Commit Graph

351 Commits

Author SHA1 Message Date
7052c91d27 nftables fixes 2022-10-01 16:44:22 +02:00
d187a12565 Add a playbook for test hosts 2022-10-01 16:44:14 +02:00
3d358cb4f3 Fix certbot command 2022-10-01 16:06:46 +02:00
b2eeba466f Remove obsolete cron file 2022-10-01 08:08:53 +02:00
9e227d132a Playbooks to deploy pod-rproxy and pod-www 2022-09-30 23:03:23 +02:00
3bd5df7c65 Make VPN configuration more robust 2022-09-25 16:44:40 +02:00
7f6813600a Add some fixes for logcheck ignore 2022-09-25 13:21:14 +02:00
1b291adb38 Restart networking when nftables is restarted 2022-09-25 13:15:17 +02:00
18263b3556 Set up VPN network 2022-09-24 00:15:46 +02:00
593717d10f Compartamentalise playbooks 2022-09-23 20:46:04 +02:00
0686e1fc9a Combine playbooks 2022-09-22 22:59:12 +02:00
12cb7842e7 Fix logcheck email issue 2022-09-22 20:13:19 +02:00
4c7c0e052b Basic deployment on valkyrie 2022-09-22 01:43:10 +02:00
8e690941bf Don't use nobody user 2022-09-12 21:32:48 +02:00
d65284a6fe Split machine playbook 2022-09-11 20:55:30 +02:00
e4e7f91612 Disable su 2022-09-11 20:16:36 +02:00
e6d675333d Disable root shell 2022-09-11 20:00:08 +02:00
ab0da8109a Update smartd long test dates to avoid zfs timers 2022-09-11 19:19:22 +02:00
7ef18f5a2b Remove zfs cron job and update zfs systemd timers 2022-09-11 19:08:59 +02:00
b800ccbdc8 Change service -> systemd 2022-09-11 19:08:50 +02:00
8f240b0f0c Update logcheck ignore configuration 2022-09-04 17:28:04 +02:00
6ae5879739 Configure tmux 2022-08-30 20:51:33 +02:00
e1289404e9 Clean up 2022-08-30 20:27:32 +02:00
7866690cb0 Minor clean ups 2022-08-30 19:50:53 +02:00
c93f8c8935 Configure log monitoring 2022-08-30 19:46:30 +02:00
2bf64d8cc2 Configure MotD 2022-08-30 19:34:55 +02:00
900a72301c Configure smartmontools 2022-08-30 18:38:37 +02:00
ac80331067 Install utility programs for live system admin 2022-08-30 18:38:05 +02:00
36b033013b Default smartmontools config files 2022-08-30 18:25:02 +02:00
ee7471e6e4 Configure unattended-upgrades 2022-08-30 17:48:49 +02:00
43eba74072 Default unattended-upgrades config 2022-08-30 17:16:48 +02:00
e0c008be2c Configure fail2ban 2022-08-30 16:46:44 +02:00
86170d0393 Don't combine start/restart and rename cfg to conf 2022-08-30 15:51:02 +02:00
2045cbd4d8 Configure nftables 2022-08-30 15:39:31 +02:00
0ddf73d8ae Combine start/restart steps 2022-08-30 15:33:13 +02:00
bc2bf5ca27 Default nftables configuration 2022-08-30 15:25:28 +02:00
4d02108cfb Configure ssh 2022-08-30 15:18:52 +02:00
4f89349c0d Update UPS configuration values 2022-08-30 15:08:37 +02:00
59de4c40f5 Default sshd_config 2022-08-30 14:22:15 +02:00
e8b49f16aa Configure UPS 2022-08-28 12:43:22 +02:00
ff9fd10b1c Unconditionally start postfix 2022-08-28 12:42:59 +02:00
e1beb5e38c Add zfs scrubbing and filesystem trim 2022-08-28 04:02:18 +02:00
6f87c559e0 Add systemd mails 2022-08-28 04:01:22 +02:00
a507f524c3 For services put enabled before state 2022-08-28 04:00:34 +02:00
40f5190b3d Configure ntp 2022-08-27 22:07:23 +02:00
33bb6df38d Configure mail 2022-08-27 22:07:17 +02:00
1fa53010f4 Default /etc/postfix/main.cf 2022-08-27 20:41:22 +02:00
2cec3bb426 Install postfix 2022-08-27 20:41:22 +02:00
bdb9738d82 Configure privilege escalation 2022-08-27 20:41:21 +02:00
481ef43ba6 Empty machine playbook 2022-08-26 16:20:37 +02:00