Commits · d461b8c962e90a4a74b7982fe3abba8c563fdd72 · Gruppo Sistemisti / servers-config

15 Mar, 2018 40 commits
- use a bit of yaml magic to de-duplicate the users' extra_groups · d461b8c9
  Mattia Rizzolo authored Mar 15, 2018
```
Signed-off-by: Mattia Rizzolo <mattia@debian.org>
```
  d461b8c9
- deploy postfix with spamassassin · 7d50e1d1
  Mattia Rizzolo authored Mar 15, 2018
```
Signed-off-by: Mattia Rizzolo <mattia@debian.org>
```
  7d50e1d1
- set local_weberver and change letsencrypt_email · 7d524e0b
  Mattia Rizzolo authored Mar 15, 2018
```
Signed-off-by: Mattia Rizzolo <mattia@debian.org>
```
  7d524e0b
- play/roadhouse: proxy code.ubuntu-it.org · 273eea19
  Pietro Albini authored Mar 15, 2018
  
  273eea19
- nginx: fix path · 815ae2b4
  Mattia Rizzolo authored Mar 15, 2018
```
Signed-off-by: Mattia Rizzolo <mattia@debian.org>
```
  815ae2b4
- nginx: drop duplicate directives · e8093422
  Mattia Rizzolo authored Mar 15, 2018
```
Signed-off-by: Mattia Rizzolo <mattia@debian.org>
```
  e8093422
- nginx: generate dh params · 3705c7e8
  Mattia Rizzolo authored Mar 15, 2018
```
Signed-off-by: Mattia Rizzolo <mattia@debian.org>
```
  3705c7e8
- nginx: add a bunch of confs for better proxying and security · ec7457ea
  Mattia Rizzolo authored Mar 15, 2018
```
Signed-off-by: Mattia Rizzolo <mattia@debian.org>
```
  ec7457ea
- nginx: fix wrong host header proxies · 6730740d
  Pietro Albini authored Mar 15, 2018
  
  6730740d
- nginx: deploy ssl · c6a17764
  Pietro Albini authored Mar 15, 2018
  
  c6a17764
- configure munin-node in the common role · 63bf7923
  Mattia Rizzolo authored Mar 15, 2018
```
Signed-off-by: Mattia Rizzolo <mattia@debian.org>
```
  63bf7923
- deploy ssl-keys after a bunch of random fixups · c3d4c492
  Mattia Rizzolo authored Mar 15, 2018
```
* use run-parts to run the hooks, instead of embedding everything in
  dehydrated's hook scripts
* add the local hostname to the "domains" file
* no support for ssl cert request through ansible yet
Signed-off-by: Mattia Rizzolo <mattia@debian.org>
```
  c3d4c492
- don't run the ssl-keys play just yet · d1c73c2b
  Mattia Rizzolo authored Mar 15, 2018
```
Signed-off-by: Mattia Rizzolo <mattia@debian.org>
```
  d1c73c2b
- Merge branch 'ssl-keys' · d66b22c0
  Mattia Rizzolo authored Mar 15, 2018
```
Signed-off-by: Mattia Rizzolo <mattia@debian.org>
```
  d66b22c0
- roadhouse: also deploy wwwtest and votantonio nginx proxies conf · b4e49f7f
  Mattia Rizzolo authored Mar 15, 2018
```
Signed-off-by: Mattia Rizzolo <mattia@debian.org>
```
  b4e49f7f
- nginx: return 204 with a useful message for the default site · e78d0c34
  Mattia Rizzolo authored Mar 15, 2018
```
Signed-off-by: Mattia Rizzolo <mattia@debian.org>
```
  e78d0c34
- play/roadhouse: deploy nginx · 3bfd8257
  Mattia Rizzolo authored Mar 15, 2018
```
Signed-off-by: Mattia Rizzolo <mattia@debian.org>
```
  3bfd8257
- nginx: fix the ssl reload thing · 6fe70609
  Mattia Rizzolo authored Mar 15, 2018
```
FIXME: {{ ssl_home }} is not defined in this role yet
Signed-off-by: Mattia Rizzolo <mattia@debian.org>
```
  6fe70609
- nginx: no need to add www-data to any special group to read private ssl keys · 1e9daf83
  Mattia Rizzolo authored Mar 15, 2018
```
Signed-off-by: Mattia Rizzolo <mattia@debian.org>
```
  1e9daf83
- nginx: don't install the sudoers bit, ssl-keys role already takes care of it · 06b1979f
  Mattia Rizzolo authored Mar 15, 2018
```
Signed-off-by: Mattia Rizzolo <mattia@debian.org>
```
  06b1979f
- nginx: make the file world readable. no need for useless secrets · 4cfad4c3
  Mattia Rizzolo authored Mar 15, 2018
```
Signed-off-by: Mattia Rizzolo <mattia@debian.org>
```
  4cfad4c3
- postfix: drop debian stuff · 9bf2815c
  Mattia Rizzolo authored Mar 15, 2018
```
Signed-off-by: Mattia Rizzolo <mattia@debian.org>
```
  9bf2815c
14 Mar, 2018 40 commits
- ssl: add initial letsencrypt setup · 2486951d
  Mattia Rizzolo authored Mar 14, 2018
```
Signed-off-by: Mattia Rizzolo <mattia@debian.org>
```
  2486951d
- ssl: configure sudo · 6ce0c7dd
  Mattia Rizzolo authored Mar 14, 2018
```
Signed-off-by: Mattia Rizzolo <mattia@debian.org>
```
  6ce0c7dd
- get rid of cron.sh for now · 1a040c86
  Mattia Rizzolo authored Mar 14, 2018
```
Signed-off-by: Mattia Rizzolo <mattia@debian.org>
```
  1a040c86
- ssl: saner common setup · d10b7d30
  Mattia Rizzolo authored Mar 14, 2018
```
* give a home to ssl-keys users
* set the home in a variable (default /etc/ssl)
* use the ssl-cert group (already existing in all debians)
* get rid of that cron.sh script
* put the certs in {{ ssl_home }}/localcerts
Signed-off-by: Mattia Rizzolo <mattia@debian.org>
```
  d10b7d30
- ssl: don't create an extra group, ssl-cert already exists on all debians · d3a36a00
  Mattia Rizzolo authored Mar 14, 2018
```
Signed-off-by: Mattia Rizzolo <mattia@debian.org>
```
  d3a36a00
- get rid of systemd timer stuff · 14cf7fde
  Mattia Rizzolo authored Mar 14, 2018
```
Signed-off-by: Mattia Rizzolo <mattia@debian.org>
```
  14cf7fde
- ssl-keys: WIP · 31af58fd
  Pietro Albini authored Mar 02, 2018
  
  31af58fd
- common/users: fix run with -C · 576b268b
  Mattia Rizzolo authored Mar 14, 2018
```
Signed-off-by: Mattia Rizzolo <mattia@debian.org>
```
  576b268b
13 Mar, 2018 40 commits
- lxd: remove ipv6 networking · 5aecdc6a
  Pietro Albini authored Mar 13, 2018
  
  5aecdc6a
- roadhouse: deploy lxd · 42bd3d8b
  Pietro Albini authored Mar 13, 2018
  
  42bd3d8b
- lxd-container: fix wrong path in the bootstrap script · a1db9c75
  Pietro Albini authored Mar 13, 2018
  
  a1db9c75
- common/firewall: deploy · cdb902d1
  Pietro Albini authored Mar 13, 2018
  
  cdb902d1
- vars/all: add the janvitus user · b98790c4
  Pietro Albini authored Mar 13, 2018
  
  b98790c4
08 Mar, 2018 40 commits
- comment out things that are not yet deployed · f02ade9a
  Mattia Rizzolo authored Mar 08, 2018
```
Signed-off-by: Mattia Rizzolo <mattia@debian.org>
```
  f02ade9a
- roadhouse: apparently we don't need the facts just yet, so don't gather them · 3587f0be
  Mattia Rizzolo authored Mar 08, 2018
```
Signed-off-by: Mattia Rizzolo <mattia@debian.org>
```
  3587f0be
- common/apt: add etckeeper · e43f1178
  Mattia Rizzolo authored Mar 08, 2018
```
Signed-off-by: Mattia Rizzolo <mattia@debian.org>
```
  e43f1178
- Initial role for postfix and spamassassin · ad4e512a
  Mattia Rizzolo authored Mar 08, 2018
```
Signed-off-by: Mattia Rizzolo <mattia@debian.org>
```
  ad4e512a
03 Mar, 2018 40 commits
- common/apt install htop and python3 · 747af317
  Mattia Rizzolo authored Mar 03, 2018
```
Signed-off-by: Mattia Rizzolo <mattia@debian.org>
```
  747af317