Commit Graph

682 Commits (d9486290c25f7ab6a6ec4186c28f5d719d151c45)

Author SHA1 Message Date
Yohann D'ANELLO 1e0f84a6e5
[certbot] Remove obsolete DNS lookup
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
2021-03-04 11:37:04 +01:00
Yohann D'ANELLO 870cdd163b
[certbot] No change when certificates are already renewed
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
2021-03-04 11:36:29 +01:00
Yohann D'ANELLO 6054b7a545
[nginx] P-Real-IP -> X-Real-IP
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
2021-03-04 10:56:01 +01:00
_benjamin 6957939ffc [anope] Deploy Anope on irc 2021-03-02 11:44:08 +00:00
Yohann D'ANELLO 13c97d3e07 [scripts] Ansible is buggy, git has no change if the commit hash did not change
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
2021-03-01 16:20:04 +00:00
Yohann D'ANELLO 5aeefd730e [root] Sputnik is using deb.debian.org
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
2021-03-01 16:20:04 +00:00
Yohann D'ANELLO 13b0367d46 [prometheus-nginx] Change exposed port for a non-standard port
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
2021-03-01 16:20:04 +00:00
_shirenn f5e7405188 [root] split root play and deploy root password 2021-03-01 16:20:04 +00:00
Yohann D'ANELLO 0c3e56fc2c [ldap] ldap_server is slapd
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
2021-03-01 16:20:04 +00:00
Yohann D'ANELLO 4f8cf7f901 [prometheus] Add missing webhook for alertmanager
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
2021-03-01 16:20:04 +00:00
Yohann D'ANELLO 0a794d590c [prometheus] Restart nginx before prometheus-nginx-exporter
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
2021-03-01 16:20:04 +00:00
Yohann D'ANELLO b171d58e4c [borg] Don't bin borgbackup from bullseye if we are already under bullseye
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
2021-03-01 16:20:04 +00:00
ynerant 02faa09e61 [ntp-client] Install systemd-timesyncd on Bullseye
Signed-off-by: ynerant <ynerant@crans.org>
2021-03-01 16:20:04 +00:00
ynerant 61cf1eb892 [prometheus] Install prometheus-node-exporter-collectors on bullseye
Signed-off-by: ynerant <ynerant@crans.org>
2021-03-01 16:20:04 +00:00
_benjamin 6026f8d84e [inspircd] Deploy InspIRCd on irc 2021-02-28 09:10:21 +01:00
_benjamin 83e2460b65 [home] Use full path for zfs 2021-02-26 17:00:13 +01:00
_benjamin a40404314f [ssh_known_hosts] Add hostname to ssh_known_hosts 2021-02-25 14:50:57 +01:00
_shirenn 5661bb4bf6 [dhcp] Restart isc-dhcp-server only if it is already running 2021-02-23 23:28:20 +01:00
Yohann D'ANELLO 2844df31b2
[gitlab] Fix irker configuration
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
2021-02-22 23:35:17 +01:00
Yohann D'ANELLO 98eaeaa53b
[gitlab] Install irker from Debian Sid to add IRC webhooks
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
2021-02-22 23:29:58 +01:00
ynerant 7eae75a470
[gitlab] Enable local nginx server, don't server HTTPS port
Signed-off-by: ynerant <ynerant@crans.org>
2021-02-22 23:29:57 +01:00
ynerant 5786663cfb
[gitlab] Disable grafana server
Signed-off-by: ynerant <ynerant@crans.org>
2021-02-22 23:29:57 +01:00
ynerant a8e90e1ea9
[gitlab] Update gitlab default configuration
Signed-off-by: ynerant <ynerant@crans.org>
2021-02-22 23:29:57 +01:00
ynerant 065fe78435
[gitlab] Import Gitlab GPG public key
Signed-off-by: ynerant <ynerant@crans.org>
2021-02-22 23:29:57 +01:00
_shirenn b152c48ed3
[gitlab] smtp server and https push 2021-02-22 23:29:56 +01:00
Yohann D'ANELLO 46f1627c02
[gitlab] Fix gitlab configuration file path
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
2021-02-22 23:29:56 +01:00
Yohann D'ANELLO 73a6b5afb4
[gitlab] Install gitlab
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
2021-02-22 23:29:56 +01:00
Yohann D'ANELLO f07bb8b749
[Gitlab] Reconfigure Gitlab after deploying its configuration
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
2021-02-22 23:29:56 +01:00
Yohann D'ANELLO ae30c0593a
display_name -> email_display_name
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
2021-02-22 23:29:55 +01:00
ynerant 63d4164ba0
Cransible Gitlab configuration
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
2021-02-22 23:29:55 +01:00
Yohann D'ANELLO 6d35dcd7e8 [nginx/mailman] Fix configuration
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
2021-02-22 22:26:31 +00:00
Yohann D'ANELLO f83b34191a [nginx/statping] Drop old statping configuration
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
2021-02-22 22:26:31 +00:00
Yohann D'ANELLO 978c265c03 [nginx/statping] Extract nginx configuration from statping and gitea
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
2021-02-22 22:26:31 +00:00
Yohann D'ANELLO 6b8fb0916f [nginx/moinmoin] Extract nginx configuration
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
2021-02-22 22:26:31 +00:00
Yohann D'ANELLO d6f15d4210 [nginx/cas] Factorize nginx configuration
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
2021-02-22 22:26:31 +00:00
Yohann D'ANELLO 82119c746e [nginx] Define proper set_realip_from
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
2021-02-22 22:26:31 +00:00
Yohann D'ANELLO 8d8c212f49 [nginx/roundcube] Factorize configuration
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
2021-02-22 22:26:31 +00:00
Yohann D'ANELLO 4c115a8b34 [thelounge] Don't load ldap configuration if it is disabled
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
2021-02-22 22:26:31 +00:00
Yohann D'ANELLO 201dbd6ee0 [thelounge] Download debian package
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
2021-02-22 22:26:31 +00:00
Yohann D'ANELLO 44cf074a39 [nginx] Add feature to add additional params to a nginx server
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
2021-02-22 22:26:31 +00:00
Yohann D'ANELLO 19beb34227 [nginx/certbot] Remove obsolete files
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
2021-02-22 22:26:31 +00:00
Yohann D'ANELLO de58138a22 [nginx] Multiple certficates are compatible with reverse-proxy
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
2021-02-22 22:26:31 +00:00
Yohann D'ANELLO 72238d79ed [nginx] Add feature to manage multiple certificates, for example for crans.org and for adm.crans.org
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
2021-02-22 22:26:31 +00:00
Yohann D'ANELLO 96d5f945e3 [nginx] Update configuration for default servers
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
2021-02-22 22:26:31 +00:00
Yohann D'ANELLO 9d5a080fc5 [thelounge] Support zamok configuration
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
2021-02-22 22:26:31 +00:00
Yohann D'ANELLO af33ff7d56 [thelounge] Temporary not download automatically the thelounge packet
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
2021-02-22 22:26:31 +00:00
Yohann D'ANELLO 2360b992c4 Restart the lounge at the end of the playbook
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
2021-02-22 22:26:31 +00:00
Yohann D'ANELLO 334b4ace02 [thelounge] Uncomment the download of the Debian package, but for now the package must be manually downloaded because of redirection issues
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
2021-02-22 22:26:31 +00:00
Yohann D'ANELLO 3f4a66eb7c [thelounge] Copy ldap configuration for zamok
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
2021-02-22 22:26:31 +00:00
Yohann D'ANELLO f039121e21 [thelounge] Download the Debian package and install it, and deploy
configuration

Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
2021-02-22 22:26:31 +00:00