Age | Commit message (Collapse) | Author | |
---|---|---|---|
2020-02-27 | space_server: use common secrets.yml in ansible root | Emil Renner Berthing | |
..and generalize and move sshd tasks to fedora role. | |||
2019-07-06 | roles: fix warnings about bare boolean variables | Emil Renner Berthing | |
2019-04-03 | space_server: named: support dynamic updates | Emil Renner Berthing | |
..of the dhcp zone and reverse dns for 10.42.0.0/16 This way the dhcp daemon can add entries when it handles out leases. | |||
2019-04-02 | space_server: named: create reverse ipv4 zone | Emil Renner Berthing | |
2019-04-01 | space_server: named: use named instead of unbound | Emil Renner Berthing | |
This reverts commit 3b795796bd03488a385f3ad42b10b8c0d61282c1, "space_server: unbound: use unbound instad of bind". Unlike unbound, bind supports synthesizing DNS64 answers only for certain clients, so only requests from the Labitat NAT64 network will get DNS64 answers. | |||
2018-12-06 | space_server: networkd: fix unneeded calculation | Emil Renner Berthing | |
2018-12-05 | space_server: enable NAT64/DNS64 network | Emil Renner Berthing | |
2018-12-05 | space_server: avahi: ask myhostname 2nd | Emil Renner Berthing | |
2018-12-05 | space_server: unbound: create /etc/resolv.conf | Emil Renner Berthing | |
2018-11-30 | space_server: use systemd-network for RAs | Emil Renner Berthing | |
..rather radvd | |||
2018-11-30 | space_server: networkd: use Link.RequiredForOnline | Emil Renner Berthing | |
..rather than overriding ExecStart to call networkd-wait-online with --ignore | |||
2018-11-29 | space_server: use dnf_packages when possible | Emil Renner Berthing | |
2018-11-29 | space_server: radvd: wait-online.conf no longer needed | Emil Renner Berthing | |
The package-provided radvd.service now has After=network-online.target Wants=network-online.target | |||
2018-11-27 | space_server: radius: omit src when state != link | Emil Renner Berthing | |
This fixes some ansible warnings. | |||
2018-11-24 | space_server: networkd: smarter set difference | Emil Renner Berthing | |
2018-11-11 | fedora: align with debian role | Emil Renner Berthing | |
2018-11-10 | space_server: replace blackhole script | Emil Renner Berthing | |
2018-11-10 | space_server: update for Fedora 29 | Emil Renner Berthing | |
2018-11-10 | space_server: drop uneccessary subdirs | Emil Renner Berthing | |
2018-10-27 | space_server: radius: use python for ASSHA auth | Emil Renner Berthing | |
..rather than our own patched radiusd | |||
2018-10-11 | Migrate to new ipv6 prefix | Emil Renner Berthing | |
..to avoid overlapping /32 announced by DKUUG. | |||
2018-10-02 | space_server: networkd: delete leftover configuration | Emil Renner Berthing | |
2018-10-02 | space_server: networkd: don't restart running networkd | Emil Renner Berthing | |
..this might cut the pipe we're connected through, and new network configuration should be tested to work after reboot anyway | |||
2018-09-30 | Make it easier to run locally | Emil Renner Berthing | |
Now you just need ansible-playbook <playbook> when running ansible from your workstation. However when running ansible on the target machine it's a good idea to add "-clocal". Otherwise ansible will ssh to itself :/ | |||
2018-09-30 | space_server: sshd: keep host keys in secrets.yml | Emil Renner Berthing | |
2018-09-26 | Format yaml lists like yaml.org | Emil Renner Berthing | |
2018-09-25 | space_server: avahi: install packages in one go | Emil Renner Berthing | |
2018-09-25 | Keep consistent ordering of rules | Emil Renner Berthing | |
Do - name: ... module: dest/path: 'destination on target' src: ... state: ... owner: ... group: ... mode: ... with_*: ... notify: ... tags: ... | |||
2018-09-23 | space_server: networkd: drop flaky cleanup | Emil Renner Berthing | |
It's still unfortunate that you can't easily tell ansible to manage a directory completely including which files should exists in it. Remove flaky code trying to implement that. | |||
2018-09-23 | space_server: kernel: order entries by time | Emil Renner Berthing | |
2018-09-23 | Don't upgrade individual packages | Emil Renner Berthing | |
2018-09-23 | Add owner, group and mode to all created files | Emil Renner Berthing | |
2018-09-21 | Use one variable for chroot or nspawn environment | Emil Renner Berthing | |
2017-11-20 | space_server: networkd: use drop-in file for wait-online | Emil Renner Berthing | |
The trick to overwriting the ExecStart option is to clear it first with ExecStart= | |||
2017-11-20 | space_server: sshd: disable GSSAPIAuthentication | Emil Renner Berthing | |
2017-11-20 | space_server: radius: start radiusd we're online | Emil Renner Berthing | |
2017-11-19 | space_server: generate DNS, mDNS and dhcp entries | Emil Renner Berthing | |
..from the same variables | |||
2017-11-19 | space_server: unbound: use unbound instad of bind | Emil Renner Berthing | |
2017-11-18 | space_server: radius: clean up configuration | Emil Renner Berthing | |
Disable all the unused auth methods | |||
2017-11-17 | space_server: avahi: enable reflector | Emil Renner Berthing | |
This way clients on the private wifi networks can see printers and resolve .local on the wired network. | |||
2017-11-17 | space_server: avahi: add listen on lan14 too | Emil Renner Berthing | |
This is the secret password protected wifi | |||
2017-11-17 | space_server: avahi: use mdns_minimal to resolve .local | Emil Renner Berthing | |
2017-11-13 | space_server: nftables: clean up rules a bit | Emil Renner Berthing | |
2017-11-12 | space_server: run avahi | Emil Renner Berthing | |
2017-11-12 | initial commit | Emil Renner Berthing | |