chris
e7a9c4b661
backup-common.yml: remove server-agr from daily backups.
2026-08-28 17:20:10 +02:00
chris
b4a09a7b94
feat(ipt-firewall): add ipt-firewall configuration for mm-irights, mm-nd, and mm-rav hosts
2026-08-09 23:14:08 +02:00
chris
33e8368d76
Rnaem SSH keys.
2026-08-09 23:13:48 +02:00
chris
53e17715fd
feat(mm-nd): add extra user configuration and sudoers for nd-admin
2026-08-09 23:09:35 +02:00
chris
845052a9db
fix(o45): correct formatting in ipt-firewall configuration for a.mx.oopen.de
2026-08-09 00:37:29 +02:00
chris
d94d28ca67
feat(mm-nd): update DNS settings and add cron jobs for service monitoring
2026-08-09 00:35:57 +02:00
chris
fff295759c
feat(o45): add ipt-firewall configuration for a.mx.oopen.de
2026-08-09 00:35:36 +02:00
chris
ed45c5596c
feat(o45): add configuration files and firewall settings for o45 host
2026-08-09 00:34:20 +02:00
chris
c6205045c5
feat(o45): add configuration files for o45 host and update apt tasks for compatibility
2026-08-09 00:33:51 +02:00
chris
05cb840e6d
feat(redis): replace apt update task with command to ensure compatibility
2026-08-09 00:33:03 +02:00
chris
80a4e33fc2
add user bauhofer
2026-08-07 19:32:41 +02:00
chris
ead9de9bac
feat: add workaround for cssh/Perl-Tk under Wayland to allow local X11 access
2026-08-07 12:54:52 +02:00
chris
c4acc32add
feat: update apt upgrade tasks to conditionally refresh cache based on apt_update variable
2026-08-07 11:43:28 +02:00
chris
6ba7c61cb7
fix(common): avoid localhost become prompts, stabilize redis apt upgrade, and lint handlers
2026-08-06 17:09:17 +02:00
chris
88f40fe0cd
feat: update apt packages for webserver and add extra Python packages
2026-08-06 14:49:53 +02:00
chris
79a38027df
set become false for localhost checks in users-systemfiles to prevent sudo timeout
2026-08-06 14:48:15 +02:00
chris
55f9a6f5b8
refactot encrytion- and decryption scripts.
2026-08-03 15:43:39 +02:00
chris
a318e1258c
Encrypt actual hosts file - outfile: hosts.BAK.
2026-08-03 15:42:50 +02:00
chris
19eafadac4
chore: remove obsolete playbooks and scripts
2026-08-03 12:36:38 +02:00
chris
5af310e55a
fix: set changed_when to false for apt update command.
2026-07-31 13:09:11 +02:00
chris
965ad5cde2
fix: specify ansible.builtin.template for service file and configuration deployments
2026-07-30 23:48:29 +02:00
chris
9c6094cef8
add host ki-fm.oopen.de
2026-07-30 12:54:19 +02:00
chris
4f8e5f4454
fix(file-ah-common.yml): correct indentation for samba user group assignments
2026-07-30 01:53:06 +02:00
chris
ca02faf748
fix(sshd_config.j2): update condition for SFTP subsystem configuration to use common variable
2026-07-30 01:38:49 +02:00
chris
1c1ae9464c
fix(yum.yml): change package state to 'present' for consistency and improve comment clarity
2026-07-29 23:40:23 +02:00
chris
451baa5f9a
fix(sudoers.yml): improve formatting of comments for clarity in sudoers configuration tasks
2026-07-29 23:34:58 +02:00
chris
b87c60c41e
fix(samba-remove-user.yml): enhance command structure and error handling for samba user removal tasks
2026-07-29 23:32:24 +02:00
chris
e125f9952f
fix(samba-user.yml): improve command structure and enhance error handling for samba user management
2026-07-29 23:30:04 +02:00
chris
71e9cf6551
fix(show.yml): improve formatting of hostname display message for clarity
2026-07-29 23:21:15 +02:00
chris
fc9c1548c3
fix(sshd.yml): standardize variable names for SSHD configuration facts and improve clarity
2026-07-29 18:08:17 +02:00
chris
b5a4edc181
fix(webadmin-user.yml): standardize variable names for local template directory references
2026-07-29 18:03:07 +02:00
chris
fea739f0e6
fix(webadmin-user.yml): update inventory checks and standardize variable names for clarity
2026-07-29 17:53:55 +02:00
chris
e72d9aac70
fix(users.yml): replace deprecated 'authorized_key' with 'ansible.posix.authorized_key' for improved compatibility
2026-07-29 17:46:31 +02:00
chris
eece49f53b
fix(users-systemfiles.yml): standardize variable names and improve clarity in user file checks and backups
2026-07-29 17:44:18 +02:00
chris
b14e82c6c2
fix(git.yml): improve error handling and register results for backup and samba repositories
2026-07-29 17:31:36 +02:00
chris
56ba319f2f
fix(redis-server.yml): standardize variable names and improve configuration clarity
2026-07-28 22:47:20 +02:00
chris
c443ce7c79
fix(yml): update SSH keypair paths for ga-al-relay and ga-st-mail configurations
2026-07-28 22:47:03 +02:00
chris
dc61dfc049
fix(yml): uncomment and standardize commented configuration options for clarity
2026-07-28 22:04:09 +02:00
chris
81e1f3fb3e
fix(ntp.yml): standardize variable naming and replace command with copy module for backup
2026-07-28 22:03:46 +02:00
chris
86aec11206
fix(common.yml): update SSH keypair paths for b.mx and d.mx configurations
2026-07-28 21:55:46 +02:00
chris
b3babf6831
fix(mail-common.yml): update SSH keypair paths and format email messages for clarity
2026-07-28 21:28:43 +02:00
chris
4d92340f9b
chore(ansible): clean up host_vars YAML and normalize mail text blocks
2026-07-28 21:24:03 +02:00
chris
ae60fa01a5
refactor(mx-common.yml): update paths for SSH keypair and file configurations
...
delete: remove obsolete postfix configuration files for rate limiting and user info
2026-07-28 02:16:07 +02:00
chris
9181734c51
fix(systemd-services): add condition to prevent service management for specific lxc_guest items
2026-07-28 01:52:41 +02:00
chris
1849c6d72d
refactor(systemd-services): streamline service checks for Debian and RedHat OS
2026-07-28 01:24:58 +02:00
chris
5525fa3e73
refactor(systemd-resolved): rename facts to common_resolved variables for consistency
2026-07-28 01:10:41 +02:00
chris
5832d0b938
chore(main.yml): clear apt_remove list and comment out previous entries
2026-07-28 01:02:48 +02:00
chris
4310ae08b0
fix(copy_files.yml): correct formatting of template files task
2026-07-28 00:48:36 +02:00
chris
385b4a6802
refactor(copy_files.yml): simplify template file handling by removing redundant tasks
2026-07-28 00:46:19 +02:00
chris
c30543280b
feat(git.yml): enhance error handling for backup and samba server repository installations
2026-07-28 00:36:36 +02:00
chris
7e5fe673cf
feat(postfwd.cf): add final=yes to rate limiting rules for enhanced message handling
2026-07-28 00:32:28 +02:00
chris
032ea670ef
chore(main.yml): remove commented-out entries for authorized SSH keys
2026-07-28 00:13:02 +02:00
chris
00457b2ac7
chore(first-run.yml): remove obsolete first-run tasks for package installation
2026-07-28 00:11:19 +02:00
chris
095f5de034
feat(git.yml): enhance version handling for git repositories to prioritize 'master' if available
2026-07-28 00:02:49 +02:00
chris
e60c1b81d1
feat(git.yml): add version handling for git repository installations
2026-07-27 22:16:45 +02:00
chris
eb2c7cc15a
chore(main.yml): set default git branch to main; Also includes various unrelated housekeeping updates in this file.
2026-07-27 22:16:27 +02:00
chris
f39babaf5d
feat(common): add host-tree file/template overrides and skip global items when host overrides exist
2026-07-27 21:55:27 +02:00
chris
b40d3249fb
Refactor variable names in samba-config-server.yml for consistency and clarity
2026-07-21 01:28:32 +02:00
chris
720fb84fb4
Refactor variable name for clarity and update condition in nfs.yml
2026-07-21 00:55:07 +02:00
chris
70eeebe4c4
roles/common/tasks/mysql.yml: remove trailing spaces.
2026-07-21 00:53:27 +02:00
chris
baba4c4b7d
Refactor variable names in motd.yml for consistency and clarity
2026-07-21 00:48:33 +02:00
chris
ab4ef8f831
Refactor variable names in git.yml for consistency and clarity
2026-07-21 00:42:05 +02:00
chris
618eaa0bf7
Refactor variable names in cron.yml for consistency and clarity
2026-07-21 00:25:21 +02:00
chris
924e6bbf03
Refactor variable names in copy_files.yml for consistency and clarity
2026-07-21 00:24:25 +02:00
chris
03951153c1
Refactor caching-nameserver.yml for consistency and clarity in variable naming
2026-07-21 00:22:39 +02:00
chris
ee5819c82c
Remove update_cache parameter from util-linux-extra installation task in basic.yml
2026-07-20 23:52:43 +02:00
chris
062d1a6fc7
Refactor variable names in apt.yml for consistency and clarity
2026-07-20 23:48:19 +02:00
chris
81398e847e
Refactor Ansible tasks to use fully qualified module names and improve code consistency
...
- Updated all tasks to use fully qualified module names (e.g., ansible.builtin.shell, ansible.builtin.copy) for clarity and to avoid ambiguity.
- Replaced deprecated 'yum' module with 'dnf' for package management on RedHat-based systems.
- Improved formatting and consistency in task definitions, including the use of double quotes for strings and consistent indentation.
- Removed unnecessary comments and whitespace to enhance readability.
- Ensured that conditions and loops are consistently formatted across all tasks.
2026-07-20 23:09:30 +02:00
chris
bc330beebf
Refactor Ansible tasks in basic.yml to use module prefixes and improve variable naming consistency
2026-07-20 22:57:13 +02:00
chris
ba1d600cd8
Refactor ansible tasks in apt-gateway.yml to include module prefixes and improve variable naming consistency
2026-07-20 22:49:38 +02:00
chris
de82385bec
Add virus filter include and exclude file configurations for Samba shares
2026-07-20 17:42:15 +02:00
chris
509dc48851
Add unprotected interface configuration for Docker network in ipt-server.yml and new Samba share for Windows-Server-2025-Backup in common.yml
2026-07-20 11:00:53 +02:00
chris
88928adddb
Remove debug task for displaying cron variables in cron.yml
2026-07-17 18:37:24 +02:00
chris
ef7c88f64d
Add host variable files for various hosts and update DNS configurations
...
- Created `wiki-common.yml` for wiki.cadus.org with DNS settings and git repository configurations.
- Added `www-common.yml` for www.oopen.de including SFTP group creation and root user password.
- Introduced `zapata-alt-common.yml` for zapata-alt.opp.netz with network interface configurations, Samba user reorganize 'host_vars'
2026-07-17 18:26:32 +02:00
chris
ed8887e5be
Add debug task to display cron variables and improve formatting in cron.yml
2026-07-17 18:24:56 +02:00
chris
4f7da3ae5d
Add check for legacy /etc/apt/sources.list existence before backup in apt.yml
2026-07-17 18:24:14 +02:00
chris
d68e39127a
Add deb822 source templates for Debian backports and security repositories
2026-07-13 21:24:24 +02:00
chris
3ab7d16906
Update apt_initial_install_trixie: add bind9-dnsutils, man-db, python3 packages and remove duplicates
2026-07-13 21:23:50 +02:00
chris
ff3ed5060a
Disable recycle bin for Samba shares by setting vfs_object_recycle to false
2026-07-13 17:08:41 +02:00
chris
79d360b2bc
Refactor apt-migrate-to-trixie.yml: clean up comments, improve task definitions, and ensure proper permissions for backup files
2026-07-13 17:07:30 +02:00
chris
12ba240411
Adjust host spezific setting of variables.
2026-07-02 20:39:18 +02:00
chris
7223219b08
Extensions for the Postfix policyd service. Allow exceptions for the number of messages and the number of recipients.
2026-07-02 20:38:19 +02:00
chris
3b4ba60bb7
Add ipt-server.yml for backup.oopen.de with initial firewall configuration
2026-06-29 16:46:15 +02:00
chris
e74fca04a2
Update migration guide: add step to freeze current firewall rules and create ipt-server.yml for a.ns.oopen.de with initial configuration
2026-06-29 11:38:20 +02:00
chris
ba5683864a
Add sudo to iptables-save commands in migration guide for proper permissions
2026-06-29 08:20:02 +02:00
chris
1171d156b7
Add sudo to iptables-save commands in migration guide for proper permissions
2026-06-29 08:16:53 +02:00
chris
682a08b53e
Refactor extract-fw-host-vars.py to improve quoted value handling and add fw_manage_config to generated YAML; create ipt-server.yml for a.mx.oopen.de with initial configuration
2026-06-29 08:13:40 +02:00
chris
b9e5b0f5e2
ile-dissens.dissens.netz.yml: add user 'nano.nowak'.
2026-06-29 00:53:10 +02:00
chris
db2cdabee1
Update ipt-server role: add Jitsi TCP/UDP ports to defaults and remove obsolete entries from host_vars
2026-06-28 11:45:37 +02:00
chris
25b0e026f2
Update ipt-server role: add Jitsi TCP/UDP ports to defaults and remove obsolete entries from host_vars
2026-06-28 11:35:12 +02:00
chris
48bc4296da
Add fw_manage_config to ipt-server.yml for cl-01.oopen.de
2026-06-27 22:56:27 +02:00
chris
f149b09892
Refactor ipt-server role: update migration and README for hostname variable usage; remove obsolete ipt-server.yml for cloud-01.oopen.de
2026-06-27 22:38:12 +02:00
chris
7db2b7ee9b
Update ipt-server role: specify hosts in ipt-server.yml and add configuration for cloud-01.oopen.de
2026-06-27 22:23:49 +02:00
chris
5a98895b66
Role ipt-server: rename 'host_vars/<server-name>/ipt_firewall.yml' to 'host_vars/<server-name>/ipt-server.yml'.
2026-06-27 02:32:15 +02:00
chris
92d2c31ecc
Role ipt-server: rename 'host_vars/<server-name>/ipt_firewall.yml' to 'host_vars/<server-name>/ipt-server.yml'.
2026-06-27 02:28:16 +02:00
chris
9798ca9cd6
Add ipt-server role with firewall configuration and management
...
- Created handlers for reloading systemd and restarting firewall services.
- Implemented tasks to ensure the existence of configuration directories and files.
- Deployed host-specific and shared configuration files using templates.
- Added scripts for managing IPv4 and IPv6 firewalls.
- Configured systemd service units for ipt-firewall and ip6t-firewall.
- Enabled and started firewall services on system boot.
2026-06-26 19:30:01 +02:00
chris
0158e3738f
file-km: add group 'wildvang' to uiserb 'zeina'.
2026-06-26 00:52:43 +02:00
chris
f309e8cb1c
Add new host entry and update Samba configuration
...
- Added 'file-km-alt.anw-km.netz' to the hosts file in multiple locations.
- Updated Samba configuration to change the maximum file size for virus filtering from 25 MB to 15 MB, with commented-out options for 50 MB and 25 MB.
- Created a new host variable file for 'file-km-alt.anw-km.netz' with detailed network interface and Samba share configurations, including user definitions and permissions.
2026-06-19 11:49:11 +02:00
chris
84d5a653c5
Update network configurations and add new host variables
...
- Modified network interface settings for gw-mbr.oopen.de, changing IP addresses and adding an alias for IPMI.
- Refactored network interface configuration for o28.oopen.de, consolidating and updating device settings, including bridge configurations and DNS settings.
- Added new user 'farina' to samba_user in zapata.opp.netz.yml.
- Updated hosts file to include new entries for ak-plan.oopen.de and adjusted existing entries for clarity.
- Created new host variable files for ak-plan.oopen.de, cl-ndm.oopen.de, and psono-ndm.oopen.de with comprehensive configurations for systemd-resolved and cron jobs.
2026-06-18 14:15:47 +02:00
chris
1c7ad75f47
Add virusfilter support to Samba homes and shares configuration
2026-06-01 02:54:54 +02:00
chris