Commit graph

393 commits

Author SHA1 Message Date
Tunui Franken
d581df498d Use no_block for restarting nftables 2025-01-21 12:20:41 +01:00
43237ca7dd Allow relaying to relayhost 2025-01-19 23:02:08 +01:00
7da429b4b8 Setup main.cf for postfix role 2025-01-19 22:34:28 +01:00
9a777a5f13 Log icinga2 notifications to syslog while testing 2025-01-19 22:02:12 +01:00
37edd8a943 Start role postfix 2025-01-19 22:00:20 +01:00
ddbc2ce0cb Allow icinga2 connections in both directions 2025-01-19 19:23:40 +01:00
b54c1ccc33 Make default email a real email 2025-01-19 19:16:09 +01:00
83c358dc4f [icinga2] Add notifications 2025-01-19 19:03:42 +01:00
4d80feed8b We need apply where statement 2025-01-17 22:52:09 +01:00
6d6b90dbf5 with_fileglob doesn't work out of the box for templates 2025-01-17 22:43:08 +01:00
881e7ea7ab Fix variable name 2025-01-17 22:34:14 +01:00
8864d09298 Add basic services and host/service templates 2025-01-17 22:23:57 +01:00
08945ea18b Rename sshd_config file for role common 2025-01-16 22:59:51 +01:00
699351b34c Start adding hosts and services 2025-01-16 22:45:11 +01:00
72228b9c6e Copy zones.conf with to connect endpoints of master/agent 2025-01-16 22:31:36 +01:00
2dfd6bdfcd Start configuration of zones.d 2025-01-14 13:08:24 +01:00
b71d4e6eb2 Icinga2: Add each other to /etc/hosts 2025-01-14 11:25:27 +01:00
aa4e785d83 Restrict nftables icinga2 master/agent rules to each other 2025-01-14 11:07:46 +01:00
fed0a05ba5 Setup agent node 2025-01-12 12:20:14 +01:00
9d377d6a85 Request master cert 2025-01-12 11:42:20 +01:00
933df3a4a8 Create local cert for icinga2 agent 2025-01-12 11:38:58 +01:00
844590f845 Allow icinga2 in nftables 2025-01-12 11:30:24 +01:00
00462515b6 Add group testservers 2025-01-12 10:45:18 +01:00
905b934e13 Start role icinga2_agent 2025-01-12 10:45:08 +01:00
db0de9e945 Move icinga2 to a dedicated playbook 2025-01-12 10:41:43 +01:00
0617d33acc Add icinga2 master setup 2025-01-12 10:32:24 +01:00
4c516c3f5a fixup! Use hostname for VG name 2025-01-12 10:06:54 +01:00
6e38e9dea6 Start role icinga2_master 2025-01-11 12:44:28 +01:00
40780ec83c Set mailserver production name to eumycota 2025-01-11 10:44:29 +01:00
e72a1d2284 Use hostname for VG name 2025-01-10 14:06:42 +01:00
4d2d67aed1 mailserver-manage: Add rm-user 2025-01-05 00:07:25 +01:00
201d19716e mailserver-manage: Fix syntax error 2025-01-04 23:54:24 +01:00
8626dd49bf mailserver-manage: Add add-random-alias 2025-01-04 23:53:44 +01:00
02281e9f67 Prefer local.d over override.d for rspamd configs 2025-01-04 22:13:42 +01:00
9fd411fb7e [mailserver-manage] Implement add_alias 2025-01-03 15:23:24 +01:00
8c55770cae Rename manage-mailserver.sh => mailserver-manage.sh 2025-01-03 12:59:21 +01:00
Tunui Franken
f041c35b86 Minor changes 2024-12-31 18:24:58 +01:00
Tunui Franken
3dbee0703d [forgejo] Move vaulted variables to inventory
Use defaults for examples and defaults
2024-12-31 18:17:38 +01:00
Tunui Franken
09346eae9b [add_cert_dns_01] Move vaulted variables to inventory
Use defaults for examples and defaults
2024-12-31 18:17:21 +01:00
Tunui Franken
bfe30310c5 Start with higher values for rspamd actions 2024-12-25 19:20:33 +01:00
Tunui Franken
778b21bcf4 Add caption for Run Your Own Mail Server 2024-12-25 13:57:08 +01:00
71053ef90b Add missing 'state: directory' attribute 2024-12-22 10:26:31 +01:00
4ffd0d8ec7 [forgejo] Add missing dependency 'setup_nftables' 2024-12-22 10:17:14 +01:00
01ed65eef2 [bugfix] manage-mailserver.sh: $# doesn't apply to function 2024-12-22 10:06:21 +01:00
d4932b1ce0 Start a manage-mailserver.sh script for users, passwords, quota, and aliases 2024-12-15 13:49:30 +01:00
1fce4d7db7 Use proxymap for postfix pgsql queries 2024-12-15 10:59:25 +01:00
5f1caf064e Minor doc fix 2024-12-15 10:33:00 +01:00
ace028b91b ACME HTTP-01 challenge needs apache 2024-12-15 10:30:34 +01:00
31b27b390e Minor change 2024-12-15 10:21:09 +01:00
d9dd7785b6 Only copy bashrc for accounts select accounts 2024-11-29 17:27:12 +01:00