Commit Graph

54 Commits

Author SHA1 Message Date
Andrea Dell'Amico 5b15e502db library/roles/ubuntu-deb-general/tasks/pki-basics.yml: Fix some undefined variables. 2016-09-30 18:39:28 +02:00
Andrea Dell'Amico dee341975b library/roles/ubuntu-deb-general/tasks/pki-basics.yml: Fix a conditional. 2016-09-13 13:48:00 +02:00
Andrea Dell'Amico c7c65cc0ac library/roles/openvpn: Support to two different kinds of ldap authentication: Via the openvpn-ldap-auth module (no posix groups support, and it crashes on ubuntu 14.04), and via an external perl script. 2016-09-07 17:25:38 +02:00
Andrea Dell'Amico ca2bbc03cd library/roles/ubuntu-deb-general/tasks/manage-ipv6-status.yml: Simplify the ipv6 enabling/disabling. 2016-08-08 18:17:52 +02:00
Andrea Dell'Amico 80605e8530 library/roles/sshd_config/defaults/main.yml: More restrictive defaults for the ssh daemon.
library/roles/ubuntu-deb-general/meta/main.yml: Always run sshd_config.
2016-08-02 16:04:44 +02:00
Andrea Dell'Amico c34cd379db library/roles/d4s_user_services_perms/defaults/main.yml, library/roles/ubuntu-deb-general/defaults/main.yml: Fix the same typo, in two different places. 2016-07-28 15:34:55 +02:00
Andrea Dell'Amico b0431d49ac library/roles/ubuntu-deb-general: Increase the root files descriptors limits to 8192.
library/roles/d4s_user_services_perms: Increase the d4science user files descriptor limits to 16000.
2016-07-26 12:51:34 +02:00
Andrea Dell'Amico 2500422287 library/roles/ubuntu-deb-general/defaults/main.yml: Do not run by default the task that disables services. 2016-07-12 16:37:27 +02:00
Andrea Dell'Amico 965d6bf6ae library/roles/ubuntu-deb-general/defaults/main.yml: Install xmlstarlet.
library/roles/smartgears: Change the default versions to the new production ones.
library/roles/smartgears/smartgears/tasks/smartgears-app.yml: Task that sets the loglevel. The default is WARN.
2016-07-07 17:39:27 +02:00
Andrea Dell'Amico 68f076b334 library/roles: nagios-plugins-contrib is not available on ubuntu 12.04 2016-06-21 14:03:02 +02:00
Andrea Dell'Amico 41004de7ee library/roles/openvpn, library/roles/ubuntu-deb-general: The CA file that contains both the letsencrypt full chain and the INFN ca is now installed by the ubuntu-deb-general role. 2016-06-13 16:55:25 +02:00
Tommaso Piccioli 6b711b6535 munin IP entry fixed 2016-06-06 17:04:01 +02:00
Andrea Dell'Amico 5e6406b1df d4science-ghn-cluster/group_vars/tagme: Install as smartgears node.
d4science-ghn-cluster/elasticsearch-cluster.yml: New elasticsearch node for the production environment.
d4science-ghn-cluster/smartgears-node*.yml: separate the standard and "upgrade" playbooks.
2016-05-06 16:27:32 +02:00
Andrea Dell'Amico 34963cc94d library/roles/letsencrypt-acmetool-client: Fix the initialization procedure.
library/roles/ubuntu-deb-general/tasks/pki-basics.yml: A link to the fullchain was missing.
2016-05-06 13:22:34 +02:00
Andrea Dell'Amico 19508aee71 library/roles/ubuntu-deb-general: Fix the certificates' link paths. 2016-05-06 11:42:06 +02:00
Andrea Dell'Amico 46b2d2cae8 library/roles/haproxy: Fixes to the letsencrypt scripts.
d4science-infrastructure/roles/redmine: support letsencrypt certificates on the dev redmine virtualhost.
library/roles/apache/tasks/apache-letsencrypt.yml: Support for letsencrypt (acme tool).
library/roles/ubuntu-deb-general/tasks/pki-basics.yml: Do not create the fake certificates if valid ones exist.
2016-04-22 18:03:57 +02:00
Andrea Dell'Amico b382db3b25 d4science-infrastructure/group_vars/ldap_liferay/all.yml: Enable ssl with the use of letsencrypt certificates.
library/roles/haproxy/files: Fix to the acme scripts, the certificate path has become /etc/pki/haproxy/haproxy.pem.
library/roles/openldap-server/tasks/openldap_initializazion.yml: Fix the certificates initialization.
library/roles/ubuntu-deb-general/tasks/pki-basics.yml: Create a self signed certificate while waiting the letsencrypt one.
2016-04-20 15:21:19 +02:00
Andrea Dell'Amico 7ba50614ff library/roles/ubuntu-deb-general/tasks/packages.yml: Install software-properties-common on Ubuntu. 2016-04-14 14:57:29 +02:00
Andrea Dell'Amico 8362be052b library/roles/ubuntu-deb-general: Create a generic directory where to store local SSL certificates. 2016-04-08 18:16:00 +02:00
Andrea Dell'Amico 123af8c4ea library/roles/data_disk/tasks/main.yml: Ansible 2 compatibility.
library/roles/postgresql: Ansible 2 compatibility.
library/roles/postgresql/tasks/manage_pg_db.yml: Add a task that activates extensions on the databases.
2016-03-07 17:43:37 +01:00
Andrea Dell'Amico 075f946517 library/roles/ssh-keys, library/roles/ubuntu-deb-general/tasks/pubkeys.yml: Fix the root ssh keys management. 2016-03-07 15:47:16 +01:00
Andrea Dell'Amico f95f3a53b7 d4science-ghn-cluster/group_vars/smartexecutor_dev: Manage the dev smartexecutors too. Two groups to split the devsec and devnext scopes.
d4science-ghn-cluster/roles/nginx-frontend: Better nginx virtualhost management.
library/roles: ansible 2 compatibility fixes.
2016-03-03 18:55:27 +01:00
Andrea Dell'Amico 75fd7d0574 library/roles/postgresql, library/roles/tomcat-multiple-instances, library/roles/tomcat, library/roles/ubuntu-deb-general: ansible 2 cleanup. 2016-03-02 16:44:43 +01:00
Andrea Dell'Amico 289fa488c3 library/roles: More ansible 2 cleanup. 2016-03-02 15:54:10 +01:00
Andrea Dell'Amico ccf86d4319 library/roles/ubuntu-deb-general/defaults/main.yml: A new package is needed to enable the https method for apt.
infrastructure-services: First bits of configuration for the influxdata server.
2016-02-12 10:55:49 +01:00
Andrea Dell'Amico 60a9759f89 library/roles/ubuntu-deb-general/tasks/disable-unneeded-services.yml: Ignore errors if the services are non existent. 2016-01-12 13:12:54 +01:00
Andrea Dell'Amico 40cd9400e3 library/roles/redmine/tasks: Change the ldap sync cron job so that it syncs the ldap groups too.
library/roles/ubuntu-deb-general/tasks/disable-unneeded-services.yml: Disable some services that we do not want running.
2015-12-27 13:52:58 +01:00
Andrea Dell'Amico 05c509a683 library/roles/ubuntu-deb-general/defaults/main.yml: Install curl by default. 2015-12-14 11:31:01 +01:00
Andrea Dell'Amico b6370fc22b library/roles/R/tasks/main.yml: Put packages on hold when we choose to install specific ones.
d4science-ghn-cluster/group_vars/dataminer_dev: Use dataminer release 1.0.0-3.9.0 and not the snapshot
d4science-ghn-cluster/roles/dataminer_app/templates/pom.xml.j2: Fix the pom to download the correct dependencies.
2015-12-09 15:53:32 +01:00
Andrea Dell'Amico 383e8ba256 library/roles/R: task to install R packages from github. Make some steps conditionals.
d4science-ghn-cluster/roles/dataminer_app: First part of the dataminer playbook.
2015-11-27 20:08:21 +01:00
Andrea Dell'Amico 4f7b300729 library/roles/ubuntu-deb-general: Some fixes.
xen/hosts: Remove dlib0x.
san: Fixes.
2015-11-08 21:56:27 +01:00
Tommaso Piccioli ced733bf1c Default backports in wheezy 2015-10-12 18:19:23 +02:00
Andrea Dell'Amico 5e6ddbf01a library/roles/ubuntu-deb-general/tasks/resolvconf.yml: Fix a typo. 2015-10-01 15:46:33 +02:00
Andrea Dell'Amico eeeb9eb811 d4science-ghn-cluster/EGI_playbooks: EGI playbooks run by packer go here. 2015-10-01 15:28:15 +02:00
Andrea Dell'Amico 049716ddf2 d4science-gcube/group_vars/redmine/all.yml: install the wiki-external plugin.
library/roles/redmine/defaults/main.yml: manage the wiki-external plugin.
library/roles/ubuntu-deb-general/tasks/manage_su_limits.yml: Change the pam su configuration to load pam_limits.
2015-09-07 16:08:11 +02:00
Andrea Dell'Amico 9e5653f85d library/roles/iptables/tasks/main.yml: ugly fix for the distribution versions mess.
library/roles/oracle-jdk/tasks/main.yml: now it installs on debian too.
library/roles/php-fpm: Support saving sessions on memcache. Needs memcache (there's a role for it).
library/roles/postfix-relay: Now it can be configured to permit unencrypted connections from the local clients.
library/roles/users: Fix the sudo stuff.
2015-09-03 02:36:22 +02:00
Andrea Dell'Amico 45e8cb392c library/roles/ubuntu-deb-general/tasks/main.yml: Execute the denyhosts part twice, with two different sets of conditionals (sigh) 2015-08-12 19:58:42 +02:00
Andrea Dell'Amico eeac0b7c6d library: Try to fix the denyhosts contidionals again. 2015-08-12 19:54:14 +02:00
Andrea Dell'Amico a7c764d959 xen: Fix the ganeti playbook. Install xenmap, do not install fprobe 2015-08-12 15:20:12 +02:00
Andrea Dell'Amico 372d856260 xen: add two nodes to the ganeti cluster. Try to fix the xm/xl mess. 2015-08-11 18:12:41 +02:00
Andrea Dell'Amico 4b06f84618 library/roles: Try and fix the fail2ban conditionals, again.
xen/host_vars/dlib28x.dom0.research-infrastructures.eu: add dlib28x.dom0.research-infrastructures.eu
2015-08-07 11:25:06 +02:00
Andrea Dell'Amico 954ee7c25a library/roles/ldap-client-config: Install a better configuration for the ldap clients.
library/roles/ubuntu-deb-general: Install the additional CA certs correctly.
2015-08-06 13:56:20 +02:00
Andrea Dell'Amico 72e03b7851 library/roles/fail2ban: Fix the tests on the distributions versions, again.
infrastructure-services/group_vars/images_provider/main.yml: Install the linux kernel headers, otherwise the virtualbox modules aren't compiled.
2015-08-01 12:57:03 +02:00
Andrea Dell'Amico bee4f5f420 infrastructure-services: a playbook that configures an HVM and installs vagrant and virtualbox on it. 2015-07-31 16:31:09 +02:00
Andrea Dell'Amico cd4ce10bca library/roles/ubuntu-deb-general: Various fixes 2015-07-28 19:27:25 +02:00
Andrea Dell'Amico 29aab30b45 library/roles/ubuntu-deb-general/tasks/packages.yml: use a specific tag to identify the task that installs the common packages
library/roles/d4s_user_services_perms/tasks/main.yml: Fix the acl tasks
2015-07-24 12:46:24 +02:00
Andrea Dell'Amico c20347be10 library/roles/ubuntu-deb-general/defaults/main.yml: Install sudo. Not installed by default on debian. 2015-07-23 22:05:06 +02:00
Andrea Dell'Amico d37840100e Various fixes to the library roles. 2015-07-13 14:17:42 +02:00
Andrea Dell'Amico ed8dbc873a library/roles/postfix-relay: Permit to specify the receivers maximum number
library/roles/ubuntu-deb-general: Remove exim.
2015-07-06 17:46:26 +02:00
Andrea Dell'Amico 6ed9a89ed5 library/roles/ubuntu-deb-general: do not configure munin by default anymore.
d4science-ghn-cluster: First bits of a couchdb cluster.
2015-06-19 19:35:37 +02:00