Commit graph

142 commits

Author SHA1 Message Date
Johanna Dorothea Reichmann
834bc9a9d7
update(redis): bump version to 6.2.6 2021-10-22 08:14:52 +02:00
Jadyn Emma Jaeger
b8562448be
feat(lego): Add support for using existing acme accounts 2021-10-21 09:24:13 +02:00
Jadyn Emma Jaeger
7d6c1840e1
feat(lego): Cleanup jinja2 2021-10-21 09:24:13 +02:00
Jadyn Emma Jaeger
ab24825928
docs(lego): Update documentation 2021-10-21 09:24:13 +02:00
Jadyn Emma Jaeger
8868c4e44d
feat(lego): Initial commit 2021-10-21 09:24:13 +02:00
Johanna Dorothea Reichmann
dd5d9a4ee4
feat(redis): allow configuring max allowed memory 2021-10-19 12:14:58 +02:00
Johanna Dorothea Reichmann
6f639e34dc
feat(redis): allow configuring bind ip and unix socket 2021-10-19 12:14:28 +02:00
Johanna Dorothea Reichmann
ab33387933
feat(redis): allow configuring docker network for container 2021-10-11 13:50:37 +02:00
Johanna Dorothea Reichmann
d1c5e83619
chore: update READMEs 2021-09-07 08:59:51 +02:00
Johanna Dorothea Reichmann
0fbb3bc6d0
chore(ldap): remove deprecated docker link usage 2021-09-06 06:51:07 +02:00
Jadyn Emma Jaeger
c02cbb5ef6
feat(user): add gecos support 2021-09-01 13:38:02 +02:00
Lars Kaiser
94e9338358
chore: disable check mode for hostname task 2021-07-19 14:19:59 +02:00
Johanna Dorothea Reichmann
e44e0ee329
chore(dns): allow pointing CNAMES to FQDNs 2021-06-15 15:08:00 +02:00
transcaffeine
e8db39ad82
chore(ldap): update container image location 2021-06-02 17:27:39 +02:00
transcaffeine
5fcd760f9f
update(ldap): bump version to 2.4.57-r1
Migitations for:
- CVE-2021-27212
- CVE-2020-36221
- CVE-2020-36222
- CVE-2020-36223
- CVE-2020-36224
- CVE-2020-36225
- CVE-2020-36226
- CVE-2020-36227
- CVE-2020-36228
- CVE-2020-36229
- CVE-2020-36230
- CVE-2020-25709
- CVE-2020-25710
2021-06-02 07:37:30 +02:00
transcaffeine
3b2c2b5b88
chore(ldap): move to ldap_attrs as ldap_attr is deprecated 2021-05-31 09:03:23 +02:00
transcaffeine
fef4a7ffe8
feat(ldap): support partial execution with prepare and deploy tags 2021-05-26 14:34:31 +02:00
transcaffeine
9fd7f2ec98
feat(redis): support partial execution with prepare and deploy tags 2021-05-26 14:31:49 +02:00
transcaffeine
d7ab89a455
feat(ssh): support partial execution with prepare and deploy tags 2021-05-26 14:31:24 +02:00
transcaffeine
7ae06507c1
feat(hostname): support partial execution with prepare and deploy tags 2021-05-26 14:30:51 +02:00
transcaffeine
3803a5931d
fix(ldap): indices declarations were syntactically wrong 2021-05-09 13:23:09 +02:00
transcaffeine
9e0508d006
fix(ldap): allow importing schemes which are included in the container already 2021-05-09 13:22:29 +02:00
transcaffeine
0de5fd8cda
feat(ldap): add role for managing openLDAP in a container 2021-05-03 12:03:38 +02:00
transcaffeine
ff4a212d1e
feat(ssh): allow specifying LogLevel 2021-04-28 14:12:10 +02:00
transcaffeine
2f8e53a6fb
fix(hostname): ensure hostname is the FQDN
Previously, the value was compared against `ansible_hostname`,
which only is the FQDN after the first reboot. This lead to the
monitoring not seeing the FQDN as the instance name.

This commit scrapes the hostname using the hostname command,
which is garantueed to return the current running hostname, and
then determines if it needs to be set at runtime.
2021-04-19 09:03:45 +02:00
transcaffeine
42744e0f25
docs: add READMEs to roles and add index of all roles 2021-03-31 10:04:34 +02:00
transcaffeine
1aa29f98d1
fix(redis): ensure idempotency is guaranteed 2021-03-23 10:52:20 +01:00
transcaffeine
3a218f4ac3
update(redis): bump version to 6.2.1 2021-03-11 10:52:58 +01:00
transcaffeine
3069df2a1d feat(redis): define healthchecks for container 2021-03-05 14:29:36 +01:00
transcaffeine
e11ea98d79
chore(hostname): hostname's changed status was reported wrongly 2021-02-26 09:24:41 +01:00
transcaffeine
5131e3b5e2
feat(dns): allow setting TXT records 2021-02-09 07:20:43 +01:00
transcaffeine
faf1f0bd90
fix(dns): dont set host ip if a target has only one type of IP
Previously, the role would set the host IP if a target
would only define an IPv4 address (f.ex.) and set the
IPv6 address to the host IP, which can be wrong.
2021-02-08 11:42:44 +01:00
transcaffeine
750a95b8f1
fix(hostname): avoid duplicating the hosts in /etc/hosts
Because the `blockinfile` module from ansible expects the `marker`
string to include `{mark}` case-sensetive, the entire block was
duplicated with each run.
2021-02-05 09:12:04 +01:00
transcaffeine
67affeb0e0
feat(dns): create role for dns management 2021-01-26 07:40:21 +01:00
transcaffeine
2a93b06d71
feat(hostname): manage hostnames and hosts 2021-01-25 11:47:21 +01:00
Jan Christian Grünhage
cf282336b2
chore: remove trailing whitespace 2021-01-22 21:10:10 +01:00
transcaffeine
bac766cb84
feat(ssh): configure presets (secure and bsi_recommended) for sshd 2020-11-19 11:58:18 +01:00
transcaffeine
8bd79bb458
feat(ssh): begin hardening 2020-11-16 09:27:50 +01:00
Johanna Dorothea Reichmann
29680902eb feat(redis): new role to deploy a redis container
Adds an ansible role which deploys the redis image from the docker
default library in a container, maps the data directory to the host and
uses a config which instructs redis to use a global password for AUTH.

With `redis_prefix`, a prefix can be specified to isolate multiple
instances on the same host.With a prefix like "matrix_", the user,
container-name and host data-directories get prefixed.
2020-10-09 13:34:39 +02:00
Vincent Wilke
951ca36ae3
feat(postgresql): add postgresql role 2020-09-14 15:40:09 +02:00
Vincent Wilke
b38011c0c4
feat(base playbook): import base roles 2020-09-14 15:38:33 +02:00
Vincent Wilke
e759f65ce7
chore: transfer project in collection 2020-08-28 17:48:01 +02:00