Julian Labus
8f495b79c8
role network-batman + network-fastd: remove node vpn instances for non-gateway servers
2018-09-18 12:48:06 +02:00
Julian Labus
b8e122ee8c
role server-basic: add net-tools and dnsutils to package list
2018-09-18 12:48:06 +02:00
Julian Labus
f9340ac37b
role service-prometheus: update default versions
2018-09-18 12:48:06 +02:00
Julian Labus
8d7af519a5
split out gateway specific stuff to use roles for generic meshing servers
2018-09-18 12:48:05 +02:00
Julian Labus
37596e917d
role serivce-nginx: improve inital ACME certificate creation
2018-09-12 11:37:25 +02:00
Tobias Hachmer
a2bef9154a
Role network-routing: fix typos
2018-08-10 06:10:03 +02:00
Tobias Hachmer
13fa7414f0
Rename role system-sysctl-gateway to system-sysctl
2018-08-10 06:09:37 +02:00
Julian Labus
170f0f3000
service-nginx: fix wrong handler name
2018-08-07 11:21:09 +02:00
Julian Labus
26ec397029
service-nginx: try to start nginx.service if reload fails
2018-08-07 10:43:05 +02:00
Julian Labus
1af52aad51
replace all occurrences of iteritems() with items() as it was removed in Python 3
2018-08-07 10:32:23 +02:00
Julian Labus
30b5a5e4eb
service-nginx: move ACME hostname to variable and set resolver because nginx will fail if host is not (yet) reachable during startup
2018-08-07 09:27:02 +02:00
Tobias Hachmer
d4a4f576c9
Rename fastd instance intragate to backbone
2018-07-25 14:08:45 +02:00
Tobias Hachmer
f792b4bdaf
Role firmware-build-server: delete deprecated templates
2018-07-24 21:16:53 +02:00
Tobias Hachmer
88bee34235
Restructure and update role for firmware build server
...
* rename role ffmwu-build -> firmware-build-server
* rename playbook build-server to firmware-build-server
2018-07-24 17:09:02 +02:00
Julian Labus
f0d8d2f170
Role service-nginx-firmware: forward ACME HTTP requests and enable HTTPS for vhosts
2018-06-15 09:08:25 +02:00
Julian Labus
43b9bc4407
Role service-nginx: add tasks to forward ACME HTTP requests and fetch certificates
2018-06-15 09:04:33 +02:00
Julian Labus
50cc1a3efa
Role prerequisites: add task to generate SSH keys
2018-06-15 09:00:43 +02:00
Tobias Hachmer
98324509dd
Role users: update public key of kokel
2018-03-20 06:27:03 +01:00
Tobias Hachmer
bd8586f20a
Role service-respondd: update exec option
2018-03-04 20:54:23 +01:00
Tobias Hachmer
6904d9fb25
Role server-basic: add template for standard apt sources
2018-03-04 19:51:35 +01:00
Tobias Hachmer
dda20fcdae
Role service-prometheus: fix trailing spaces
2018-03-02 07:18:19 +01:00
Tobias Hachmer
886cdb2417
Handlers: move all handlers into their roles, again
2018-03-01 06:34:55 +01:00
Julian Labus
a97d27779d
Fix READMEs
2018-02-28 15:20:51 +01:00
Julian Labus
004681b553
Role service-bird: calculate peer addresses of other ansible managed hosts
2018-02-28 11:16:55 +01:00
Julian Labus
d4d4ad0147
Role service-fastd-mesh: replace rstrip with rsplit
2018-02-28 11:16:49 +01:00
Julian Labus
0d60aa9f99
Role network-meshbridge: don't set individual MAC on bridge
2018-02-28 11:16:37 +01:00
Julian Labus
dc72070628
Role system-sysctl-gateway: add small delay to sysctl startup
...
- sysctl starts to quick after modules-load and setting the nf_conntrack parameters fails
2018-02-28 11:16:30 +01:00
Julian Labus
f5732aeb2a
Role network-routing: fix netmasks
2018-02-28 11:16:22 +01:00
Julian Labus
f81a5c1a5f
Role network-iptables-gateway: load module nf_conntrack at boot
2018-02-28 11:16:15 +01:00
Tobias Hachmer
7359c03bf8
Role service-nginx: enable IPv6 support
2018-02-28 06:15:43 +01:00
Tobias Hachmer
89281c68a8
Role server-basic: ensure rpcbind is not installed
2018-02-28 06:06:14 +01:00
Tobias Hachmer
3c8d012ac7
Add role users
2018-02-28 06:04:25 +01:00
Julian Labus
be84e6f148
Role service-nginx-firmware: enable IPv6 support
2018-02-25 18:13:26 +01:00
Tobias Hachmer
4ccb9a52ea
Revert "Role network-meshbridge: update workaround to set hwaddress"
...
This reverts commit f81bbfed65
2018-02-06 06:00:16 +01:00
Tobias Hachmer
a947803e28
Revert "Role network-routing: move interface specific routes to role network-meshbridge"
...
This reverts commit d3298d4a3c
2018-02-06 06:00:01 +01:00
Tobias Hachmer
e633015873
Role service-fastd: explicitly clear ExecStart to prevent multiple definitions
2018-02-05 20:44:41 +01:00
Tobias Hachmer
bd52ad6dd7
Role server-basic: fix networking.service from ifupdown2 - some interfaces come up too late
2018-02-05 17:37:52 +01:00
Tobias Hachmer
95140f12ea
Role service-fastd: configure systemd service unit overrides instead of replacing the whole file
2018-02-05 15:46:56 +01:00
Tobias Hachmer
3e311bd995
Role service-dhcpd: add override settings for kea-dhcp4-server service unit
2018-02-05 15:31:40 +01:00
Julian Labus
d3298d4a3c
Role network-routing: move interface specific routes to role network-meshbridge
2018-02-02 06:38:06 +01:00
Julian Labus
f81bbfed65
Role network-meshbridge: update workaround to set hwaddress
...
`pre-up` doesn't work properly as it is called before the bridge is created.
Initializing the bridge via `up` in the batman mesh interface seems to be a better solution.
2018-02-02 06:38:06 +01:00
Tobias Hachmer
b246e8982b
Add role service-nullmailer
2018-01-07 17:40:33 +01:00
Tobias Hachmer
90f486eb60
Role service-bird-icvpn: correct roa log messages
2018-01-02 10:45:09 +01:00
Tobias Hachmer
64f99ea396
Rename ffmwu custom config config dir from ~/.config to ~/.ffmwu-config
2017-12-31 13:41:46 +01:00
Tobias Hachmer
41a1d0bac3
Add role service-vnstat
2017-12-31 12:40:00 +01:00
Tobias Hachmer
7c80d75632
Role server-basic: update handling of dummy module
2017-12-30 23:10:11 +01:00
Tobias Hachmer
c79fb69789
Role server-basic: add unattended-upgrades
2017-12-30 22:47:58 +01:00
Tobias Hachmer
b36f4dfe5b
Role service-fastd-mesh: update peer limit config
...
* rename setting timeout to remote_data_timeout
* introduce setting remote_fetch_timeout
2017-12-30 11:26:47 +01:00
Tobias Hachmer
7757387dd5
Role service-nginx: add nginx.conf templating
2017-12-29 20:31:46 +01:00
Tobias Hachmer
a2104ddcc5
Role service-tinc: fix handling of systemd unit
...
* remove init script if present
* nets.boot not necessary with new systemd unit
* update systemd tasks to use systemd unit tinc@
* update handler
2017-12-29 14:27:52 +01:00
