Commit Graph

154 Commits (d8f6d333f37ab46a9e680fb06d6ff97062d7d445)

Author SHA1 Message Date
Yohann D'ANELLO d8f6d333f3 [mailman3] Update 401 error for mailman
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
2021-04-12 14:38:03 +00:00
Yohann D'ANELLO 81ded3ea46 [mailman3] Mailman is reverse-proxyfied
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
2021-04-12 14:38:03 +00:00
Yohann D'ANELLO 8a0bb4401d [mailman3] Missing nginx parameter
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
2021-04-12 14:38:03 +00:00
Yohann D'ANELLO 90a6c623ed [mailman3] Use nginx role
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
2021-04-12 14:38:03 +00:00
Yohann D'ANELLO b74d5e0bf1 [mailman3] Drop mailman2 configuration
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
2021-04-12 14:38:03 +00:00
Yohann D'ANELLO 23a02adf11 [mailman3] Pepcransification
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
2021-04-12 14:38:03 +00:00
Yohann D'ANELLO a8b4842689
[moinmoin] Fix wiki URL prefix
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
2021-03-30 21:49:01 +02:00
Yohann D'ANELLO 9fd8496767 [logos] Deploy logos on the wiki
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
2021-03-24 15:26:28 +00:00
Yohann D'ANELLO 84b8f88278 [logos] Add logos for Belenios and Jitsi
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
2021-03-24 15:26:28 +00:00
Yohann D'ANELLO 3d44998c5a [etherpad] PEPCRANSIFICATION
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
2021-03-23 10:19:24 +00:00
Yohann D'ANELLO 38ee51b2b7 [Etherpad] Add reverse-proxy configuration for tmpad
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
2021-03-23 10:19:24 +00:00
Yohann D'ANELLO f9cc32b71b
[Jitsi] Put configuration in group vars
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
2021-03-04 18:08:27 +01:00
Yohann D'ANELLO 3deae233b1
[Jitsi] Add Jitsi role
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
2021-03-04 16:12:43 +01:00
Yohann D'ANELLO 91d777ffba
[certbot] Generate wildcard certificates by default
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
2021-03-04 11:45:17 +01:00
Yohann D'ANELLO 9f97936635
[reverseproxy] stream.crans.org is not reverse-proxyfied
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
2021-03-04 10:53:48 +01:00
Yohann D'ANELLO 5aeefd730e [root] Sputnik is using deb.debian.org
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
2021-03-01 16:20:04 +00:00
Yohann D'ANELLO 08f359cc9c [crans_scripts] Gitlab is talking HTTPS
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
2021-03-01 16:20:04 +00:00
_shirenn f5e7405188 [root] split root play and deploy root password 2021-03-01 16:20:04 +00:00
Yohann D'ANELLO 5324bd240d [network_interfaces] Query IPs and gateways in LDAP
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
2021-03-01 16:20:04 +00:00
Yohann D'ANELLO cb8f5b1537 Load vault passwords from local password store, then cache them
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
2021-02-28 16:08:27 +00:00
_shirenn 5661bb4bf6 [dhcp] Restart isc-dhcp-server only if it is already running 2021-02-23 23:28:20 +01:00
Yohann D'ANELLO c2eb610edf
[gitlab] vault_ => vault.
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
2021-02-22 23:34:30 +01:00
Yohann D'ANELLO 23371f7cb1
[gitlab] Rename git to gitlab
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
2021-02-22 23:30:29 +01:00
Yohann D'ANELLO 98eaeaa53b
[gitlab] Install irker from Debian Sid to add IRC webhooks
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
2021-02-22 23:29:58 +01:00
Yohann D'ANELLO e6c4b70efd
(gitlab] Configure nginx reverse-proxy to manage multiple certificates
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
2021-02-22 23:29:57 +01:00
_shirenn b152c48ed3
[gitlab] smtp server and https push 2021-02-22 23:29:56 +01:00
Yohann D'ANELLO d383ca4b8b
[gitlab/nginx] Add nginx configuration for Gitlab
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
2021-02-22 23:29:56 +01:00
Yohann D'ANELLO 6fb4783152
[gitlab] Gitlab is talking to re2o-ldap, not thot
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
2021-02-22 23:29:56 +01:00
ynerant 63d4164ba0
Cransible Gitlab configuration
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
2021-02-22 23:29:55 +01:00
Yohann D'ANELLO 6d35dcd7e8 [nginx/mailman] Fix configuration
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
2021-02-22 22:26:31 +00:00
Yohann D'ANELLO 28a6fd4be6 [thelounge] Rename thelounge ldap password
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
2021-02-22 22:26:31 +00:00
Yohann D'ANELLO 661682c550 [nginx/moinmoin] Fix moinmoin configuration
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
2021-02-22 22:26:31 +00:00
Yohann D'ANELLO 6b8fb0916f [nginx/moinmoin] Extract nginx configuration
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
2021-02-22 22:26:31 +00:00
Yohann D'ANELLO d6f15d4210 [nginx/cas] Factorize nginx configuration
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
2021-02-22 22:26:31 +00:00
Yohann D'ANELLO 82119c746e [nginx] Define proper set_realip_from
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
2021-02-22 22:26:31 +00:00
Yohann D'ANELLO 3b79c0177c [nginx] Don't deploy SSL configuration if we don't need one
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
2021-02-22 22:26:31 +00:00
Yohann D'ANELLO 8d8c212f49 [nginx/roundcube] Factorize configuration
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
2021-02-22 22:26:31 +00:00
Yohann D'ANELLO 2c9b89a74d [thelounge] Rename irc to thelounge
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
2021-02-22 22:26:31 +00:00
Yohann D'ANELLO 1ec1aeca90 [thelounge] vault_ldap_thelounge_password -> vault.ldap_thelounge_password
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
2021-02-22 22:26:31 +00:00
Yohann D'ANELLO 44cf074a39 [nginx] Add feature to add additional params to a nginx server
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
2021-02-22 22:26:31 +00:00
Yohann D'ANELLO de58138a22 [nginx] Multiple certficates are compatible with reverse-proxy
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
2021-02-22 22:26:31 +00:00
Yohann D'ANELLO 72238d79ed [nginx] Add feature to manage multiple certificates, for example for crans.org and for adm.crans.org
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
2021-02-22 22:26:31 +00:00
Yohann D'ANELLO 9d5a080fc5 [thelounge] Support zamok configuration
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
2021-02-22 22:26:31 +00:00
Yohann D'ANELLO 3f4a66eb7c [thelounge] Copy ldap configuration for zamok
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
2021-02-22 22:26:31 +00:00
Yohann D'ANELLO f039121e21 [thelounge] Download the Debian package and install it, and deploy
configuration

Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
2021-02-22 22:26:31 +00:00
Yohann D'ANELLO c3d58d9ca9 [nginx] Fix default configuration
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
2021-02-22 22:26:31 +00:00
Yohann D'ANELLO 2b8e0dbbff [nginx] Fix nginx template, this is now usable
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
2021-02-22 22:26:31 +00:00
ynerant a9897ec3c0 [nginx] Load global and local nginx configuration
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
2021-02-22 22:26:31 +00:00
Yohann D'ANELLO dafa3685ce [nginx] Copy 401 error page if we use credentials
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
2021-02-22 22:26:31 +00:00
Yohann D'ANELLO 0eaee6c78f [nginx] Copy robots.txt
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
2021-02-22 22:26:31 +00:00