Commit Graph
100 Commits
Author SHA1 Message Date
chris 7e5fe673cf feat(postfwd.cf): add final=yes to rate limiting rules for enhanced message handling 2026-07-28 00:32:28 +02:00
chris 032ea670ef chore(main.yml): remove commented-out entries for authorized SSH keys 2026-07-28 00:13:02 +02:00
chris 00457b2ac7 chore(first-run.yml): remove obsolete first-run tasks for package installation 2026-07-28 00:11:19 +02:00
chris 095f5de034 feat(git.yml): enhance version handling for git repositories to prioritize 'master' if available 2026-07-28 00:02:49 +02:00
chris e60c1b81d1 feat(git.yml): add version handling for git repository installations 2026-07-27 22:16:45 +02:00
chris eb2c7cc15a chore(main.yml): set default git branch to main; Also includes various unrelated housekeeping updates in this file. 2026-07-27 22:16:27 +02:00
chris f39babaf5d feat(common): add host-tree file/template overrides and skip global items when host overrides exist 2026-07-27 21:55:27 +02:00
chris b40d3249fb Refactor variable names in samba-config-server.yml for consistency and clarity 2026-07-21 01:28:32 +02:00
chris 720fb84fb4 Refactor variable name for clarity and update condition in nfs.yml 2026-07-21 00:55:07 +02:00
chris 70eeebe4c4 roles/common/tasks/mysql.yml: remove trailing spaces. 2026-07-21 00:53:27 +02:00
chris baba4c4b7d Refactor variable names in motd.yml for consistency and clarity 2026-07-21 00:48:33 +02:00
chris ab4ef8f831 Refactor variable names in git.yml for consistency and clarity 2026-07-21 00:42:05 +02:00
chris 618eaa0bf7 Refactor variable names in cron.yml for consistency and clarity 2026-07-21 00:25:21 +02:00
chris 924e6bbf03 Refactor variable names in copy_files.yml for consistency and clarity 2026-07-21 00:24:25 +02:00
chris 03951153c1 Refactor caching-nameserver.yml for consistency and clarity in variable naming 2026-07-21 00:22:39 +02:00
chris ee5819c82c Remove update_cache parameter from util-linux-extra installation task in basic.yml 2026-07-20 23:52:43 +02:00
chris 062d1a6fc7 Refactor variable names in apt.yml for consistency and clarity 2026-07-20 23:48:19 +02:00
chris 81398e847e Refactor Ansible tasks to use fully qualified module names and improve code consistency
- Updated all tasks to use fully qualified module names (e.g., ansible.builtin.shell, ansible.builtin.copy) for clarity and to avoid ambiguity.
- Replaced deprecated 'yum' module with 'dnf' for package management on RedHat-based systems.
- Improved formatting and consistency in task definitions, including the use of double quotes for strings and consistent indentation.
- Removed unnecessary comments and whitespace to enhance readability.
- Ensured that conditions and loops are consistently formatted across all tasks.
2026-07-20 23:09:30 +02:00
chris bc330beebf Refactor Ansible tasks in basic.yml to use module prefixes and improve variable naming consistency 2026-07-20 22:57:13 +02:00
chris ba1d600cd8 Refactor ansible tasks in apt-gateway.yml to include module prefixes and improve variable naming consistency 2026-07-20 22:49:38 +02:00
chris de82385bec Add virus filter include and exclude file configurations for Samba shares 2026-07-20 17:42:15 +02:00
chris 509dc48851 Add unprotected interface configuration for Docker network in ipt-server.yml and new Samba share for Windows-Server-2025-Backup in common.yml 2026-07-20 11:00:53 +02:00
chris 88928adddb Remove debug task for displaying cron variables in cron.yml 2026-07-17 18:37:24 +02:00
chris ef7c88f64d Add host variable files for various hosts and update DNS configurations
- Created `wiki-common.yml` for wiki.cadus.org with DNS settings and git repository configurations.
- Added `www-common.yml` for www.oopen.de including SFTP group creation and root user password.
- Introduced `zapata-alt-common.yml` for zapata-alt.opp.netz with network interface configurations, Samba user reorganize 'host_vars'
2026-07-17 18:26:32 +02:00
chris ed8887e5be Add debug task to display cron variables and improve formatting in cron.yml 2026-07-17 18:24:56 +02:00
chris 4f7da3ae5d Add check for legacy /etc/apt/sources.list existence before backup in apt.yml 2026-07-17 18:24:14 +02:00
chris d68e39127a Add deb822 source templates for Debian backports and security repositories 2026-07-13 21:24:24 +02:00
chris 3ab7d16906 Update apt_initial_install_trixie: add bind9-dnsutils, man-db, python3 packages and remove duplicates 2026-07-13 21:23:50 +02:00
chris ff3ed5060a Disable recycle bin for Samba shares by setting vfs_object_recycle to false 2026-07-13 17:08:41 +02:00
chris 79d360b2bc Refactor apt-migrate-to-trixie.yml: clean up comments, improve task definitions, and ensure proper permissions for backup files 2026-07-13 17:07:30 +02:00
chris 12ba240411 Adjust host spezific setting of variables. 2026-07-02 20:39:18 +02:00
chris 7223219b08 Extensions for the Postfix policyd service. Allow exceptions for the number of messages and the number of recipients. 2026-07-02 20:38:19 +02:00
chris 3b4ba60bb7 Add ipt-server.yml for backup.oopen.de with initial firewall configuration 2026-06-29 16:46:15 +02:00
chris e74fca04a2 Update migration guide: add step to freeze current firewall rules and create ipt-server.yml for a.ns.oopen.de with initial configuration 2026-06-29 11:38:20 +02:00
chris ba5683864a Add sudo to iptables-save commands in migration guide for proper permissions 2026-06-29 08:20:02 +02:00
chris 1171d156b7 Add sudo to iptables-save commands in migration guide for proper permissions 2026-06-29 08:16:53 +02:00
chris 682a08b53e Refactor extract-fw-host-vars.py to improve quoted value handling and add fw_manage_config to generated YAML; create ipt-server.yml for a.mx.oopen.de with initial configuration 2026-06-29 08:13:40 +02:00
chris b9e5b0f5e2 ile-dissens.dissens.netz.yml: add user 'nano.nowak'. 2026-06-29 00:53:10 +02:00
chris db2cdabee1 Update ipt-server role: add Jitsi TCP/UDP ports to defaults and remove obsolete entries from host_vars 2026-06-28 11:45:37 +02:00
chris 25b0e026f2 Update ipt-server role: add Jitsi TCP/UDP ports to defaults and remove obsolete entries from host_vars 2026-06-28 11:35:12 +02:00
chris 48bc4296da Add fw_manage_config to ipt-server.yml for cl-01.oopen.de 2026-06-27 22:56:27 +02:00
chris f149b09892 Refactor ipt-server role: update migration and README for hostname variable usage; remove obsolete ipt-server.yml for cloud-01.oopen.de 2026-06-27 22:38:12 +02:00
chris 7db2b7ee9b Update ipt-server role: specify hosts in ipt-server.yml and add configuration for cloud-01.oopen.de 2026-06-27 22:23:49 +02:00
chris 5a98895b66 Role ipt-server: rename 'host_vars/<server-name>/ipt_firewall.yml' to 'host_vars/<server-name>/ipt-server.yml'. 2026-06-27 02:32:15 +02:00
chris 92d2c31ecc Role ipt-server: rename 'host_vars/<server-name>/ipt_firewall.yml' to 'host_vars/<server-name>/ipt-server.yml'. 2026-06-27 02:28:16 +02:00
chris 9798ca9cd6 Add ipt-server role with firewall configuration and management
- Created handlers for reloading systemd and restarting firewall services.
- Implemented tasks to ensure the existence of configuration directories and files.
- Deployed host-specific and shared configuration files using templates.
- Added scripts for managing IPv4 and IPv6 firewalls.
- Configured systemd service units for ipt-firewall and ip6t-firewall.
- Enabled and started firewall services on system boot.
2026-06-26 19:30:01 +02:00
chris 0158e3738f file-km: add group 'wildvang' to uiserb 'zeina'. 2026-06-26 00:52:43 +02:00
chris f309e8cb1c Add new host entry and update Samba configuration
- Added 'file-km-alt.anw-km.netz' to the hosts file in multiple locations.
- Updated Samba configuration to change the maximum file size for virus filtering from 25 MB to 15 MB, with commented-out options for 50 MB and 25 MB.
- Created a new host variable file for 'file-km-alt.anw-km.netz' with detailed network interface and Samba share configurations, including user definitions and permissions.
2026-06-19 11:49:11 +02:00
chris 84d5a653c5 Update network configurations and add new host variables
- Modified network interface settings for gw-mbr.oopen.de, changing IP addresses and adding an alias for IPMI.
- Refactored network interface configuration for o28.oopen.de, consolidating and updating device settings, including bridge configurations and DNS settings.
- Added new user 'farina' to samba_user in zapata.opp.netz.yml.
- Updated hosts file to include new entries for ak-plan.oopen.de and adjusted existing entries for clarity.
- Created new host variable files for ak-plan.oopen.de, cl-ndm.oopen.de, and psono-ndm.oopen.de with comprehensive configurations for systemd-resolved and cron jobs.
2026-06-18 14:15:47 +02:00
chris 1c7ad75f47 Add virusfilter support to Samba homes and shares configuration 2026-06-01 02:54:54 +02:00
chris 55bdcba049 Add virusfilter support to Samba homes and shares 2026-06-01 02:54:25 +02:00
chris 86afc6263d update some hosts 2026-06-01 01:53:29 +02:00
chris 78d9822d2f Add notifications to reload AppArmor profile and restart clamav-daemon 2026-06-01 01:53:16 +02:00
chris 6e086dbac0 Add virusfilter support for Samba homes and update AppArmor configuration 2026-05-29 18:43:06 +02:00
chris 56a2c8464f Add virusfilter support to Samba shares and configure ClamAV database checks 2026-05-26 14:18:36 +02:00
chris 1f78326503 Adds handlers to reload AppArmor and restart ClamAV
Ensures AppArmor profile for ClamAV is reloaded and the ClamAV daemon is restarted when necessary, improving service reliability and reflecting updated security profiles.
2026-05-26 14:16:45 +02:00
chris f1f169d3aa Comment out cron job entries for DNS cache service restart 2026-05-26 13:43:27 +02:00
chris 3c0a252ecc Add virusfilter support to Samba shares configuration 2026-05-26 13:42:56 +02:00
chris 5b3b68b134 Add ClamAV virusfilter support to Samba configuration and tasks 2026-05-26 13:39:43 +02:00
chris d1444e1507 Add cron job to monitor web services and restart if necessary 2026-05-06 15:57:11 +02:00
chris b0dd95318a Add and update host variable files for various servers
- Created new host variable file for `iam-nd.oopen.de` with network and cron configurations.
- Created new host variable file for `test.mariadb.oopen.de` with cron environment entries.
- Updated `file-km.anw-km.netz.yml.BAK.2026-04-18-1218` with network interface configurations and DNS settings.
- Modified `gw-campus.oopen.de.yml` to change device names for network interfaces.
- Updated `nd-archiv.warenform.de.yml`, `nd-live.warenform.de.yml`, `nd.warenform.de.yml`, `web0.warenform.de.yml`, `web1.warenform.de.yml`, and `web2.warenform.de.yml` to replace `wkhtmltopdf` with `weasyprint` in the list of extra packages.
- Updated `o26.oopen.de.yml` to correct SSH key destination and change backup job script path.
- Added `iam-nd.oopen.de` to the hosts file for server management.
2026-05-01 02:30:31 +02:00
chris 7d5640f3bd Refactor dpkg command task for improved clarity and reliability 2026-05-01 02:29:53 +02:00
chris c6a760e26e Update conditions for checking user configuration files in webadmin-user.yml 2026-05-01 02:29:27 +02:00
chris 8064f4a2fe Add extrepo tasks for managing external repositories in Debian 2026-03-30 10:37:45 +02:00
chris 9ef1c94855 Add devcontainer configuration for Ansible development environment 2026-03-27 15:25:47 +01:00
chris 28d6cfe5da Add VSCode settings for Python and Ansible environment configuration 2026-03-27 15:25:34 +01:00
chris c94baae7ff Clean up whitespace and formatting in main.yml for improved readability 2026-03-27 15:12:08 +01:00
chris b201a21105 Refactor apache2.yml for consistency and clarity in task definitions 2026-03-27 14:56:14 +01:00
chris a7ae583c20 Add VSCode settings for Python environment configuration 2026-03-27 12:21:47 +01:00
chris 5d6f0cca16 Add host variables configuration for cl-nd.oopen.de 2026-03-27 12:02:29 +01:00
chris 4016b33d63 Add cron job configurations for system maintenance and monitoring 2026-03-27 12:02:14 +01:00
chris 71f429d8aa Fix check for host-specific git vars file before including 2026-03-27 11:59:40 +01:00
chris 816c64783e Add iuser vmalte 2026-03-25 20:41:54 +01:00
chris d7283cad63 update.. 2026-03-23 21:45:20 +01:00
chris 90786f2faf update.. 2026-03-20 00:04:46 +01:00
chris 3e39731465 Update.. 2026-03-15 15:42:06 +01:00
chris 3a7ad06202 Update host configurations 2026-03-10 11:32:56 +01:00
chris 055290e555 Update: Replace deprecated ansible_os_family with ansible_facts.os_family
- x2go-server.yml: Updated condition to use ansible_facts.os_family
- upgrade.yml: Updated all conditions and commented lines
- caching-nameserver.yml: Updated RedHat OS family checks

Fixes deprecation warning in Ansible 2.12+
2026-03-10 11:09:25 +01:00
chris 94d7f4e1fb update.. 2026-03-01 16:20:09 +01:00
chris 72d4fae731 update.. 2026-03-01 15:23:24 +01:00
chris 084a483cf2 update.. 2026-02-22 00:23:30 +01:00
chris 7238579d9c update.. 2026-02-14 14:29:00 +01:00
chris f9652dbbf9 update.. 2026-02-10 11:54:07 +01:00
chris b6097221e7 update-- 2026-02-09 14:23:32 +01:00
chris 8fe4047694 update.. 2026-02-04 23:25:58 +01:00
chris a41467f6d4 replace more deprecated code. 2026-02-01 14:49:41 +01:00
chris 6b2dd6b0bf Fix error on debian.sources file. 2026-02-01 14:49:05 +01:00
chris 4e06ed01aa get rid of deprecated code. 2026-02-01 12:30:58 +01:00
chris 1feef826b7 update.. 2026-01-23 13:01:28 +01:00
chris 41f3af3e4f update.. 2026-01-22 11:27:38 +01:00
chris 6e9cb4a88a update.. 2025-12-19 11:38:46 +01:00
chris d28e0fc6a5 update.. 2025-12-16 10:28:54 +01:00
chris b9144ea2b6 update.. 2025-12-15 22:01:57 +01:00
chris 179d494aab backup.oopen.de.yml: add public key from o18.oopen.de . 2025-12-12 16:26:15 +01:00
chris 871ad4f4a6 o18.oopen.de.yml: fix error in adding route to br0. 2025-12-12 16:01:41 +01:00
chris aa5aec673d correct outdated code. 2025-12-12 16:01:06 +01:00
chris e6573732b2 Merge branch 'master' of git.oopen.de:ansible/oopen-server 2025-12-12 14:25:53 +01:00
chris f2c4794a8f Add hosts 'o10.oopen.de' and 'cl-exil.oopen.de'. 2025-12-12 14:25:21 +01:00
chris 97c0f7508a scripts/install-ulogd.yml: correct outdated code. 2025-12-12 14:24:47 +01:00
chris b50b97e240 host_vars/backup.oopen.de.yml: add host ssh key from 'nd-gate.ndhosting.de' to support borg2 backup. 2025-12-10 18:08:31 +01:00