Commit graph

421 commits

Author SHA1 Message Date
Julian Labus 3d92463bd6
Inventory: flag old domains as legacy 2019-05-13 17:14:29 +02:00
Julian Labus 5c42743d3f
Role service-domain-director: update domains.geojson
add Partenheim to Domain Mainz
2019-05-10 11:11:50 +02:00
Julian Labus d4e6eb6ed3
Role service-domain-director: switch to dry-run 2019-05-10 11:09:38 +02:00
Julian Labus 552c1f2729
Role service-yanic: restart yanic and respondd 2019-05-05 19:06:22 +02:00
Julian Labus 3c010e2c5f
Role service-yanic: use wireguard interfaces for respondd on servers 2019-05-04 19:53:34 +02:00
Julian Labus e17f378f0b
Role service-yanic: query link-local and site-local multicast address 2019-05-04 17:57:52 +02:00
Julian Labus d035daf6d9
Role service-yanic: join link-local multicast on fastd interfaces 2019-05-04 17:56:42 +02:00
Julian Labus b35c731813
Role service-yanic: switch to own fork
Should be reverted after the respondd branch is merged
2019-05-04 17:55:23 +02:00
Julian Labus b1cc085e8d
Role service-nginx-meshviewer: add domain servers 2019-05-02 16:40:19 +02:00
Julian Labus dcc4e4b9b5
Playbooks: replace service-respondd with service-yanic 2019-05-02 16:01:23 +02:00
Julian Labus c728b0509b
Role service-yanic: add respondd 2019-05-02 16:00:02 +02:00
Julian Labus 07bcfca54d
Remove Role service-respondd
superseded by yanic respondd
2019-05-02 15:57:52 +02:00
Julian Labus c29a24233e
Role service-domain-director: set switch time
Thu 02 May 2019 09:00:00 AM CEST
2019-04-25 14:31:55 +02:00
Julian Labus 6b64aa17a0
Role service-prometheus: bump versions 2019-04-17 10:44:37 +02:00
Tobias Hachmer 5cc55db92c
Role server-basic: enable unattended upgrade for Archive Unstable 2019-04-11 22:03:07 +02:00
Julian Labus b2373c17ac
service-fastd-mesh: use fastd-limiter and "on verify" to limit peers 2019-04-10 12:56:35 +02:00
Tobias Hachmer ecdcb4c294
Role server-basic: enable unattended upgrade for PowerDNS packages 2019-04-09 21:30:44 +02:00
Tobias Hachmer 2529b0fb19
Inventory: add group ffmwu-dns 2019-04-09 21:30:06 +02:00
Julian Labus 6815dd1521
Iventory: add peers-ffmwu to git repos 2019-04-08 16:10:36 +02:00
Julian Labus 04c2ed7e30
service-bind-slave: add stunnel4 for DNS-over-TLS 2019-04-05 19:53:19 +02:00
Julian Labus ac64eddfb1
service-prometheus: update versions 2019-04-05 09:29:11 +02:00
Julian Labus 4bdaaf2dae
service-prometheus: update internal domain for ICMP targets 2019-04-05 09:28:45 +02:00
Julian Labus f194880f4c
service-fastd-mesh: enable redis-server 2019-04-04 20:21:31 +02:00
Julian Labus a825a9bed0
service-fastd-mesh: add fastd-limiter (dry run)
new limits are not yet used by fastd
2019-04-04 11:56:45 +02:00
Tobias Hachmer 8a898bf339
Role pdns_admin: update version 2019-04-01 20:32:29 +02:00
Julian Labus 71d1889a49
Role service-fastd-mesh: allow fastd-exporter access from all gateways 2019-03-29 16:40:17 +01:00
Tobias Hachmer f701d77dfd
Role service-bird: suffix legacy ipv6 bgp peers with '_legacy', also 2019-03-25 20:33:08 +01:00
Tobias Hachmer 6cc9776c66
Use link-local IPv6 address for BGP Peering 2019-03-25 20:22:55 +01:00
Julian Labus 59045bc400
Roles network-*: enable forwarding
With newer versions of ifupdown2 it is necessary to enable IPv4/6
forwarding explicitly on required interfaces.
2019-03-25 10:13:01 +01:00
Julian Labus 6239a876bb
Role network-fastd: set mtu 2019-03-24 23:14:06 +01:00
Julian Labus dc1f469265
Role wireguard: set mtu and link-local address 2019-03-24 22:22:19 +01:00
Tobias Hachmer 13b470b5c9
Role server-basic: prevent the kernel to create a bond insterface on module load 2019-03-24 20:20:57 +01:00
Julian Labus fc6a062559
Role wireguard: explicitly set ipv6-addrgen to off
newer versions of ifupdown2 try to set the addrgen mode for interfaces
using inet6 but it seems that wireguard interfaces do not support this.
This causes a "ip link set dev <iface> down" command during every
execution of ifreload as the default mode eui6 does not mach the mode
set on the interface which is none.
2019-03-24 18:57:22 +01:00
Julian Labus 7b2f330c3a
Role network-loopback: set internal nameserver when available 2019-03-23 15:05:36 +01:00
Julian Labus 52d55e3997
Role server-basic: use openresolv to set nameserver 2019-03-23 14:59:12 +01:00
Tobias Hachmer 84cc2ca1c8
Add Playbook site.yml to manage the whole infrastructure 2019-03-22 22:20:33 +01:00
Tobias Hachmer 7efeb81b66
Role firmware-build-server: use import_tasks instead of include (deprecated) 2019-03-22 22:18:37 +01:00
Tobias Hachmer 3320ee053f
Delete old Roles 2019-03-22 22:09:23 +01:00
Tobias Hachmer 8212fc243c
Delete old Playbooks; update Playbooks 2019-03-22 22:06:26 +01:00
Tobias Hachmer dc9f792992
ansible.cfg: increase forks to 10 2019-03-22 22:02:20 +01:00
Tobias Hachmer aa38067f20
Role wireguard: split var 'my_wireguard_networks' into multiple lines for better reading 2019-03-22 21:52:47 +01:00
Tobias Hachmer b995bbffdf
Role network-routing: rename 'sysctl_settings_routing_gateway' to 'sysctl_settings_routing_forwarding'; enable ip forwarding also for monitoring hosts 2019-03-22 21:52:08 +01:00
Tobias Hachmer 0c6cec55e3
Add linse.freifunk-mwu.de
* Update Playbook dns.yml to manage linse as the external dns master server
2019-03-22 20:34:54 +01:00
Tobias Hachmer d194d6e936
Role pdns-admin: make dns prefix configurable; add lets encrypt snippet to nginx template 2019-03-22 20:33:32 +01:00
Tobias Hachmer 91e8a2ff3d
Update Playbook dns.yml
* update passwordstore lookup usage: use other subkey than 'password'
 * add mysql_bind_address
2019-03-22 19:48:47 +01:00
Tobias Hachmer f0eeb53442
Inventory ffmwu-mesh-services: remove group dns-master-internal 2019-03-22 19:48:25 +01:00
Tobias Hachmer d7d456d158
Role wireguard: flush handler after configuration 2019-03-22 19:45:26 +01:00
Julian Labus 36a1335d9b
Role service-domain-director: update config 2019-03-22 13:41:16 +01:00
Julian Labus af41e77619
Playbooks: add role service-prometheus to mesh-services 2019-03-21 21:20:58 +01:00
Tobias Hachmer 3a3388ccf7
Inventory: remove old host aubergine 2019-03-21 18:12:02 +01:00