 Ruakij
|
d345ccf585
|
Add a pre_command to kopia_backup for host dump scripts and install gpg for the apt key
|
2026-10-08 08:51:23 +00:00 |
|
|
Ruakij
|
b45a07da56
|
Add forward_guard to host_firewall for a forward chain that drops traffic to guarded guests outside the allowed interfaces, ports and ICMP types
|
2026-10-08 08:48:40 +00:00 |
|
|
Ruakij
|
9ded6814c3
|
Pin the fstrim timer and the monthly ZFS trim and scrub per host in the common role to keep them out of the backup window
|
2026-10-07 22:42:08 +00:00 |
|
|
Ruakij
|
a9a60e3106
|
Keep the clock on systemd-timesyncd and the timezone on UTC in the common role
|
2026-10-07 21:22:01 +00:00 |
|
|
Ruakij
|
5da89fdf29
|
Run the kopia_backup timer at 03:30 UTC by default since the hosts run in different timezones
|
2026-10-07 21:19:09 +00:00 |
|
|
Ruakij
|
9e2e6cbb99
|
Add IPv4 port forwards and masquerade to host_firewall in an ip host_nat table
|
2026-10-07 21:10:35 +00:00 |
|
|
Ruakij
|
c9d2334906
|
Add a kopia_backup role for the daily Kopia snapshot script and timer against an existing S3 repository
|
2026-10-07 21:00:25 +00:00 |
|
|
Ruakij
|
c87af201aa
|
Add a crowdsec role for agents and the nftables bouncer against a central LAPI
|
2026-10-07 11:02:59 +00:00 |
|
|
Ruakij
|
cfe87002c5
|
Replace the nftables role with host_firewall, one atomic inet host input table with zones, geo sets and lockout rollback
|
2026-10-07 11:02:59 +00:00 |
|
|
Ruakij
|
27e9d4a1ab
|
Merge branch 'role_nftables'
|
2023-06-21 17:35:09 +02:00 |
|
|
Ruakij
|
755f9b2e1a
|
Initial role
|
2023-05-21 20:57:43 +02:00 |
|
|
Ruakij
|
753f456ef3
|
Merge branch 'role_kubernetes-k3s'
|
2023-04-14 10:21:06 +02:00 |
|
|
Ruakij
|
093612f3a7
|
Change restart-check to started/restarted check
|
2023-04-14 10:20:16 +02:00 |
|
|
Ruakij
|
a92409c56f
|
Add failed_when to deploy calico operator
|
2023-04-14 10:01:42 +02:00 |
|
|
Ruakij
|
f50e3ac33c
|
Use first node's IP for joining cluster
|
2023-04-14 09:50:39 +02:00 |
|
|
Ruakij
|
668ff23ee6
|
Fix service task wrong usage
|
2023-04-14 09:42:46 +02:00 |
|
|
Ruakij
|
c2c6a2872f
|
Fix conditional for changed after install
|
2023-04-12 23:12:10 +02:00 |
|
|
Ruakij
|
c1c7ec9e56
|
Remove workaround as k3s is now at 1.26
|
2023-04-12 22:39:43 +02:00 |
|
|
Ruakij
|
550f6868ff
|
Fix old usage of network_plugin var
|
2023-04-12 20:49:38 +02:00 |
|
|
Ruakij
|
3fe288f6a5
|
Merge branch 'role_wireguard-ipv6-converter'
|
2023-04-12 20:40:01 +02:00 |
|
|
Ruakij
|
ab9220d042
|
Add pause & gather_facts at end when service was started
|
2023-04-12 20:39:49 +02:00 |
|
|
Ruakij
|
15ad7920d4
|
Merge branch 'role_wireguard-ipv6-converter'
|
2023-04-12 20:24:27 +02:00 |
|
|
Ruakij
|
7012e1ea2b
|
Separate enable and re-/start service for fine-control
|
2023-04-12 20:23:08 +02:00 |
|
|
Ruakij
|
13ebd48c5d
|
Add register for task download
|
2023-04-12 20:22:34 +02:00 |
|
|
Ruakij
|
1a76b94a46
|
Add download-version
|
2023-04-12 14:58:43 +02:00 |
|
|
Ruakij
|
1b765689e6
|
Make sure daemon is reloaded before service-start
|
2023-04-12 14:50:14 +02:00 |
|
|
Ruakij
|
5b607df2de
|
Add checks if var is set
|
2023-04-12 14:47:02 +02:00 |
|
|
Ruakij
|
521b76453a
|
Add start to naming
|
2023-04-12 14:45:55 +02:00 |
|
|
Ruakij
|
7f503d983a
|
Fix download-location
|
2023-04-12 14:45:43 +02:00 |
|
|
Ruakij
|
b143d9c848
|
Fix checks
|
2023-04-12 14:45:31 +02:00 |
|
|
Ruakij
|
f95bcbc38d
|
change defaults
|
2023-04-12 14:44:10 +02:00 |
|
|
Ruakij
|
248a3c08b8
|
Initial role-data
|
2023-04-12 13:36:14 +02:00 |
|
|
Ruakij
|
f2c86dc22d
|
Merge branch 'role_kubernetes-k3s'
|
2023-04-05 20:20:03 +02:00 |
|
|
Ruakij
|
a79f2cac8a
|
Merge branch 'role_netbird_client'
|
2023-04-05 20:19:44 +02:00 |
|
|
Ruakij
|
c8f90f0f8d
|
Update calico
|
2023-04-05 20:15:31 +02:00 |
|
|
Ruakij
|
41570ea40d
|
Create new block for network-stuff
|
2023-04-05 20:14:36 +02:00 |
|
|
Ruakij
|
a3c887748a
|
Move network-helper to own file independend from calico
|
2023-04-05 20:14:12 +02:00 |
|
|
Ruakij
|
d113625fa8
|
Fix env-value not being string
|
2023-04-05 20:08:25 +02:00 |
|
|
Ruakij
|
dadd077723
|
Fix service and conditional
|
2023-04-05 14:13:22 +02:00 |
|
|
Ruakij
|
0d43d07ad4
|
Add extra-config option
|
2023-04-05 14:12:56 +02:00 |
|
|
Ruakij
|
d6f8f975bb
|
Reload when config changed, but install already done
|
2023-04-05 13:32:14 +02:00 |
|
|
Ruakij
|
7c86a5d77d
|
Add register for config
|
2023-04-05 13:30:22 +02:00 |
|
|
Ruakij
|
8c4e3c2401
|
Update routingtabletowg and use new sync feature
|
2023-03-30 14:54:49 +02:00 |
|
|
Ruakij
|
b46d35c8a5
|
Add labels
|
2023-03-30 14:54:28 +02:00 |
|
|
Ruakij
|
791ad96849
|
Add ipv6-check to calico deploy
|
2023-03-19 15:17:45 +01:00 |
|
|
Ruakij
|
fc3d9845d6
|
Fix undeterministic node-selection but uses group
|
2023-03-19 15:17:02 +01:00 |
|
|
Ruakij
|
590b75ac23
|
Add quotes to token-usage for special chars
|
2023-03-19 14:01:19 +01:00 |
|
|
Ruakij
|
0c82504299
|
Separate getting name and ips to fix bug easily
|
2023-03-19 14:00:46 +01:00 |
|
|
Ruakij
|
2fee9a1747
|
Only enable ipv6 when available and activated
|
2023-03-19 14:00:15 +01:00 |
|
|
Ruakij
|
fb44c39969
|
Add install of often-used packets
|
2023-03-19 13:58:47 +01:00 |
|
|
Ruakij
|
5452303992
|
Remove netmaker from dependency
|
2023-03-19 13:58:05 +01:00 |
|
|
Ruakij
|
4321d78cf8
|
Add comments to variables
|
2023-03-19 13:57:57 +01:00 |
|
|
Ruakij
|
f9a859e95c
|
Add ingress-option
|
2023-03-19 13:56:26 +01:00 |
|
|
Ruakij
|
fd302e4ebc
|
Move regather facts to join when changed
|
2023-03-19 13:47:01 +01:00 |
|
|
Ruakij
|
b5729caa0e
|
Add wait for interface to come up
|
2023-03-19 13:46:44 +01:00 |
|
|
Ruakij
|
dca40ed835
|
Remove throttle
|
2023-03-19 13:46:21 +01:00 |
|
|
Ruakij
|
95ddd04a86
|
Fix join command
|
2023-03-19 10:39:06 +01:00 |
|
|
Ruakij
|
911bc47acb
|
Initial role stuff
|
2023-03-17 15:58:49 +01:00 |
|
|
Ruakij
|
e5920b3ddf
|
Add network-plugin option
|
2023-03-17 15:57:48 +01:00 |
|
|
Ruakij
|
f3e381aca3
|
Move netmaker to deprecated
|
2023-01-18 13:23:51 +01:00 |
|
|
Ruakij
|
233eadaf40
|
Merge branch 'role_netmaker_server'
|
2023-01-10 09:47:34 +01:00 |
|
|
Ruakij
|
109a09052d
|
Update to 0.17.1
This also sets up tls-termination for mosquitto
|
2023-01-10 09:46:55 +01:00 |
|
|
Ruakij
|
4ea9492ca3
|
Change hos group-name
|
2023-01-10 09:46:01 +01:00 |
|
|
Ruakij
|
e5ebc2ad5f
|
Merge branch 'role_common'
|
2022-11-02 16:41:10 +01:00 |
|
|
Ruakij
|
98c51c6fc1
|
Merge branch 'role_kubernetes-k3s'
|
2022-11-02 16:40:52 +01:00 |
|
|
Ruakij
|
6b59bf6c75
|
Merge branch 'role_netmaker'
|
2022-11-02 16:40:36 +01:00 |
|
|
Ruakij
|
1b2af7cf6c
|
Merge branch 'role_netmaker_server'
|
2022-11-02 16:40:25 +01:00 |
|
|
Ruakij
|
d9cf3d2066
|
Re-gatherfacts at the end for other plays
|
2022-11-02 16:38:13 +01:00 |
|
|
Ruakij
|
f42bce9b6b
|
Add changed-detection
|
2022-11-02 16:37:53 +01:00 |
|
|
Ruakij
|
0fc5dbb791
|
Initial role-data
|
2022-11-02 16:29:55 +01:00 |
|
|
Ruakij
|
975746e7d7
|
Add IPv6-network to common
|
2022-11-02 10:27:06 +01:00 |
|
|
Ruakij
|
a27ca2c37a
|
Create dedicated docs-folder and move files there
|
2022-10-27 01:24:30 +02:00 |
|
|
Ruakij
|
247fdec7ae
|
fixme: hotfix for multi-master netmaker-server
netmaker doesnt handle concurrent joins to different server-nodes well and will duplicate addresses
|
2022-10-27 01:23:45 +02:00 |
|
|
Ruakij
|
9cb2e88193
|
Merge branch 'role_netmaker'
|
2022-10-27 01:16:57 +02:00 |
|
|
Ruakij
|
25ceb0f456
|
Merge branch 'role_netmaker_server'
|
2022-10-27 01:16:55 +02:00 |
|
|
Ruakij
|
0d8d5e8528
|
Merge branch 'role_docker'
|
2022-10-27 00:29:06 +02:00 |
|
|
Ruakij
|
06eb8456ab
|
Merge branch 'role_zsh'
|
2022-10-27 00:27:42 +02:00 |
|
|
Ruakij
|
657f861696
|
Merge branch 'role_common'
|
2022-10-27 00:27:32 +02:00 |
|
|
Ruakij
|
fcc4f1ed18
|
Fix task
|
2022-10-21 15:40:00 +02:00 |
|
|
Ruakij
|
de0e220004
|
Add defaults-var-file
|
2022-10-21 15:32:20 +02:00 |
|
|
Ruakij
|
f9cc97a8f2
|
Add CA to trust-store
|
2022-10-21 15:32:08 +02:00 |
|
|
Ruakij
|
811fc22eef
|
Delete unnecessary task-file
|
2022-10-21 15:31:37 +02:00 |
|
|
Ruakij
|
cdd4c9babb
|
Remove CA in args rqlite will use the system trust-store then
|
2022-10-21 14:49:35 +02:00 |
|
|
Ruakij
|
d553f604a9
|
Add own certs to mosquitto
|
2022-10-21 14:48:29 +02:00 |
|
|
Ruakij
|
806b41b73e
|
Fix proxy-protocol being expected
|
2022-10-21 14:22:38 +02:00 |
|
|
Ruakij
|
ec98188a24
|
Fix variable name
|
2022-10-21 14:20:26 +02:00 |
|
|
Ruakij
|
06bdae380b
|
Revert proxy-protocol-matching
|
2022-10-21 11:45:12 +02:00 |
|
|
Ruakij
|
83b50c10cd
|
Use new variables and fix requests
|
2022-10-21 08:42:37 +02:00 |
|
|
Ruakij
|
3890007042
|
Use more specific hostnames in cert
|
2022-10-21 08:42:11 +02:00 |
|
|
Ruakij
|
bb3d363094
|
Created nginx-config-file-templates
|
2022-10-21 08:33:08 +02:00 |
|
|
Ruakij
|
7453f1e616
|
Move variables to defaults-folder
|
2022-10-21 08:31:05 +02:00 |
|
|
Ruakij
|
e022a6e9f0
|
Restructure to make better looking
|
2022-10-20 08:34:35 +02:00 |
|
|
Ruakij
|
772dc3a620
|
Move TLS-point outside of netmaker-system
|
2022-10-20 08:32:49 +02:00 |
|
|
Ruakij
|
6d5c86927d
|
Make diagram more readable
|
2022-10-18 12:33:25 +02:00 |
|
|
Ruakij
|
c94168fb30
|
Comment-in connection-check todo: change check to http
|
2022-10-17 22:49:20 +02:00 |
|
|
Ruakij
|
6168ba2b0a
|
Add missing dependency
|
2022-10-17 22:48:58 +02:00 |
|
|
Ruakij
|
e4a2c5dd2f
|
Remove ports and add/change advertised adresses and ports
|
2022-10-17 22:48:49 +02:00 |
|
|
Ruakij
|
315f5a1805
|
Fix private_ip checking
|
2022-10-17 22:47:10 +02:00 |
|
|
Ruakij
|
d2d8ebd8cc
|
Add missing nginx-file
|
2022-10-17 22:46:41 +02:00 |
|
|
Ruakij
|
dd87d5e724
|
Move cert-generation outside
|
2022-10-17 22:46:20 +02:00 |
|