Ruakij/Ansible-roles

T

Ruakij c50c32059e host_firewall: drop inbound traffic from internet-wide scanners (OpenFilters internet-scanners), v4 and v6, daily refresh

2026-10-25 12:12:27 +00:00

Move netmaker to deprecated

2023-01-18 13:23:51 +01:00

common: tag the timezone task so it runs on its own

2026-10-25 10:54:32 +00:00

Let a host name its CrowdSec machine at the LAPI with crowdsec.machine_name, the short hostname of doris is dev

2026-10-21 06:10:01 +00:00

crowdsec_range_bouncer

crowdsec_range_bouncer: enforce CrowdSec range decisions in nftables interval sets, the firewall bouncer stores only the network address of a range

2026-10-24 08:10:34 +00:00

Add role docker

2022-10-17 14:10:13 +02:00

host_exporters: install the node exporter without recommends, smartd and nvmf-autoconnect failed on hugo

2026-10-23 21:04:05 +00:00

host_firewall: drop inbound traffic from internet-wide scanners (OpenFilters internet-scanners), v4 and v6, daily refresh

2026-10-25 12:12:27 +00:00

journal_upload: a node leaves its own NetBird address out of /etc/hosts, Traefik sees it as the cilium_host address

2026-10-24 16:04:06 +00:00

Copy per-host files of kopia_backup from a files list, empty by default

2026-10-22 08:25:43 +00:00

kubernetes: kubelet_memory writes a KubeletConfiguration drop-in 20-memory.conf for memory reservation and eviction, off by default

2026-10-25 09:57:22 +00:00

Join a fresh host to NetBird idempotently with the keyring, the management URL and the interface blacklist from the vars, and edit the blacklist and log level of a joined one

2026-10-23 20:54:30 +00:00

Add a proxmox_no_nag role that hides the subscription dialog and reapplies it from an apt hook after every widget-toolkit update

2026-10-13 15:55:56 +00:00

Add a tuned role that installs tuned and sets the throughput-performance profile

2026-10-09 14:37:25 +00:00

unattended_upgrades

Add an unattended_upgrades role that installs only Debian and Ubuntu security updates, with no automatic reboot

2026-10-22 09:00:33 +00:00

wireguard-ipv6-converter

Start the wireguard-ipv6-converter again whenever its bound service starts via a drop-in and always restart it on deploy

2026-10-09 14:37:24 +00:00

Add role zsh

2022-10-17 12:59:59 +02:00

README.md

Initial commit

2022-10-17 12:41:50 +02:00

README.md

Ansible-Roles

A collection of ansible-roles i have created for deployments.