Commits · eb3179ae5d1ed7ce88be9232e9cbbf25a68d5d08 · Gruppo Sistemisti / servers-config

24 Dec, 2019 40 commits
- Randomize letsencrypt cron job · eb3179ae
  Mattia Rizzolo authored Dec 24, 2019
```
Signed-off-by: Mattia Rizzolo <mapreri@ubuntu.com>
```
  eb3179ae
18 Aug, 2019 40 commits
- set some expliict config for letsencrypt · ee8e3c89
  Mattia Rizzolo authored Aug 18, 2019
```
Signed-off-by: Mattia Rizzolo <mapreri@ubuntu.com>
```
  ee8e3c89
02 Mar, 2019 40 commits
- expose bromuro through ssh · de95055a
  Mattia Rizzolo authored Mar 02, 2019
```
Signed-off-by: Mattia Rizzolo <mapreri@ubuntu.com>
```
  de95055a
11 Feb, 2019 40 commits
- remove uitwwwstaging.pietroalbini.org · 06bcf25f
  Pietro Albini authored Feb 11, 2019
  
  06bcf25f
10 Nov, 2018 40 commits
- Merge branch 'pietro-ssh-keys' of code.ubuntu-it.org:ubuntu-it-sistemisti/servers-config · 8782c758
  Mattia Rizzolo authored Nov 10, 2018
```
MR: https://code.ubuntu-it.org/ubuntu-it-sistemisti/servers-config/merge_requests/3Signed-off-by: Mattia Rizzolo <mapreri@ubuntu.com>
```
  8782c758
- Add new SSH key to Pietro · df9fd9f6
  Pietro Albini authored Nov 10, 2018
  
  df9fd9f6
14 Oct, 2018 40 commits

ssl-keys: explicitly check for variable being defined and non-empty · f3f08f42

Mattia Rizzolo authored Oct 14, 2018

new ansible is bitching about
    {% if webmaster@ubuntu-it.org %} True {% else %} False {% endif %}
being non valid or something.
Giving it a full real explicit check seems to do the trick.
Signed-off-by: Mattia Rizzolo <mapreri@ubuntu.com>

f3f08f42

lxd-container: rename variable · b8471719

Mattia Rizzolo authored Oct 14, 2018

for some reason ansible is now failing with a variable named "name",
claiming it is not defined.  just rename it, making it also more clear
what it is referring to.
Signed-off-by: Mattia Rizzolo <mapreri@ubuntu.com>

b8471719

common/apt: disable check for new ubuntu releases · be7e6491

Mattia Rizzolo authored Oct 14, 2018

I'm sure we know when a new release is out, no need to nag every week.
Signed-off-by: Mattia Rizzolo <mapreri@ubuntu.com>

be7e6491

fix some warnings from shellcheck · 9bc2ad4b
Mattia Rizzolo authored Oct 14, 2018
```
Signed-off-by: Mattia Rizzolo <mapreri@ubuntu.com>
```
9bc2ad4b

28 Mar, 2018 40 commits
- postfix: fix path to the certs · d980571a
  Mattia Rizzolo authored Mar 28, 2018
```
Signed-off-by: Mattia Rizzolo <mapreri@ubuntu.com>
```
  d980571a
- nginx: now that we also have a cert for roadhouse.ubuntu-it.org also redirect the default site · 912cf528
  Mattia Rizzolo authored Mar 28, 2018
```
Signed-off-by: Mattia Rizzolo <mapreri@ubuntu.com>
```
  912cf528
27 Mar, 2018 40 commits
- postfix: handle emails for @code.ubuntu-it.org · 83d54fb8
  Mattia Rizzolo authored Mar 27, 2018
```
Signed-off-by: Mattia Rizzolo <mapreri@ubuntu.com>
```
  83d54fb8
25 Mar, 2018 40 commits
- nginx: use a relative inclusion · 34a23cd0
  Mattia Rizzolo authored Mar 26, 2018
```
Signed-off-by: Mattia Rizzolo <mapreri@ubuntu.com>
```
  34a23cd0
- nginx: move the include proxy_params inside the location context · e90c7d8e
  Mattia Rizzolo authored Mar 26, 2018
```
proxy_set_headers are inherited from the parent contexts IFF there are
no proxy_set_header in the current context.
Given that we are adding extra headers due to SSL, move everything in
there.
Signed-off-by: Mattia Rizzolo <mapreri@ubuntu.com>
```
  e90c7d8e
- play/roadhouse: proxy uitwwwstaging.pietroalbini.org to bromuro · 755ea37e
  Pietro Albini authored Mar 25, 2018
  
  755ea37e
- nginx: fix proxy to bromuro not working · ed5a9b3e
  Pietro Albini authored Mar 25, 2018
  
  ed5a9b3e
20 Mar, 2018 40 commits
- misc fixups to the ssl deployment · 4335e4af
  Mattia Rizzolo authored Mar 20, 2018
```
Signed-off-by: Mattia Rizzolo <mapreri@ubuntu.com>
```
  4335e4af
- ssl/letsencrypt: fix path to the hooks script · 17a1ff4f
  Mattia Rizzolo authored Mar 20, 2018
```
Signed-off-by: Mattia Rizzolo <mapreri@ubuntu.com>
```
  17a1ff4f
- ssl/letsencrypt: fix syntax in config file (this is bash, not make…) · 3de217f7
  Mattia Rizzolo authored Mar 20, 2018
```
Signed-off-by: Mattia Rizzolo <mapreri@ubuntu.com>
```
  3de217f7
- common/apt: install moreutils (needed for e.g. `chronic`) · 6105badb
  Mattia Rizzolo authored Mar 20, 2018
```
Signed-off-by: Mattia Rizzolo <mapreri@ubuntu.com>
```
  6105badb
- ssl/letsencrypt: fix username that runs the dehydrated cronjob · c4819442
  Mattia Rizzolo authored Mar 20, 2018
```
Signed-off-by: Mattia Rizzolo <mapreri@ubuntu.com>
```
  c4819442
- ssl: make ssl_home/localcerts accessible by ssl-cert group · 2f72aef2
  Mattia Rizzolo authored Mar 20, 2018
```
Signed-off-by: Mattia Rizzolo <mapreri@ubuntu.com>
```
  2f72aef2
16 Mar, 2018 40 commits
- reflect reality · 8c665699
  Mattia Rizzolo authored Mar 16, 2018
```
Signed-off-by: Mattia Rizzolo <mapreri@ubuntu.com>
```
  8c665699
- play/roadhouse: use static ip addresses for proxying · 1f1f8d2b
  Pietro Albini authored Mar 16, 2018
  
  1f1f8d2b
- postfix: allow the correct subnet in mynetworks · 6488fade
  Mattia Rizzolo authored Mar 16, 2018
```
Signed-off-by: Mattia Rizzolo <mapreri@ubuntu.com>
```
  6488fade
- lxd: rename "subnet" variable to "lxd_subnet" and set it in group_vars · 894019ed
  Mattia Rizzolo authored Mar 16, 2018
```
Signed-off-by: Mattia Rizzolo <mapreri@ubuntu.com>
```
  894019ed
15 Mar, 2018 40 commits
- lxd: allow containers to communicate with the host · 4a74fc48
  Pietro Albini authored Mar 16, 2018
  
  4a74fc48
- nginx: add more forwarded headers · 9a33494e
  Pietro Albini authored Mar 16, 2018
  
  9a33494e
- postfix: add firewall rule · 3e311109
  Mattia Rizzolo authored Mar 15, 2018
```
Signed-off-by: Mattia Rizzolo <mapreri@ubuntu.com>
```
  3e311109
- postfix: fix handlers · 7c868b0d
  Mattia Rizzolo authored Mar 15, 2018
```
Signed-off-by: Mattia Rizzolo <mapreri@ubuntu.com>
```
  7c868b0d
- firewall: s/command/cmd/g · 9da8513f
  Mattia Rizzolo authored Mar 15, 2018
```
Signed-off-by: Mattia Rizzolo <mapreri@ubuntu.com>
```
  9da8513f
- common/iptables: add some ||true as needed · cac9bc27
  Mattia Rizzolo authored Mar 15, 2018
```
Signed-off-by: Mattia Rizzolo <mapreri@ubuntu.com>
```
  cac9bc27
- common/firewall: make the script fail in case of error · a1f5d98e
  Mattia Rizzolo authored Mar 15, 2018
```
Signed-off-by: Mattia Rizzolo <mapreri@ubuntu.com>
```
  a1f5d98e
- common/munin: workaround some bug where 'host *' would bind only on ipv6 · 4a217b52
  Mattia Rizzolo authored Mar 15, 2018
```
Some nonesense like:
|2018/03/15-23:08:59 Munin::Node::Server (type Net::Server::Fork) starting! pid(10504)
|Resolved [*]:4949 to [::]:4949, IPv6
|Not including resolved host [0.0.0.0] IPv4 because it will be handled by [::] IPv6
|Binding to TCP port 4949 on host :: with IPv6
Signed-off-by: Mattia Rizzolo <mapreri@ubuntu.com>
```
  4a217b52
- common/munin: that ip whitelist can only work on ipv4 of course... · fb164bce
  Mattia Rizzolo authored Mar 15, 2018
```
Signed-off-by: Mattia Rizzolo <mapreri@ubuntu.com>
```
  fb164bce
- common/munin: fix iptables syntax · a0330ecb
  Mattia Rizzolo authored Mar 15, 2018
```
Signed-off-by: Mattia Rizzolo <mapreri@ubuntu.com>
```
  a0330ecb
- common/firewall: no need for secrecy here · b14c5f6a
  Mattia Rizzolo authored Mar 15, 2018
```
Signed-off-by: Mattia Rizzolo <mapreri@ubuntu.com>
```
  b14c5f6a
- hosts: drop explicit IP from roadhouse, we moved to the real one now · 6c8fa1ff
  Mattia Rizzolo authored Mar 15, 2018
```
Signed-off-by: Mattia Rizzolo <mattia@debian.org>
```
  6c8fa1ff
- common/munin: fix path · 53e6dabd
  Mattia Rizzolo authored Mar 15, 2018
```
Signed-off-by: Mattia Rizzolo <mattia@debian.org>
```
  53e6dabd