Commit graph

423 commits

Author SHA1 Message Date
82ec5f8206 Add check_memory 2025-02-09 11:25:08 +01:00
53bd4e743a Use percpu load 2025-02-09 11:06:20 +01:00
e5c660210b Rsyslog is needed for nftables log 2025-02-06 22:56:59 +01:00
461baf4f80 Include role setup_nftables for common 2025-02-06 22:56:41 +01:00
a0fac3c2dc Add systemd check 2025-02-02 18:28:10 +01:00
70382d628f Add check for mailserver-pgsql 2025-02-01 23:49:12 +01:00
f026e3a166 [mailserver] Disable plain imap (143) 2025-02-01 22:06:10 +01:00
32fc4122bd [mailserver] Add submissions check 2025-02-01 21:33:15 +01:00
7b7a21d59e [postfix] Add /etc/aliases 2025-02-01 21:23:09 +01:00
913d378dbe [postfix] Use submissions (465) for relaying 2025-02-01 21:22:49 +01:00
e822e40945 [mailserver_postfix] Enable submissions (465 without STARTTLS) 2025-02-01 21:04:14 +01:00
27433263e7 Add debian ntp pool for ntp_time 2025-02-01 00:08:50 +01:00
41b2ad4b20 [icinga2] Define "disk" Service without arguments to get partitions dynamically 2025-01-31 23:56:09 +01:00
ec43b6cf31 Sort and colorize get_service_states 2025-01-31 23:28:29 +01:00
b3f1e35828 Add dependencies 2025-01-31 22:53:40 +01:00
988defbae8 Remove deux_puissance_x call because it isn't functional 2025-01-31 22:39:16 +01:00
d12e625a03 Try to avoid hanging of service restart 2025-01-31 22:07:56 +01:00
7eac4cbf15 Fix playbook paths 2025-01-31 21:58:56 +01:00
d866766ea9 Don't ask for forgejo_dump_path, just deploy the repos if the path was given 2025-01-31 21:45:33 +01:00
023ff35ac6 Add master playbook to install everything in order 2025-01-31 19:04:44 +01:00
6f78bac499 Move services of mailserver's monitoring to a dedicated role 2025-01-26 23:23:29 +01:00
8ba59814bb Add more basic checks, including for mail 2025-01-24 23:55:36 +01:00
6f7b77d3c7 Add needed ports to check hosts 2025-01-24 23:42:30 +01:00
fbf54d942a Add a script to query service states 2025-01-24 23:22:05 +01:00
30c22eb143 Use sendmail for forgejo mailing 2025-01-24 22:00:55 +01:00
8900d883c6 Add relayclient ip to rspamd's local_addr 2025-01-24 21:46:26 +01:00
f7132eae93 Use smtp instead of submission for relaying, add ip to mynetworks 2025-01-24 21:38:25 +01:00
9ebf64a39c It seems restarting nftables where we could reload causes blocking tasks 2025-01-24 16:58:13 +01:00
50a7996e6c Need to reload nftables before requesting master cert 2025-01-24 10:43:19 +01:00
1d259156ca Use fixed addresses for accessing each host
No need for ansible_facts.default_ipv4 which yields errors
2025-01-24 10:14:47 +01:00
Tunui Franken
d581df498d Use no_block for restarting nftables 2025-01-21 12:20:41 +01:00
43237ca7dd Allow relaying to relayhost 2025-01-19 23:02:08 +01:00
7da429b4b8 Setup main.cf for postfix role 2025-01-19 22:34:28 +01:00
9a777a5f13 Log icinga2 notifications to syslog while testing 2025-01-19 22:02:12 +01:00
37edd8a943 Start role postfix 2025-01-19 22:00:20 +01:00
ddbc2ce0cb Allow icinga2 connections in both directions 2025-01-19 19:23:40 +01:00
b54c1ccc33 Make default email a real email 2025-01-19 19:16:09 +01:00
83c358dc4f [icinga2] Add notifications 2025-01-19 19:03:42 +01:00
4d80feed8b We need apply where statement 2025-01-17 22:52:09 +01:00
6d6b90dbf5 with_fileglob doesn't work out of the box for templates 2025-01-17 22:43:08 +01:00
881e7ea7ab Fix variable name 2025-01-17 22:34:14 +01:00
8864d09298 Add basic services and host/service templates 2025-01-17 22:23:57 +01:00
08945ea18b Rename sshd_config file for role common 2025-01-16 22:59:51 +01:00
699351b34c Start adding hosts and services 2025-01-16 22:45:11 +01:00
72228b9c6e Copy zones.conf with to connect endpoints of master/agent 2025-01-16 22:31:36 +01:00
2dfd6bdfcd Start configuration of zones.d 2025-01-14 13:08:24 +01:00
b71d4e6eb2 Icinga2: Add each other to /etc/hosts 2025-01-14 11:25:27 +01:00
aa4e785d83 Restrict nftables icinga2 master/agent rules to each other 2025-01-14 11:07:46 +01:00
fed0a05ba5 Setup agent node 2025-01-12 12:20:14 +01:00
9d377d6a85 Request master cert 2025-01-12 11:42:20 +01:00