Commit Graph

78 Commits (e7170f7633be67aa3a0564aede479e798b525d47)

Author SHA1 Message Date
korenstin e7170f7633 Indépendance de restic (avec borg dans les variables), généralisation de la configuration (possibilité d'avoir un autre timer de backup) et prise en charge de debian bullseye (version <12) 2024-12-04 20:58:18 +01:00
korenstin d8257424e2 Retrait de thot dans ansible et retrait des secrets pour apprentis 2024-11-17 14:01:57 +01:00
korenstin 1f5129092e Ajout des backups avec restic 2024-11-17 12:37:36 +01:00
korenstin d75b81fd04 syntaxe dépréciée lookup ldap 2024-10-26 11:46:47 +02:00
korenstin ed6f46102c Retrait backup-thot et syntaxe dépréciée (borg) 2024-10-25 22:00:20 +02:00
_shirenn d13f1107dd [slapd] Temporarly no replica 2022-12-21 18:08:20 +01:00
_shirenn 16b8a290db unattended-upgrades and needrestart 2022-12-17 13:29:38 +01:00
_shirenn 6011d02434 re2o-ldap → yson-partou 2022-11-30 14:29:09 +01:00
_shirenn 4a633de452 ldap-adm → wall-e 2022-11-28 11:39:08 +01:00
_shirenn 47c27ac5a6 [ldap] tealc is no more an ldap 2022-11-19 19:41:10 +01:00
_shirenn d757753a23 [interfaces] un peu de zef ça décoiffe 2022-11-19 15:32:20 +01:00
_shirenn 24ff9e9584 Use query rather than specify ip directly 2022-11-14 16:58:03 +01:00
_shirenn e55ed5e112 servers should access dns through adm using romanesco, and internet through srv(-nat)? 2022-11-14 15:06:24 +01:00
_benjamin c0c0a2c97b Remove tealc from LDAP server list 2022-11-04 21:38:45 +01:00
_benjamin 90f4028597 Add ldap-adm.adm.crans.org as main slapd server 2022-11-04 19:35:59 +01:00
Yohann D'ANELLO 6fbdeed7e2 Backup on ft + thot
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
2022-08-04 08:15:14 +00:00
_shirenn a0ac6e7293 ip → ansible.utils.ip 2022-07-04 23:53:01 +02:00
_shirenn 55e1fdc184 [ssh_known_hosts] ssh_known_hosts is a service not a role 2022-07-04 21:57:24 +02:00
Yohann D'ANELLO f7a2b1174b
[network_interfaces] Allow having auto-configurated interfaces
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
2022-06-28 12:03:18 +02:00
Yohann D'ANELLO eec977ebe8
Add specific configuration for ft and ViaRezo
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
2022-06-28 10:27:01 +02:00
Yohann D'ANELLO b34a5ceb15
Drop unusued networks
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
2022-06-28 10:17:56 +02:00
Yohann D'ANELLO 991f49aa57
[backup-ft] Hello backup-ft!
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
2022-06-28 09:46:01 +02:00
Yohann D'ANELLO 3dfdf5cb4f
[borg] Backups are now managed by backup-ft
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
2022-06-27 20:02:04 +02:00
_shirenn e9d1dea911 [borg] vault path 2022-06-22 15:42:28 +02:00
_shirenn af9b30edfe ansible_vault → ansible/: root 2022-05-24 19:00:52 +02:00
_shirenn 336e5e2f60 ansible_vault → ansible/: borg 2022-05-24 16:34:08 +02:00
_shirenn ab78352554
Au revoir cachan :'( 2022-04-04 16:06:39 +02:00
Yohann D'ANELLO ca5333b2da [helloworld] Add printer VLAN
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
2022-03-22 22:15:58 +00:00
_shirenn 8729f9aaff En7 2022-01-30 17:15:12 +01:00
_shirenn 002278f72e ask ynerant g pa compri 2022-01-15 16:56:07 +00:00
_shirenn afbc9f2b58 pleasing erdnaxe and yamllint 2021-12-04 21:55:53 +01:00
Yohann D'ANELLO a64f967727
[router] Drop Renater interface, add ENS interconnection
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
2021-08-04 23:59:39 +02:00
Yohann D'ANELLO e6b77a65e2
[prometheus] Define Prometheus Nginx exporter address globally to make easier the separation saclay/cachan
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
2021-06-24 23:12:43 +02:00
Yohann D'ANELLO 20ba82fa4e
[nfs_mount] Fix configuration
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
2021-06-24 21:39:42 +02:00
Yohann D'ANELLO 489d189725
Fix mirrors
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
2021-06-22 13:58:28 +02:00
Yohann D'ANELLO c7bf246b2b
[network_interfaces] Add zamok-tmtc, put MTU of san to 9000
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
2021-06-22 13:58:28 +02:00
Yohann D'ANELLO 239a95c1de
Add cachan group to factorize configuration
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
2021-06-22 13:58:28 +02:00
_shirenn 5c76d526d2 [borgmatic] Don't backup this 2021-06-21 12:29:24 +00:00
_shirenn d0ff9cc204
[apt] MàJ 2021-06-21 10:53:55 +02:00
_shirenn 6fa8f17d0c
[nfs-mount] generic systemd nfs mount service 2021-06-21 10:53:11 +02:00
_shirenn 9e5d931b06
[rsyslog-client] PEPCRANS + cachan 2021-06-21 10:53:09 +02:00
_shirenn f7347e41d2
[monitoring] PEPCRANS + monitoring of cachan infra 2021-06-21 10:53:08 +02:00
_shirenn 3d528a1891
[borg] Migration of zephir and omnomnom 2021-06-21 10:53:08 +02:00
Yohann D'ANELLO 99107cd832
Update Ansible header since template_path changed its semantic
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
2021-06-08 16:54:49 +02:00
_shirenn 2eb57a975d moved nounou homes 2021-05-12 18:49:11 +02:00
Yohann D'ANELLO 5aeefd730e [root] Sputnik is using deb.debian.org
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
2021-03-01 16:20:04 +00:00
_shirenn f5e7405188 [root] split root play and deploy root password 2021-03-01 16:20:04 +00:00
Yohann D'ANELLO 5324bd240d [network_interfaces] Query IPs and gateways in LDAP
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
2021-03-01 16:20:04 +00:00
Yohann D'ANELLO cb8f5b1537 Load vault passwords from local password store, then cache them
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
2021-02-28 16:08:27 +00:00
Yohann D'ANELLO ae163d6bc9
[nullmailer] Define allmailfrom to always send mails as root
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
2021-02-22 12:31:30 +01:00