aboutsummaryrefslogtreecommitdiffstats
path: root/roles
AgeCommit message (Collapse)Author
2018-10-02space_server: networkd: delete leftover configurationEmil Renner Berthing
2018-10-02space_server: networkd: don't restart running networkdEmil Renner Berthing
..this might cut the pipe we're connected through, and new network configuration should be tested to work after reboot anyway
2018-10-02space_server: defaults: added snakeskin rpimax campbell
2018-09-30users: esmil: add some dotfilesEmil Renner Berthing
2018-09-30users: root: let each user have their own root bashrcEmil Renner Berthing
2018-09-30users: start user uids from 2000Emil Renner Berthing
This way we shouldn't conflict with existing users. Eg. the 'pi' user on Raspbian
2018-09-30users: prepare for running on other OSesEmil Renner Berthing
2018-09-30Make it easier to run locallyEmil Renner Berthing
Now you just need ansible-playbook <playbook> when running ansible from your workstation. However when running ansible on the target machine it's a good idea to add "-clocal". Otherwise ansible will ssh to itself :/
2018-09-30space_server: sshd: keep host keys in secrets.ymlEmil Renner Berthing
2018-09-26space_server: kernel: better cmdline templateEmil Renner Berthing
2018-09-26Format yaml lists like yaml.orgEmil Renner Berthing
2018-09-26users: merge root_env into this roleEmil Renner Berthing
2018-09-25space_server: avahi: install packages in one goEmil Renner Berthing
2018-09-25Keep consistent ordering of rulesEmil Renner Berthing
Do - name: ... module: dest/path: 'destination on target' src: ... state: ... owner: ... group: ... mode: ... with_*: ... notify: ... tags: ...
2018-09-23space_server: networkd: drop flaky cleanupEmil Renner Berthing
It's still unfortunate that you can't easily tell ansible to manage a directory completely including which files should exists in it. Remove flaky code trying to implement that.
2018-09-23space_server: kernel: order entries by timeEmil Renner Berthing
2018-09-23Don't upgrade individual packagesEmil Renner Berthing
2018-09-23Add owner, group and mode to all created filesEmil Renner Berthing
2018-09-23fedora: dnf: make even more attribute drivenEmil Renner Berthing
2018-09-21Use one variable for chroot or nspawn environmentEmil Renner Berthing
2018-09-11users: semi: addedTroels Bang Jensen
2018-01-20users: signout: addedDennis Kjær Jensen
2018-01-12users: k2OS: addedRené Mikkelsen
Esmil: fixed a few typos
2017-11-28space_server: radius: fail getusers script on http errorEmil Renner Berthing
2017-11-26users: knielsen: addedKristian Nielsen
2017-11-25space_server: bird: add preferred sourceEmil Renner Berthing
..to default routes
2017-11-20space_server: networkd: use drop-in file for wait-onlineEmil Renner Berthing
The trick to overwriting the ExecStart option is to clear it first with ExecStart=
2017-11-20space_server: sshd: disable GSSAPIAuthenticationEmil Renner Berthing
2017-11-20space_server: radius: start radiusd we're onlineEmil Renner Berthing
2017-11-20space_server: update to Fedora 27Emil Renner Berthing
2017-11-19space_server: generate DNS, mDNS and dhcp entriesEmil Renner Berthing
..from the same variables
2017-11-19space_server: unbound: use unbound instad of bindEmil Renner Berthing
2017-11-18space_server: radius: clean up configurationEmil Renner Berthing
Disable all the unused auth methods
2017-11-17space_server: nftables: cleanupEmil Renner Berthing
Allow hop-by-hop ipv6-icmp only on local interfaces.
2017-11-17space_server: avahi: enable reflectorEmil Renner Berthing
This way clients on the private wifi networks can see printers and resolve .local on the wired network.
2017-11-17space_server: avahi: add listen on lan14 tooEmil Renner Berthing
This is the secret password protected wifi
2017-11-17space_server: avahi: use mdns_minimal to resolve .localEmil Renner Berthing
2017-11-17space_server: enable IPv6 on the free wifiEmil Renner Berthing
2017-11-15space_server: nftables: only NAT local addressesEmil Renner Berthing
2017-11-15space_server: nftables: allow IPv6 mDNSEmil Renner Berthing
2017-11-13users: riiiis: addedRiiiis
2017-11-13users: flummer: addedThomas Flummer
2017-11-13space_server: networkd: use fe80::1 link-local addressEmil Renner Berthing
..on lan interfaces with IPv6
2017-11-13space_server: nftables: clean up rules a bitEmil Renner Berthing
2017-11-12space_server: run avahiEmil Renner Berthing
2017-11-12space_server: dhcpd: remove spacewand from dhcp rangeEmil Renner Berthing
..otherwise dhcpd complains: dhcpd[3857]: Dynamic and static leases present for 10.42.0.70. dhcpd[3857]: Remove host declaration spacewand or remove 10.42.0.70 dhcpd[3857]: from the dynamic address pool for 10.42.0.0/24
2017-11-12space_server: named: point s. to public IPv6Emil Renner Berthing
We're not using the old site-local addresses anymore.
2017-11-12space_server: bootstrap.sh: use ansible-pullEmil Renner Berthing
2017-11-12initial commitEmil Renner Berthing