9c2f976d1
[helloworld] Install django-printer properly
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
2022-03-21 16:52:42 +01:00
Yohann D'ANELLO 32a0744e0f
[constellation] Replace master by main
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
2022-03-21 16:52:42 +01:00
Yohann D'ANELLO 039d87ee74
[constellation] usage of psycopg2 is deprecated
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
2022-03-21 16:52:42 +01:00
Arnaud DABY-SEESARAM f76cc022ce Unbound: initial config 2022-03-20 15:07:36 +01:00
Yohann D'ANELLO d6f47d4b67
[belenios] Update Belenios to 1.15
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
2022-02-14 15:25:36 +01:00
Yohann D'ANELLO d37e476439
[belenios] Compile belenios in /var/local
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
2022-02-14 14:53:01 +01:00
_michael 8e6b97df34 [borgbackup-server] Use restrict directive for authorized_key
As documented in https://borgbackup.readthedocs.io/en/stable/usage/serve.html, openssh-server > 7.2 is available in debian since at least stretch (7.4) so no risk of compatibility issues.
2022-01-31 00:25:39 +01:00
_shirenn 880767d8d0 [logall] Quick fixes 2022-01-30 23:16:42 +01:00
_shirenn 84d7268a5c [vsftpd] Update role and for cameras 2022-01-30 16:57:13 +01:00
_shirenn cfd6f682ff [keepalived] Add fe80::1 as link local addresses 2022-01-30 16:31:03 +01:00
_benjamin b3a8de54e4 [anope] use inspircd3 server protocol 2022-01-22 15:20:27 +01:00
_benjamin ba1346a785 [inspircd] set casemapping to ascii 2022-01-22 15:19:23 +01:00
Yohann D'ANELLO decf5be63e
[owncloud] Use PHP 7.4 now
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
2022-01-18 18:42:58 +01:00
Yohann D'ANELLO dc41f5a8f0
[owncloud] Debian repository was migrated to Opensuse
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
2022-01-18 18:41:33 +01:00
_shirenn c2eab645bd [prometheus] ilo_snmp & shit 2022-01-15 16:56:07 +00:00
_shirenn 257d233499 [slapd] DNS integration 2022-01-15 16:56:07 +00:00
_shirenn 7eb6cc52e8 [dovecot] Add quota 2022-01-15 16:56:07 +00:00
_shirenn 84e9512bdc [common-tools] le joe 2022-01-15 16:56:07 +00:00
_shirenn 806e055229 [debian] buster cleanup 2022-01-15 16:56:07 +00:00
_shirenn 7b4e4cf1e0 [firewall] Handle logs locally 2022-01-15 16:56:07 +00:00
Yohann D'ANELLO 0a6154bbc6
[constellation] We don't have any fixture for now
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
2022-01-14 19:19:29 +01:00
Yohann D'ANELLO 5a800e46f9
[constellation] Replace ComnPay configuration by Stripe, add Note Kfet configuration
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
2022-01-14 18:48:36 +01:00
Yohann D'ANELLO 3cbbf4c80c
[constellation] Django 3.2 is available in bullseye-backports
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
2022-01-14 17:22:26 +01:00
Yohann D'ANELLO 22318131c6
[constellation] Add python3-requests
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
2022-01-14 17:07:01 +01:00
Yohann D'ANELLO de77238312
[constellation] More coherence between development and production
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
2022-01-14 17:07:00 +01:00
Yohann D'ANELLO 372344fa10
[constellation] Deploy documentation
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
2022-01-14 17:07:00 +01:00
Yohann D'ANELLO 9f165ad9be
[constellation] Deploy crontab
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
2022-01-14 17:07:00 +01:00
Yohann D'ANELLO 984d3ecb36
[constellation] Keep constellation up to date
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
2022-01-14 17:07:00 +01:00
Yohann D'ANELLO 3f033ad95e
[constellation] Install constellation from Python module in production
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
2022-01-14 17:07:00 +01:00
Yohann D'ANELLO 3f22b96f11
[constellation] Pin Django from Debian experimental until bullseye-backports got released
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
2022-01-14 17:07:00 +01:00
Yohann D'ANELLO dda90628f8
[constellation] Run manage.py commands separately according to front mode
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
2022-01-14 17:07:00 +01:00
Yohann D'ANELLO 98263de23f
[constellation] Properly separe constellation and constellation-front
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
2022-01-14 17:01:10 +01:00
Yohann D'ANELLO a90b8e2eb6
[constellation] Move front dependencies into constellation-front role
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
2022-01-14 17:01:10 +01:00
Yohann D'ANELLO cafbd47fe9
[constellation] Front web can be disabled
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
2022-01-14 17:01:10 +01:00
Yohann D'ANELLO 73f6246161
[constellation] Install docutils for django-admin documentation
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
2022-01-14 17:01:10 +01:00
Yohann D'ANELLO a21aa5f91c
[constellation] Declare installed apps in configuration
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
2022-01-14 17:01:10 +01:00
Yohann D'ANELLO dc4f27c84c
[constellation] Make migrations in the deployment while first version is not released
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
2022-01-14 17:01:10 +01:00
Yohann D'ANELLO 6c20ca2534
[constellation] Do some manage.py stuff
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
2022-01-14 17:01:09 +01:00
Yohann D'ANELLO 189167c071
[constellation] Install bootstrap 5 themes for django-crispy-forms
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
2022-01-14 17:01:09 +01:00
Yohann D'ANELLO 09e3629d8a
[constellation] Fix quotes
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
2022-01-14 17:01:09 +01:00
Yohann D'ANELLO 350f86263f
[constellation] Clone django-dnsmanager from gitlab
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
2022-01-14 17:01:09 +01:00
Yohann D'ANELLO 42ee4dbb5e
[constellation] Deploy frontend
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
2022-01-14 17:01:07 +01:00
Yohann D'ANELLO 4998e9d1aa
[constellation] Deploy constellation
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
2022-01-14 17:00:31 +01:00
Yohann D'ANELLO 1640f523a2 [docker] Docker is not Docker
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
2022-01-14 13:37:51 +00:00
Yohann D'ANELLO b34e71b2ac [keepalived] Remove unusued template
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
2022-01-14 13:37:51 +00:00
Yohann D'ANELLO a372d415e8 [docker] Docker is packaged and maintained by the Debian team
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
2022-01-14 13:37:51 +00:00
Yohann D'ANELLO e834ff1b85 [keepalived] Routers don't need buster-backports anymore
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
2022-01-14 13:37:51 +00:00
_shirenn 69e0747c1d [prometheus-node-exporter] Track obsolete packages 2022-01-14 11:42:50 +00:00
_shirenn 7f74bb95d5 [rp] Split logs in multiple files 2022-01-14 12:29:58 +01:00
_michael b55c31fe0e [postfix-mailman3] use tls when available when sending mails 2022-01-12 15:16:14 +00:00
Yohann D'ANELLO 3b93207a8d [debian_images] Also clone Arch Linux images for members
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
2022-01-12 15:15:07 +00:00
Yohann D'ANELLO fba6ce469a [debian_images] Fix ISO path
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
2022-01-12 15:15:07 +00:00
Yohann D'ANELLO 43fbb75579 [debian_images] Create symlink to latest Debian iso version
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
2022-01-12 15:15:07 +00:00
Yohann D'ANELLO ac2540fc81 [debian_images] Adapt configuration for gulp/charybde
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
2022-01-12 15:15:07 +00:00
Yohann D'ANELLO 80a40df6c4 [proxmox] Automatically synchronize Debian images
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
2022-01-12 15:15:07 +00:00
_shirenn b6f588f006 [dhcp] new service 2021-12-22 11:56:04 +01:00
_benjamin 92c37ae6fd [slapd] Remove attrs=loginShell,mail,telephoneNumber stanza 2021-12-11 10:52:12 +01:00
_shirenn afbc9f2b58 pleasing erdnaxe and yamllint 2021-12-04 21:55:53 +01:00
_shirenn d25eb9382f [certbot] Much things 2021-11-16 23:24:23 +01:00
_shirenn 9d77ac77c4 [framadate] file 2021-11-16 17:58:28 +01:00
_shirenn ed2e1f0814 [framadate] VICTOIRE 2021-11-16 17:54:07 +01:00
_shirenn 5e0498e5cb [framadate] PHP 7.4 2021-11-16 16:26:38 +01:00
Yohann D'ANELLO 8d5748c395
[zamok] Install Weechat from custom repository
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
2021-11-14 12:51:40 +01:00
_benjamin 883308d076 [logall] Log ingoing packets as well 2021-11-08 13:57:40 +01:00
Yohann D'ANELLO bb92cf6820
[ftpsync] Add Ubuntu mirror configuration
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
2021-11-06 22:01:12 +01:00