Commit graph

57 commits

Author SHA1 Message Date
Tobias Hachmer
0c6cec55e3
Add linse.freifunk-mwu.de
* Update Playbook dns.yml to manage linse as the external dns master server
2019-03-22 20:34:54 +01:00
Tobias Hachmer
3a3388ccf7
Inventory: remove old host aubergine 2019-03-21 18:12:02 +01:00
Tobias Hachmer
da2e6e35f7
Inventory: remove unused wireguard networks 2019-03-21 17:54:30 +01:00
Julian Labus
a8995d573c
Inventory: shorten IPv6 anycast address 2019-03-21 11:29:04 +01:00
Tobias Hachmer
869dd5b62a
Migrate internal DNS master to PowerDNS
* Add playbook dns to manage internal dns master servers
 * Add role to manage PowerDNS Admin Web Frontend for PowerDNS
 * Move dns zone related data from mesh list to a simpler dict with a simple zone list
 * Update role service-bind-slave
 * Update Readme.md
 * Add requirements.yml
 * Update .gitignore
2019-03-20 19:43:11 +01:00
Tobias Hachmer
e4e8c0998f
Introduce p2p vpn link between all ffmwu servers via WireGuard for routing purpose.
* add jinja2 extension 'jinja2.ext.do' to ansible.cfg
 * add host kichererbse.freifunk-mwu.de
 * add new server_type 'mesh-service' and new host group 'ffmwu-mesh-services'
 * use new loopback and anycast networks
 * add role wireguard
 * add role wireguard as dependency for roles network-routing + service-bird
 * add playbook 'mesh-services'
2019-03-19 15:23:12 +01:00
Julian Labus
483f49bba4
Inventory: add new domain dom0 2019-03-18 15:20:54 +01:00
Julian Labus
1dd24773eb
Inventory: mark old domains ffbin, ffrhg and ffta as legacy 2019-03-14 23:39:23 +01:00
Julian Labus
9b4dec1cf6
Inventory: add new domains
dom1: mainz
dom2: wiesbaden
dom3: bingen
dom4: rheingau
dom5: taunus
dom6: limburg
dom7: wielrod
2019-03-02 18:13:41 +01:00
Julian Labus
721b278d3b
Roles: improve multidomain support 2019-03-02 18:12:56 +01:00
Julian Labus
2ec0d4fe2a
Inventory: set aubergine as DNS master for zone ffbin 2019-02-04 17:24:18 +01:00
Julian Labus
2ef54389d5
Inventory: reduce router advertisement lifetimes
valid lifetime: 1 day
preferred lifetime: 4 hours
2019-01-28 13:09:37 +01:00
Tobias Hachmer
ea36605848
Inventory: remove 1312 MTU fastd instances 2018-12-20 23:42:51 +01:00
Julian Labus
d02024810e
Iventory: update peers repos url 2018-12-12 19:52:58 +01:00
Julian Labus
2889bd5db5
Inventory: add ffmwu.org to forward_zones 2018-11-30 21:57:31 +01:00
Julian Labus
92f213771c
Inventory: enable DAT (Distributed ARP Table) on batadv interfaces 2018-11-12 16:25:07 +01:00
Tobias Hachmer
cc4b984344
Increase minimum Ansible version to '2.6'.
* add ansible version check to role prerequisites
* add requirements.txt
* update Readme.md
* track minimum ansible version in variable 'ansible_version_minimum'
2018-11-09 10:43:54 +01:00
Tobias Hachmer
8f8184f4cf
Introduce boolean var 'debug_fastd' and tag debug
If debug_fastd to 'True' log level is set to debug on all fastd instances.

Run the playbook with tag 'debug' to invoke only tasks changing debug settings.
2018-11-07 15:20:18 +01:00
Tobias Hachmer
fa37598c3b
Roles service-bird + service-bird-icvpn:
Restructure bird configuration to exchange loopback addresses and announce the whole freifunk subnets instead the configured ones.
2018-11-07 10:28:13 +01:00
Julian Labus
dbc7895854
Revert "Roles service-bird + service-bird-icvpn:"
This reverts commit a8693377a4.
2018-11-05 15:43:10 +01:00
Julian Labus
a540033cf2
Inventory + Roles: remove legacy_gateways 2018-11-04 01:51:26 +01:00
Sebastian Schmachtel
9f42eaf942 Inventory: added Wasserfloh Gateway 2018-11-03 21:58:58 +01:00
Tobias Hachmer
a8693377a4
Roles service-bird + service-bird-icvpn:
Restructure bird configuration to exchange loopback addresses and announce the whole freifunk subnets instead the configured ones.
2018-11-01 08:19:08 +01:00
Julian Labus
a287a61d5b
inventory: remove decommissioned server zwiebel from bgp_mwu_servers 2018-09-26 22:34:24 +02:00
Julian Labus
e8d9e6af90
serivce-prometheus: bind to localhost by default 2018-09-25 10:28:24 +02:00
Julian Labus
1deb042ba4
inventory: move gopath to all 2018-09-25 10:24:18 +02:00
Julian Labus
1b6953bda9
inventory: add git_path 2018-09-21 14:21:28 +02:00
Julian Labus
285ecc33eb
inventory: remove old kea_dnssl_binary variable (no longer needed with kea 1.4-P1) 2018-09-20 17:07:29 +02:00
Julian Labus
c86408d352
inventory: add suesskartoffel to ffmwu-monitoring 2018-09-20 11:34:37 +02:00
Julian Labus
46a237f07a
inventory: add virtual_sites to meshes and add ffmwu-monitoring to prometheus targets 2018-09-18 12:48:08 +02:00
Julian Labus
008a8365b9
inventory: added node_exporter variable to all and moved prometheus variables to ffmwu-monitoring 2018-09-18 12:48:06 +02:00
Julian Labus
ae243c872f
playbooks: add ffmwu-monitoring to set up prometheus servers 2018-09-18 12:48:05 +02:00
Julian Labus
8d7af519a5
split out gateway specific stuff to use roles for generic meshing servers 2018-09-18 12:48:05 +02:00
Julian Labus
b7d6bdea39
Inventory: add gateway spinat 2018-09-12 11:37:14 +02:00
Tobias Hachmer
d4a4f576c9 Rename fastd instance intragate to backbone 2018-07-25 14:08:45 +02:00
Julian Labus
2e09e29d2b
Inventory: add group variable for ACME (Let's Encrypt) host 2018-06-15 09:01:19 +02:00
Tobias Hachmer
2fbaea9e37 Inventory: add backbone gateway extrasahne to bgp_mwu_servers 2018-02-28 17:19:57 +01:00
Tobias Hachmer
ba83cecc17 Inventory: add gateway lotuswurzel 2018-02-28 17:18:54 +01:00
Julian Labus
ce47909a2c
Inventory: add gateway ingwer.freifunk-mwu.de 2018-02-28 11:16:05 +01:00
Tobias Hachmer
b246e8982b Add role service-nullmailer 2018-01-07 17:40:33 +01:00
Tobias Hachmer
96a8c0e1c9 Inventory group vars all: add missing legacy gateway wasserfloh 2017-12-30 11:37:43 +01:00
Tobias Hachmer
0a51ee02a3 Role service-dhcpd: change dhcp daemon to kea 2017-12-28 22:12:00 +01:00
Tobias Hachmer
78a141305d Rework passwordstore lookup handling in roles service-fastd-mesh und service-fastd-intragate 2017-11-12 20:27:12 +01:00
Tobias Hachmer
fc04651e8b Lowercase all network interface names 2017-11-06 21:24:56 +01:00
Tobias Hachmer
387f3bbf6b Update fastd peer limit configuration
* add list of legacy gateways (temporarily)
 * change backend-scripts branch to ansible
 * Role server-basic: ensure ffmwu config directory is present
 * Role service-fastd: add fastd-status script
 * role service-fastd-mesh: add templating for fastd peer limit
configuration
2017-11-06 17:41:17 +01:00
Tobias Hachmer
a19510fad3 Add missing variables for role service-nginx-firmware 2017-10-29 21:23:04 +01:00
Tobias Hachmer
53d30c8ded Restructure fastd configuration to define multiple instances easily
- introduce mesh subdictionary `fastd`
 - change fastd instance naming
 - change fastd network interface naming (identical with fastd instance
names)
 - change mac address prefixes
2017-10-07 00:57:35 +02:00
Tobias Hachmer
63ca114c95 Migrate nested dictionary meshes into a list of dictionaries
- migrate dictionary `ipv6` into two simple lists
 - migrate dictionary `forward_zones` into a list
2017-10-06 22:58:00 +02:00
Tobias Hachmer
cc43741a91 Role network-iptables-gateway: rename var internet_exit_mtu_ipv[4|6] to internet_exit_tcp_mss_ipv[4|6] 2017-10-04 12:55:29 +02:00
Tobias Hachmer
07a0b25a09 Role service-radvd: make more parameters configurable 2017-10-03 21:24:36 +02:00