Commits · 1e9daf8330ebb6a6c6753892715970211cd60acc · Gruppo Sistemisti / servers-config · GitLab

15 Mar, 2018 40 commits
- nginx: no need to add www-data to any special group to read private ssl keys · 1e9daf83
  Mattia Rizzolo authored Mar 15, 2018
```
Signed-off-by: Mattia Rizzolo <mattia@debian.org>
```
  1e9daf83
- nginx: don't install the sudoers bit, ssl-keys role already takes care of it · 06b1979f
  Mattia Rizzolo authored Mar 15, 2018
```
Signed-off-by: Mattia Rizzolo <mattia@debian.org>
```
  06b1979f
14 Mar, 2018 40 commits
- ssl: add initial letsencrypt setup · 2486951d
  Mattia Rizzolo authored Mar 14, 2018
```
Signed-off-by: Mattia Rizzolo <mattia@debian.org>
```
  2486951d
- ssl: configure sudo · 6ce0c7dd
  Mattia Rizzolo authored Mar 14, 2018
```
Signed-off-by: Mattia Rizzolo <mattia@debian.org>
```
  6ce0c7dd
- get rid of cron.sh for now · 1a040c86
  Mattia Rizzolo authored Mar 14, 2018
```
Signed-off-by: Mattia Rizzolo <mattia@debian.org>
```
  1a040c86
- ssl: saner common setup · d10b7d30
  Mattia Rizzolo authored Mar 14, 2018
```
* give a home to ssl-keys users
* set the home in a variable (default /etc/ssl)
* use the ssl-cert group (already existing in all debians)
* get rid of that cron.sh script
* put the certs in {{ ssl_home }}/localcerts
Signed-off-by: Mattia Rizzolo <mattia@debian.org>
```
  d10b7d30
- ssl: don't create an extra group, ssl-cert already exists on all debians · d3a36a00
  Mattia Rizzolo authored Mar 14, 2018
```
Signed-off-by: Mattia Rizzolo <mattia@debian.org>
```
  d3a36a00
- get rid of systemd timer stuff · 14cf7fde
  Mattia Rizzolo authored Mar 14, 2018
```
Signed-off-by: Mattia Rizzolo <mattia@debian.org>
```
  14cf7fde
- ssl-keys: WIP · 31af58fd
  Pietro Albini authored Mar 02, 2018
  
  31af58fd
- common/users: fix run with -C · 576b268b
  Mattia Rizzolo authored Mar 14, 2018
```
Signed-off-by: Mattia Rizzolo <mattia@debian.org>
```
  576b268b
13 Mar, 2018 40 commits
- lxd: remove ipv6 networking · 5aecdc6a
  Pietro Albini authored Mar 13, 2018
  
  5aecdc6a
- roadhouse: deploy lxd · 42bd3d8b
  Pietro Albini authored Mar 13, 2018
  
  42bd3d8b
- lxd-container: fix wrong path in the bootstrap script · a1db9c75
  Pietro Albini authored Mar 13, 2018
  
  a1db9c75
- common/firewall: deploy · cdb902d1
  Pietro Albini authored Mar 13, 2018
  
  cdb902d1
- vars/all: add the janvitus user · b98790c4
  Pietro Albini authored Mar 13, 2018
  
  b98790c4
08 Mar, 2018 40 commits
- comment out things that are not yet deployed · f02ade9a
  Mattia Rizzolo authored Mar 08, 2018
```
Signed-off-by: Mattia Rizzolo <mattia@debian.org>
```
  f02ade9a
- roadhouse: apparently we don't need the facts just yet, so don't gather them · 3587f0be
  Mattia Rizzolo authored Mar 08, 2018
```
Signed-off-by: Mattia Rizzolo <mattia@debian.org>
```
  3587f0be
- common/apt: add etckeeper · e43f1178
  Mattia Rizzolo authored Mar 08, 2018
```
Signed-off-by: Mattia Rizzolo <mattia@debian.org>
```
  e43f1178
- Initial role for postfix and spamassassin · ad4e512a
  Mattia Rizzolo authored Mar 08, 2018
```
Signed-off-by: Mattia Rizzolo <mattia@debian.org>
```
  ad4e512a
03 Mar, 2018 40 commits
- common/apt install htop and python3 · 747af317
  Mattia Rizzolo authored Mar 03, 2018
```
Signed-off-by: Mattia Rizzolo <mattia@debian.org>
```
  747af317
02 Mar, 2018 40 commits
- common/users: re-add facts_common_admin_users · b0b01ae9
  Pietro Albini authored Mar 02, 2018
```
That's needed by the lxd role
```
  b0b01ae9
- create an account for pietro · 6e8b3158
  Mattia Rizzolo authored Mar 02, 2018
```
Signed-off-by: Mattia Rizzolo <mattia@debian.org>
```
  6e8b3158
- prod: temporary hardcode the new roadhouse.uit.o IP address · dd3204ab
  Mattia Rizzolo authored Mar 02, 2018
```
Signed-off-by: Mattia Rizzolo <mattia@debian.org>
```
  dd3204ab
- common/users: default state for ssh keys is 'present' · adff2c60
  Mattia Rizzolo authored Mar 02, 2018
```
Signed-off-by: Mattia Rizzolo <mattia@debian.org>
```
  adff2c60
- create a user for myself. · f6aaf735
  Mattia Rizzolo authored Mar 02, 2018
```
Signed-off-by: Mattia Rizzolo <mattia@debian.org>
```
  f6aaf735
- common/users: rework the ssh keys handling · 43c0a473
  Mattia Rizzolo authored Mar 02, 2018
```
Signed-off-by: Mattia Rizzolo <mattia@debian.org>
```
  43c0a473
- roadhouse: don't do any magic here, just list the admin usersnames · c25d39cc
  Mattia Rizzolo authored Mar 02, 2018
```
Signed-off-by: Mattia Rizzolo <mattia@debian.org>
```
  c25d39cc
- common/users: refactor the flow, set the users according to the handled_users variable · 3ff504a9
  Mattia Rizzolo authored Mar 02, 2018
```
Signed-off-by: Mattia Rizzolo <mattia@debian.org>
```
  3ff504a9
- vars: add a list of users handled by ansible · a57c8812
  Mattia Rizzolo authored Mar 02, 2018
```
Signed-off-by: Mattia Rizzolo <mattia@debian.org>
```
  a57c8812
- common/users: move the passwordless-sudo thing to the top, and add a validation check · 01cd68db
  Mattia Rizzolo authored Mar 02, 2018
```
Signed-off-by: Mattia Rizzolo <mattia@debian.org>
```
  01cd68db
- move the list of groups to a vars file · a16f35e2
  Mattia Rizzolo authored Mar 02, 2018
```
also make those groups system groups
Signed-off-by: Mattia Rizzolo <mattia@debian.org>
```
  a16f35e2
- common/apt: only update the cache if older than 4 hours · 1cd3feaf
  Mattia Rizzolo authored Mar 02, 2018
```
Signed-off-by: Mattia Rizzolo <mattia@debian.org>
```
  1cd3feaf
- common/apt: install screen and zsh · 00933329
  Mattia Rizzolo authored Mar 02, 2018
```
Signed-off-by: Mattia Rizzolo <mattia@debian.org>
```
  00933329
- common/ssh: accept ssh keys only from /etc/ssh/authorized_keys · 65b62fd9
  Mattia Rizzolo authored Mar 02, 2018
```
Signed-off-by: Mattia Rizzolo <mattia@debian.org>
```
  65b62fd9
- common/ssh: drop default values for ListenAddress · fd888350
  Mattia Rizzolo authored Mar 02, 2018
```
Signed-off-by: Mattia Rizzolo <mattia@debian.org>
```
  fd888350
- deploy: be verbose · a7988dea
  Mattia Rizzolo authored Mar 02, 2018
```
Signed-off-by: Mattia Rizzolo <mattia@debian.org>
```
  a7988dea
- deploy: get rid of the vault stuff as long as we're not using it · 618395fe
  Mattia Rizzolo authored Mar 02, 2018
```
Signed-off-by: Mattia Rizzolo <mattia@debian.org>
```
  618395fe
- Add an ansible.cfg with just a couple of settings · cf17d068
  Mattia Rizzolo authored Mar 02, 2018
```
Signed-off-by: Mattia Rizzolo <mattia@debian.org>
```
  cf17d068
- envs.prod: change username · e51703af
  Pietro Albini authored Mar 02, 2018
  
  e51703af
- lxd-container: rename "manage" user to "manager" during bootstrap · 93919234
  Pietro Albini authored Mar 02, 2018
  
  93919234