Commit Graph

132 Commits

Author SHA1 Message Date
Andrea Dell'Amico e27747426b Set the compatibility level on Ubuntu 18.04. 2019-12-19 11:21:16 +01:00
Andrea Dell'Amico 5ca80e638a Force a postfix restart after a configuration change without waiting for the handlers to kick in. Add 'compatibility_level=2' on Ubuntu 18.04. 2019-12-19 11:15:41 +01:00
Andrea Dell'Amico 9d6370b776 Role that installs clamav end/or clamav-milter. 2019-12-18 15:47:03 +01:00
Andrea Dell'Amico f6dcee2182 The TLS level is now a paremeter everywhere. 2019-12-18 15:46:23 +01:00
Andrea Dell'Amico 05e4cb9478 postfix: changes to the configuration that runs the smtpd server. Support milter and haproxy. 2019-12-17 19:55:06 +01:00
Andrea Dell'Amico 8dd7cba5e6 springboot: install systemd units on systemd based OSs. 2019-12-16 14:10:56 +01:00
Andrea Dell'Amico 5bad5d43fa Add support for a customized logo and for enigma (pgp). 2019-12-13 13:43:03 +01:00
Andrea Dell'Amico f2c7de88c9 postgresql role: some cleanup. 2019-12-12 21:01:51 +01:00
Andrea Dell'Amico e6abbf1791 postfix relay: choose to not stop the outgoing smtp traffic. 2019-12-12 21:01:02 +01:00
Andrea Dell'Amico a4106d3dce add, commented, more tls options. 2019-12-12 21:00:07 +01:00
Andrea Dell'Amico b2c25c0f32 iptables rules: add a new conditional. 2019-12-12 20:59:33 +01:00
Andrea Dell'Amico 730885f840 roundcube: configure the service, manage the plugins list and the configuration of some of them. 2019-12-12 20:58:36 +01:00
Andrea Dell'Amico 7c25a0c20c nextcloud: fix the nginx virtualhost. The local postgresql server is now optional. 2019-12-12 20:57:02 +01:00
Andrea Dell'Amico 790a95482b Redis: do not fail stopping the service before removing the packages. 2019-12-12 13:54:17 +01:00
Andrea Dell'Amico b585baee9b postgresql and postgresql db: fix the letsencrypt configuration, new default version. 2019-12-12 13:53:24 +01:00
Andrea Dell'Amico a2ac312217 iptables: we can now set a global postresql set of rules. 2019-12-12 13:52:24 +01:00
Andrea Dell'Amico 63ca3a71a8 Install and configure tmpreaper if required, on Debian/Ubuntu. 2019-12-11 11:57:55 +01:00
Andrea Dell'Amico a6bbd67e1c keepalived: fix the default service check and the destination of the status file. 2019-12-09 14:04:10 +01:00
Andrea Dell'Amico 33d420eded Merge branch 'master' of adellam/ansible-roles into master 2019-12-09 13:36:56 +01:00
Andrea Dell'Amico 2549e8d641 Add the role that manages additional disks to the bootstrap role. 2019-12-09 13:36:36 +01:00
Franca Debole 20fa6c97ae Merge branch 'master' of debfranca/ansible-roles into master
RoundCube added ...working on progress
2019-12-07 16:06:42 +01:00
Franca Debole 1920b3c149 Added comment on install roundcube 2019-12-06 17:33:08 +01:00
Tommaso Piccioli c6228c8255 crontab hourly step postgres backup 2019-12-06 17:33:06 +01:00
Franca Debole cd435616c9 Added rouncube 2019-12-06 16:34:15 +01:00
Andrea Dell'Amico 3a64850c80 Postfix role that aims to be general purpose. 2019-12-05 18:35:55 +01:00
Andrea Dell'Amico ac16f86970 Apache: Fix some conditionals. 2019-12-05 18:32:22 +01:00
Andrea Dell'Amico 32695a0a33 Debian/Ubuntu: autoclean and autoremove packages when dist-upgrading. 2019-11-21 18:13:06 +01:00
Andrea Dell'Amico 58e596ed5d Force a cert request when something changed. 2019-11-21 14:49:03 +01:00
Andrea Dell'Amico 747c551c00 Role that installs an unconfigured dovecot service, managing firewall rules and letenscrypt hook accondingly. 2019-11-20 18:51:56 +01:00
Andrea Dell'Amico 9b4f3d3d46 Remove duplicates from the acme.sh env. Add tags that permit to install the scripts without executing them. 2019-11-20 13:24:45 +01:00
Andrea Dell'Amico 1bcd77e306 Give the option of managing some SELinux properties in the bootstrap tasks. 2019-11-19 18:56:17 +01:00
Andrea Dell'Amico 27a82ad239 Manage the postgresql firewalld rule directly in the postgresql role. 2019-11-19 13:48:53 +01:00
Andrea Dell'Amico 659e50755e Add a specific tag to the task that installs the acme.sh account file. 2019-11-15 16:19:37 +01:00
Andrea Dell'Amico 88610faf0c Give the ability to change the negative cache ttl. 2019-11-12 13:47:13 +01:00
Andrea Dell'Amico faf5b50aef acme.sh: request a certificate when the configuration did not change but no certificate is present. 2019-11-08 16:42:28 +01:00
Andrea Dell'Amico 9b5acb19b3 unbound: manage the use of stub zones. 2019-11-08 11:37:49 +01:00
Andrea Dell'Amico 9687e342c8 powerdns: Fix the also_notify template variable. 2019-11-07 17:45:28 +01:00
Andrea Dell'Amico 8cd9dc556f Fix a wrong option in the LDAP template. 2019-11-04 18:54:21 +01:00
Andrea Dell'Amico 3108ff7ee9 Manage a generic CA cert file, provided via a URL. 2019-11-04 18:53:08 +01:00
Andrea Dell'Amico d1b27304f3 Fix some boolean conditionals. 2019-11-02 17:25:46 +01:00
Andrea Dell'Amico 23921aa74a Fix some boolean checks. 2019-11-02 17:06:32 +01:00
Andrea Dell'Amico 68de4756c5 Fix the dependencies, for real. 2019-10-31 12:32:32 +01:00
Andrea Dell'Amico 1289862b9a Request the certificates as root to bind port 80. Install the certificates after having obtained them, by default. 2019-10-31 12:30:27 +01:00
Andrea Dell'Amico 29e44b27a8 Add a postgresql dependency, if the want a local db server. 2019-10-31 12:29:10 +01:00
Andrea Dell'Amico 440a783369 Configure the firewall before trying to get the X509 certificates. 2019-10-31 12:21:17 +01:00
Andrea Dell'Amico 07e7139b79 simplesaml virtualhost: set the real client ip address when behind a load balancer. 2019-10-31 11:18:21 +01:00
Andrea Dell'Amico e62d8b3ae6 Set the requested timezone on Ubuntu 18.04+ using the timedatectl client. 2019-10-30 13:54:01 +01:00
Andrea Dell'Amico f4904153b4 freeradius: create the DH file even when the certificate is not managed by letsencrypt. 2019-10-30 13:43:47 +01:00
Andrea Dell'Amico dc0cb3b15e simplesaml: do not create and install the certificates when they are externally provided. 2019-10-30 12:08:43 +01:00
Andrea Dell'Amico 02c75a7bde Give the option to specify an env file from the command line. 2019-10-30 10:38:01 +01:00