Commit graph

190 commits

Author SHA1 Message Date
Johanna Dorothea Reichmann
a545d20272
feat(lego): allow starting lego based on previous activation and adding jitter 2023-01-04 11:24:07 +01:00
Jadyn Emma Jäger
5e0dc5f41a
feat(user): Add password_lock parameter 2022-12-29 17:40:52 +01:00
Jan Christian Grünhage
9d284a239e
feat(lego): run certificate handler with async to speed up role execution 2022-12-20 14:58:04 +01:00
Jan Christian Grünhage
fd18fb48c3
fix(postgresql_client_access): flush handlers to ensure access is granted 2022-12-20 12:09:35 +01:00
Johanna Dorothea Reichmann
a6cf6afa8e
update(openldap): bump version to 2.6.3-r6 2022-12-08 21:11:05 +01:00
Lars Kaiser
25675008c2
feat(lego): add tags to tasks 2022-12-01 20:33:37 +01:00
Lars Kaiser
1715103831
fix(postgresql): change tags for some initializing tasks
When building an image, having those tasks in prepare would result in
the DB being initialized with a password, which would then be the same
on each host the image is rolled out to.

This commit prevents that from happening, the DB itself is initialized
in the deploy stage.
2022-12-01 20:30:15 +01:00
Lars Kaiser
724399522c
fix(postgresql): add tags to include_tasks 2022-11-22 13:02:36 +01:00
Johanna Dorothea Reichmann
ba4f7dd192
chore(lego): allow easy overriding of lego source server 2022-11-04 10:09:00 +01:00
Johanna Dorothea Reichmann
22b8256a63
feat(lego): allow pulling with HTTP basic auth credentials 2022-11-04 09:59:05 +01:00
Jan Christian Grünhage
9cef222fd0
chore: clone recursively in CI 2022-10-10 16:13:03 +02:00
Jan Christian Grünhage
268d360abd
update(ldap): bump version to 2.6.3-r1 2022-10-10 15:54:55 +02:00
Jan Christian Grünhage
a3db001ef0
chore: update gitlab paths 2022-10-10 15:54:55 +02:00
Jadyn Emma Jaeger
11678a1329
feat: Make linter happy 2022-09-26 14:46:36 +02:00
Jadyn Emma Jaeger
8e249f3b56
feat(ci): Add basic ansible-test-ci 2022-09-26 12:44:39 +02:00
Jan Christian Grünhage
6f2c44a4cc
fix(user): don't touch groups unless specifically asked 2022-09-02 09:13:33 +02:00
Jan Christian Grünhage
81a913193b
feat(user)!: major role refactor allowing easy user deprovisioning 2022-09-01 08:47:23 +02:00
Jan Christian Grünhage
a9832aa222
fix: resolve ansible-lint issues 2022-08-29 12:47:58 +02:00
Johanna Dorothea Reichmann
0bca34e14d
feat(ldap): allow overriding default command 2022-08-24 15:12:09 +02:00
Johanna Dorothea Reichmann
3995146df8
feat(ldap): allow mapping additional volumes 2022-08-24 14:35:20 +02:00
Johanna Dorothea Reichmann
4b2ddf34da
fix(postgresql): wait until action is succeeded 2022-08-11 08:44:56 +02:00
Jadyn Emma Jäger
a7aecb27a1
feat(ssh): add config options for more flexibility 2022-08-03 09:22:13 +02:00
Jan Christian Grünhage
13ef43dee1
fix(ldap): concat lists with jinja correctly 2022-07-28 11:20:25 +02:00
Johanna Dorothea Reichmann
e83ccf4b0a
chore(postgresql): retry task when database might still be starting 2022-07-05 06:34:38 +02:00
Jan Christian Grünhage
4facef01c1
update(docker): update role 2022-06-27 20:25:57 +02:00
Jan Christian Grünhage
c8e0aaf46a
fix(lego): SAN comparison was faulty 2022-06-20 21:47:28 +02:00
Lars Kaiser
0c0326d292
fix(lego): Provide post renewal script 2022-06-20 20:48:30 +02:00
Lukas Lihotzki
ad8e17e45e
feat(ssh): configurable address family 2022-04-01 14:42:54 +02:00
Jan Christian Grünhage
29a473d0ff fix: make linter happier 2022-02-21 20:09:32 +01:00
Jadyn Emma Jaeger
69ab727648
refactor(pip): rewrite pip-role 2022-01-20 11:33:00 +01:00
Johanna Dorothea Reichmann
a2fca9941c
chore: add dropbear-luks-unlock role to README 2022-01-18 13:26:24 +01:00
Johanna Dorothea Reichmann
ec4fcc1e51
feat(dropbear-luks-unlock): add ansible role for unlocking luks volumes via dropbear ssh initramfs module 2022-01-18 13:26:20 +01:00
Lars Kaiser
37670dfa56
fix(lego): issue new certs only when necessary
Make issuance more robust against failed ansible runs.
A new certificate will now be issued if there are no changes
to configuration, but the cert is missing.
2021-11-25 19:47:16 +01:00
Johanna Dorothea Reichmann
2f4cf0ae12
refactor(lego): correct mode checking, test binary existance before calling it, naming 2021-11-09 11:40:14 +01:00
Johanna Dorothea Reichmann
e43a3ffbe6
chore(lego): move systemd unit directives to the correct section, route lego output to journal 2021-11-09 11:40:13 +01:00
Johanna Dorothea Reichmann
b980e37177
feat(lego): allow configuring permissions of lego's certificate store folder 2021-11-09 11:38:44 +01:00
Lars Kaiser
84c8e7ca0d
feat: new role postgresql_client_access 2021-11-08 14:53:04 +01:00
Lars Kaiser
34ff7cefd7
feat: new postgresql role 2021-11-08 11:07:36 +01:00
Lars Kaiser
01d9d8532f
refactor: remove geerlingguy postgres role 2021-11-04 12:08:26 +01:00
Johanna Dorothea Reichmann
022cbbca6f
feat(redis): allow mounting extra container volumes 2021-11-01 09:07:58 +01:00
Johanna Dorothea Reichmann
834bc9a9d7
update(redis): bump version to 6.2.6 2021-10-22 08:14:52 +02:00
Jadyn Emma Jaeger
b8562448be
feat(lego): Add support for using existing acme accounts 2021-10-21 09:24:13 +02:00
Jadyn Emma Jaeger
7d6c1840e1
feat(lego): Cleanup jinja2 2021-10-21 09:24:13 +02:00
Jadyn Emma Jaeger
ab24825928
docs(lego): Update documentation 2021-10-21 09:24:13 +02:00
Jadyn Emma Jaeger
8868c4e44d
feat(lego): Initial commit 2021-10-21 09:24:13 +02:00
Jan Christian Grünhage
ad29c16ab0 docs: add matrix badge to README 2021-10-19 14:16:50 +02:00
Johanna Dorothea Reichmann
dd5d9a4ee4
feat(redis): allow configuring max allowed memory 2021-10-19 12:14:58 +02:00
Johanna Dorothea Reichmann
6f639e34dc
feat(redis): allow configuring bind ip and unix socket 2021-10-19 12:14:28 +02:00
Johanna Dorothea Reichmann
ab33387933
feat(redis): allow configuring docker network for container 2021-10-11 13:50:37 +02:00
Johanna Dorothea Reichmann
4d56f25ab2
chore: remove unused, unmaintained playbook 2021-09-07 13:26:38 +02:00