Commit graph

368 commits

Author SHA1 Message Date
41b2ad4b20 [icinga2] Define "disk" Service without arguments to get partitions dynamically 2025-01-31 23:56:09 +01:00
ec43b6cf31 Sort and colorize get_service_states 2025-01-31 23:28:29 +01:00
b3f1e35828 Add dependencies 2025-01-31 22:53:40 +01:00
d12e625a03 Try to avoid hanging of service restart 2025-01-31 22:07:56 +01:00
d866766ea9 Don't ask for forgejo_dump_path, just deploy the repos if the path was given 2025-01-31 21:45:33 +01:00
023ff35ac6 Add master playbook to install everything in order 2025-01-31 19:04:44 +01:00
6f78bac499 Move services of mailserver's monitoring to a dedicated role 2025-01-26 23:23:29 +01:00
8ba59814bb Add more basic checks, including for mail 2025-01-24 23:55:36 +01:00
6f7b77d3c7 Add needed ports to check hosts 2025-01-24 23:42:30 +01:00
fbf54d942a Add a script to query service states 2025-01-24 23:22:05 +01:00
30c22eb143 Use sendmail for forgejo mailing 2025-01-24 22:00:55 +01:00
8900d883c6 Add relayclient ip to rspamd's local_addr 2025-01-24 21:46:26 +01:00
f7132eae93 Use smtp instead of submission for relaying, add ip to mynetworks 2025-01-24 21:38:25 +01:00
9ebf64a39c It seems restarting nftables where we could reload causes blocking tasks 2025-01-24 16:58:13 +01:00
50a7996e6c Need to reload nftables before requesting master cert 2025-01-24 10:43:19 +01:00
1d259156ca Use fixed addresses for accessing each host
No need for ansible_facts.default_ipv4 which yields errors
2025-01-24 10:14:47 +01:00
Tunui Franken
d581df498d Use no_block for restarting nftables 2025-01-21 12:20:41 +01:00
43237ca7dd Allow relaying to relayhost 2025-01-19 23:02:08 +01:00
7da429b4b8 Setup main.cf for postfix role 2025-01-19 22:34:28 +01:00
9a777a5f13 Log icinga2 notifications to syslog while testing 2025-01-19 22:02:12 +01:00
37edd8a943 Start role postfix 2025-01-19 22:00:20 +01:00
ddbc2ce0cb Allow icinga2 connections in both directions 2025-01-19 19:23:40 +01:00
b54c1ccc33 Make default email a real email 2025-01-19 19:16:09 +01:00
83c358dc4f [icinga2] Add notifications 2025-01-19 19:03:42 +01:00
4d80feed8b We need apply where statement 2025-01-17 22:52:09 +01:00
6d6b90dbf5 with_fileglob doesn't work out of the box for templates 2025-01-17 22:43:08 +01:00
881e7ea7ab Fix variable name 2025-01-17 22:34:14 +01:00
8864d09298 Add basic services and host/service templates 2025-01-17 22:23:57 +01:00
08945ea18b Rename sshd_config file for role common 2025-01-16 22:59:51 +01:00
699351b34c Start adding hosts and services 2025-01-16 22:45:11 +01:00
72228b9c6e Copy zones.conf with to connect endpoints of master/agent 2025-01-16 22:31:36 +01:00
2dfd6bdfcd Start configuration of zones.d 2025-01-14 13:08:24 +01:00
b71d4e6eb2 Icinga2: Add each other to /etc/hosts 2025-01-14 11:25:27 +01:00
aa4e785d83 Restrict nftables icinga2 master/agent rules to each other 2025-01-14 11:07:46 +01:00
fed0a05ba5 Setup agent node 2025-01-12 12:20:14 +01:00
9d377d6a85 Request master cert 2025-01-12 11:42:20 +01:00
933df3a4a8 Create local cert for icinga2 agent 2025-01-12 11:38:58 +01:00
844590f845 Allow icinga2 in nftables 2025-01-12 11:30:24 +01:00
905b934e13 Start role icinga2_agent 2025-01-12 10:45:08 +01:00
db0de9e945 Move icinga2 to a dedicated playbook 2025-01-12 10:41:43 +01:00
0617d33acc Add icinga2 master setup 2025-01-12 10:32:24 +01:00
4c516c3f5a fixup! Use hostname for VG name 2025-01-12 10:06:54 +01:00
6e38e9dea6 Start role icinga2_master 2025-01-11 12:44:28 +01:00
e72a1d2284 Use hostname for VG name 2025-01-10 14:06:42 +01:00
4d2d67aed1 mailserver-manage: Add rm-user 2025-01-05 00:07:25 +01:00
201d19716e mailserver-manage: Fix syntax error 2025-01-04 23:54:24 +01:00
8626dd49bf mailserver-manage: Add add-random-alias 2025-01-04 23:53:44 +01:00
02281e9f67 Prefer local.d over override.d for rspamd configs 2025-01-04 22:13:42 +01:00
9fd411fb7e [mailserver-manage] Implement add_alias 2025-01-03 15:23:24 +01:00
8c55770cae Rename manage-mailserver.sh => mailserver-manage.sh 2025-01-03 12:59:21 +01:00