Commit graph

233 commits

Author SHA1 Message Date
Johanna Dorothea Reichmann
e44e0ee329
chore(dns): allow pointing CNAMES to FQDNs 2021-06-15 15:08:00 +02:00
transcaffeine
e8db39ad82
chore(ldap): update container image location 2021-06-02 17:27:39 +02:00
transcaffeine
5fcd760f9f
update(ldap): bump version to 2.4.57-r1
Migitations for:
- CVE-2021-27212
- CVE-2020-36221
- CVE-2020-36222
- CVE-2020-36223
- CVE-2020-36224
- CVE-2020-36225
- CVE-2020-36226
- CVE-2020-36227
- CVE-2020-36228
- CVE-2020-36229
- CVE-2020-36230
- CVE-2020-25709
- CVE-2020-25710
2021-06-02 07:37:30 +02:00
transcaffeine
3b2c2b5b88
chore(ldap): move to ldap_attrs as ldap_attr is deprecated 2021-05-31 09:03:23 +02:00
transcaffeine
fef4a7ffe8
feat(ldap): support partial execution with prepare and deploy tags 2021-05-26 14:34:31 +02:00
transcaffeine
9fd7f2ec98
feat(redis): support partial execution with prepare and deploy tags 2021-05-26 14:31:49 +02:00
transcaffeine
d7ab89a455
feat(ssh): support partial execution with prepare and deploy tags 2021-05-26 14:31:24 +02:00
transcaffeine
7ae06507c1
feat(hostname): support partial execution with prepare and deploy tags 2021-05-26 14:30:51 +02:00
transcaffeine
3803a5931d
fix(ldap): indices declarations were syntactically wrong 2021-05-09 13:23:09 +02:00
transcaffeine
9e0508d006
fix(ldap): allow importing schemes which are included in the container already 2021-05-09 13:22:29 +02:00
transcaffeine
0de5fd8cda
feat(ldap): add role for managing openLDAP in a container 2021-05-03 12:03:38 +02:00
transcaffeine
ff4a212d1e
feat(ssh): allow specifying LogLevel 2021-04-28 14:12:10 +02:00
transcaffeine
2f8e53a6fb
fix(hostname): ensure hostname is the FQDN
Previously, the value was compared against `ansible_hostname`,
which only is the FQDN after the first reboot. This lead to the
monitoring not seeing the FQDN as the instance name.

This commit scrapes the hostname using the hostname command,
which is garantueed to return the current running hostname, and
then determines if it needs to be set at runtime.
2021-04-19 09:03:45 +02:00
transcaffeine
42744e0f25
docs: add READMEs to roles and add index of all roles 2021-03-31 10:04:34 +02:00
transcaffeine
1aa29f98d1
fix(redis): ensure idempotency is guaranteed 2021-03-23 10:52:20 +01:00
transcaffeine
3a218f4ac3
update(redis): bump version to 6.2.1 2021-03-11 10:52:58 +01:00
transcaffeine
3069df2a1d feat(redis): define healthchecks for container 2021-03-05 14:29:36 +01:00
transcaffeine
e11ea98d79
chore(hostname): hostname's changed status was reported wrongly 2021-02-26 09:24:41 +01:00
transcaffeine
5131e3b5e2
feat(dns): allow setting TXT records 2021-02-09 07:20:43 +01:00
transcaffeine
faf1f0bd90
fix(dns): dont set host ip if a target has only one type of IP
Previously, the role would set the host IP if a target
would only define an IPv4 address (f.ex.) and set the
IPv6 address to the host IP, which can be wrong.
2021-02-08 11:42:44 +01:00
transcaffeine
750a95b8f1
fix(hostname): avoid duplicating the hosts in /etc/hosts
Because the `blockinfile` module from ansible expects the `marker`
string to include `{mark}` case-sensetive, the entire block was
duplicated with each run.
2021-02-05 09:12:04 +01:00
transcaffeine
67affeb0e0
feat(dns): create role for dns management 2021-01-26 07:40:21 +01:00
transcaffeine
2a93b06d71
feat(hostname): manage hostnames and hosts 2021-01-25 11:47:21 +01:00
Jan Christian Grünhage
cf282336b2
chore: remove trailing whitespace 2021-01-22 21:10:10 +01:00
Johannes Becker
a18c544492 chore(submodules): use https instead of ssh 2020-12-30 12:12:19 +01:00
transcaffeine
bac766cb84
feat(ssh): configure presets (secure and bsi_recommended) for sshd 2020-11-19 11:58:18 +01:00
transcaffeine
8bd79bb458
feat(ssh): begin hardening 2020-11-16 09:27:50 +01:00
Johanna Dorothea Reichmann
29680902eb feat(redis): new role to deploy a redis container
Adds an ansible role which deploys the redis image from the docker
default library in a container, maps the data directory to the host and
uses a config which instructs redis to use a global password for AUTH.

With `redis_prefix`, a prefix can be specified to isolate multiple
instances on the same host.With a prefix like "matrix_", the user,
container-name and host data-directories get prefixed.
2020-10-09 13:34:39 +02:00
Vincent Wilke
951ca36ae3
feat(postgresql): add postgresql role 2020-09-14 15:40:09 +02:00
Vincent Wilke
b38011c0c4
feat(base playbook): import base roles 2020-09-14 15:38:33 +02:00
Vincent Wilke
e759f65ce7
chore: transfer project in collection 2020-08-28 17:48:01 +02:00
Niklas Zender
f029618224
chore(codeowners): add codeowners 2020-08-28 17:47:52 +02:00
Jan Christian Grünhage
287338976f initial commit 2019-10-17 15:18:21 +02:00