Tobias Hachmer
aa38067f20
Role wireguard: split var 'my_wireguard_networks' into multiple lines for better reading
2019-03-22 21:52:47 +01:00
Tobias Hachmer
b995bbffdf
Role network-routing: rename 'sysctl_settings_routing_gateway' to 'sysctl_settings_routing_forwarding'; enable ip forwarding also for monitoring hosts
2019-03-22 21:52:08 +01:00
Tobias Hachmer
d194d6e936
Role pdns-admin: make dns prefix configurable; add lets encrypt snippet to nginx template
2019-03-22 20:33:32 +01:00
Tobias Hachmer
d7d456d158
Role wireguard: flush handler after configuration
2019-03-22 19:45:26 +01:00
Julian Labus
36a1335d9b
Role service-domain-director: update config
2019-03-22 13:41:16 +01:00
Julian Labus
165e22ab5e
Role service-nginx-firmware: add proxy to downloads.openwrt.org
2019-03-21 15:49:01 +01:00
Tobias Hachmer
869dd5b62a
Migrate internal DNS master to PowerDNS
...
* Add playbook dns to manage internal dns master servers
* Add role to manage PowerDNS Admin Web Frontend for PowerDNS
* Move dns zone related data from mesh list to a simpler dict with a simple zone list
* Update role service-bind-slave
* Update Readme.md
* Add requirements.yml
* Update .gitignore
2019-03-20 19:43:11 +01:00
Tobias Hachmer
fe4415afcf
Role nodejs: make major version configurable
2019-03-20 19:25:12 +01:00
Julian Labus
6c3e8336c9
Role service-nginx: use $host instead of $server_name for redirects
2019-03-20 10:23:12 +01:00
Julian Labus
28717aec73
Role service-bird: add source IP to routes in table mwu
2019-03-20 10:21:38 +01:00
Julian Labus
a8784c80eb
Revert "Role service-bird-lg: update lgproxy.cfg for new p2p vpn links"
...
This reverts commit 2ca3fdd43e
2019-03-20 10:19:48 +01:00
Julian Labus
2ca3fdd43e
Role service-bird-lg: update lgproxy.cfg for new p2p vpn links
2019-03-19 17:03:02 +01:00
Tobias Hachmer
e4e8c0998f
Introduce p2p vpn link between all ffmwu servers via WireGuard for routing purpose.
...
* add jinja2 extension 'jinja2.ext.do' to ansible.cfg
* add host kichererbse.freifunk-mwu.de
* add new server_type 'mesh-service' and new host group 'ffmwu-mesh-services'
* use new loopback and anycast networks
* add role wireguard
* add role wireguard as dependency for roles network-routing + service-bird
* add playbook 'mesh-services'
2019-03-19 15:23:12 +01:00
Julian Labus
3e297ed09f
Revert "Role service-fastd-mesh: update fastd peer limit method"
...
This reverts commit 7bb4c241e2
2019-03-18 16:11:34 +01:00
Julian Labus
f9700c4dd8
Role service-ntpd: only run ntpdate on primary interface during if-up
2019-03-18 10:05:11 +01:00
Julian Labus
f43931649a
Role service-prometheus: FastdNoTraffic - check if clients are connected
2019-03-16 23:54:25 +01:00
Julian Labus
db509e43db
Role service-respondd: add version number
...
without a version number it is hard to filter out servers in meshviewer
2019-03-15 18:27:33 +01:00
Julian Labus
af832f3703
Role service-prometheus: fix broken rule FastdNoTraffic
2019-03-14 23:20:59 +01:00
Julian Labus
acaf0e63e6
Role server-basic: update unattended-upgrades pattern
2019-03-14 15:37:25 +01:00
Julian Labus
d87a6f877c
Roles: use environment instead of passing variable in shell command
2019-03-14 15:35:47 +01:00
Julian Labus
7d1289f811
Role service-fastd-mesh: restart fastd-exporter after changes
2019-03-11 10:34:25 +01:00
Julian Labus
7bb4c241e2
Role service-fastd-mesh: update fastd peer limit method
2019-03-08 14:04:51 +01:00
Julian Labus
c6be99258b
Roles: add service-domain-director
2019-03-06 17:16:34 +01:00
Julian Labus
721b278d3b
Roles: improve multidomain support
2019-03-02 18:12:56 +01:00
Julian Labus
4127e56524
Role service-prometheus: remove dep service-cpthook
2019-02-15 19:29:58 +01:00
Julian Labus
7a91bbaa2f
Role service-prometheus: simplify and move all files to role directory
2019-02-15 15:45:38 +01:00
Julian Labus
603f6af64d
Role service-prometheus: send alerts via IRC
2019-02-15 11:41:55 +01:00
Julian Labus
e29fd1c5d5
Roles: add service-cpthook
2019-02-15 11:39:48 +01:00
Julian Labus
3dbcb8f2c5
Roles: add service-nginx-openlayers
2019-02-13 11:57:16 +01:00
Julian Labus
026844de30
Role service-nginx-meshviewer: add linkList
2019-02-06 11:51:39 +01:00
Julian Labus
6d016c034c
Role service-fastd-mesh: remove peers-ffbin
...
remove the individual peers repo for ffbin after successful migration to
the multidomain firmware
2019-02-05 15:18:48 +01:00
Julian Labus
8767b0970b
Role service-nginx-meshviewer: update MapLayers
2019-02-01 10:37:12 +01:00
Julian Labus
d9863f3fa3
Role prometheus: bump versions
...
prometheus: 2.7.0
alertmanager: 1.6.0
2019-01-29 12:35:19 +01:00
Julian Labus
928e0bb826
fixup! Inventory: remove 1312 MTU fastd instances
2019-01-23 16:03:16 +01:00
Julian Labus
ccd3fbafc4
Role service-dhcpd: add control socket
2019-01-23 15:21:10 +01:00
Julian Labus
bc3af84cf8
Role network-routing: use same ip rules for table mwu on all hosts
2019-01-16 18:41:04 +01:00
Julian Labus
2880d72c00
Role service-grafana: update gpg key id
2019-01-14 22:43:45 +01:00
Julian Labus
28ba57aa49
Role service-yanic: use golang dep util
2019-01-14 22:24:20 +01:00
Julian Labus
8670f113ff
Role golang: install dep util
2019-01-14 22:17:14 +01:00
Julian Labus
1354a483bd
Role service-grafana: update apt repo
2019-01-09 14:39:50 +01:00
Tobias Hachmer
1be513fae9
Make variable http_domain_external in list element of meshes optional.
2018-12-30 23:39:41 +01:00
Julian Labus
7dac321cd1
Role service-respondd: start after fastd
...
fixes #18
2018-12-26 14:20:11 +01:00
Julian Labus
8ef5701add
Role service-nginx-meshviewer: update config.js
2018-12-21 11:59:10 +01:00
Julian Labus
d8177dec7c
Role service-prometheus: bump versions
2018-12-21 11:59:02 +01:00
Julian Labus
b06887fc7c
Role service-fastd-mesh: remove obsolete peer group servers
2018-12-12 21:24:37 +01:00
Julian Labus
7b9d3352e8
Role service-nginx: add internal addresses to known_hosts
2018-12-03 15:03:49 +01:00
Tobias Hachmer
38399e5b7a
Role service-bird: export anycast address on gateway, import anycast+loopback on other servers
2018-11-30 18:18:25 +01:00
Julian Labus
2100842bcb
Role service-prometheus: update versions
2018-11-28 14:08:15 +01:00
Julian Labus
5efd7d889e
Role service-nginx-meshviewer: enable HTTP/2
2018-11-28 10:59:53 +01:00
Julian Labus
ee5be5f477
Role service-prometheus: move auth in vhosts to location
2018-11-27 10:55:37 +01:00
