Commit graph

190 commits

Author SHA1 Message Date
Jadyn Emma Jaeger
2b998d030d
fix(gpg_secretstore): allow recrypt of all datatypes 2023-09-26 14:39:12 +02:00
Jadyn Emma Jaeger
8d12e83a45
feat(gpg_secretstore): add secretstore plugin and documentation 2023-09-26 14:39:10 +02:00
Johanna Dorothea Reichmann
515a07e81f
fix(lego): install acl package to allow becoming an unprivileged user
Without the ACL package installed, becoming an unprivileged ansible
user with an unprivileged connection user is not possible, as
it results in an 'invalid mode' error in chmod.
2023-09-23 19:36:37 +02:00
Sammy
53fb5ced5c
chore(ci): adjust for workflow changes 2023-09-18 09:11:36 +02:00
Sammy
c9c9a3a545
fix(redis): Don't use FQCN for role in playbook
This is neccessary because linting breaks on the GitHub CI environment
when the FQCN is used for a role in the same collection.
2023-09-18 09:11:33 +02:00
Jadyn Emma Jäger
0eb3432020
fix(dropbear_luks_unlock): Add config paths for latest version with support for Debian <=11 2023-09-16 13:31:13 +02:00
Sammy
9fe9f5c524
update(openldap): bump to 2.6.5 and switch to nexus 2023-09-05 10:11:02 +02:00
Sammy
4457b56528
docs: replace gitlab links with github 2023-09-05 10:10:57 +02:00
Johanna Dorothea Reichmann
64ee704401
chore(postgresql): allow to set maximum memory including swap and controlling the OOM killer 2023-08-28 09:27:57 +02:00
Sammy
491f853285
feat(user): remove home directory of removed users 2023-08-25 12:30:51 +02:00
Sammy
860006f9a3
chore: update CODEOWNERS 2023-08-16 14:18:45 +02:00
Sammy
9797d8fc25
fix(ci): inherit secrets when calling workflow 2023-07-17 14:11:40 +02:00
Sammy
c6ef342b82
fix(ci): fix workflow path 2023-07-17 13:56:17 +02:00
Sammy
5088def7f5
chore(ci): add workflow to add issues to infra project 2023-07-14 10:49:06 +02:00
Sammy
5d7acc5e49
chore(securitytxt): add restart-policy 2023-07-06 16:05:20 +02:00
Jan Christian Grünhage
a26cc0deeb
chore(ci): also run workflows on main branch 2023-07-05 13:33:44 +02:00
Jan Christian Grünhage
66b1b5b0aa
fix(lego): remove async execution, as it caused more problems than it ever helped 2023-07-05 13:31:34 +02:00
Jan Christian Grünhage
ebd6de9fff
update(postgresql): bump version to 13.11 2023-07-05 13:31:34 +02:00
Jan Christian Grünhage
c329437b21
update(lego): bump version to 4.12.3 2023-07-05 13:31:30 +02:00
Sammy
daa1572d96
chore(ci): add github action workflow (#2) 2023-07-04 12:19:35 +02:00
Johanna Dorothea Reichmann
2514d99cf9
update(lego): bump lego version to 4.12.1 2023-06-19 10:29:05 +02:00
Johanna Dorothea Reichmann
d3956c5cbe
feat(lego): add functionality for role to install its own dependencies 2023-06-19 10:29:00 +02:00
Johanna Dorothea Reichmann
12eb1aa48b
fix(lego): compare pubkey against merged configuration and provide a default key type 2023-06-19 10:28:56 +02:00
Jan Christian Grünhage
2ff5fac58d feat(securitytxt): initial role 2023-04-19 11:57:32 +02:00
Jan Christian Grünhage
ce8d3cd082 chore(redis): migrate to standardized container image variable structure 2023-03-10 10:28:44 +01:00
Jan Christian Grünhage
6e455089e4 chore(postgresql): migrate to standardized container image variable structure 2023-03-10 10:28:44 +01:00
Jan Christian Grünhage
ee42621a3c chore(ldap): migrate to standardized container image variable structure 2023-03-10 08:14:56 +01:00
Jan Christian Grünhage
6c20ba81b2 feat(lego): generate certificate metrics for the node_exporter textfile collector 2023-03-07 11:43:30 +01:00
Lars Kaiser
7ce4598d29
fix(lego): permissions for acme account 2023-02-28 17:57:35 +01:00
Lars Kaiser
fc44cea83b
fix(lego): build lego run command correctly 2023-02-28 17:51:54 +01:00
Jan Christian Grünhage
d489ec9a00
fix(user): don't remove existing groups if none are provided to be added 2023-02-23 14:35:17 +01:00
Jan Christian Grünhage
9ecdb38fb2
fix(user): only try to append existing groups to a user 2023-02-23 13:14:31 +01:00
Jan Christian Grünhage
e1996802ae
chore: update galaxy.yml 2023-02-22 18:35:21 +01:00
Jan Christian Grünhage
12f83dd41c
chore(redis): fix lints in role 2023-02-22 18:35:21 +01:00
Jan Christian Grünhage
354341647f
chore(pip): fix lints in role 2023-02-22 18:35:20 +01:00
Jan Christian Grünhage
0962644632
chore(lego): fix lints in role 2023-02-22 18:35:20 +01:00
Jan Christian Grünhage
4791ebd72f
chore(ldap): fix lints in role 2023-02-22 18:32:27 +01:00
Jan Christian Grünhage
b9d96bfea4
chore(postgresql_client_access): fix lints in role 2023-02-22 18:11:52 +01:00
Jan Christian Grünhage
2d48a63af4
chore(postgresql): fix lints in role 2023-02-22 18:11:52 +01:00
Jan Christian Grünhage
e4fb23e7c0
chore(hostname): fix lints in role 2023-02-21 21:21:50 +01:00
Jan Christian Grünhage
e4ef42f20a
chore(shell_tweaks): fix lints in role 2023-02-21 21:21:50 +01:00
Jan Christian Grünhage
80089460cd
chore(user): fix lints in role 2023-02-21 21:21:49 +01:00
Jan Christian Grünhage
6216dd313d
chore(docker): update role and update linting ignores 2023-02-21 21:21:33 +01:00
Jan Christian Grünhage
f37f17c033
chore(dropbear_luks_unlock): fix linting issues 2023-02-21 12:25:24 +01:00
Jan Christian Grünhage
1fe2cd4c31
chore(dns): remove role 2023-02-21 12:13:39 +01:00
Jan Christian Grünhage
35bc21a0c0
feat(ssh): support runit for service reloading 2023-02-20 14:50:10 +01:00
Jan Christian Grünhage
d0d73b9327
feat(ssh): allow not restricting algorithms 2023-02-20 14:49:03 +01:00
Jan Christian Grünhage
e035b4e6ab
chore(ssh): make ansible-lint happy 2023-02-20 14:48:59 +01:00
Evelyn Alicke
a31bbebfe1
feat(shell_tweaks): add role for terminfo files 2023-02-07 16:01:22 +01:00
Jan Christian Grünhage
66c99bbe14
feat(user): allow appending groups 2023-01-10 13:54:33 +01:00