Commit Graph

512 Commits (cb7952bd2d4097300d7c7cd3c785cf10df677399)

Author SHA1 Message Date
_shirenn ea0d140a66 [keepalived][unsafe] PEP CRANS + dhcp notify 2020-08-07 17:30:20 +02:00
_benjamin f93829267d [qemu-guest-agent] Install qemu-guest-agent on VMs 2020-08-07 16:52:26 +02:00
_shirenn dc17f75f90 Merge Pollion cherry pick 2020-08-07 12:59:56 +02:00
_shirenn 2c72c8c6c9 [proxmox] tout pleins de nouveaux copains 2020-08-07 12:42:42 +02:00
_shirenn 5c7569cce2 [proxmox][safe] Configuration CRANS 2020-08-07 12:42:40 +02:00
_shirenn 7024617206 [home-nounous][unsafe] Documentation + rennomage variables 2020-08-07 12:41:26 +02:00
_shirenn 194a725228 [ldap][unsafe] Documentation 2020-08-07 12:34:34 +02:00
_shirenn 3c1a94822b [slapd][unsafe] Rennomage variables et doc 2020-08-07 12:34:34 +02:00
_shirenn 34985f5558 [slapd] Check-mode safe 2020-08-07 12:34:34 +02:00
_shirenn 0b47e83b28 [ntp-client] Check-mode safe 2020-08-07 12:34:34 +02:00
_shirenn aa552f55b6 [common-tools] Check-mode safe 2020-08-07 12:34:34 +02:00
_shirenn 8f0f082139 [proxmox] Role for proxmox repositories 2020-08-07 12:34:34 +02:00
_benjamin 70f180e9a9 [slapd] fix role 2020-08-07 12:34:34 +02:00
_benjamin 2d1a5211c1 [slapd] Use password from vault 2020-08-07 12:34:34 +02:00
_benjamin 8bbec61350 [slapd] Change replication settings 2020-08-07 12:34:34 +02:00
_benjamin 19685dc466 [slapd] added slapd role 2020-08-07 12:34:34 +02:00
_pollion 7011f816ef [ldap-client] host looks into ldap before making a dns request 2020-08-07 12:34:02 +02:00
_pollion 52e237b0cf [New-infra] Deploy ldap and nfs with base system. 2020-08-07 12:34:01 +02:00
_benjamin 2310a08594 [home-nounous] install nfs-common 2020-08-07 12:32:59 +02:00
_benjamin 391d855fa7 [ldap-client] use nounous ldap 2020-08-07 12:32:59 +02:00
_benjamin 76421036b2 [home-nounous] added home-nounous role 2020-08-07 12:32:59 +02:00
_pollion 18d01d9cc8 [roles/re2o-services] OTL 2020-08-07 00:14:46 +02:00
_shirenn c06e3b5ee5 [horde] Adds motd 2020-08-05 20:16:21 +02:00
_shirenn 98a86d021f [framadate][unsafe] PEP-CRANS compliance 2020-08-05 19:57:27 +02:00
_shirenn b888bfb204 [horde] configuration complete 2020-08-05 00:15:02 +02:00
_shirenn 995cf4d67b [horde] Horde initial configuration 2020-08-04 04:36:40 +02:00
_pollion 5cab753ea8 [dhcp] Sanitize dhcp configuration 2020-08-03 01:21:50 +02:00
_pollion 5cf704f4b7 [dhcp] Configure /etc/default/isc-dhcp-server 2020-08-02 19:59:04 +02:00
_pollion d2176be40e [dhcp] Make use of handlers to restart the server only when needed 2020-08-02 19:03:05 +02:00
_pollion a37ced87aa [dhcp] Generate dhcpd.conf 2020-08-02 18:58:08 +02:00
_pollion 3e81a90787 [moimoi-gendoc] Update cache before installing python3-dmidecode. 2020-08-02 01:59:16 +02:00
_benjamin 700ff275af [quagga] Create log directory 2020-08-02 01:28:14 +02:00
_pollion 2612bfe332 [rsyncd] Do not hardcode anything in rsyncd.conf 2020-08-02 00:32:30 +02:00
_benjamin d9e1731ba1 Keepalived 2020-08-01 18:58:44 +02:00
_benjamin d7dc4398d5 [keepalived] Use zayo as default route 2020-08-01 14:32:42 +02:00
Alexandre Iooss 2690fd4600
Upgrade roundcube config 2020-07-31 07:48:59 +02:00
Alexandre Iooss 0027c844d5
Deploy roundcube conf and plugins 2020-07-30 22:15:17 +02:00
Alexandre Iooss 239c05e01c Add some cool deps to roundcube 2020-07-30 19:50:17 +02:00
Alexandre Iooss 1cb9021bd9
Beginning of roundcube role 2020-07-30 19:46:30 +02:00
Alexandre Iooss 9632039df8
Fix etherpad service enable 2020-07-26 22:49:56 +02:00
Alexandre Iooss cfac25a515
Etherpad role 2020-07-26 22:48:36 +02:00
Alexandre Iooss b1f1de3a9c Moinmoin: Use smtp.adm.crans.org as mail server 2020-07-17 12:45:24 +02:00
Alexandre Iooss 3eaca766ff Install bsd-mailx with nullmailer 2020-07-17 12:40:25 +02:00
Alexandre Iooss a1e0e35dca
Add moinmoin crons 2020-07-15 09:29:44 +02:00
Alexandre Iooss fdb2675d8d
Moinmoin mywiki conf 2020-07-15 09:24:00 +02:00
Alexandre Iooss acb8e3f972
Add mailman3 fix 2020-07-14 20:07:50 +02:00
Alexandre Iooss 2641dcd9c5
Move reverse-proxy in plays/ 2020-07-14 19:42:19 +02:00
vulcain ab4f15c61d add role for root config file deployment 2020-07-14 19:25:14 +02:00
Alexandre Iooss 18d8065155 Better generation of doc 2020-07-14 18:54:20 +02:00
Alexandre Iooss fcf0ebf4c9
Certbot on mailman3 2020-07-13 12:02:06 +02:00
Alexandre Iooss 4bce1f93cf
Link hyperkitty to mailman 2020-07-13 09:51:23 +02:00
Alexandre Iooss 77bf6ecc9e
Postfix mailman3 configuration 2020-07-12 23:59:14 +02:00
Alexandre Iooss e48a440b7e
Install postfix on mailman3 vm 2020-07-12 23:15:52 +02:00
Alexandre Iooss ed40b871dc Mailman3: Working cas 2020-07-11 17:30:25 +02:00
Alexandre Iooss ae36169565
Mailman3 web config 2020-07-11 15:12:32 +02:00
Alexandre Iooss 1fcf1fa8b3
Configure mailman3.cfg 2020-07-11 14:44:44 +02:00
Alexandre Iooss f337548b4b
Role mailman3 2020-07-11 13:29:53 +02:00
Alexandre Iooss 86fdedf5c2 Minor fix in cas motd 2020-07-11 12:49:56 +02:00
Alexandre Iooss 34b8671545
Edit wiki from controller 2020-07-01 11:49:35 +02:00
Alexandre Iooss 21db69864c
Add SSH pub key and fix ProLiant link 2020-07-01 11:37:35 +02:00
Alexandre Iooss 1e28c82ca8
Lazy SysAdmin strikes back 2020-07-01 11:17:03 +02:00
Alexandre Iooss 6d5cd2a567
Fix moinmoin-gendoc regex 2020-07-01 09:25:36 +02:00
Alexandre Iooss 14f02b8d76 Move moinmoin htdocs 2020-07-01 08:26:54 +02:00
Alexandre Iooss 4be7621670
Add nginx conf to moinmoin role 2020-07-01 07:50:16 +02:00
Alexandre Iooss 9ed6b68f55
moinmoin role 2020-06-30 17:30:00 +02:00
Alexandre Iooss ad8cffd4ea
moinmoin-server -> moinmoin-gendoc role 2020-06-30 17:08:04 +02:00
Fardale 1d5bd09fca [owncloud]: better fix for permission problem 2020-06-10 12:24:12 +02:00
Fardale 5cf60b7cce [owncloud]: fix permission problem
Do not crash if the Owncloud folder exist with the wrong permissions
2020-06-09 09:53:44 +02:00
Alexandre Iooss 3d834ff77a
Backup monitoring 2020-06-05 17:34:48 +02:00
Michaël Paulon a4e09e92f9 Merge branch 'master' into framadate 2020-06-02 23:12:34 +02:00
_shirenn c5d60fcf1e [framadate] les erreurs php … 2020-06-02 22:50:20 +02:00
_shirenn 45b65cd9b9 [framadate] … 2020-06-02 22:11:40 +02:00
_shirenn 8b6ca864d6 [framadate] on prie 2020-06-02 22:06:16 +02:00
_shirenn 49e7217485 [framadate] coucou mika 2020-06-02 21:07:18 +02:00
_shirenn 4c50bedaa3 [framadate] python-mysql 2020-06-02 21:03:02 +02:00
_shirenn 7b571dee03 [framadate] python-mysql 2020-06-02 21:02:40 +02:00
_shirenn 394016b06f [framadate] python-mysql 2020-06-02 21:00:38 +02:00
_shirenn cc36ef653b [framadate] Mysql package list 2020-06-02 20:56:04 +02:00
_shirenn 3dc27fa1da [framadate] Creation de la base de données mysql 2020-06-02 20:52:04 +02:00
_shirenn 3c05a6439e [framadate] phpv2 … 2020-06-02 20:42:14 +02:00
_shirenn ac40717cea [framadate] php … 2020-06-02 20:40:54 +02:00
_shirenn 9c8c5c1c05 [framadate] Ansible comment … 2020-06-02 20:39:06 +02:00
_pollion b6d15e85ea [freeradius] LE certificate with DNS challenge 2020-06-02 18:06:05 +02:00
Alexandre Iooss 0d36ac644c
[monitoring] Use ip filter for adm 2020-06-01 19:42:47 +02:00
_shirenn 481b7e8a9f Removes unnecessary become 2020-05-29 21:09:38 +02:00
_shirenn 34035fd687 pouet 2020-05-29 20:29:12 +02:00
_shirenn e776bee6eb [Framadate] corrects a missing 0 in .htpasswd permission 2020-05-27 12:11:00 +02:00
_shirenn 17abd936c1 Changes framadate to version 1.1.10 2020-05-27 00:23:49 +02:00
_pollion 5cb249c5cc [Alerts] Please stop yelling, it's not so hot (yet) ... But we keep watching you. 2020-05-26 13:09:33 +02:00
Alexandre Iooss 67ffa3c893
[prometheus] use dig lookup for adm ip 2020-05-25 12:43:12 +02:00
Alexandre Iooss ec3da3b8e5
[mtail] Add radiusd 2020-05-24 11:23:25 +02:00
Alexandre Iooss 55ad4a87a4
Copy dhparam only if does not already exist 2020-05-19 19:00:06 +02:00
_benjamin 7c049d2c17 [postfix] Add header to sender_login_maps 2020-05-19 12:49:11 +02:00
Michaël Paulon f3a3eda192 on envoie des alertes quand le load de zbee est à 7 et pas 5 pour arrêter le spam 2020-05-19 11:02:45 +02:00
_pollion 1080857f26 [Policyd] Fix policyd deployment. 2020-05-17 21:10:54 +02:00
_pollion 9e4e71dbbd Configuration for policyd 2020-05-17 20:31:00 +02:00
_benjamin aed4b4fadf [sqlgrey] Deploy sqlgrey on redisdead 2020-05-17 19:51:39 +02:00
_benjamin 20effc46e7 [opendkim] Install and configure opendkim 2020-05-17 17:29:51 +02:00
_pollion bb134fd1ff Add debsums to common packages 2020-05-17 15:36:00 +02:00
_pollion d34bb5b68b [Postfix] Creates letsencrypt renewal hook directory. 2020-05-17 14:15:05 +02:00
_benjamin eac1d0b7e0 [postfix] Better with the script 2020-05-17 14:06:58 +02:00
_benjamin 1333bda7ed [postfix] fix hook path 2020-05-17 13:58:33 +02:00
_benjamin 6692386c7a [postfix] Reload postfix after certificate renewal 2020-05-17 13:52:44 +02:00
_pollion a1828b52aa [Postfix] Fanciness. 2020-05-17 13:29:14 +02:00
_pollion bb9ce4fb57 [Postfix] Allows to filter connection to smtp based on client IP. 2020-05-17 13:28:32 +02:00
_pollion 9f15e2115c [Postfix] Configuration for master smtp. 2020-05-17 13:26:50 +02:00
_pollion a81cf43364 [Postfix] Get rid of canonical address mapping. 2020-05-17 12:09:01 +02:00
_benjamin a04fa9f2cf Merge branch 'master' of https://gitlab.crans.org/nounous/ansible 2020-05-17 11:23:58 +02:00
_benjamin 0227e5c823 [postfix] Use direct certificate path 2020-05-17 11:23:51 +02:00
_pollion 4ebcfa287a Huge clean up in mailman configuration 2020-05-17 11:09:23 +02:00
_pollion e585efb9af Add apt-file to common tools 2020-05-17 09:06:20 +02:00
Alexandre Iooss 41e941034e
[reverseproxy] Do not install nginx certbot 2020-05-17 08:32:29 +02:00
Alexandre Iooss 6862b26d17
Use adm ipv4 for monitoring 2020-05-17 08:15:46 +02:00
Michaël Paulon 801811ffa8
on backup la partition var/lib/mailman sur redisdead 2020-05-17 03:59:09 +02:00
Michaël Paulon 4b627c6e75
on met des templates corrects pour chsh (et chsh.ldap sert à rien) 2020-05-17 03:58:20 +02:00
_benjamin 22cdae2d0d [re2o-mail-server] Au revoir LXir 2020-05-15 15:45:13 +02:00
_pollion a761100b28 Why the hell would you use non ascii characters ? 2020-05-10 13:43:19 +02:00
Alexandre Iooss 90d25818e1
DU EtherCalc 2020-05-10 09:35:38 +02:00
Alexandre Iooss c5617f4c77
[ethercalc] NPM install 2020-05-09 10:45:36 +02:00
Alexandre Iooss 21fd284cc5
EtherCalc role 2020-05-09 10:40:50 +02:00
Alexandre Iooss 4ad342843f
Simplify monitoring playbook 2020-05-09 10:11:38 +02:00
Alexandre Iooss 38ff5c192f
Fix nginx max body size 2020-05-06 12:59:08 +02:00
_benjamin cb6e858804 [nginx-reverseproxy] Trailing spaces… 2020-05-04 12:19:32 +02:00
_shirenn 6c06f51e24
[framadate] includes the framadate php configuration file 2020-05-03 20:53:42 +02:00
Alexandre Iooss 6eaf509ff3
[nginx] Reverse WebSocket 2020-05-03 15:19:29 +02:00
Alexandre Iooss e8b0d14a55
Grafana on :3000 2020-05-03 14:19:00 +02:00
Alexandre Iooss 7d1ecd19a4
SSL snippet and drop TLS 1.0 and 1.1 2020-05-03 12:51:16 +02:00
Alexandre Iooss b3619d05f4
Some changes in keepalived template 2020-05-03 10:03:12 +02:00
Alexandre Iooss c8504973a8
Working FramaDate 2020-05-02 18:00:09 +02:00
Alexandre Iooss 86d17dedfa
[framadate] NGINX config 2020-05-02 16:54:42 +02:00
pa bc932b0617 [Framdate] nginx configuration 2020-05-02 16:47:28 +02:00
pa a96a0cfce4 [Framadate] log file creation 2020-05-02 15:43:26 +02:00
_benjamin 22c22a3cb0 [keepalived] Don't hardcode proxies adm interface 2020-05-02 13:19:16 +02:00
Alexandre Iooss 0a50480ad7
Minor fixes on reverse proxy 2020-05-02 13:03:29 +02:00
Alexandre Iooss 3d80f71646
Fix yaml syntax 2020-05-02 10:39:45 +02:00
Alexandre Iooss 37406ff774
[nginx-reverseproxy] Initial role 2020-05-02 10:18:10 +02:00
Alexandre Iooss bcba080057
Clean up Framadate for shireen 2020-05-01 18:37:51 +02:00
Alexandre Iooss 4e6571a179
New DNS key 2020-05-01 17:35:27 +02:00
Alexandre Iooss 80040dd35c
Certbot role for gitzly 2020-05-01 17:17:18 +02:00
_benjamin e54244e0c7 [bind-authoritative] Add zone _acme-challenge.adm.crans.org 2020-05-01 16:59:47 +02:00
Alexandre Iooss a10fda1b19
[backuppc] Initial role 2020-04-29 12:15:12 +02:00
erdnaxe 48c33326c5 Merge branch 'interfaces' into 'master'
Interfaces

See merge request nounous/ansible!16
2020-04-29 12:00:34 +02:00
_pollion b9a7e19bc0 [rsync-client] Add wireguard interface. Enable backups on sputnik. 2020-04-29 10:53:58 +02:00
Alexandre Iooss a3e3532644
[interface] Factorize 2020-04-28 20:27:58 +02:00
Alexandre Iooss 459d9cc55e
[interfaces] Add metrics 2020-04-28 18:59:35 +02:00
Alexandre Iooss cfe9140a0b
[interfaces] Do not force autoconf 2020-04-28 18:46:38 +02:00
Alexandre Iooss b1120e7637
[interfaces] use is defined 2020-04-28 18:26:59 +02:00
Alexandre Iooss 28ffd68a14
[interfaces] Install vlan 2020-04-27 21:34:41 +02:00
Alexandre Iooss 51f49eb461
[interfaces] allow-hotplug to auto 2020-04-27 21:28:43 +02:00
Alexandre Iooss 2d417ba516
Rename certbot conf 2020-04-27 15:51:08 +02:00