Commit graph

75 commits

Author SHA1 Message Date
Jan Christian Grünhage
db4644b995
fix(pip): resolve lints 2022-09-05 12:03:13 +02:00
Jan Christian Grünhage
718c064de8
fix(user): resolve lints 2022-09-05 12:03:12 +02:00
Jan Christian Grünhage
9aaa8912d4
fix(dropbear_luks_unlock): resolve lints 2022-09-05 12:03:12 +02:00
Jan Christian Grünhage
1da8ffafd4
fix(redis): resolve lints 2022-09-05 12:03:12 +02:00
Jan Christian Grünhage
d90937606d
fix(postgresql_client_access): resolve lints 2022-09-05 12:03:12 +02:00
Jan Christian Grünhage
46161c0ffc
fix(postgresql): resolve lints 2022-09-05 12:03:12 +02:00
Jan Christian Grünhage
c2283fe729
fix(lego): resolve lints 2022-09-05 12:03:12 +02:00
Jan Christian Grünhage
4d36e06af6
fix(ldap): resolve lints 2022-09-05 12:03:12 +02:00
Jan Christian Grünhage
8f2b50353a
fix(hostname): resolve lints 2022-09-05 12:03:11 +02:00
Jan Christian Grünhage
dd88cbb1ab
fix(dns): resolve lints 2022-09-05 12:03:11 +02:00
Jan Christian Grünhage
9c82e2354d
fix(ssh): resolve lints 2022-09-05 12:03:11 +02:00
Jan Christian Grünhage
6f2c44a4cc
fix(user): don't touch groups unless specifically asked 2022-09-02 09:13:33 +02:00
Jan Christian Grünhage
81a913193b
feat(user)!: major role refactor allowing easy user deprovisioning 2022-09-01 08:47:23 +02:00
Johanna Dorothea Reichmann
0bca34e14d
feat(ldap): allow overriding default command 2022-08-24 15:12:09 +02:00
Johanna Dorothea Reichmann
3995146df8
feat(ldap): allow mapping additional volumes 2022-08-24 14:35:20 +02:00
Johanna Dorothea Reichmann
4b2ddf34da
fix(postgresql): wait until action is succeeded 2022-08-11 08:44:56 +02:00
Jadyn Emma Jäger
a7aecb27a1
feat(ssh): add config options for more flexibility 2022-08-03 09:22:13 +02:00
Jan Christian Grünhage
13ef43dee1
fix(ldap): concat lists with jinja correctly 2022-07-28 11:20:25 +02:00
Johanna Dorothea Reichmann
e83ccf4b0a
chore(postgresql): retry task when database might still be starting 2022-07-05 06:34:38 +02:00
Jan Christian Grünhage
4facef01c1
update(docker): update role 2022-06-27 20:25:57 +02:00
Jan Christian Grünhage
c8e0aaf46a
fix(lego): SAN comparison was faulty 2022-06-20 21:47:28 +02:00
Lars Kaiser
0c0326d292
fix(lego): Provide post renewal script 2022-06-20 20:48:30 +02:00
Lukas Lihotzki
ad8e17e45e
feat(ssh): configurable address family 2022-04-01 14:42:54 +02:00
Jadyn Emma Jaeger
69ab727648
refactor(pip): rewrite pip-role 2022-01-20 11:33:00 +01:00
Johanna Dorothea Reichmann
ec4fcc1e51
feat(dropbear-luks-unlock): add ansible role for unlocking luks volumes via dropbear ssh initramfs module 2022-01-18 13:26:20 +01:00
Lars Kaiser
37670dfa56
fix(lego): issue new certs only when necessary
Make issuance more robust against failed ansible runs.
A new certificate will now be issued if there are no changes
to configuration, but the cert is missing.
2021-11-25 19:47:16 +01:00
Johanna Dorothea Reichmann
2f4cf0ae12
refactor(lego): correct mode checking, test binary existance before calling it, naming 2021-11-09 11:40:14 +01:00
Johanna Dorothea Reichmann
e43a3ffbe6
chore(lego): move systemd unit directives to the correct section, route lego output to journal 2021-11-09 11:40:13 +01:00
Johanna Dorothea Reichmann
b980e37177
feat(lego): allow configuring permissions of lego's certificate store folder 2021-11-09 11:38:44 +01:00
Lars Kaiser
84c8e7ca0d
feat: new role postgresql_client_access 2021-11-08 14:53:04 +01:00
Lars Kaiser
34ff7cefd7
feat: new postgresql role 2021-11-08 11:07:36 +01:00
Lars Kaiser
01d9d8532f
refactor: remove geerlingguy postgres role 2021-11-04 12:08:26 +01:00
Johanna Dorothea Reichmann
022cbbca6f
feat(redis): allow mounting extra container volumes 2021-11-01 09:07:58 +01:00
Johanna Dorothea Reichmann
834bc9a9d7
update(redis): bump version to 6.2.6 2021-10-22 08:14:52 +02:00
Jadyn Emma Jaeger
b8562448be
feat(lego): Add support for using existing acme accounts 2021-10-21 09:24:13 +02:00
Jadyn Emma Jaeger
7d6c1840e1
feat(lego): Cleanup jinja2 2021-10-21 09:24:13 +02:00
Jadyn Emma Jaeger
ab24825928
docs(lego): Update documentation 2021-10-21 09:24:13 +02:00
Jadyn Emma Jaeger
8868c4e44d
feat(lego): Initial commit 2021-10-21 09:24:13 +02:00
Johanna Dorothea Reichmann
dd5d9a4ee4
feat(redis): allow configuring max allowed memory 2021-10-19 12:14:58 +02:00
Johanna Dorothea Reichmann
6f639e34dc
feat(redis): allow configuring bind ip and unix socket 2021-10-19 12:14:28 +02:00
Johanna Dorothea Reichmann
ab33387933
feat(redis): allow configuring docker network for container 2021-10-11 13:50:37 +02:00
Johanna Dorothea Reichmann
d1c5e83619
chore: update READMEs 2021-09-07 08:59:51 +02:00
Johanna Dorothea Reichmann
0fbb3bc6d0
chore(ldap): remove deprecated docker link usage 2021-09-06 06:51:07 +02:00
Jadyn Emma Jaeger
c02cbb5ef6
feat(user): add gecos support 2021-09-01 13:38:02 +02:00
Lars Kaiser
94e9338358
chore: disable check mode for hostname task 2021-07-19 14:19:59 +02:00
Johanna Dorothea Reichmann
e44e0ee329
chore(dns): allow pointing CNAMES to FQDNs 2021-06-15 15:08:00 +02:00
transcaffeine
e8db39ad82
chore(ldap): update container image location 2021-06-02 17:27:39 +02:00
transcaffeine
5fcd760f9f
update(ldap): bump version to 2.4.57-r1
Migitations for:
- CVE-2021-27212
- CVE-2020-36221
- CVE-2020-36222
- CVE-2020-36223
- CVE-2020-36224
- CVE-2020-36225
- CVE-2020-36226
- CVE-2020-36227
- CVE-2020-36228
- CVE-2020-36229
- CVE-2020-36230
- CVE-2020-25709
- CVE-2020-25710
2021-06-02 07:37:30 +02:00
transcaffeine
3b2c2b5b88
chore(ldap): move to ldap_attrs as ldap_attr is deprecated 2021-05-31 09:03:23 +02:00
transcaffeine
fef4a7ffe8
feat(ldap): support partial execution with prepare and deploy tags 2021-05-26 14:34:31 +02:00