Commit Graph

108 Commits

Author SHA1 Message Date
Ruakij 9ded6814c3 Pin the fstrim timer and the monthly ZFS trim and scrub per host in the common role to keep them out of the backup window 2026-10-07 22:42:08 +00:00
Ruakij a9a60e3106 Keep the clock on systemd-timesyncd and the timezone on UTC in the common role 2026-10-07 21:22:01 +00:00
Ruakij 5da89fdf29 Run the kopia_backup timer at 03:30 UTC by default since the hosts run in different timezones 2026-10-07 21:19:09 +00:00
Ruakij 9e2e6cbb99 Add IPv4 port forwards and masquerade to host_firewall in an ip host_nat table 2026-10-07 21:10:35 +00:00
Ruakij c9d2334906 Add a kopia_backup role for the daily Kopia snapshot script and timer against an existing S3 repository 2026-10-07 21:00:25 +00:00
Ruakij c87af201aa Add a crowdsec role for agents and the nftables bouncer against a central LAPI 2026-10-07 11:02:59 +00:00
Ruakij cfe87002c5 Replace the nftables role with host_firewall, one atomic inet host input table with zones, geo sets and lockout rollback 2026-10-07 11:02:59 +00:00
Ruakij 27e9d4a1ab Merge branch 'role_nftables' 2023-06-21 17:35:09 +02:00
Ruakij 755f9b2e1a Initial role 2023-05-21 20:57:43 +02:00
Ruakij 753f456ef3 Merge branch 'role_kubernetes-k3s' 2023-04-14 10:21:06 +02:00
Ruakij 093612f3a7 Change restart-check to started/restarted check 2023-04-14 10:20:16 +02:00
Ruakij a92409c56f Add failed_when to deploy calico operator 2023-04-14 10:01:42 +02:00
Ruakij f50e3ac33c Use first node's IP for joining cluster 2023-04-14 09:50:39 +02:00
Ruakij 668ff23ee6 Fix service task wrong usage 2023-04-14 09:42:46 +02:00
Ruakij c2c6a2872f Fix conditional for changed after install 2023-04-12 23:12:10 +02:00
Ruakij c1c7ec9e56 Remove workaround as k3s is now at 1.26 2023-04-12 22:39:43 +02:00
Ruakij 550f6868ff Fix old usage of network_plugin var 2023-04-12 20:49:38 +02:00
Ruakij 3fe288f6a5 Merge branch 'role_wireguard-ipv6-converter' 2023-04-12 20:40:01 +02:00
Ruakij ab9220d042 Add pause & gather_facts at end when service was started 2023-04-12 20:39:49 +02:00
Ruakij 15ad7920d4 Merge branch 'role_wireguard-ipv6-converter' 2023-04-12 20:24:27 +02:00
Ruakij 7012e1ea2b Separate enable and re-/start service for fine-control 2023-04-12 20:23:08 +02:00
Ruakij 13ebd48c5d Add register for task download 2023-04-12 20:22:34 +02:00
Ruakij 1a76b94a46 Add download-version 2023-04-12 14:58:43 +02:00
Ruakij 1b765689e6 Make sure daemon is reloaded before service-start 2023-04-12 14:50:14 +02:00
Ruakij 5b607df2de Add checks if var is set 2023-04-12 14:47:02 +02:00
Ruakij 521b76453a Add start to naming 2023-04-12 14:45:55 +02:00
Ruakij 7f503d983a Fix download-location 2023-04-12 14:45:43 +02:00
Ruakij b143d9c848 Fix checks 2023-04-12 14:45:31 +02:00
Ruakij f95bcbc38d change defaults 2023-04-12 14:44:10 +02:00
Ruakij 248a3c08b8 Initial role-data 2023-04-12 13:36:14 +02:00
Ruakij f2c86dc22d Merge branch 'role_kubernetes-k3s' 2023-04-05 20:20:03 +02:00
Ruakij a79f2cac8a Merge branch 'role_netbird_client' 2023-04-05 20:19:44 +02:00
Ruakij c8f90f0f8d Update calico 2023-04-05 20:15:31 +02:00
Ruakij 41570ea40d Create new block for network-stuff 2023-04-05 20:14:36 +02:00
Ruakij a3c887748a Move network-helper to own file independend from calico 2023-04-05 20:14:12 +02:00
Ruakij d113625fa8 Fix env-value not being string 2023-04-05 20:08:25 +02:00
Ruakij dadd077723 Fix service and conditional 2023-04-05 14:13:22 +02:00
Ruakij 0d43d07ad4 Add extra-config option 2023-04-05 14:12:56 +02:00
Ruakij d6f8f975bb Reload when config changed, but install already done 2023-04-05 13:32:14 +02:00
Ruakij 7c86a5d77d Add register for config 2023-04-05 13:30:22 +02:00
Ruakij 8c4e3c2401 Update routingtabletowg and use new sync feature 2023-03-30 14:54:49 +02:00
Ruakij b46d35c8a5 Add labels 2023-03-30 14:54:28 +02:00
Ruakij 791ad96849 Add ipv6-check to calico deploy 2023-03-19 15:17:45 +01:00
Ruakij fc3d9845d6 Fix undeterministic node-selection but uses group 2023-03-19 15:17:02 +01:00
Ruakij 590b75ac23 Add quotes to token-usage for special chars 2023-03-19 14:01:19 +01:00
Ruakij 0c82504299 Separate getting name and ips to fix bug easily 2023-03-19 14:00:46 +01:00
Ruakij 2fee9a1747 Only enable ipv6 when available and activated 2023-03-19 14:00:15 +01:00
Ruakij fb44c39969 Add install of often-used packets 2023-03-19 13:58:47 +01:00
Ruakij 5452303992 Remove netmaker from dependency 2023-03-19 13:58:05 +01:00
Ruakij 4321d78cf8 Add comments to variables 2023-03-19 13:57:57 +01:00