Felix Stupp
b4eef0e28b
configure drone-ci on hatoria for git.banananet.work
4 years ago
Felix Stupp
b666ffb439
Removed temporary transfer tag
4 years ago
Felix Stupp
6301ed65fc
playbooks/dns: Moved main dns server from nvak to hatoria
4 years ago
Felix Stupp
0126d2f8ae
server/nextcloud: Add support for configuring default phone region
4 years ago
Felix Stupp
6919a6f7dc
dns/application: Added dependency python3-dnspython
...
Required for Ansible to configure dns records
4 years ago
Felix Stupp
f2dac5ca1f
nginx/php-pool: Allow configuring arbitary php_admin_values
...
- removing support for explicit configuration key for memory_limit
- replaced usage of memory_limit key with usage of admin_values key
4 years ago
Felix Stupp
98b7b55a53
Whitelist multiple services of proc's hidepid feature
...
Not only required for systemd-logind, but also for user@.service
4 years ago
Felix Stupp
15ad953131
common: Validate sshd_config before applying
4 years ago
Felix Stupp
e1a612966c
Hide running processes from users other than root
4 years ago
Felix Stupp
d0e9962d04
common: Add tag journald to certain tasks
4 years ago
Felix Stupp
edc4ccd4c3
Fix journald path from /systmed/ to /systemd/
4 years ago
Felix Stupp
065408fd9d
moved git.bnet from nvak to hatoria
4 years ago
Felix Stupp
c48c32f786
moved {firefox,rss,spotme}.bnet from nvak to hatoria
4 years ago
Felix Stupp
4c4c6529ad
server/spotme: Change default database user equal to system user
4 years ago
Felix Stupp
fe34e6111e
mysql/database: Added tag mysql_database to all tasks
4 years ago
Felix Stupp
9fd183bbac
mysql/database: rewrote usage of include_tasks to be better compatible with tags
4 years ago
Felix Stupp
288c4175d6
dns/entries: Add timeout of 8s after changing dns entries
...
so futher roles do not fail because external dns servers have not
received the change yet
4 years ago
Felix Stupp
6ae690aac3
transfered forumderschan.de from nvak to hatoria
4 years ago
Felix Stupp
933a094916
moved Stadtpiraten comments from nvak to hatoria
4 years ago
Felix Stupp
53d051824f
nvak: Remove turnips.banananet.work
4 years ago
Felix Stupp
455ca2ce09
nvak: transfered future projects phpmyadmin and banananetwork keys to hatoria
...
- Comments are already stored in hatorias playbook because this change
was committed by accident at b86d856b
4 years ago
Felix Stupp
abdc53c317
ansible.cfg: Always enable diff on playbook executions
4 years ago
Felix Stupp
18f374103a
hatoria hst20 nextcloud: updated app list
4 years ago
Felix Stupp
a734f6ef42
hatoria: Monitor public-known nameservers of forumderschan.de
4 years ago
Felix Stupp
0a5b3fc26f
Added new role misc/tg_monitor_cmd
4 years ago
Felix Stupp
7f9980903f
dns: Explicit defined main_nameserver and added to entries
4 years ago
Felix Stupp
6d061088a2
misc/ssh_tg_notify: Quoted TIMEOUT variable
4 years ago
Felix Stupp
6c547434b9
Renamed global_ssh_notify_telegram_bot_key to global_telegram_server_bot_key
4 years ago
Felix Stupp
5aa78edc12
dns: Assigned MailJet mail service to wg.banananet.work
4 years ago
Felix Stupp
03bc38ff78
playbooks/dns: Added section for managing arbitary entries
4 years ago
Felix Stupp
8413cbd9cc
Added role ext_mail/mailjet
4 years ago
Felix Stupp
52c03dc9d2
Added python3-yaml to common packages
4 years ago
Felix Stupp
43cb8f0a5e
hatoria: Removed ransomware_detection because of current problems
...
See https://github.com/undo-ransomware/ransomware_detection/issues/48#issue-763599989
4 years ago
Felix Stupp
f2c5aedc52
server/nextcloud: Add extract_app_list helper script
4 years ago
Felix Stupp
10dab39328
Transfered WG and HST21 Nextcloud instances from nvak to hatoria
4 years ago
Felix Stupp
0164e4810b
server/nextcloud: Remove not required comment on lost_password_link
...
Feature already explained in another comment above
4 years ago
Felix Stupp
a23e80abc1
server/nextcloud: Delete no longer required install_nextcloud.sh script
4 years ago
Felix Stupp
09cd9782a9
Added roles server/drone.io/{runner,server}
4 years ago
Felix Stupp
398ed9084c
Added role docker/compose-git
4 years ago
Felix Stupp
c8fdc4fae9
account: Configure authorized_keys using authorized_key module
...
- also restricts .ssh directory only to user
- restriction was automatically applied by authorized_keys module before
- more restriction is not harmful
- this restriction ensures indempotency while using the authorized_keys module
4 years ago
Felix Stupp
0a8ee3983d
group_vars/all: Changed default dns servers to normal Quad9
...
- in distinction to Quad9 servers supporting/using EDNS
- the default servers have EDNS disabled
4 years ago
Felix Stupp
f825787dd6
docker/application: Configure dns and log-driver of daemon
4 years ago
Felix Stupp
e9651f3b09
role misc/docker renamed to docker/application
4 years ago
Felix Stupp
7d240539c8
misc/docker: Reworked role to use docker package from distro repo
4 years ago
Felix Stupp
8725e65dfb
server/nextcloud: Fix re-importing config.json after changes
4 years ago
Felix Stupp
d281b238e7
Added group_vars for group hetzner_server
4 years ago
Felix Stupp
78dbfe3c8e
hosts.py: Added support for "&" operator in groups pattern
4 years ago
Felix Stupp
0b0135dd57
hosts.py: Generalized supported operations of group pattern
4 years ago
Felix Stupp
7d858342e2
Updated hosts.yml to support new inventory syntax
...
While reworked group structure to be more useful and powerful
4 years ago
Felix Stupp
827865b44c
hosts.py: Reworked inventory interpreter to support more powerful syntaxes
4 years ago