aboutsummaryrefslogtreecommitdiffstats
path: root/roles/space_server
AgeCommit message (Collapse)Author
2018-12-05space_server: enable NAT64/DNS64 networkEmil Renner Berthing
2018-12-05space_server: avahi: ask myhostname 2ndEmil Renner Berthing
2018-12-05space_server: unbound: create /etc/resolv.confEmil Renner Berthing
2018-12-03space_server: networkd: announce proper DNS on mgtEmil Renner Berthing
2018-12-03space_server: networkd: disable ARP on untagged interfaceEmil Renner Berthing
2018-11-30space_server: networkd: small cleanupsEmil Renner Berthing
2018-11-30space_server: use systemd-network for RAsEmil Renner Berthing
..rather radvd
2018-11-30space_server: networkd: use Link.RequiredForOnlineEmil Renner Berthing
..rather than overriding ExecStart to call networkd-wait-online with --ignore
2018-11-29space_server: use dnf_packages when possibleEmil Renner Berthing
2018-11-29space_server: radvd: wait-online.conf no longer neededEmil Renner Berthing
The package-provided radvd.service now has After=network-online.target Wants=network-online.target
2018-11-28space_server: nat Labitat free from 185.38.175.1Emil Renner Berthing
2018-11-28space_server: add Asbjorn's colo addresses and netAsbjørn Sloth Tønnesen
2018-11-28space_server: nftables: accept all traffic to colo netsEmil Renner Berthing
..but don't let colo servers connect to internal addresses.
2018-11-27space_server: radius: omit src when state != linkEmil Renner Berthing
This fixes some ansible warnings.
2018-11-24space_server: networkd: smarter set differenceEmil Renner Berthing
2018-11-22space_server: radvd: up DNS server valid timeEmil Renner Berthing
2018-11-22space_server: bootstrap: chmod subvolumeEmil Renner Berthing
2018-11-11fedora: align with debian roleEmil Renner Berthing
2018-11-10space_server: replace blackhole scriptEmil Renner Berthing
2018-11-10space_server: update for Fedora 29Emil Renner Berthing
2018-11-10space_server: drop uneccessary subdirsEmil Renner Berthing
2018-11-06space_server: add spacebrain.labitat.dkAsbjørn Sloth Tønnesen
2018-10-27space_server: radius: use python for ASSHA authEmil Renner Berthing
..rather than our own patched radiusd
2018-10-11Migrate to new ipv6 prefixEmil Renner Berthing
..to avoid overlapping /32 announced by DKUUG.
2018-10-11space_server: vars: move snakeskin.s ipEmil Renner Berthing
..out of dynamic dhcp range and clean up old sound server entries.
2018-10-06space_server: vars: fix doorputer MAC addressEmil Renner Berthing
2018-10-06space_server: move variables from defaults to varsEmil Renner Berthing
these variables only applies to the space server and should never be overwritten from somewhere else
2018-10-03all: add site-wide locale/timezone defaultEmil Renner Berthing
2018-10-03fedora: locale: align variable layout with debianEmil Renner Berthing
2018-10-02space_server: networkd: delete leftover configurationEmil Renner Berthing
2018-10-02space_server: networkd: don't restart running networkdEmil Renner Berthing
..this might cut the pipe we're connected through, and new network configuration should be tested to work after reboot anyway
2018-10-02space_server: defaults: added snakeskin rpimax campbell
2018-09-30Make it easier to run locallyEmil Renner Berthing
Now you just need ansible-playbook <playbook> when running ansible from your workstation. However when running ansible on the target machine it's a good idea to add "-clocal". Otherwise ansible will ssh to itself :/
2018-09-30space_server: sshd: keep host keys in secrets.ymlEmil Renner Berthing
2018-09-26space_server: kernel: better cmdline templateEmil Renner Berthing
2018-09-26Format yaml lists like yaml.orgEmil Renner Berthing
2018-09-26users: merge root_env into this roleEmil Renner Berthing
2018-09-25space_server: avahi: install packages in one goEmil Renner Berthing
2018-09-25Keep consistent ordering of rulesEmil Renner Berthing
Do - name: ... module: dest/path: 'destination on target' src: ... state: ... owner: ... group: ... mode: ... with_*: ... notify: ... tags: ...
2018-09-23space_server: networkd: drop flaky cleanupEmil Renner Berthing
It's still unfortunate that you can't easily tell ansible to manage a directory completely including which files should exists in it. Remove flaky code trying to implement that.
2018-09-23space_server: kernel: order entries by timeEmil Renner Berthing
2018-09-23Don't upgrade individual packagesEmil Renner Berthing
2018-09-23Add owner, group and mode to all created filesEmil Renner Berthing
2018-09-23fedora: dnf: make even more attribute drivenEmil Renner Berthing
2018-09-21Use one variable for chroot or nspawn environmentEmil Renner Berthing
2017-11-28space_server: radius: fail getusers script on http errorEmil Renner Berthing
2017-11-25space_server: bird: add preferred sourceEmil Renner Berthing
..to default routes
2017-11-20space_server: networkd: use drop-in file for wait-onlineEmil Renner Berthing
The trick to overwriting the ExecStart option is to clear it first with ExecStart=
2017-11-20space_server: sshd: disable GSSAPIAuthenticationEmil Renner Berthing
2017-11-20space_server: radius: start radiusd we're onlineEmil Renner Berthing