Commit graph

Select branches

Hide pull requests

master

Mono Color

• 577c8c8849 ocserv: add emailAddress to user certificates master Timotej Lazar 2025-08-11 15:47:42 +02:00
• 7bb27acd2c opensmtpd: configure root mail alias Timotej Lazar 2025-08-11 14:07:45 +02:00
• b64a5880b9 opensmtpd: add support for Debian Timotej Lazar 2025-08-11 14:04:58 +02:00
• 7916ae309e opensmtpd: disable TLS for relay Timotej Lazar 2025-08-11 12:46:59 +02:00
• 292ddbb7e7 ocserv: fix firewall config Timotej Lazar 2025-08-11 12:26:55 +02:00
• 11e456cff1 ocserv: add playbook for creating client certificates Timotej Lazar 2025-08-04 16:13:30 +02:00
• ec9883ca29 ocserv: reload service on certificate renewal Timotej Lazar 2025-08-01 15:20:55 +02:00
• 604ce177e6 apache, nginx: fix service reload on Debian Timotej Lazar 2025-08-01 15:09:35 +02:00
• 4f9b6a2c53 Enable radvd role for mgmt-gw Timotej Lazar 2025-07-31 12:16:20 +02:00
• 0814e628c5 Add radvd role Timotej Lazar 2025-07-31 12:15:48 +02:00
• 7ffb1e7699 debian: enable unattended upgrades Timotej Lazar 2025-07-31 10:07:49 +02:00
• c64a3772ef Role za apache_openidc bi moral delovati na fresh installu polz 2025-07-30 17:13:19 +02:00
• b324daff08 Dodan role za apache polz 2025-07-30 17:12:38 +02:00
• d5b6fe1d92 Role za registrator bi moral delovati na fresh alpine installu polz 2025-07-30 17:11:37 +02:00
• 57923a51ad Busybox date namesto --iso zahteva -I polz 2025-07-26 06:59:42 +02:00
• 2888dd841f Merge branch 'master' of git.fri.uni-lj.si:rc/servers polz 2025-07-25 17:11:07 +02:00
• 04c7efe706 Create registrator role polz 2025-07-25 17:09:43 +02:00
• 168641b728 rename apache-php to apache_php polz 2025-07-25 17:01:03 +02:00
• 29498edf9e Add role apache_oidc polz 2025-07-25 17:00:29 +02:00
• 4ed3bc5d7f Add roles apache-php and reverse_proxy polz 2025-07-25 16:55:11 +02:00
• 458b0d02ee forgejo: disable useless landing page Timotej Lazar 2025-07-19 12:25:47 +02:00
• d1cf462f64 alpine: drop hints from interface configuration Timotej Lazar 2025-07-16 13:07:15 +02:00
• cabf831962 synapse: support server notices Timotej Lazar 2025-07-15 15:04:52 +02:00
• a942662e12 alpine: create network interface include directory Timotej Lazar 2025-07-15 14:16:10 +02:00
• eb70fed7cb forgejo: make profiles public by default Timotej Lazar 2025-07-01 12:13:31 +02:00
• 0ef9434dca Ununlicense Timotej Lazar 2025-07-01 09:30:20 +02:00
• a84f211083 nginx: reload on config change Timotej Lazar 2025-05-18 13:21:02 +02:00
• d442940975 ocserv: use numeric ID instead of arbitrary USERNAME for nft chain name Timotej Lazar 2025-05-16 14:26:39 +02:00
• 245b4a0dcd ocserv: support UDP Timotej Lazar 2025-05-16 14:26:26 +02:00
• 6e72987863 ocserv: only support certificate auth for clients Timotej Lazar 2025-05-16 14:10:11 +02:00
• f9f899fb2e nginx: unoverride secure defaults Timotej Lazar 2025-05-16 14:01:33 +02:00
• bf4fd2c82d alpine: support non-VM hosts in interfaces template Timotej Lazar 2025-05-15 14:55:43 +02:00
• cbd3f1a7ea alpine: set inventory_hostname as hostname Timotej Lazar 2025-05-15 10:47:55 +02:00
• a8814e6da2 facts: don’t barf on undefined platform Timotej Lazar 2025-05-15 09:23:11 +02:00
• d162f175a4 facts: get platform info from NetBox Timotej Lazar 2025-05-13 13:31:07 +02:00
• 7cbbf635a8 facts: don’t write passwords to stdout Timotej Lazar 2025-05-13 11:09:02 +02:00
• e6876ff265 windows: don’t disable builtin firewall rules before setting our own Timotej Lazar 2025-05-11 14:34:38 +02:00
• e30fcf0bd4 windows: set hostname Timotej Lazar 2025-05-11 13:18:47 +02:00
• 66298da9c7 windows: set up firewall Timotej Lazar 2025-05-11 12:54:26 +02:00
• 91de26af57 Add windows role Timotej Lazar 2025-05-09 17:03:53 +02:00
• aa78b407c8 ocserv: disable TLS<1.2 Timotej Lazar 2025-05-08 15:04:38 +02:00
• a5eae03cf8 forgejo: don’t enable the testing apk repo Timotej Lazar 2025-05-08 14:12:35 +02:00
• 6797f65971 influxdb: fix reverse proxy Timotej Lazar 2025-05-07 14:13:04 +02:00
• 7f28f3a366 grafana: fix reverse proxy Timotej Lazar 2025-05-07 14:07:11 +02:00
• 39fec47f87 alpine: don’t set IPv6 gateway Timotej Lazar 2025-05-07 12:25:43 +02:00
• fb8e0189af dokuwiki: make more readable Timotej Lazar 2025-05-07 12:23:39 +02:00
• 5667b755ca netbox: secure the cookie Timotej Lazar 2025-05-07 12:21:41 +02:00
• 7a82e7ca63 Limit inventory lookup to installed servers Timotej Lazar 2025-05-06 13:26:56 +02:00
• 4dc089e42c debian: add MOTD Timotej Lazar 2025-05-05 17:28:32 +02:00
• 783f1af3a5 netbox: add redis dependency Timotej Lazar 2025-04-17 18:22:10 +02:00
• 8e3772e475 dnsmasq: store leases in sqlite database Timotej Lazar 2025-04-14 16:09:34 +02:00
• b6b4a16fd4 netbox: drop obsolete file Timotej Lazar 2025-04-12 20:53:00 +02:00
• ade6a8e1e2 Add nginx as a role dependency where required Timotej Lazar 2025-04-12 18:51:31 +02:00
• cf6b682cf8 Add ocserv role Timotej Lazar 2025-04-12 18:09:02 +02:00
• a1c7be8184 facts: only look up prefixes and VLANs once Timotej Lazar 2025-04-10 22:21:44 +02:00
• d2b9b05406 setup: do base setup for all targets in one step Timotej Lazar 2025-04-10 19:30:14 +02:00
• e754db5fbd Consolidate hosts template Timotej Lazar 2025-04-10 18:22:41 +02:00
• 35427f1fbc debian: reorder tasks Timotej Lazar 2025-04-08 21:31:45 +02:00
• 275991c49c proxmox: check for errors when retrieving users from AD Timotej Lazar 2025-04-03 18:55:06 +02:00
• 1a7b813dff facts: get admins’ SSH keys from password store Timotej Lazar 2025-03-24 18:28:46 +01:00
• 7907b6f0e5 Revert "dnsmasq: drop dhcp-proxy option" Timotej Lazar 2025-03-19 14:44:36 +01:00
• be8e47119f opensmtpd: support relaying mail Timotej Lazar 2025-02-17 15:04:26 +01:00
• b252e451f6 Add nsswitch config to scan polz 2025-02-17 14:12:18 +01:00
• fe646ece89 Add scan (working samba on Alpine) role polz 2025-02-17 13:27:40 +01:00
• 200f3be792 unifi: fix nginx reverse proxy headers Timotej Lazar 2025-02-17 10:18:56 +01:00
• 0d60aa107f Consolidate nftables setup for alpine, debian and ceph roles Timotej Lazar 2025-02-12 17:24:24 +01:00
• bfda7b3236 dnsmasq: skip DNS update script when starting up Timotej Lazar 2025-02-06 09:14:53 +01:00
• e95603fda9 Add unifi role Timotej Lazar 2025-02-04 14:44:02 +01:00
• 73555d2fd7 ansible: shut up warnings about discovered Python interpreter Timotej Lazar 2025-01-23 13:36:24 +01:00
• 365b5d9f67 Use IPv6 addresses for DNS servers Timotej Lazar 2025-01-23 13:25:45 +01:00
• 878e8ba6f9 alpine: set up resolv.conf Timotej Lazar 2025-01-23 13:22:30 +01:00
• 9720379c14 proxmox-backup: allow IPv6 ND on management interface Timotej Lazar 2025-01-23 13:12:25 +01:00
• 0d607fe2a4 proxmox-backup: don’t modify config for default SSH instance Timotej Lazar 2025-01-23 13:10:50 +01:00
• 04bfcb03fa debian: update package cache Timotej Lazar 2025-01-20 15:30:07 +01:00
• 45c0f25ce0 debian: disable SSH password authentication Timotej Lazar 2025-01-20 14:58:08 +01:00
• 446e6132c7 nginx: add support for Debian distros Timotej Lazar 2025-01-20 14:22:40 +01:00
• e3862a5be6 Fix FC check in interface template Timotej Lazar 2025-01-20 11:20:46 +01:00
• efbe8d2801 Reorder hosts in setup.yml Timotej Lazar 2025-01-13 15:29:37 +01:00
• 67b9b7b268 frr: disable BFD Timotej Lazar 2025-01-13 14:57:38 +01:00
• ac52c13803 proxmox-backup: set mail relay Timotej Lazar 2025-01-07 11:19:47 +01:00
• b02ebf5be3 templates: skip FC interfaces Timotej Lazar 2025-01-07 10:53:17 +01:00
• e5b570ddad proxmox: disable password SSH authentication Timotej Lazar 2024-12-13 14:49:44 +01:00
• c585070edc Add kanboard role and server Timotej Lazar 2024-12-06 13:08:01 +01:00
• 04f187a140 dokuwiki: factor out nginx-php role Timotej Lazar 2024-12-06 13:07:01 +01:00
• 52f8ed5a2d Rename host doku to doc Timotej Lazar 2024-12-05 10:27:15 +01:00
• bc05b2a9f6 dokuwiki: support multiple domains for nginx Timotej Lazar 2024-12-05 10:26:25 +01:00
• 1b5a20ac8a dnsmasq: disable ping for duplicate address detection Timotej Lazar 2024-11-28 15:41:22 +01:00
• ff9620ed2a ceph: allow IPv6 neighbor discovery on mgmt interface Timotej Lazar 2024-11-27 17:37:07 +01:00
• 0a0ce7e2a5 Add telegraf role Timotej Lazar 2024-11-27 17:36:20 +01:00
• 14dd446fd4 Add monitor Timotej Lazar 2024-11-27 17:31:28 +01:00
• 2d776d3246 nginx: only handle acme-challenge well-known directory in default site Timotej Lazar 2024-11-20 15:47:18 +01:00
• b7fd838ca9 reverse-proxy: disable request buffering Timotej Lazar 2024-11-18 13:36:35 +01:00
• cdb8fe6b66 reverse-proxy: increase proxy read timeout Timotej Lazar 2024-11-18 13:29:46 +01:00
• efdb74497a reverse-proxy: increase max request size Timotej Lazar 2024-11-18 12:42:36 +01:00
• 973ce03249 Add reverse-proxy role Timotej Lazar 2024-11-15 15:44:29 +01:00
• c970c562a9 nginx: support certificates for multiple domains Timotej Lazar 2024-11-15 11:25:50 +01:00
• 554bf1f711 dnsmasq: drop dhcp-proxy option Timotej Lazar 2024-11-09 20:06:58 +01:00
• 46a9ff6fc0 ceph: add LE certificates Timotej Lazar 2024-11-08 16:32:06 +01:00
• 6e5de53937 doku: unoverride style for external link icons Timotej Lazar 2024-10-22 10:16:46 +02:00
• ae49801579 doku: update deprecated nginx http2 directive Timotej Lazar 2024-10-22 10:16:22 +02:00