Ruakij/Ansible-roles

T

Ruakij 5318997b73 host_firewall: handshake meters per source reject over-limit connections with fw-rl-hs:, SYN meters log fw-rl-addr: and fw-rl-range: as evidence, conntrack accounting on

2026-10-26 14:35:28 +00:00

Move netmaker to deprecated

2023-01-18 13:23:51 +01:00

common: tag the timezone task so it runs on its own

2026-10-25 10:54:32 +00:00

crowdsec: hubupdate removes the disabled scenarios even when the upgrade fails and exits non-zero afterwards

2026-10-26 13:49:03 +00:00

crowdsec_range_bouncer

crowdsec_range_bouncer: enforce CrowdSec range decisions in nftables interval sets, the firewall bouncer stores only the network address of a range

2026-10-24 08:10:34 +00:00

docker: hourly prune of objects older than 7 days, root mail only when the prune fails

2026-10-26 10:18:29 +00:00

host_exporters: IPMI tools read a static root-owned FreeIPMI config pinned in sudoers, sudo logs allowed commands

2026-10-25 15:27:06 +00:00

host_firewall: handshake meters per source reject over-limit connections with fw-rl-hs:, SYN meters log fw-rl-addr: and fw-rl-range: as evidence, conntrack accounting on

2026-10-26 14:35:28 +00:00

journal_upload: uploader drop-in with no start limit and 30s restarts so ingest outages do not end it

2026-10-25 14:19:26 +00:00

Copy per-host files of kopia_backup from a files list, empty by default

2026-10-22 08:25:43 +00:00

kubernetes: kubelet_reserved comment names group_vars as the place of the values

2026-10-25 14:49:20 +00:00

mail_relay: postfix relays all mail through the mailcow submission port with a mailbox per host, replaces mail_aliases

2026-10-26 09:44:37 +00:00

Join a fresh host to NetBird idempotently with the keyring, the management URL and the interface blacklist from the vars, and edit the blacklist and log level of a joined one

2026-10-23 20:54:30 +00:00

Add a proxmox_no_nag role that hides the subscription dialog and reapplies it from an apt hook after every widget-toolkit update

2026-10-13 15:55:56 +00:00

Add a tuned role that installs tuned and sets the throughput-performance profile

2026-10-09 14:37:25 +00:00

unattended_upgrades

unattended_upgrades: apt-listchanges sends no mails

2026-10-26 14:17:53 +00:00

wireguard-ipv6-converter

Start the wireguard-ipv6-converter again whenever its bound service starts via a drop-in and always restart it on deploy

2026-10-09 14:37:24 +00:00

zfs_host: zed and pool capacity and scrub metrics for the node exporter textfile collector

2026-10-25 15:09:50 +00:00

Add role zsh

2022-10-17 12:59:59 +02:00

README.md

Initial commit

2022-10-17 12:41:50 +02:00

README.md

Ansible-Roles

A collection of ansible-roles i have created for deployments.