Phillip Smith
59807399ed
initial commit of firewalld role and tasks
2018-03-06 08:46:24 +11:00
Florian Pritz
e28df1c7a1
php: Load opcache extension
...
Signed-off-by: Florian Pritz <bluewind@xinu.at>
2018-03-03 15:12:28 +01:00
Giancarlo Razzolini
a40d6e1f98
Fix typo in the tags for the archwiki role
2018-03-02 22:31:22 -03:00
Giancarlo Razzolini
bf43586686
Add the archwiki role to the apollo playbook
...
Added the archwiki role to the apollo playbook and also added the intl extension to the
php-fpm role.
2018-03-02 19:57:44 -03:00
Florian Pritz
6a2f69cff2
Remove double quote of postgres_listen_addresses
...
Already quoted in the new config template.
Signed-off-by: Florian Pritz <bluewind@xinu.at>
2018-03-02 13:17:43 +01:00
Bartłomiej Piotrowski
efeeff759c
nginx: set default letsencrypt_validation_dir value
2017-10-20 14:24:07 +02:00
Florian Pritz
891e729c8d
borg-client: Adapt for FQDN
...
Signed-off-by: Florian Pritz <bluewind@xinu.at>
2017-09-06 20:52:42 +02:00
Florian Pritz
388f3b14c9
apollo: Dynamically build postgres_ssl_hosts list
...
Signed-off-by: Florian Pritz <bluewind@xinu.at>
2017-09-06 20:06:15 +02:00
Giancarlo Razzolini
3231e370c4
playbooks: Change all the hosts names to FQDN.
...
We have changed our ansible configuration and policy to only use
fully qualified domain names for hostnames. Update the playbooks
to use them.
2017-09-05 15:33:05 -03:00
Florian Pritz
7c85b76c9c
Move mail server to orion
...
Signed-off-by: Florian Pritz <bluewind@xinu.at>
2017-09-02 14:59:26 +02:00
Florian Pritz
f2bc1c185f
Add grafana
...
Signed-off-by: Florian Pritz <bluewind@xinu.at>
2017-08-12 18:20:41 +02:00
Florian Pritz
a71c3ea29a
Add unbound
...
Spamassassin on apollo tries to connect to a local dns resolver, but
can't which leads to long timeouts. Flyspray sends mail via SMTP which
goes through SA and thus each request that sends a mail will also block
for a long time.
Fix this by adding unbound as a local resolver which is needed for
proper performance of SA since public resolvers are often blocked by
blacklists because they send too many requests.
Signed-off-by: Florian Pritz <bluewind@xinu.at>
2017-07-09 20:51:19 +02:00
Florian Pritz
215c95fa37
apollo: Remove dovecot
...
Signed-off-by: Florian Pritz <bluewind@xinu.at>
2017-07-03 15:59:20 +02:00
Florian Pritz
105fdfade9
postfix: Add support for patchwork
...
Signed-off-by: Florian Pritz <bluewind@xinu.at>
2017-07-03 15:52:40 +02:00
Florian Pritz
1275d26210
postfix: Decouple smtpd and full mail server
...
Signed-off-by: Florian Pritz <bluewind@xinu.at>
2017-07-02 19:53:22 +02:00
Florian Pritz
49d5d34165
Deploy zabbix-agent to all hosts
...
Signed-off-by: Florian Pritz <bluewind@xinu.at>
2017-04-01 10:45:13 +02:00
Florian Pritz
e81946203c
zabbix-agent: Fix agent server on apollo
...
Signed-off-by: Florian Pritz <bluewind@xinu.at>
2017-03-20 16:20:29 +01:00
Florian Pritz
9ca0aacb19
php: Adapt php.ini for zabbix frontend
...
Signed-off-by: Florian Pritz <bluewind@xinu.at>
2017-03-20 15:17:24 +01:00
Florian Pritz
964e8bd0c1
Enable zabbix roles on apollo
...
Signed-off-by: Florian Pritz <bluewind@xinu.at>
2017-03-20 15:17:24 +01:00
Florian Pritz
5054193cbf
Add kanbord
...
Signed-off-by: Florian Pritz <bluewind@xinu.at>
2017-03-05 00:31:06 +01:00
Florian Pritz
79d2812249
php: Add iconv, gd, pdo_pgsql for kanboard
...
Signed-off-by: Florian Pritz <bluewind@xinu.at>
2017-03-04 20:51:51 +01:00
Giancarlo Razzolini
b23cf257a7
playbooks/apollo: Add the patchwork role to apollo
2017-02-09 10:34:08 -02:00
Florian Pritz
791144b9ea
mailman: Add redirect for mailman.archlinux.org
...
Signed-off-by: Florian Pritz <bluewind@xinu.at>
2017-02-08 17:48:58 +01:00
Florian Pritz
81196f5e61
Backup mysql databases
...
Signed-off-by: Florian Pritz <bluewind@xinu.at>
2017-02-07 20:13:34 +01:00
Florian Pritz
9283dfdb79
php-fpm: Merge settings from apollo
...
Signed-off-by: Florian Pritz <bluewind@xinu.at>
2017-02-07 16:36:43 +01:00
Giancarlo Razzolini
4f1748fd94
playbooks/apollo: Add the php-fpm, mariadb and flyspray roles.
2017-02-06 15:44:33 -02:00
Giancarlo Razzolini
6cdb06165c
playbooks/apollo: Change to use the new netmask variable
2017-01-01 18:13:54 -02:00
Giancarlo Razzolini
c9c9230290
playbooks/apollo: Fix the mask on orion ipv4 address passed to postgres role
2016-12-30 19:33:50 -02:00
Giancarlo Razzolini
0b9f68aba3
playbooks/apollo: Add ssl to postgres and give orion permission to login. Also add memcached role
2016-12-30 17:15:36 -02:00
Giancarlo Razzolini
f4b276c888
playbooks: Add the archweb role to apollo and change the orion role to use the new default variables, with a global db host variable
2016-12-29 22:22:09 -02:00
Giancarlo Razzolini
4aecc99885
playbooks/apollo: Added missing uwsgi role.
2016-12-21 08:34:11 -02:00
Giancarlo Razzolini
45dc25b0d0
playbooks/apollo: Added the sudo role and the security_tracker role. Also changes the posgres to include the new variables.
...
roles/postgres: Merged the new configuration (from 9.6) and added two new variables for making it easier to test the role on a vm/container.
2016-12-20 16:08:18 -02:00
Florian Pritz
d00b7a636e
Add spampd to apollo
...
Signed-off-by: Florian Pritz <bluewind@xinu.at>
2016-09-18 17:35:16 +02:00
Sven-Hendrik Haase
8480d6fb53
Add postgres role and use it on apollo
...
Signed-off-by: Sven-Hendrik Haase <svenstaro@gmail.com>
2016-09-12 11:54:33 +02:00
Florian Pritz
0d2ea540df
apollo: Fix typo in opendkim tag name
...
Signed-off-by: Florian Pritz <bluewind@xinu.at>
2016-07-18 16:57:50 +02:00
Florian Pritz
b9cb1e5ff9
apollo: Add dedicated role tags for postfix and opendkim
...
Signed-off-by: Florian Pritz <bluewind@xinu.at>
2016-07-18 14:12:43 +02:00
Florian Pritz
f1dec70194
apollo: Add dovecot and postfwd
...
Signed-off-by: Florian Pritz <bluewind@xinu.at>
2016-07-18 14:12:31 +02:00
Florian Pritz
b238f13c95
apollo: Fix order of opendkim role
...
Needs to be after postfix since it uses the postfix group for some files
Signed-off-by: Florian Pritz <bluewind@xinu.at>
2016-07-11 15:29:47 +02:00
Florian Pritz
ac518769ef
apollo: Enable postfix and opendkim
...
Signed-off-by: Florian Pritz <bluewind@xinu.at>
2016-07-11 15:29:47 +02:00
Sven-Hendrik Haase
e1406014c3
Add planet role to apollo for planet.archlinux.org
2016-06-29 03:38:13 +02:00
Sven-Hendrik Haase
e138650a0f
Rename ssh_keys to root_ssh
2016-06-18 00:23:03 +02:00
Sven-Hendrik Haase
e8c06b36ea
borg-client: Propery postgres backup
2016-06-05 16:10:32 +02:00
Sven-Hendrik Haase
59924c98a4
Fix some typos
2016-06-04 14:59:09 +02:00
Sven-Hendrik Haase
2afc2a0509
Fix wrong name
2016-06-04 12:49:59 +02:00
Sven-Hendrik Haase
08d9fe0d0d
Add apollo config
2016-06-04 12:42:28 +02:00