d1f74d2fb8
debian: add wget to base packages
2025-11-04 16:39:26 +01:00
5a7cd4dd76
debian: add a newline at the end of interfaces file
...
Not necessary but nicer.
2025-10-22 19:38:06 +02:00
2f02f1eb2c
debian: enable automatic upgrades only for virtual machines
...
And factor out VM stuff into a separate file.
2025-10-22 19:31:01 +02:00
9afaf49651
debian: fix interface file templating
...
Make it work for base Debian and Proxmox installs.
2025-08-14 14:37:36 +02:00
04c5be85c5
debian: don’t update package cache for base packages
...
The repositories might not yet be set up correctly at this point.
2025-08-14 14:21:15 +02:00
e28bb50a9e
debian: improve proxmox detection
...
Assume non-proxmox debians don’t have /etc/pve so we don’t have to
depend on NetBox data.
2025-08-14 10:08:54 +02:00
ef69e31357
debian: don’t set up firewall for proxmox hosts
...
Also factor firewall setup into a separate task. There is no good way
to distinguish Debian and Proxmox hosts in Ansible, so we rely on the
cluster_type NetBox variable.
2025-08-13 16:37:47 +02:00
45d3e6c4ec
debian: fix network interface renaming
...
To become one with proxmox.
2025-08-13 16:29:37 +02:00
7ffb1e7699
debian: enable unattended upgrades
2025-07-31 10:07:49 +02:00
4dc089e42c
debian: add MOTD
2025-05-05 17:28:32 +02:00
35427f1fbc
debian: reorder tasks
...
Ensure network interfaces are renamed first.
2025-04-08 21:31:45 +02:00
0d60aa107f
Consolidate nftables setup for alpine, debian and ceph roles
2025-02-12 17:24:24 +01:00
04bfcb03fa
debian: update package cache
2025-01-20 15:30:07 +01:00
45c0f25ce0
debian: disable SSH password authentication
...
Oops. Also do it for proxmox-backup role even though SSH in default
VRF is disabled there, so it will be easier to deduplicate these roles
when someone gets around to it.
2025-01-20 14:58:08 +01:00
25bcddede1
Factor frr role from debian, ceph and proxmox
...
Consolidate base system and networking setup into debian role and BGP
configuration into frr role. Add facts role to collect data from NetBox
once to avoid many slow lookups. Also many other tweaks and cleanups.
2024-05-19 14:21:25 +02:00
d334e9aafa
debian: allow overriding release
2023-11-18 19:44:00 +01:00
5da50c14f9
debian: run a separate sshd in mgmt VRF
...
Leave the default sshd alone. If ssh is not necessary in default VRF,
another role should disable it.
2023-10-25 13:06:57 +02:00
63ab087645
debian: get inventory data from netbox
...
Set standardized interface names (mgmt0… for L2 management interfaces
and lan0… for L3 data interfaces speaking BGP). ASN is stored as a
custom field in netbox but that might change.
2023-07-20 13:24:51 +02:00
db310ba716
debian: take it easy with the reboots
2023-06-05 17:52:25 +02:00
7c209a7c5c
debian: set hostname
2023-06-05 17:52:20 +02:00
8dd2476238
Add role to set up base Debian server
...
With sshd in separate management VRF and FRR to announce routes to
self over unnumbered BGP.
2023-06-01 17:22:26 +02:00
