aboutsummaryrefslogtreecommitdiffstats
path: root/roles/space_server
AgeCommit message (Collapse)Author
2018-11-11fedora: align with debian roleEmil Renner Berthing
2018-11-10space_server: replace blackhole scriptEmil Renner Berthing
2018-11-10space_server: update for Fedora 29Emil Renner Berthing
2018-11-10space_server: drop uneccessary subdirsEmil Renner Berthing
2018-11-06space_server: add spacebrain.labitat.dkAsbjørn Sloth Tønnesen
2018-10-27space_server: radius: use python for ASSHA authEmil Renner Berthing
..rather than our own patched radiusd
2018-10-11Migrate to new ipv6 prefixEmil Renner Berthing
..to avoid overlapping /32 announced by DKUUG.
2018-10-11space_server: vars: move snakeskin.s ipEmil Renner Berthing
..out of dynamic dhcp range and clean up old sound server entries.
2018-10-06space_server: vars: fix doorputer MAC addressEmil Renner Berthing
2018-10-06space_server: move variables from defaults to varsEmil Renner Berthing
these variables only applies to the space server and should never be overwritten from somewhere else
2018-10-03all: add site-wide locale/timezone defaultEmil Renner Berthing
2018-10-03fedora: locale: align variable layout with debianEmil Renner Berthing
2018-10-02space_server: networkd: delete leftover configurationEmil Renner Berthing
2018-10-02space_server: networkd: don't restart running networkdEmil Renner Berthing
..this might cut the pipe we're connected through, and new network configuration should be tested to work after reboot anyway
2018-10-02space_server: defaults: added snakeskin rpimax campbell
2018-09-30Make it easier to run locallyEmil Renner Berthing
Now you just need ansible-playbook <playbook> when running ansible from your workstation. However when running ansible on the target machine it's a good idea to add "-clocal". Otherwise ansible will ssh to itself :/
2018-09-30space_server: sshd: keep host keys in secrets.ymlEmil Renner Berthing
2018-09-26space_server: kernel: better cmdline templateEmil Renner Berthing
2018-09-26Format yaml lists like yaml.orgEmil Renner Berthing
2018-09-26users: merge root_env into this roleEmil Renner Berthing
2018-09-25space_server: avahi: install packages in one goEmil Renner Berthing
2018-09-25Keep consistent ordering of rulesEmil Renner Berthing
Do - name: ... module: dest/path: 'destination on target' src: ... state: ... owner: ... group: ... mode: ... with_*: ... notify: ... tags: ...
2018-09-23space_server: networkd: drop flaky cleanupEmil Renner Berthing
It's still unfortunate that you can't easily tell ansible to manage a directory completely including which files should exists in it. Remove flaky code trying to implement that.
2018-09-23space_server: kernel: order entries by timeEmil Renner Berthing
2018-09-23Don't upgrade individual packagesEmil Renner Berthing
2018-09-23Add owner, group and mode to all created filesEmil Renner Berthing
2018-09-23fedora: dnf: make even more attribute drivenEmil Renner Berthing
2018-09-21Use one variable for chroot or nspawn environmentEmil Renner Berthing
2017-11-28space_server: radius: fail getusers script on http errorEmil Renner Berthing
2017-11-25space_server: bird: add preferred sourceEmil Renner Berthing
..to default routes
2017-11-20space_server: networkd: use drop-in file for wait-onlineEmil Renner Berthing
The trick to overwriting the ExecStart option is to clear it first with ExecStart=
2017-11-20space_server: sshd: disable GSSAPIAuthenticationEmil Renner Berthing
2017-11-20space_server: radius: start radiusd we're onlineEmil Renner Berthing
2017-11-20space_server: update to Fedora 27Emil Renner Berthing
2017-11-19space_server: generate DNS, mDNS and dhcp entriesEmil Renner Berthing
..from the same variables
2017-11-19space_server: unbound: use unbound instad of bindEmil Renner Berthing
2017-11-18space_server: radius: clean up configurationEmil Renner Berthing
Disable all the unused auth methods
2017-11-17space_server: nftables: cleanupEmil Renner Berthing
Allow hop-by-hop ipv6-icmp only on local interfaces.
2017-11-17space_server: avahi: enable reflectorEmil Renner Berthing
This way clients on the private wifi networks can see printers and resolve .local on the wired network.
2017-11-17space_server: avahi: add listen on lan14 tooEmil Renner Berthing
This is the secret password protected wifi
2017-11-17space_server: avahi: use mdns_minimal to resolve .localEmil Renner Berthing
2017-11-17space_server: enable IPv6 on the free wifiEmil Renner Berthing
2017-11-15space_server: nftables: only NAT local addressesEmil Renner Berthing
2017-11-15space_server: nftables: allow IPv6 mDNSEmil Renner Berthing
2017-11-13space_server: networkd: use fe80::1 link-local addressEmil Renner Berthing
..on lan interfaces with IPv6
2017-11-13space_server: nftables: clean up rules a bitEmil Renner Berthing
2017-11-12space_server: run avahiEmil Renner Berthing
2017-11-12space_server: dhcpd: remove spacewand from dhcp rangeEmil Renner Berthing
..otherwise dhcpd complains: dhcpd[3857]: Dynamic and static leases present for 10.42.0.70. dhcpd[3857]: Remove host declaration spacewand or remove 10.42.0.70 dhcpd[3857]: from the dynamic address pool for 10.42.0.0/24
2017-11-12space_server: named: point s. to public IPv6Emil Renner Berthing
We're not using the old site-local addresses anymore.
2017-11-12space_server: bootstrap.sh: use ansible-pullEmil Renner Berthing
generated by cgit v1.2.1 (git 2.18.0) at 2024-11-22 19:04:31 +0000