 Andrea Dell'Amico
|
3108ff7ee9
|
Manage a generic CA cert file, provided via a URL.
|
2019-11-04 18:53:08 +01:00 |
|
Andrea Dell'Amico
|
68de4756c5
|
Fix the dependencies, for real.
|
2019-10-31 12:32:32 +01:00 |
|
Andrea Dell'Amico
|
1289862b9a
|
Request the certificates as root to bind port 80. Install the certificates after having obtained them, by default.
|
2019-10-31 12:30:27 +01:00 |
|
Andrea Dell'Amico
|
29e44b27a8
|
Add a postgresql dependency, if the want a local db server.
|
2019-10-31 12:29:10 +01:00 |
|
Andrea Dell'Amico
|
07e7139b79
|
simplesaml virtualhost: set the real client ip address when behind a load balancer.
|
2019-10-31 11:18:21 +01:00 |
|
Andrea Dell'Amico
|
e62d8b3ae6
|
Set the requested timezone on Ubuntu 18.04+ using the timedatectl client.
|
2019-10-30 13:54:01 +01:00 |
|
Andrea Dell'Amico
|
f4904153b4
|
freeradius: create the DH file even when the certificate is not managed by letsencrypt.
|
2019-10-30 13:43:47 +01:00 |
|
Andrea Dell'Amico
|
dc0cb3b15e
|
simplesaml: do not create and install the certificates when they are externally provided.
|
2019-10-30 12:08:43 +01:00 |
|
Andrea Dell'Amico
|
02c75a7bde
|
Give the option to specify an env file from the command line.
|
2019-10-30 10:38:01 +01:00 |
|
Andrea Dell'Amico
|
787cf219d6
|
Some env variables were wrong.
|
2019-10-30 10:32:41 +01:00 |
|
Andrea Dell'Amico
|
b1fc6439e0
|
Install aptitude, fix some booleans, remove support for Debian 6.
|
2019-10-29 18:11:15 +01:00 |
|
Andrea Dell'Amico
|
a7cffb1ffb
|
Fixes to the powerdns configuration template needed by version 4.2.
|
2019-10-29 13:07:01 +01:00 |
|
Andrea Dell'Amico
|
1c0a42cdd8
|
Try to fix a problem with acme.sh when we ask for a certificate for the first time.
|
2019-10-29 13:01:36 +01:00 |
|
Andrea Dell'Amico
|
9913b65d09
|
Install git and socat on CentOS too.
|
2019-10-28 12:59:35 +01:00 |
|
Andrea Dell'Amico
|
53516b83cc
|
acme.sh role: make it work on CentOS.
|
2019-10-28 12:51:13 +01:00 |
|
Andrea Dell'Amico
|
7adc22f1b1
|
Dismiss the unsupported letsencrypt-acmetool-client. Use acme-sh-client everywhere. Fix the acme.sh configuration when we do not use the dns provider.
|
2019-10-27 20:14:15 +01:00 |
|
Andrea Dell'Amico
|
af2319c1df
|
Fix the exit code of the keepalive notifiy script.
|
2019-10-26 11:49:12 +02:00 |
|
Andrea Dell'Amico
|
361f51e152
|
keepalived: differentiate the unicast ip address between configurations.
|
2019-10-25 19:50:17 +02:00 |
|
Andrea Dell'Amico
|
d53f160afb
|
Set the hostname identical to the inventory hostname if no 'hostname' variable has been defined.
|
2019-10-25 19:49:32 +02:00 |
|
Andrea Dell'Amico
|
76aa23c024
|
Fix the templates, a 'server' directive was missing.
|
2019-10-25 19:48:41 +02:00 |
|
Andrea Dell'Amico
|
974f7d893a
|
Role that manages the ntp service.
|
2019-10-25 12:32:10 +02:00 |
|
Andrea Dell'Amico
|
69c00c4af7
|
Remove the ntp handler.
|
2019-10-25 11:39:43 +02:00 |
|
Andrea Dell'Amico
|
b967322335
|
The ntp service is managed by its own role now.
|
2019-10-25 11:36:03 +02:00 |
|
Andrea Dell'Amico
|
6301321e16
|
Add support for imap email support to the redmine role.
|
2019-10-15 15:47:52 +02:00 |
|
Andrea Dell'Amico
|
be108d20c6
|
elasticsearch: Fix the configuration when version is >= 7.
|
2019-10-14 12:02:40 +02:00 |
|
Andrea Dell'Amico
|
c760fae448
|
Mediawiki: add tasks that initialize the wiki. Add support for a local memcached server.
|
2019-10-13 15:36:04 +02:00 |
|
Andrea Dell'Amico
|
a262390283
|
mediawiki: Fix a couple of defaults.
|
2019-10-09 16:38:22 +02:00 |
|
Andrea Dell'Amico
|
ede935b45d
|
php-fpm: fix the path of the session files.
|
2019-10-09 16:25:05 +02:00 |
|
Andrea Dell'Amico
|
1ee45a1c54
|
Some changes to the mediawiki role, now with explicit dependencies.
|
2019-10-09 16:11:17 +02:00 |
|
Andrea Dell'Amico
|
bd54d98a64
|
shinyproxy: increase the default wait time.
|
2019-10-08 14:32:40 +02:00 |
|
Andrea Dell'Amico
|
4785f2de9f
|
nginx: support TLSv1.3 in the ssl template.
|
2019-10-07 13:17:38 +02:00 |
|
Andrea Dell'Amico
|
b6a3d69d55
|
freeradius: fix the letsencrypt hook name.
|
2019-10-02 14:21:05 +02:00 |
|
Andrea Dell'Amico
|
a628b04fb3
|
Remove the tasks that mess up with the docker certificates.
|
2019-09-25 03:24:16 +02:00 |
|
Andrea Dell'Amico
|
c96a81a33c
|
Generate rules for the docker swarm ports.
|
2019-09-25 03:17:42 +02:00 |
|
Andrea Dell'Amico
|
cdb49768b0
|
Docker: override the systemd unit to enable the http socket needed by the external clients.
|
2019-09-25 03:16:29 +02:00 |
|
Andrea Dell'Amico
|
4920fb8473
|
shinyproxy: Fix the configuration to correctly set the container backend.
|
2019-09-25 03:14:47 +02:00 |
|
Andrea Dell'Amico
|
179b0014c2
|
Shinyproxy: support version 2.x. Support docker-swam. Depend on openjdk.
|
2019-09-24 18:29:02 +02:00 |
|
Andrea Dell'Amico
|
3d55f3d4ac
|
Manage the main interface explicitly while dealing with the ipv6 settings.
|
2019-09-24 18:17:15 +02:00 |
|
Andrea Dell'Amico
|
751d24740c
|
Docker: Manage a swarm.
|
2019-09-24 18:16:04 +02:00 |
|
Andrea Dell'Amico
|
ba0a801b25
|
Various fixes to the CKAN role.
|
2019-09-14 16:08:07 +02:00 |
|
Andrea Dell'Amico
|
36149bc631
|
Make the python3-env role compatible with Ubuntu 18.04.
|
2019-09-06 18:02:22 +02:00 |
|
Andrea Dell'Amico
|
af6fac7a36
|
Fix the javamelody installation on tomcat.
|
2019-09-04 18:25:31 +02:00 |
|
Andrea Dell'Amico
|
b33cd02b66
|
Add support for javamelody. On tomcat 8, add commons-daemon.jar. Crash on out of memory when running with JDK 8+.
|
2019-08-14 18:46:03 +02:00 |
|
Andrea Dell'Amico
|
3a9875e458
|
Adapt the network interfaces check to the modern ifconfig output.
|
2019-08-10 17:34:49 +02:00 |
|
Andrea Dell'Amico
|
a9f4b58f35
|
nagios nrpe: add additional network interface names that must be checked.
|
2019-08-10 17:34:10 +02:00 |
|
Andrea Dell'Amico
|
52211d86ce
|
acmetool: pass the correct hooks directory from the command line. Fixes https://redmine-s2i2s.isti.cnr.it/issues/16
|
2019-08-07 19:08:51 +02:00 |
|
Andrea Dell'Amico
|
a089bc612a
|
openvpn: better management of the native ldap authentication plugin.
|
2019-08-07 18:43:35 +02:00 |
|
Andrea Dell'Amico
|
b2b1270b85
|
keepalived: Add support for VRRP over unicast. Run the check script using an unprivileged user.
|
2019-08-07 18:40:48 +02:00 |
|
Andrea Dell'Amico
|
60128ad596
|
powerdns-admin: it now depends on nodejs, and the initialization procedure changed sightly.
|
2019-08-06 15:31:40 +02:00 |
|
Andrea Dell'Amico
|
e6900dc4ae
|
Replace bind-caching-server with the more generic bind-nameserver.
|
2019-08-05 18:14:21 +02:00 |
|
Andrea Dell'Amico
|
2834abc140
|
grafana: Change the repository URL. Fix the apt: tasks.
|
2019-08-05 12:06:32 +02:00 |
|
Andrea Dell'Amico
|
bb1191d585
|
iptables: more flexible NAT rules.
|
2019-08-01 19:17:30 +02:00 |
|
Andrea Dell'Amico
|
c087d0f412
|
Fix a nagios task, where a loop was not correctly declared.
|
2019-07-30 13:13:47 +02:00 |
|
Andrea Dell'Amico
|
45fe30699b
|
Add some needed defaults to the python3 role.
|
2019-07-25 16:18:13 +02:00 |
|
Andrea Dell'Amico
|
460945caf4
|
freeradius: manage the letsencrypt certificates and some basic configuration option.
|
2019-07-17 17:55:47 +02:00 |
|
Andrea Dell'Amico
|
4f08e78d87
|
Unbound: add more cusomisable fields to the server template.
|
2019-07-17 12:37:43 +02:00 |
|
Andrea Dell'Amico
|
fd8c325d8e
|
Simple role that installs freeradius and a list of freeradius modules. The configuration must be part of another role or playbook.
|
2019-07-15 18:41:03 +02:00 |
|
Andrea Dell'Amico
|
c934734053
|
Fix the sftp chroot configuration.
|
2019-07-15 18:14:24 +02:00 |
 Tommaso Piccioli
|
9d9f380ebf
|
variable name fix
|
2019-07-10 13:05:44 +02:00 |
|
Tommaso Piccioli
|
f3651be98d
|
minor fix
|
2019-07-10 12:53:15 +02:00 |
|
Tommaso Piccioli
|
0ef75e20f1
|
allow remote control from localhost
|
2019-07-10 12:11:10 +02:00 |
|
Andrea Dell'Amico
|
56c7fd5b17
|
openvpn: restart the service after a certificate renewal.
|
2019-07-03 11:29:51 +02:00 |
|
Andrea Dell'Amico
|
0d0e4ca39f
|
mysql: disable reverse name resolution by default.
|
2019-07-02 10:41:41 +02:00 |
|
Andrea Dell'Amico
|
a4c4a1c386
|
Fix the ssl ldif.
|
2019-06-30 15:50:35 +02:00 |
|
Andrea Dell'Amico
|
4ee9627f56
|
Immediately restart the nrpe service after a configuration change.
|
2019-06-27 18:36:36 +02:00 |
|
Andrea Dell'Amico
|
63d95a54b3
|
A 'block' directive was missing.
|
2019-06-24 18:33:09 +02:00 |
|
Andrea Dell'Amico
|
9fd5c932d5
|
Role that installs and configures a simplesaml instance.
|
2019-06-24 18:14:16 +02:00 |
|
Andrea Dell'Amico
|
a623f414ba
|
Additional cleanup of the php-related variables.
|
2019-06-24 12:23:52 +02:00 |
|
Andrea Dell'Amico
|
57998a207a
|
Change the default version.
|
2019-06-22 17:05:31 +02:00 |
|
Andrea Dell'Amico
|
869e783b01
|
Fix the nagios apt usage.
|
2019-06-13 13:33:49 +02:00 |
|
Andrea Dell'Amico
|
27ae09856c
|
Install the python3 ppa also on Ubuntu 16.04. Use the role to install packages on 18.04 too.
|
2019-06-11 19:15:27 +02:00 |
|
Andrea Dell'Amico
|
f44b5011c9
|
Set the 'jdk_default' variable in the openjdk role defaults.
|
2019-06-10 14:21:26 +02:00 |
|
Andrea Dell'Amico
|
f206ba68ef
|
Fix the prometheus systemd unit of the node and haproxy exporters. Again.
|
2019-06-10 14:03:10 +02:00 |
|
Andrea Dell'Amico
|
be33a29601
|
cleanup the python-env role.
|
2019-06-06 19:13:13 +02:00 |
|
Andrea Dell'Amico
|
d42f5c5b3c
|
Give the option to force a run of the pip fixer script, on Ubuntu Trusty.
|
2019-06-06 19:10:55 +02:00 |
|
Andrea Dell'Amico
|
de72fca3f7
|
prometheus node and haproxy exporter: fix the systemd unit.
|
2019-06-05 19:03:35 +02:00 |
|
Andrea Dell'Amico
|
0277b6a2be
|
update_r_packages: upgrade the dependencies of packaages installed from github without asking for confirmation.
|
2019-06-03 18:27:51 +02:00 |
|
Andrea Dell'Amico
|
0ac65ddd89
|
Fix the command line options of the haproxy exporter systemd unit.
|
2019-05-31 19:00:55 +02:00 |
|
Andrea Dell'Amico
|
a45761e931
|
Fix the prometheus user in the systemd service of the haproxy exporter.
|
2019-05-31 18:43:57 +02:00 |
|
Andrea Dell'Amico
|
2f3b0add6d
|
nagios_isti_plugdir renamed into nagios_local_plugdir.
|
2019-05-31 17:45:44 +02:00 |
|
Andrea Dell'Amico
|
6fab3bb2ef
|
Unbound: Make it work on Ubuntu bionic and systemd
|
2019-05-30 19:04:52 +02:00 |
|
Andrea Dell'Amico
|
ff7f2b6188
|
keepalived: do not install the PPA on Ubuntu bionic.
|
2019-05-30 18:18:26 +02:00 |
|
Andrea Dell'Amico
|
4870ab4789
|
split library/roles
|
2019-05-15 00:37:24 +02:00 |