 Andrea Dell'Amico
|
a054e94915
|
Change the permissions of /var/lib/clamav so that freshclam can write into it.
|
2020-01-11 16:32:46 +01:00 |
|
Andrea Dell'Amico
|
75dd8ca0cb
|
Fix the boolean that manages the network interfaces settings.
|
2020-01-08 18:49:32 +01:00 |
|
Andrea Dell'Amico
|
ad4ed35212
|
Manage the smtp and submission configurations with different variables.
|
2020-01-08 00:23:34 +01:00 |
|
Andrea Dell'Amico
|
ba319f76a5
|
php fpm pool: Log the remote client IP address correctly.
|
2020-01-06 17:00:19 +01:00 |
|
Andrea Dell'Amico
|
214cd1d03c
|
Fix the nginx includes filenames of the new onlyoffice package
|
2020-01-05 19:27:39 +01:00 |
|
Andrea Dell'Amico
|
9170706a03
|
roundcube: the available skins is now a variable. Configure enigma to support multihost as an option.
|
2019-12-31 15:31:19 +01:00 |
|
Andrea Dell'Amico
|
72810580ee
|
Refresh the CentOS php-fpm role.
|
2019-12-26 17:11:20 +01:00 |
|
Andrea Dell'Amico
|
e27747426b
|
Set the compatibility level on Ubuntu 18.04.
|
2019-12-19 11:21:16 +01:00 |
|
Andrea Dell'Amico
|
5ca80e638a
|
Force a postfix restart after a configuration change without waiting for the handlers to kick in. Add 'compatibility_level=2' on Ubuntu 18.04.
|
2019-12-19 11:15:41 +01:00 |
|
Andrea Dell'Amico
|
9d6370b776
|
Role that installs clamav end/or clamav-milter.
|
2019-12-18 15:47:03 +01:00 |
|
Andrea Dell'Amico
|
f6dcee2182
|
The TLS level is now a paremeter everywhere.
|
2019-12-18 15:46:23 +01:00 |
|
Andrea Dell'Amico
|
05e4cb9478
|
postfix: changes to the configuration that runs the smtpd server. Support milter and haproxy.
|
2019-12-17 19:55:06 +01:00 |
|
Andrea Dell'Amico
|
8dd7cba5e6
|
springboot: install systemd units on systemd based OSs.
|
2019-12-16 14:10:56 +01:00 |
|
Andrea Dell'Amico
|
5bad5d43fa
|
Add support for a customized logo and for enigma (pgp).
|
2019-12-13 13:43:03 +01:00 |
|
Andrea Dell'Amico
|
f2c7de88c9
|
postgresql role: some cleanup.
|
2019-12-12 21:01:51 +01:00 |
|
Andrea Dell'Amico
|
e6abbf1791
|
postfix relay: choose to not stop the outgoing smtp traffic.
|
2019-12-12 21:01:02 +01:00 |
|
Andrea Dell'Amico
|
a4106d3dce
|
add, commented, more tls options.
|
2019-12-12 21:00:07 +01:00 |
|
Andrea Dell'Amico
|
b2c25c0f32
|
iptables rules: add a new conditional.
|
2019-12-12 20:59:33 +01:00 |
|
Andrea Dell'Amico
|
730885f840
|
roundcube: configure the service, manage the plugins list and the configuration of some of them.
|
2019-12-12 20:58:36 +01:00 |
|
Andrea Dell'Amico
|
7c25a0c20c
|
nextcloud: fix the nginx virtualhost. The local postgresql server is now optional.
|
2019-12-12 20:57:02 +01:00 |
|
Andrea Dell'Amico
|
790a95482b
|
Redis: do not fail stopping the service before removing the packages.
|
2019-12-12 13:54:17 +01:00 |
|
Andrea Dell'Amico
|
b585baee9b
|
postgresql and postgresql db: fix the letsencrypt configuration, new default version.
|
2019-12-12 13:53:24 +01:00 |
|
Andrea Dell'Amico
|
a2ac312217
|
iptables: we can now set a global postresql set of rules.
|
2019-12-12 13:52:24 +01:00 |
|
Andrea Dell'Amico
|
63ca3a71a8
|
Install and configure tmpreaper if required, on Debian/Ubuntu.
|
2019-12-11 11:57:55 +01:00 |
|
Andrea Dell'Amico
|
a6bbd67e1c
|
keepalived: fix the default service check and the destination of the status file.
|
2019-12-09 14:04:10 +01:00 |
|
Andrea Dell'Amico
|
33d420eded
|
Merge branch 'master' of adellam/ansible-roles into master
|
2019-12-09 13:36:56 +01:00 |
|
Andrea Dell'Amico
|
2549e8d641
|
Add the role that manages additional disks to the bootstrap role.
|
2019-12-09 13:36:36 +01:00 |
 Franca Debole
|
20fa6c97ae
|
Merge branch 'master' of debfranca/ansible-roles into master
RoundCube added ...working on progress
|
2019-12-07 16:06:42 +01:00 |
|
Franca Debole
|
1920b3c149
|
Added comment on install roundcube
|
2019-12-06 17:33:08 +01:00 |
 Tommaso Piccioli
|
c6228c8255
|
crontab hourly step postgres backup
|
2019-12-06 17:33:06 +01:00 |
|
Franca Debole
|
cd435616c9
|
Added rouncube
|
2019-12-06 16:34:15 +01:00 |
|
Andrea Dell'Amico
|
3a64850c80
|
Postfix role that aims to be general purpose.
|
2019-12-05 18:35:55 +01:00 |
|
Andrea Dell'Amico
|
ac16f86970
|
Apache: Fix some conditionals.
|
2019-12-05 18:32:22 +01:00 |
|
Andrea Dell'Amico
|
32695a0a33
|
Debian/Ubuntu: autoclean and autoremove packages when dist-upgrading.
|
2019-11-21 18:13:06 +01:00 |
|
Andrea Dell'Amico
|
58e596ed5d
|
Force a cert request when something changed.
|
2019-11-21 14:49:03 +01:00 |
|
Andrea Dell'Amico
|
747c551c00
|
Role that installs an unconfigured dovecot service, managing firewall rules and letenscrypt hook accondingly.
|
2019-11-20 18:51:56 +01:00 |
|
Andrea Dell'Amico
|
9b4f3d3d46
|
Remove duplicates from the acme.sh env. Add tags that permit to install the scripts without executing them.
|
2019-11-20 13:24:45 +01:00 |
|
Andrea Dell'Amico
|
1bcd77e306
|
Give the option of managing some SELinux properties in the bootstrap tasks.
|
2019-11-19 18:56:17 +01:00 |
|
Andrea Dell'Amico
|
27a82ad239
|
Manage the postgresql firewalld rule directly in the postgresql role.
|
2019-11-19 13:48:53 +01:00 |
|
Andrea Dell'Amico
|
659e50755e
|
Add a specific tag to the task that installs the acme.sh account file.
|
2019-11-15 16:19:37 +01:00 |
|
Andrea Dell'Amico
|
88610faf0c
|
Give the ability to change the negative cache ttl.
|
2019-11-12 13:47:13 +01:00 |
|
Andrea Dell'Amico
|
faf5b50aef
|
acme.sh: request a certificate when the configuration did not change but no certificate is present.
|
2019-11-08 16:42:28 +01:00 |
|
Andrea Dell'Amico
|
9b5acb19b3
|
unbound: manage the use of stub zones.
|
2019-11-08 11:37:49 +01:00 |
|
Andrea Dell'Amico
|
9687e342c8
|
powerdns: Fix the also_notify template variable.
|
2019-11-07 17:45:28 +01:00 |
|
Andrea Dell'Amico
|
8cd9dc556f
|
Fix a wrong option in the LDAP template.
|
2019-11-04 18:54:21 +01:00 |
|
Andrea Dell'Amico
|
3108ff7ee9
|
Manage a generic CA cert file, provided via a URL.
|
2019-11-04 18:53:08 +01:00 |
|
Andrea Dell'Amico
|
d1b27304f3
|
Fix some boolean conditionals.
|
2019-11-02 17:25:46 +01:00 |
|
Andrea Dell'Amico
|
23921aa74a
|
Fix some boolean checks.
|
2019-11-02 17:06:32 +01:00 |
|
Andrea Dell'Amico
|
68de4756c5
|
Fix the dependencies, for real.
|
2019-10-31 12:32:32 +01:00 |
|
Andrea Dell'Amico
|
1289862b9a
|
Request the certificates as root to bind port 80. Install the certificates after having obtained them, by default.
|
2019-10-31 12:30:27 +01:00 |
|
Andrea Dell'Amico
|
29e44b27a8
|
Add a postgresql dependency, if the want a local db server.
|
2019-10-31 12:29:10 +01:00 |
|
Andrea Dell'Amico
|
440a783369
|
Configure the firewall before trying to get the X509 certificates.
|
2019-10-31 12:21:17 +01:00 |
|
Andrea Dell'Amico
|
07e7139b79
|
simplesaml virtualhost: set the real client ip address when behind a load balancer.
|
2019-10-31 11:18:21 +01:00 |
|
Andrea Dell'Amico
|
e62d8b3ae6
|
Set the requested timezone on Ubuntu 18.04+ using the timedatectl client.
|
2019-10-30 13:54:01 +01:00 |
|
Andrea Dell'Amico
|
f4904153b4
|
freeradius: create the DH file even when the certificate is not managed by letsencrypt.
|
2019-10-30 13:43:47 +01:00 |
|
Andrea Dell'Amico
|
dc0cb3b15e
|
simplesaml: do not create and install the certificates when they are externally provided.
|
2019-10-30 12:08:43 +01:00 |
|
Andrea Dell'Amico
|
02c75a7bde
|
Give the option to specify an env file from the command line.
|
2019-10-30 10:38:01 +01:00 |
|
Andrea Dell'Amico
|
787cf219d6
|
Some env variables were wrong.
|
2019-10-30 10:32:41 +01:00 |
|
Andrea Dell'Amico
|
b1fc6439e0
|
Install aptitude, fix some booleans, remove support for Debian 6.
|
2019-10-29 18:11:15 +01:00 |
|
Andrea Dell'Amico
|
a7cffb1ffb
|
Fixes to the powerdns configuration template needed by version 4.2.
|
2019-10-29 13:07:01 +01:00 |
|
Andrea Dell'Amico
|
1c0a42cdd8
|
Try to fix a problem with acme.sh when we ask for a certificate for the first time.
|
2019-10-29 13:01:36 +01:00 |
|
Andrea Dell'Amico
|
6bd05fe9cc
|
Add defaults to the task that associates zones and interfaces.
|
2019-10-28 17:36:44 +01:00 |
|
Andrea Dell'Amico
|
4b5809f4b1
|
Set the hostname as defined in the inventory.
|
2019-10-28 17:36:06 +01:00 |
|
Andrea Dell'Amico
|
9913b65d09
|
Install git and socat on CentOS too.
|
2019-10-28 12:59:35 +01:00 |
|
Andrea Dell'Amico
|
53516b83cc
|
acme.sh role: make it work on CentOS.
|
2019-10-28 12:51:13 +01:00 |
|
Andrea Dell'Amico
|
bcc0e96c5c
|
CentOS: use the acme.sh role.
|
2019-10-28 12:49:15 +01:00 |
|
Andrea Dell'Amico
|
7adc22f1b1
|
Dismiss the unsupported letsencrypt-acmetool-client. Use acme-sh-client everywhere. Fix the acme.sh configuration when we do not use the dns provider.
|
2019-10-27 20:14:15 +01:00 |
|
Andrea Dell'Amico
|
af2319c1df
|
Fix the exit code of the keepalive notifiy script.
|
2019-10-26 11:49:12 +02:00 |
|
Andrea Dell'Amico
|
361f51e152
|
keepalived: differentiate the unicast ip address between configurations.
|
2019-10-25 19:50:17 +02:00 |
|
Andrea Dell'Amico
|
d53f160afb
|
Set the hostname identical to the inventory hostname if no 'hostname' variable has been defined.
|
2019-10-25 19:49:32 +02:00 |
|
Andrea Dell'Amico
|
76aa23c024
|
Fix the templates, a 'server' directive was missing.
|
2019-10-25 19:48:41 +02:00 |
|
Andrea Dell'Amico
|
974f7d893a
|
Role that manages the ntp service.
|
2019-10-25 12:32:10 +02:00 |
|
Andrea Dell'Amico
|
d812967a1e
|
RH/CentOS: use its own role for ntp.
|
2019-10-25 11:55:14 +02:00 |
|
Andrea Dell'Amico
|
69c00c4af7
|
Remove the ntp handler.
|
2019-10-25 11:39:43 +02:00 |
|
Andrea Dell'Amico
|
b967322335
|
The ntp service is managed by its own role now.
|
2019-10-25 11:36:03 +02:00 |
|
Andrea Dell'Amico
|
e97bb066e8
|
KVM host: install cloud-utils. Download the cloud images of CentOS 7 and Ubuntu Bionic.
|
2019-10-24 19:31:41 +02:00 |
|
Andrea Dell'Amico
|
6301321e16
|
Add support for imap email support to the redmine role.
|
2019-10-15 15:47:52 +02:00 |
|
Andrea Dell'Amico
|
be108d20c6
|
elasticsearch: Fix the configuration when version is >= 7.
|
2019-10-14 12:02:40 +02:00 |
|
Andrea Dell'Amico
|
c760fae448
|
Mediawiki: add tasks that initialize the wiki. Add support for a local memcached server.
|
2019-10-13 15:36:04 +02:00 |
|
Andrea Dell'Amico
|
a262390283
|
mediawiki: Fix a couple of defaults.
|
2019-10-09 16:38:22 +02:00 |
|
Andrea Dell'Amico
|
ede935b45d
|
php-fpm: fix the path of the session files.
|
2019-10-09 16:25:05 +02:00 |
|
Andrea Dell'Amico
|
1ee45a1c54
|
Some changes to the mediawiki role, now with explicit dependencies.
|
2019-10-09 16:11:17 +02:00 |
|
Andrea Dell'Amico
|
bd54d98a64
|
shinyproxy: increase the default wait time.
|
2019-10-08 14:32:40 +02:00 |
|
Andrea Dell'Amico
|
4785f2de9f
|
nginx: support TLSv1.3 in the ssl template.
|
2019-10-07 13:17:38 +02:00 |
|
Andrea Dell'Amico
|
1b75b0bf94
|
Fix the KVM tasks.
|
2019-10-04 18:54:27 +02:00 |
|
Andrea Dell'Amico
|
b6a3d69d55
|
freeradius: fix the letsencrypt hook name.
|
2019-10-02 14:21:05 +02:00 |
|
Andrea Dell'Amico
|
a628b04fb3
|
Remove the tasks that mess up with the docker certificates.
|
2019-09-25 03:24:16 +02:00 |
|
Andrea Dell'Amico
|
c96a81a33c
|
Generate rules for the docker swarm ports.
|
2019-09-25 03:17:42 +02:00 |
|
Andrea Dell'Amico
|
cdb49768b0
|
Docker: override the systemd unit to enable the http socket needed by the external clients.
|
2019-09-25 03:16:29 +02:00 |
|
Andrea Dell'Amico
|
4920fb8473
|
shinyproxy: Fix the configuration to correctly set the container backend.
|
2019-09-25 03:14:47 +02:00 |
|
Andrea Dell'Amico
|
179b0014c2
|
Shinyproxy: support version 2.x. Support docker-swam. Depend on openjdk.
|
2019-09-24 18:29:02 +02:00 |
|
Andrea Dell'Amico
|
3d55f3d4ac
|
Manage the main interface explicitly while dealing with the ipv6 settings.
|
2019-09-24 18:17:15 +02:00 |
|
Andrea Dell'Amico
|
751d24740c
|
Docker: Manage a swarm.
|
2019-09-24 18:16:04 +02:00 |
|
Andrea Dell'Amico
|
ba0a801b25
|
Various fixes to the CKAN role.
|
2019-09-14 16:08:07 +02:00 |
|
Andrea Dell'Amico
|
36149bc631
|
Make the python3-env role compatible with Ubuntu 18.04.
|
2019-09-06 18:02:22 +02:00 |
|
Andrea Dell'Amico
|
af6fac7a36
|
Fix the javamelody installation on tomcat.
|
2019-09-04 18:25:31 +02:00 |
|
Andrea Dell'Amico
|
b33cd02b66
|
Add support for javamelody. On tomcat 8, add commons-daemon.jar. Crash on out of memory when running with JDK 8+.
|
2019-08-14 18:46:03 +02:00 |
|
Andrea Dell'Amico
|
3a9875e458
|
Adapt the network interfaces check to the modern ifconfig output.
|
2019-08-10 17:34:49 +02:00 |
|
Andrea Dell'Amico
|
a9f4b58f35
|
nagios nrpe: add additional network interface names that must be checked.
|
2019-08-10 17:34:10 +02:00 |
|
Andrea Dell'Amico
|
52211d86ce
|
acmetool: pass the correct hooks directory from the command line. Fixes https://redmine-s2i2s.isti.cnr.it/issues/16
|
2019-08-07 19:08:51 +02:00 |
|
Andrea Dell'Amico
|
a089bc612a
|
openvpn: better management of the native ldap authentication plugin.
|
2019-08-07 18:43:35 +02:00 |
|
Andrea Dell'Amico
|
b2b1270b85
|
keepalived: Add support for VRRP over unicast. Run the check script using an unprivileged user.
|
2019-08-07 18:40:48 +02:00 |
|
Andrea Dell'Amico
|
60128ad596
|
powerdns-admin: it now depends on nodejs, and the initialization procedure changed sightly.
|
2019-08-06 15:31:40 +02:00 |
|
Andrea Dell'Amico
|
e6900dc4ae
|
Replace bind-caching-server with the more generic bind-nameserver.
|
2019-08-05 18:14:21 +02:00 |
|
Andrea Dell'Amico
|
2834abc140
|
grafana: Change the repository URL. Fix the apt: tasks.
|
2019-08-05 12:06:32 +02:00 |
|
Andrea Dell'Amico
|
bb1191d585
|
iptables: more flexible NAT rules.
|
2019-08-01 19:17:30 +02:00 |
|
Andrea Dell'Amico
|
c087d0f412
|
Fix a nagios task, where a loop was not correctly declared.
|
2019-07-30 13:13:47 +02:00 |
|
Andrea Dell'Amico
|
45fe30699b
|
Add some needed defaults to the python3 role.
|
2019-07-25 16:18:13 +02:00 |
|
Andrea Dell'Amico
|
460945caf4
|
freeradius: manage the letsencrypt certificates and some basic configuration option.
|
2019-07-17 17:55:47 +02:00 |
|
Andrea Dell'Amico
|
4f08e78d87
|
Unbound: add more cusomisable fields to the server template.
|
2019-07-17 12:37:43 +02:00 |
|
Andrea Dell'Amico
|
fd8c325d8e
|
Simple role that installs freeradius and a list of freeradius modules. The configuration must be part of another role or playbook.
|
2019-07-15 18:41:03 +02:00 |
|
Andrea Dell'Amico
|
c934734053
|
Fix the sftp chroot configuration.
|
2019-07-15 18:14:24 +02:00 |
|
Tommaso Piccioli
|
9d9f380ebf
|
variable name fix
|
2019-07-10 13:05:44 +02:00 |
|
Tommaso Piccioli
|
f3651be98d
|
minor fix
|
2019-07-10 12:53:15 +02:00 |
|
Tommaso Piccioli
|
0ef75e20f1
|
allow remote control from localhost
|
2019-07-10 12:11:10 +02:00 |
|
Andrea Dell'Amico
|
56c7fd5b17
|
openvpn: restart the service after a certificate renewal.
|
2019-07-03 11:29:51 +02:00 |
|
Andrea Dell'Amico
|
0d0e4ca39f
|
mysql: disable reverse name resolution by default.
|
2019-07-02 10:41:41 +02:00 |
|
Andrea Dell'Amico
|
a4c4a1c386
|
Fix the ssl ldif.
|
2019-06-30 15:50:35 +02:00 |
|
Andrea Dell'Amico
|
4ee9627f56
|
Immediately restart the nrpe service after a configuration change.
|
2019-06-27 18:36:36 +02:00 |
|
Andrea Dell'Amico
|
63d95a54b3
|
A 'block' directive was missing.
|
2019-06-24 18:33:09 +02:00 |
|
Andrea Dell'Amico
|
9fd5c932d5
|
Role that installs and configures a simplesaml instance.
|
2019-06-24 18:14:16 +02:00 |
|
Andrea Dell'Amico
|
a623f414ba
|
Additional cleanup of the php-related variables.
|
2019-06-24 12:23:52 +02:00 |
|
Andrea Dell'Amico
|
57998a207a
|
Change the default version.
|
2019-06-22 17:05:31 +02:00 |
|
Andrea Dell'Amico
|
869e783b01
|
Fix the nagios apt usage.
|
2019-06-13 13:33:49 +02:00 |
|
Andrea Dell'Amico
|
27ae09856c
|
Install the python3 ppa also on Ubuntu 16.04. Use the role to install packages on 18.04 too.
|
2019-06-11 19:15:27 +02:00 |
|
Andrea Dell'Amico
|
f44b5011c9
|
Set the 'jdk_default' variable in the openjdk role defaults.
|
2019-06-10 14:21:26 +02:00 |
|
Andrea Dell'Amico
|
f206ba68ef
|
Fix the prometheus systemd unit of the node and haproxy exporters. Again.
|
2019-06-10 14:03:10 +02:00 |
|
Andrea Dell'Amico
|
be33a29601
|
cleanup the python-env role.
|
2019-06-06 19:13:13 +02:00 |
|
Andrea Dell'Amico
|
d42f5c5b3c
|
Give the option to force a run of the pip fixer script, on Ubuntu Trusty.
|
2019-06-06 19:10:55 +02:00 |
|
Andrea Dell'Amico
|
de72fca3f7
|
prometheus node and haproxy exporter: fix the systemd unit.
|
2019-06-05 19:03:35 +02:00 |
|
Andrea Dell'Amico
|
0277b6a2be
|
update_r_packages: upgrade the dependencies of packaages installed from github without asking for confirmation.
|
2019-06-03 18:27:51 +02:00 |
|
Andrea Dell'Amico
|
0ac65ddd89
|
Fix the command line options of the haproxy exporter systemd unit.
|
2019-05-31 19:00:55 +02:00 |
|
Andrea Dell'Amico
|
a45761e931
|
Fix the prometheus user in the systemd service of the haproxy exporter.
|
2019-05-31 18:43:57 +02:00 |
|
Andrea Dell'Amico
|
2f3b0add6d
|
nagios_isti_plugdir renamed into nagios_local_plugdir.
|
2019-05-31 17:45:44 +02:00 |
|
Andrea Dell'Amico
|
6fab3bb2ef
|
Unbound: Make it work on Ubuntu bionic and systemd
|
2019-05-30 19:04:52 +02:00 |
|
Andrea Dell'Amico
|
ff7f2b6188
|
keepalived: do not install the PPA on Ubuntu bionic.
|
2019-05-30 18:18:26 +02:00 |
|
Andrea Dell'Amico
|
22051c8a21
|
Add the bootstrap roles and some tasks collections.
|
2019-05-15 01:23:45 +02:00 |
|
Andrea Dell'Amico
|
4cb34462d9
|
Add the CentOS roles. Losing history.
|
2019-05-15 01:22:27 +02:00 |
|
Andrea Dell'Amico
|
4870ab4789
|
split library/roles
|
2019-05-15 00:37:24 +02:00 |