tpiccioli
/
ansible-roles
forked from ISTI-ansible-roles/ansible-roles
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity
2,226 Commits 1 Branch 0 Tags 298 MiB
Commit Graph

84 Commits

Author SHA1 Message Date
Andrea Dell'Amico 8cd9dc556f Fix a wrong option in the LDAP template. 2019-11-04 18:54:21 +01:00
Andrea Dell'Amico 3108ff7ee9 Manage a generic CA cert file, provided via a URL. 2019-11-04 18:53:08 +01:00
Andrea Dell'Amico 68de4756c5 Fix the dependencies, for real. 2019-10-31 12:32:32 +01:00
Andrea Dell'Amico 1289862b9a Request the certificates as root to bind port 80. Install the certificates after having obtained them, by default. 2019-10-31 12:30:27 +01:00
Andrea Dell'Amico 29e44b27a8 Add a postgresql dependency, if the want a local db server. 2019-10-31 12:29:10 +01:00
Andrea Dell'Amico 07e7139b79 simplesaml virtualhost: set the real client ip address when behind a load balancer. 2019-10-31 11:18:21 +01:00
Andrea Dell'Amico e62d8b3ae6 Set the requested timezone on Ubuntu 18.04+ using the timedatectl client. 2019-10-30 13:54:01 +01:00
Andrea Dell'Amico f4904153b4 freeradius: create the DH file even when the certificate is not managed by letsencrypt. 2019-10-30 13:43:47 +01:00
Andrea Dell'Amico dc0cb3b15e simplesaml: do not create and install the certificates when they are externally provided. 2019-10-30 12:08:43 +01:00
Andrea Dell'Amico 02c75a7bde Give the option to specify an env file from the command line. 2019-10-30 10:38:01 +01:00
Andrea Dell'Amico 787cf219d6 Some env variables were wrong. 2019-10-30 10:32:41 +01:00
Andrea Dell'Amico b1fc6439e0 Install aptitude, fix some booleans, remove support for Debian 6. 2019-10-29 18:11:15 +01:00
Andrea Dell'Amico a7cffb1ffb Fixes to the powerdns configuration template needed by version 4.2. 2019-10-29 13:07:01 +01:00
Andrea Dell'Amico 1c0a42cdd8 Try to fix a problem with acme.sh when we ask for a certificate for the first time. 2019-10-29 13:01:36 +01:00
Andrea Dell'Amico 9913b65d09 Install git and socat on CentOS too. 2019-10-28 12:59:35 +01:00
Andrea Dell'Amico 53516b83cc acme.sh role: make it work on CentOS. 2019-10-28 12:51:13 +01:00
Andrea Dell'Amico 7adc22f1b1 Dismiss the unsupported letsencrypt-acmetool-client. Use acme-sh-client everywhere. Fix the acme.sh configuration when we do not use the dns provider. 2019-10-27 20:14:15 +01:00
Andrea Dell'Amico af2319c1df Fix the exit code of the keepalive notifiy script. 2019-10-26 11:49:12 +02:00
Andrea Dell'Amico 361f51e152 keepalived: differentiate the unicast ip address between configurations. 2019-10-25 19:50:17 +02:00
Andrea Dell'Amico d53f160afb Set the hostname identical to the inventory hostname if no 'hostname' variable has been defined. 2019-10-25 19:49:32 +02:00
Andrea Dell'Amico 76aa23c024 Fix the templates, a 'server' directive was missing. 2019-10-25 19:48:41 +02:00
Andrea Dell'Amico 974f7d893a Role that manages the ntp service. 2019-10-25 12:32:10 +02:00
Andrea Dell'Amico 69c00c4af7 Remove the ntp handler. 2019-10-25 11:39:43 +02:00
Andrea Dell'Amico b967322335 The ntp service is managed by its own role now. 2019-10-25 11:36:03 +02:00
Andrea Dell'Amico 6301321e16 Add support for imap email support to the redmine role. 2019-10-15 15:47:52 +02:00
Andrea Dell'Amico be108d20c6 elasticsearch: Fix the configuration when version is >= 7. 2019-10-14 12:02:40 +02:00
Andrea Dell'Amico c760fae448 Mediawiki: add tasks that initialize the wiki. Add support for a local memcached server. 2019-10-13 15:36:04 +02:00
Andrea Dell'Amico a262390283 mediawiki: Fix a couple of defaults. 2019-10-09 16:38:22 +02:00
Andrea Dell'Amico ede935b45d php-fpm: fix the path of the session files. 2019-10-09 16:25:05 +02:00
Andrea Dell'Amico 1ee45a1c54 Some changes to the mediawiki role, now with explicit dependencies. 2019-10-09 16:11:17 +02:00
Andrea Dell'Amico bd54d98a64 shinyproxy: increase the default wait time. 2019-10-08 14:32:40 +02:00
Andrea Dell'Amico 4785f2de9f nginx: support TLSv1.3 in the ssl template. 2019-10-07 13:17:38 +02:00
Andrea Dell'Amico b6a3d69d55 freeradius: fix the letsencrypt hook name. 2019-10-02 14:21:05 +02:00
Andrea Dell'Amico a628b04fb3 Remove the tasks that mess up with the docker certificates. 2019-09-25 03:24:16 +02:00
Andrea Dell'Amico c96a81a33c Generate rules for the docker swarm ports. 2019-09-25 03:17:42 +02:00
Andrea Dell'Amico cdb49768b0 Docker: override the systemd unit to enable the http socket needed by the external clients. 2019-09-25 03:16:29 +02:00
Andrea Dell'Amico 4920fb8473 shinyproxy: Fix the configuration to correctly set the container backend. 2019-09-25 03:14:47 +02:00
Andrea Dell'Amico 179b0014c2 Shinyproxy: support version 2.x. Support docker-swam. Depend on openjdk. 2019-09-24 18:29:02 +02:00
Andrea Dell'Amico 3d55f3d4ac Manage the main interface explicitly while dealing with the ipv6 settings. 2019-09-24 18:17:15 +02:00
Andrea Dell'Amico 751d24740c Docker: Manage a swarm. 2019-09-24 18:16:04 +02:00
Andrea Dell'Amico ba0a801b25 Various fixes to the CKAN role. 2019-09-14 16:08:07 +02:00
Andrea Dell'Amico 36149bc631 Make the python3-env role compatible with Ubuntu 18.04. 2019-09-06 18:02:22 +02:00
Andrea Dell'Amico af6fac7a36 Fix the javamelody installation on tomcat. 2019-09-04 18:25:31 +02:00
Andrea Dell'Amico b33cd02b66 Add support for javamelody. On tomcat 8, add commons-daemon.jar. Crash on out of memory when running with JDK 8+. 2019-08-14 18:46:03 +02:00
Andrea Dell'Amico 3a9875e458 Adapt the network interfaces check to the modern ifconfig output. 2019-08-10 17:34:49 +02:00
Andrea Dell'Amico a9f4b58f35 nagios nrpe: add additional network interface names that must be checked. 2019-08-10 17:34:10 +02:00
Andrea Dell'Amico 52211d86ce acmetool: pass the correct hooks directory from the command line. Fixes https://redmine-s2i2s.isti.cnr.it/issues/16 2019-08-07 19:08:51 +02:00
Andrea Dell'Amico a089bc612a openvpn: better management of the native ldap authentication plugin. 2019-08-07 18:43:35 +02:00
Andrea Dell'Amico b2b1270b85 keepalived: Add support for VRRP over unicast. Run the check script using an unprivileged user. 2019-08-07 18:40:48 +02:00
Andrea Dell'Amico 60128ad596 powerdns-admin: it now depends on nodejs, and the initialization procedure changed sightly. 2019-08-06 15:31:40 +02:00