ynerant
|
99ed3ad57a
|
[root] Don't deploy crans_scripts in the root playbook
Signed-off-by: ynerant <ynerant@crans.org>
|
2021-03-01 16:20:04 +00:00 |
Yohann D'ANELLO
|
44a59d11c9
|
Add configuration to query become password from password store
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
|
2021-02-28 16:08:27 +00:00 |
Yohann D'ANELLO
|
39441c81f5
|
Load environment variables from configuration file
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
|
2021-02-28 16:08:27 +00:00 |
Yohann D'ANELLO
|
cb8f5b1537
|
Load vault passwords from local password store, then cache them
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
|
2021-02-28 16:08:27 +00:00 |
_benjamin
|
6026f8d84e
|
[inspircd] Deploy InspIRCd on irc
|
2021-02-28 09:10:21 +01:00 |
_benjamin
|
83e2460b65
|
[home] Use full path for zfs
|
2021-02-26 17:00:13 +01:00 |
_benjamin
|
a40404314f
|
[ssh_known_hosts] Add hostname to ssh_known_hosts
|
2021-02-25 14:50:57 +01:00 |
_shirenn
|
5661bb4bf6
|
[dhcp] Restart isc-dhcp-server only if it is already running
|
2021-02-23 23:28:20 +01:00 |
Yohann D'ANELLO
|
2844df31b2
|
[gitlab] Fix irker configuration
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
|
2021-02-22 23:35:17 +01:00 |
Yohann D'ANELLO
|
c2eb610edf
|
[gitlab] vault_ => vault.
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
|
2021-02-22 23:34:30 +01:00 |
Yohann D'ANELLO
|
23371f7cb1
|
[gitlab] Rename git to gitlab
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
|
2021-02-22 23:30:29 +01:00 |
Yohann D'ANELLO
|
98eaeaa53b
|
[gitlab] Install irker from Debian Sid to add IRC webhooks
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
|
2021-02-22 23:29:58 +01:00 |
Yohann D'ANELLO
|
85afe1fd32
|
[gitlab] Fix reverse proxy configuration
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
|
2021-02-22 23:29:58 +01:00 |
Yohann D'ANELLO
|
e6c4b70efd
|
(gitlab] Configure nginx reverse-proxy to manage multiple certificates
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
|
2021-02-22 23:29:57 +01:00 |
ynerant
|
7eae75a470
|
[gitlab] Enable local nginx server, don't server HTTPS port
Signed-off-by: ynerant <ynerant@crans.org>
|
2021-02-22 23:29:57 +01:00 |
ynerant
|
5786663cfb
|
[gitlab] Disable grafana server
Signed-off-by: ynerant <ynerant@crans.org>
|
2021-02-22 23:29:57 +01:00 |
ynerant
|
a8e90e1ea9
|
[gitlab] Update gitlab default configuration
Signed-off-by: ynerant <ynerant@crans.org>
|
2021-02-22 23:29:57 +01:00 |
ynerant
|
065fe78435
|
[gitlab] Import Gitlab GPG public key
Signed-off-by: ynerant <ynerant@crans.org>
|
2021-02-22 23:29:57 +01:00 |
_shirenn
|
b152c48ed3
|
[gitlab] smtp server and https push
|
2021-02-22 23:29:56 +01:00 |
Yohann D'ANELLO
|
d383ca4b8b
|
[gitlab/nginx] Add nginx configuration for Gitlab
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
|
2021-02-22 23:29:56 +01:00 |
Yohann D'ANELLO
|
6fb4783152
|
[gitlab] Gitlab is talking to re2o-ldap, not thot
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
|
2021-02-22 23:29:56 +01:00 |
Yohann D'ANELLO
|
46f1627c02
|
[gitlab] Fix gitlab configuration file path
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
|
2021-02-22 23:29:56 +01:00 |
Yohann D'ANELLO
|
73a6b5afb4
|
[gitlab] Install gitlab
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
|
2021-02-22 23:29:56 +01:00 |
Yohann D'ANELLO
|
f07bb8b749
|
[Gitlab] Reconfigure Gitlab after deploying its configuration
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
|
2021-02-22 23:29:56 +01:00 |
Yohann D'ANELLO
|
ae30c0593a
|
display_name -> email_display_name
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
|
2021-02-22 23:29:55 +01:00 |
ynerant
|
63d4164ba0
|
Cransible Gitlab configuration
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
|
2021-02-22 23:29:55 +01:00 |
Yohann D'ANELLO
|
6d35dcd7e8
|
[nginx/mailman] Fix configuration
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
|
2021-02-22 22:26:31 +00:00 |
Yohann D'ANELLO
|
28a6fd4be6
|
[thelounge] Rename thelounge ldap password
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
|
2021-02-22 22:26:31 +00:00 |
Yohann D'ANELLO
|
f83b34191a
|
[nginx/statping] Drop old statping configuration
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
|
2021-02-22 22:26:31 +00:00 |
Yohann D'ANELLO
|
661682c550
|
[nginx/moinmoin] Fix moinmoin configuration
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
|
2021-02-22 22:26:31 +00:00 |
Yohann D'ANELLO
|
978c265c03
|
[nginx/statping] Extract nginx configuration from statping and gitea
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
|
2021-02-22 22:26:31 +00:00 |
Yohann D'ANELLO
|
6b8fb0916f
|
[nginx/moinmoin] Extract nginx configuration
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
|
2021-02-22 22:26:31 +00:00 |
Yohann D'ANELLO
|
d6f15d4210
|
[nginx/cas] Factorize nginx configuration
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
|
2021-02-22 22:26:31 +00:00 |
Yohann D'ANELLO
|
82119c746e
|
[nginx] Define proper set_realip_from
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
|
2021-02-22 22:26:31 +00:00 |
Yohann D'ANELLO
|
3b79c0177c
|
[nginx] Don't deploy SSL configuration if we don't need one
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
|
2021-02-22 22:26:31 +00:00 |
Yohann D'ANELLO
|
8d8c212f49
|
[nginx/roundcube] Factorize configuration
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
|
2021-02-22 22:26:31 +00:00 |
Yohann D'ANELLO
|
4c115a8b34
|
[thelounge] Don't load ldap configuration if it is disabled
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
|
2021-02-22 22:26:31 +00:00 |
Yohann D'ANELLO
|
e4bdec1dd8
|
[nginx] Add Nginx playbook
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
|
2021-02-22 22:26:31 +00:00 |
Yohann D'ANELLO
|
8a1f26d852
|
[thelounge] Replace groups in hosts
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
|
2021-02-22 22:26:31 +00:00 |
Yohann D'ANELLO
|
2c9b89a74d
|
[thelounge] Rename irc to thelounge
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
|
2021-02-22 22:26:31 +00:00 |
Yohann D'ANELLO
|
1ec1aeca90
|
[thelounge] vault_ldap_thelounge_password -> vault.ldap_thelounge_password
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
|
2021-02-22 22:26:31 +00:00 |
Yohann D'ANELLO
|
201dbd6ee0
|
[thelounge] Download debian package
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
|
2021-02-22 22:26:31 +00:00 |
Yohann D'ANELLO
|
1575b3eea5
|
[nginx] Add nginx playbook
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
|
2021-02-22 22:26:31 +00:00 |
Yohann D'ANELLO
|
44cf074a39
|
[nginx] Add feature to add additional params to a nginx server
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
|
2021-02-22 22:26:31 +00:00 |
Yohann D'ANELLO
|
19beb34227
|
[nginx/certbot] Remove obsolete files
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
|
2021-02-22 22:26:31 +00:00 |
Yohann D'ANELLO
|
de58138a22
|
[nginx] Multiple certficates are compatible with reverse-proxy
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
|
2021-02-22 22:26:31 +00:00 |
Yohann D'ANELLO
|
72238d79ed
|
[nginx] Add feature to manage multiple certificates, for example for crans.org and for adm.crans.org
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
|
2021-02-22 22:26:31 +00:00 |
Yohann D'ANELLO
|
96d5f945e3
|
[nginx] Update configuration for default servers
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
|
2021-02-22 22:26:31 +00:00 |
Yohann D'ANELLO
|
7c1abf3aee
|
[thelounge/nginx] Return is not redirect
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
|
2021-02-22 22:26:31 +00:00 |
Yohann D'ANELLO
|
9d5a080fc5
|
[thelounge] Support zamok configuration
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
|
2021-02-22 22:26:31 +00:00 |