Ruakij/Ansible-roles
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Commit Graph

  • 23ed82b113 Own the k3s config.yaml in the kubernetes role template, write it only on a semantic change and run the installer only when the pinned k3s version differs main Ruakij 2026-10-09 14:13:21 +00:00
  • 37e21ead36 Expose the etcd metrics on the node IP of the etcd members of k3s Ruakij 2026-10-09 12:56:24 +00:00
  • 2798853153 Raise the inotify limits of the k3s nodes to 65536 instances and 4194304 watches, except in LXC Ruakij 2026-10-09 12:55:46 +00:00
  • e9ba272d70 Manage the kubelet image garbage collection drop-in and its config-dir kubelet-arg in the kubernetes role Ruakij 2026-10-09 12:54:41 +00:00
  • b62992f21e Cap the systemd journal at 512M on disk, 128M in memory and two weeks in the common role Ruakij 2026-10-09 12:53:44 +00:00
  • fd73949412 Whitelist the public_ips of every inventory host in crowdsec and keep a LAPI allowlist equal to the whitelist Ruakij 2026-10-08 09:19:51 +00:00
  • d345ccf585 Add a pre_command to kopia_backup for host dump scripts and install gpg for the apt key Ruakij 2026-10-08 08:51:23 +00:00
  • b45a07da56 Add forward_guard to host_firewall for a forward chain that drops traffic to guarded guests outside the allowed interfaces, ports and ICMP types Ruakij 2026-10-08 08:48:40 +00:00
  • 9ded6814c3 Pin the fstrim timer and the monthly ZFS trim and scrub per host in the common role to keep them out of the backup window Ruakij 2026-10-07 22:42:08 +00:00
  • a9a60e3106 Keep the clock on systemd-timesyncd and the timezone on UTC in the common role Ruakij 2026-10-07 21:22:01 +00:00
  • 5da89fdf29 Run the kopia_backup timer at 03:30 UTC by default since the hosts run in different timezones Ruakij 2026-10-07 21:19:09 +00:00
  • 9e2e6cbb99 Add IPv4 port forwards and masquerade to host_firewall in an ip host_nat table Ruakij 2026-10-07 21:10:35 +00:00
  • c9d2334906 Add a kopia_backup role for the daily Kopia snapshot script and timer against an existing S3 repository Ruakij 2026-10-07 20:54:52 +00:00
  • c87af201aa Add a crowdsec role for agents and the nftables bouncer against a central LAPI Ruakij 2026-10-07 07:29:29 +00:00
  • cfe87002c5 Replace the nftables role with host_firewall, one atomic inet host input table with zones, geo sets and lockout rollback Ruakij 2026-10-07 07:29:29 +00:00
  • b8ae38bab8 Check loclhost instead of external in case firewalls block external connections role_kubernetes-k3s Ruakij 2023-06-21 17:36:51 +02:00
  • 27e9d4a1ab Merge branch 'role_nftables' Ruakij 2023-06-21 17:35:09 +02:00
  • 755f9b2e1a Initial role role_nftables Ruakij 2023-05-21 20:57:43 +02:00
  • 753f456ef3 Merge branch 'role_kubernetes-k3s' Ruakij 2023-04-14 10:21:06 +02:00
  • 093612f3a7 Change restart-check to started/restarted check Ruakij 2023-04-14 10:20:16 +02:00
  • a92409c56f Add failed_when to deploy calico operator Ruakij 2023-04-14 10:01:42 +02:00
  • f50e3ac33c Use first node's IP for joining cluster Ruakij 2023-04-14 09:50:39 +02:00
  • 668ff23ee6 Fix service task wrong usage Ruakij 2023-04-14 09:42:46 +02:00
  • c2c6a2872f Fix conditional for changed after install Ruakij 2023-04-12 23:11:26 +02:00
  • c1c7ec9e56 Remove workaround as k3s is now at 1.26 Ruakij 2023-04-12 22:39:43 +02:00
  • 550f6868ff Fix old usage of network_plugin var Ruakij 2023-04-12 20:49:38 +02:00
  • 3fe288f6a5 Merge branch 'role_wireguard-ipv6-converter' Ruakij 2023-04-12 20:40:01 +02:00
  • ab9220d042 Add pause & gather_facts at end when service was started role_wireguard-ipv6-converter Ruakij 2023-04-12 20:39:49 +02:00
  • 15ad7920d4 Merge branch 'role_wireguard-ipv6-converter' Ruakij 2023-04-12 20:24:27 +02:00
  • 7012e1ea2b Separate enable and re-/start service for fine-control Ruakij 2023-04-12 20:23:08 +02:00
  • 13ebd48c5d Add register for task download Ruakij 2023-04-12 20:22:34 +02:00
  • 1a76b94a46 Add download-version Ruakij 2023-04-12 14:58:43 +02:00
  • 1b765689e6 Make sure daemon is reloaded before service-start Ruakij 2023-04-12 14:50:14 +02:00
  • 5b607df2de Add checks if var is set Ruakij 2023-04-12 14:47:02 +02:00
  • 521b76453a Add start to naming Ruakij 2023-04-12 14:45:55 +02:00
  • 7f503d983a Fix download-location Ruakij 2023-04-12 14:45:43 +02:00
  • b143d9c848 Fix checks Ruakij 2023-04-12 14:45:31 +02:00
  • f95bcbc38d change defaults Ruakij 2023-04-12 14:44:10 +02:00
  • 248a3c08b8 Initial role-data Ruakij 2023-04-12 13:36:14 +02:00
  • f2c86dc22d Merge branch 'role_kubernetes-k3s' Ruakij 2023-04-05 20:20:03 +02:00
  • a79f2cac8a Merge branch 'role_netbird_client' Ruakij 2023-04-05 20:19:44 +02:00
  • c8f90f0f8d Update calico Ruakij 2023-04-05 20:15:31 +02:00
  • 41570ea40d Create new block for network-stuff Ruakij 2023-04-05 20:14:36 +02:00
  • a3c887748a Move network-helper to own file independend from calico Ruakij 2023-04-05 20:14:12 +02:00
  • d113625fa8 Fix env-value not being string Ruakij 2023-04-05 20:08:25 +02:00
  • dadd077723 Fix service and conditional Ruakij 2023-04-05 14:13:22 +02:00
  • 0d43d07ad4 Add extra-config option Ruakij 2023-04-05 14:12:56 +02:00
  • d6f8f975bb Reload when config changed, but install already done Ruakij 2023-04-05 13:32:14 +02:00
  • 7c86a5d77d Add register for config Ruakij 2023-04-05 13:30:22 +02:00
  • 8c4e3c2401 Update routingtabletowg and use new sync feature Ruakij 2023-03-30 14:54:49 +02:00
  • b46d35c8a5 Add labels Ruakij 2023-03-30 14:54:28 +02:00
  • 791ad96849 Add ipv6-check to calico deploy Ruakij 2023-03-19 15:17:45 +01:00
  • fc3d9845d6 Fix undeterministic node-selection but uses group Ruakij 2023-03-19 15:17:02 +01:00
  • 590b75ac23 Add quotes to token-usage for special chars Ruakij 2023-03-19 14:01:19 +01:00
  • 0c82504299 Separate getting name and ips to fix bug easily Ruakij 2023-03-19 14:00:46 +01:00
  • 2fee9a1747 Only enable ipv6 when available and activated Ruakij 2023-03-19 14:00:15 +01:00
  • fb44c39969 Add install of often-used packets Ruakij 2023-03-19 13:58:47 +01:00
  • 5452303992 Remove netmaker from dependency Ruakij 2023-03-19 13:58:05 +01:00
  • 4321d78cf8 Add comments to variables Ruakij 2023-03-19 13:57:57 +01:00
  • f9a859e95c Add ingress-option Ruakij 2023-03-19 13:56:26 +01:00
  • fd302e4ebc Move regather facts to join when changed role_netbird_client Ruakij 2023-03-19 13:47:01 +01:00
  • b5729caa0e Add wait for interface to come up Ruakij 2023-03-19 13:46:44 +01:00
  • dca40ed835 Remove throttle Ruakij 2023-03-19 13:46:21 +01:00
  • 95ddd04a86 Fix join command Ruakij 2023-03-19 10:39:06 +01:00
  • 911bc47acb Initial role stuff Ruakij 2023-03-17 15:58:49 +01:00
  • e5920b3ddf Add network-plugin option Ruakij 2023-03-17 15:57:48 +01:00
  • 940c169209 Initial role stuff role_nomad Ruakij 2023-03-16 14:06:28 +01:00
  • f3e381aca3 Move netmaker to deprecated Ruakij 2023-01-18 13:23:51 +01:00
  • 233eadaf40 Merge branch 'role_netmaker_server' Ruakij 2023-01-10 09:47:34 +01:00
  • 109a09052d Update to 0.17.1 This also sets up tls-termination for mosquitto role_netmaker_server Ruakij 2023-01-10 09:46:55 +01:00
  • 4ea9492ca3 Change hos group-name Ruakij 2023-01-10 09:46:01 +01:00
  • e5ebc2ad5f Merge branch 'role_common' Ruakij 2022-11-02 16:41:10 +01:00
  • 98c51c6fc1 Merge branch 'role_kubernetes-k3s' Ruakij 2022-11-02 16:40:52 +01:00
  • 6b59bf6c75 Merge branch 'role_netmaker' Ruakij 2022-11-02 16:40:36 +01:00
  • 1b2af7cf6c Merge branch 'role_netmaker_server' Ruakij 2022-11-02 16:40:25 +01:00
  • d9cf3d2066 Re-gatherfacts at the end for other plays role_netmaker Ruakij 2022-11-02 16:38:13 +01:00
  • f42bce9b6b Add changed-detection Ruakij 2022-11-02 16:37:53 +01:00
  • 0fc5dbb791 Initial role-data Ruakij 2022-11-02 16:29:55 +01:00
  • 975746e7d7 Add IPv6-network to common role_common Ruakij 2022-11-02 10:27:06 +01:00
  • 83507bf027 Grab local-IP from specified interface instead role_kubernetes-rke2 Ruakij 2022-11-02 08:54:14 +01:00
  • c2dcd88420 Add architecture Ruakij 2022-11-02 08:53:04 +01:00
  • 7e83a43755 Disable swap role_kubernetes Ruakij 2022-11-01 08:45:48 +01:00
  • 0d2e715980 Setup containerd Ruakij 2022-11-01 08:45:42 +01:00
  • c899de75ae Moved some prerequisites to external files Ruakij 2022-11-01 08:35:10 +01:00
  • 74ff4b483f Change template-file-extension Ruakij 2022-11-01 08:07:32 +01:00
  • 5759e50510 Remove dqlite Ruakij 2022-11-01 08:06:29 +01:00
  • a27ca2c37a Create dedicated docs-folder and move files there Ruakij 2022-10-27 01:24:30 +02:00
  • 247fdec7ae fixme: hotfix for multi-master netmaker-server netmaker doesnt handle concurrent joins to different server-nodes well and will duplicate addresses Ruakij 2022-10-27 01:23:45 +02:00
  • 9cb2e88193 Merge branch 'role_netmaker' Ruakij 2022-10-27 01:16:57 +02:00
  • 25ceb0f456 Merge branch 'role_netmaker_server' Ruakij 2022-10-27 01:16:55 +02:00
  • fbe64d43b5 Move vars to defaults Ruakij 2022-10-21 16:05:35 +02:00
  • fcc4f1ed18 Fix task Ruakij 2022-10-21 15:40:00 +02:00
  • de0e220004 Add defaults-var-file Ruakij 2022-10-21 15:32:20 +02:00
  • f9cc97a8f2 Add CA to trust-store Ruakij 2022-10-21 15:32:08 +02:00
  • 811fc22eef Delete unnecessary task-file Ruakij 2022-10-21 15:31:37 +02:00
  • cdd4c9babb Remove CA in args rqlite will use the system trust-store then Ruakij 2022-10-21 14:49:35 +02:00
  • d553f604a9 Add own certs to mosquitto Ruakij 2022-10-21 14:48:29 +02:00
  • 806b41b73e Fix proxy-protocol being expected Ruakij 2022-10-21 14:22:38 +02:00
  • ec98188a24 Fix variable name Ruakij 2022-10-21 14:20:26 +02:00
  • 06bdae380b Revert proxy-protocol-matching Ruakij 2022-10-21 11:45:12 +02:00