Ruakij/Ansible-roles

T

Ruakij c2c8934ec9 host_firewall: per-service new-connection meters per source (/32, /64) and per range (/24, /48) from measured peaks, excess dropped with prefix fw-ratelimit:, replaces the ssh meter

2026-10-26 12:24:31 +00:00

Move netmaker to deprecated

2023-01-18 13:23:51 +01:00

common: tag the timezone task so it runs on its own

2026-10-25 10:54:32 +00:00

crowdsec: disabled_scenarios removes hub scenarios replaced by local ones, absent_files removes retired local files

2026-10-26 12:24:30 +00:00

crowdsec_range_bouncer

crowdsec_range_bouncer: enforce CrowdSec range decisions in nftables interval sets, the firewall bouncer stores only the network address of a range

2026-10-24 08:10:34 +00:00

docker: hourly prune of objects older than 7 days, root mail only when the prune fails

2026-10-26 10:18:29 +00:00

host_exporters: IPMI tools read a static root-owned FreeIPMI config pinned in sudoers, sudo logs allowed commands

2026-10-25 15:27:06 +00:00

host_firewall: per-service new-connection meters per source (/32, /64) and per range (/24, /48) from measured peaks, excess dropped with prefix fw-ratelimit:, replaces the ssh meter

2026-10-26 12:24:31 +00:00

journal_upload: uploader drop-in with no start limit and 30s restarts so ingest outages do not end it

2026-10-25 14:19:26 +00:00

Copy per-host files of kopia_backup from a files list, empty by default

2026-10-22 08:25:43 +00:00

kubernetes: kubelet_reserved comment names group_vars as the place of the values

2026-10-25 14:49:20 +00:00

mail_relay: postfix relays all mail through the mailcow submission port with a mailbox per host, replaces mail_aliases

2026-10-26 09:44:37 +00:00

Join a fresh host to NetBird idempotently with the keyring, the management URL and the interface blacklist from the vars, and edit the blacklist and log level of a joined one

2026-10-23 20:54:30 +00:00

Add a proxmox_no_nag role that hides the subscription dialog and reapplies it from an apt hook after every widget-toolkit update

2026-10-13 15:55:56 +00:00

Add a tuned role that installs tuned and sets the throughput-performance profile

2026-10-09 14:37:25 +00:00

unattended_upgrades

Add an unattended_upgrades role that installs only Debian and Ubuntu security updates, with no automatic reboot

2026-10-22 09:00:33 +00:00

wireguard-ipv6-converter

Start the wireguard-ipv6-converter again whenever its bound service starts via a drop-in and always restart it on deploy

2026-10-09 14:37:24 +00:00

zfs_host: zed and pool capacity and scrub metrics for the node exporter textfile collector

2026-10-25 15:09:50 +00:00

Add role zsh

2022-10-17 12:59:59 +02:00

README.md

Initial commit

2022-10-17 12:41:50 +02:00

README.md

Ansible-Roles

A collection of ansible-roles i have created for deployments.