ansible/oopen-server
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Compare commits

base: ansible:04c420458c025b903e0c158340d8f9299e1c785b
Branches Tags
ansible:master
..
compare: ansible:762e38586e40671bb2b1643ab06f3e37f79fcef3
Branches Tags
ansible:master

No commits in common. "04c420458c025b903e0c158340d8f9299e1c785b" and "762e38586e40671bb2b1643ab06f3e37f79fcef3" have entirely different histories.
04c420458c ... 762e38586e

10 changed files with 39 additions and 658 deletions
Show Stats Expand all files Collapse all files

32
group_vars/all/main.yml
View File

@ -1526,11 +1526,9 @@ apt_kvm_host_pkgs:
- lvm2 - lvm2
- bridge-utils - bridge-utils
- ntfs-3g - ntfs-3g
- qemu-system
- qemu-kvm - qemu-kvm
- libvirt-clients - libvirt-clients
- libvirt-daemon-system - libvirt-daemon-system
- libosinfo-bin
- virtinst - virtinst
- libguestfs-tools - libguestfs-tools
- kpartx - kpartx
@ -2301,11 +2299,6 @@ git_default_repositories:
repo: https://git.oopen.de/install/mailsystem repo: https://git.oopen.de/install/mailsystem
dest: /usr/local/src/mailsystem dest: /usr/local/src/mailsystem
# Monitoring
- name: monitoring
repo: https://git.oopen.de/script/monitoring
dest: /root/bin/monitoring
# --- # ---
# group [oopen_server] # group [oopen_server]
# --- # ---
@ -2331,6 +2324,11 @@ git_warenform_server_repositories:
# --- # ---
git_lxc_host_repositories: git_lxc_host_repositories:
# Monitoring
- name: monitoring
repo: https://git.oopen.de/script/monitoring
dest: /root/bin/monitoring
# LXC # LXC
- name: LXC - name: LXC
repo: https://git.oopen.de/script/LXC repo: https://git.oopen.de/script/LXC
@ -2346,6 +2344,11 @@ git_lxc_guest_repositories:
repo: https://git.oopen.de/certificates/dehydrated-cron.git repo: https://git.oopen.de/certificates/dehydrated-cron.git
dest: /usr/local/src/dehydrated-cron dest: /usr/local/src/dehydrated-cron
# Monitoring
- name: monitoring
repo: https://git.oopen.de/script/monitoring
dest: /root/bin/monitoring
# --- # ---
# group [gateway_server] # group [gateway_server]
# --- # ---
@ -2363,6 +2366,12 @@ git_gateway_repositories:
repo: https://git.oopen.de/firewall/ipt-gateway repo: https://git.oopen.de/firewall/ipt-gateway
dest: /usr/local/src/ipt-gateway dest: /usr/local/src/ipt-gateway
# script repositories (destination /root/bin/)
# Monitoring
- name: monitoring
repo: https://git.oopen.de/script/monitoring
dest: /root/bin/monitoring
- name: manage-gw-config - name: manage-gw-config
repo: https://git.oopen.de/script/manage-gw-config repo: https://git.oopen.de/script/manage-gw-config
dest: /root/bin/manage-gw-config dest: /root/bin/manage-gw-config
@ -2377,6 +2386,11 @@ git_apache2_repositories:
repo: https://git.oopen.de/script/apache2 repo: https://git.oopen.de/script/apache2
dest: /root/bin/apache2 dest: /root/bin/apache2
# Monitoring
- name: monitoring
repo: https://git.oopen.de/script/monitoring
dest: /root/bin/monitoring
# install repositories (destination: /usr/local/src/) # install repositories (destination: /usr/local/src/)
- name: apache2 - name: apache2
repo: https://git.oopen.de/install/apache2 repo: https://git.oopen.de/install/apache2
@ -2495,6 +2509,10 @@ git_mailserver_repositories:
repo: https://git.oopen.de/script/postfix repo: https://git.oopen.de/script/postfix
dest: /root/bin/postfix dest: /root/bin/postfix
- name: monitoring
repo: https://git.oopen.de/script/monitoring
dest: /root/bin/monitoring
# install repositories (destination: /usr/local/src/) # install repositories (destination: /usr/local/src/)
- name: apache2 - name: apache2
repo: https://git.oopen.de/install/apache2 repo: https://git.oopen.de/install/apache2

198
host_vars/10.221.11.11.yml
View File

@ -1,198 +0,0 @@
---
# ---
# vars used by roles/ansible_dependencies
# ---
# ---
# vars used by roles/ansible_user
# ---
# ---
# vars used by roles/common/tasks/basic.yml
# ---
# ---
# vars used by apt.yml
# ---
# ---
# vars used by roles/common/tasks/systemd-resolved.yml
# ---
systemd_resolved: true
# CyberGhost - Schnelle Verbindung mit Keine-Logs-Datenschutzrichtlinie
# Primäre DNS-Adresse: 38.132.106.139
# Sekundäre DNS-Adresse: 194.187.251.67
#
# Cloudflare (USA) Bester kostenloser DNS-Server für Gaming mit zuverlässigen Verbindungen
# primäre DNS-Adresse
# IPv4: 1.1.1.1
# IPv6: 2606:4700:4700::1111
# sekundäre DNS-Adresse
# IPv4: 1.0.0.1
# IPv6: 2606:4700:4700::1001
#
# Google (USA) Public DNS - Großartige Kombination aus Geschwindigkeit und Sicherheit
# primäre DNS-Adresse
# IPv4: 8.8.8.8
# IPv6: 2001:4860:4860::8888
# sekundäre DNS-Adresse
# IPv4: 8.8.4.4
# IPv6: 2001:4860:4860::8844
#
# Quad9 (CH) - Blockiert mühelos schädliche Seiten und verhindert Phishing-Betrug
# primäre DNS-Adresse
# IPv4: 9.9.9.9
# IPv6: 2620:fe::fe
# sekundäre DNS-Adresse
# IPv4: 149.112.112.112
# IPv6: 2620:fe::9
#
# OpenNIC - https://www.opennic.org/
# IPv4: 195.10.195.195 - ns31.de
# IPv4: 94.16.114.254 - ns28.de
# IPv4: 51.254.162.59 - ns9.de
# IPv4: 194.36.144.87 - ns29.de
# IPv6: 2a00:f826:8:2::195 - ns31.de
#
# Freifunk München (normales DNS, DNS-over-TLS und DNS-over-HTTPS)
# IPv4: 5.1.66.255
# IPv6: 2001:678:e68:f000::
# Servername für DNS-over-TLS: dot.ffmuc.net
# IPv4: 185.150.99.255
# IPv6: 2001:678:ed0:f000::
# Servername für DNS-over-TLS: dot.ffmuc.net
# für iOS 14+: DoT-Server-Konfiguration (unsigniert, vom PrHdb)
resolved_nameserver:
- 192.168.10.1
- 192.168.10.3
# search domains
#
# If there are more than one search domains, then specify them here in the order in which
# the resolver should also search them
#
#resolved_domains: []
resolved_domains:
- ~.
- ga.netz
- ga.intra
resolved_dnssec: false
# dns.as250.net: 194.150.168.168
#
resolved_fallback_nameserver:
- 192.168.11.1
# ---
# vars used by roles/common/tasks/users.yml
# ---
# ---
# vars used by roles/common/tasks/users-systemfiles.yml
# ---
# ---
# vars used by roles/common/tasks/webadmin-user.yml
# ---
default_user:
- name: chris
password: $6$bSHlaLHC$URSMVq090e/cJ1v55Jh9ws0w5WekhO7X3Y0RqryAl5R76K9khWBegC76Smjastja.xMiD57/LzUUXW7y9NvAL.
shell: /bin/bash
ssh_keys:
- 'ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIO90culn3sicU2chTHn40ytcTay0nUIHap0uF/5fVM6P chris@sol'
- 'ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIOQHMUKlDh2ufno5pZOhUY5xFljC1R5zQ/GjOHDkS58D root@sol'
- name: wadmin
password: $6$sLWIXKTW$i/STlSS0LijkrnGR/XMbaxJsEbrRdDYgqyCqIr.muLN5towes8yHDCXsyCYDjuaBNKPHXyFpr8lclg5DOm9OF1
shell: /bin/bash
ssh_keys:
- 'ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIF5GDIFA6/i6lzkr+EP/EZM9glrK0eSR0nmrEFgUJ4n8 wadmin@ga-st-lsx1'
- 'ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAID17MN6fUg0D1dMSgVYIBpIy+sDBBmiaHmXRXU63TXJA wadmin@ga-st-li1303'
- 'ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIKtK8/rxHL1MKX5AHrgAzUYu0kV+1iYCmknpTQ7F0ham wadmin@wolf-debtest'
- 'ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIIcaDFxj0pYjOv/ohFVxVY2RKvy6ACZFPX9UkrUPHkbN wadmin@wolf-x1'
- name: sysadm
user_id: 1050
group_id: 1050
group: sysadm
password: $6$EEVWxA5E$bNxU8EOp/tTcYVghFharUM10k3vRt2siEnIiiznfGmhMSM6zJTP0umdxql9VVEj856oKa.Sp.q3N2nthgNMeN1
shell: /bin/bash
ssh_keys:
- 'ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIO90culn3sicU2chTHn40ytcTay0nUIHap0uF/5fVM6P chris@sol'
- 'ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIOQHMUKlDh2ufno5pZOhUY5xFljC1R5zQ/GjOHDkS58D root@sol'
- 'ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIF5GDIFA6/i6lzkr+EP/EZM9glrK0eSR0nmrEFgUJ4n8 wadmin@ga-st-lsx1'
- 'ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAID17MN6fUg0D1dMSgVYIBpIy+sDBBmiaHmXRXU63TXJA wadmin@ga-st-li1303'
- 'ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIKtK8/rxHL1MKX5AHrgAzUYu0kV+1iYCmknpTQ7F0ham wadmin@wolf-debtest'
- 'ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIIcaDFxj0pYjOv/ohFVxVY2RKvy6ACZFPX9UkrUPHkbN wadmin@wolf-x1'
- name: back
user_id: 1060
group_id: 1060
group: back
password: $6$GntX81EP$O1GEmQF.BbOQfTMMw/m/BDKSXmANVpqmz0nyzw4O4R2/iK9huGOAjT/2eq8FVdMghvNOvdwrWtwohO.Mg4V9n.
shell: /bin/bash
ssh_keys:
- 'ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIO90culn3sicU2chTHn40ytcTay0nUIHap0uF/5fVM6P chris@sol'
sudo_users:
- chris
- sysadm
- wadmin
# ---
# vars used by roles/common/tasks/sshd.yml
# ---
sshd_permit_root_login: !!str "prohibit-password"
# ---
# vars used by roles/common/tasks/sudoers.yml
# ---
# ---
# vars used by roles/common/tasks/caching-nameserver.yml
# ---
# ---
# vars used by roles/common/tasks/git.yml
# ---
# ---
# vars used by roles/common/tasks/copy_files.yml
# ---
# ---
# vars used by roles/common/tasks/symlink_files.yml
# ---
# ---
# vars used by roles/common/tasks/config_files_mailsystem_scripts.yml
# ---
# ==============================
# ---
# vars used by scripts/reset_root_passwd.yml
# ---
root_user: {}

397
host_vars/file-blkr-neu.blkr.netz.yml
View File

@ -1,397 +0,0 @@
---
# ---
# vars used by roles/network_interfaces
# ---
# If true, all additional files in /etc/network/interfaces/interfaces.d/ are deleted
network_manage_devices: True
# Should the interfaces be reloaded after config change?
network_interface_reload: False
network_interface_path: /etc/network/interfaces.d
network_interface_required_packages:
- vlan
- bridge-utils
- ifmetric
- ifupdown
- ifenslave
network_interfaces:
- device: eno1
# use only once per device (for the first device entry)
headline: eno1 - LAN
# auto & allow are only used for the first device entry
allow: [] # array of allow-[stanzas] eg. allow-hotplug
auto: true
family: inet
method: static
description:
address: 192.168.162.20
netmask: 24
gateway: 192.168.162.254
# optional dns settings nameservers: []
#
# nameservers:
# - 194.150.168.168 # dns.as250.net
# - 91.239.100.100 # anycast.censurfridns.dk
# search: warenform.de
#
#nameservers:
# - 192.168.162.1
#search: blkr.netz
# ---
# vars used by roles/ansible_dependencies
# ---
# ---
# vars used by roles/ansible_user
# ---
# ---
# vars used by roles/common/tasks/basic.yml
# ---
# ---
# vars used by roles/common/tasks/sshd.yml
# ---
sshd_macs:
- hmac-sha1
- hmac-sha2-256-etm@openssh.com
- hmac-sha2-512-etm@openssh.com
- umac-128-etm@openssh.com
sshd_hostkeyalgorithms:
- ecdsa-sha2-nistp256-cert-v01@openssh.com
- ecdsa-sha2-nistp384-cert-v01@openssh.com
- ecdsa-sha2-nistp521-cert-v01@openssh.com
- ssh-ed25519-cert-v01@openssh.com
- rsa-sha2-512-cert-v01@openssh.com
- rsa-sha2-256-cert-v01@openssh.com
- ssh-rsa-cert-v01@openssh.com
- ecdsa-sha2-nistp256
- ecdsa-sha2-nistp384
- ecdsa-sha2-nistp521
- ssh-ed25519
- rsa-sha2-512
- rsa-sha2-256
- ssh-rsa
# ---
# vars used by roles/common/tasks/apt.yml
# ---
# ---
# vars used by roles/common/tasks/systemd-resolved.yml
# ---
systemd_resolved: true
# CyberGhost - Schnelle Verbindung mit Keine-Logs-Datenschutzrichtlinie
# Primäre DNS-Adresse: 38.132.106.139
# Sekundäre DNS-Adresse: 194.187.251.67
#
# Cloudflare (USA) Bester kostenloser DNS-Server für Gaming mit zuverlässigen Verbindungen
# primäre DNS-Adresse
# IPv4: 1.1.1.1
# IPv6: 2606:4700:4700::1111
# sekundäre DNS-Adresse
# IPv4: 1.0.0.1
# IPv6: 2606:4700:4700::1001
#
# Google (USA) Public DNS - Großartige Kombination aus Geschwindigkeit und Sicherheit
# primäre DNS-Adresse
# IPv4: 8.8.8.8
# IPv6: 2001:4860:4860::8888
# sekundäre DNS-Adresse
# IPv4: 8.8.4.4
# IPv6: 2001:4860:4860::8844
#
# Quad9 (CH) - Blockiert mühelos schädliche Seiten und verhindert Phishing-Betrug
# primäre DNS-Adresse
# IPv4: 9.9.9.9
# IPv6: 2620:fe::fe
# sekundäre DNS-Adresse
# IPv4: 149.112.112.112
# IPv6: 2620:fe::9
#
# OpenNIC - https://www.opennic.org/
# IPv4: 195.10.195.195 - ns31.de
# IPv4: 94.16.114.254 - ns28.de
# IPv4: 51.254.162.59 - ns9.de
# IPv4: 194.36.144.87 - ns29.de
# IPv6: 2a00:f826:8:2::195 - ns31.de
#
# Freifunk München (normales DNS, DNS-over-TLS und DNS-over-HTTPS)
# IPv4: 5.1.66.255
# IPv6: 2001:678:e68:f000::
# Servername für DNS-over-TLS: dot.ffmuc.net
# IPv4: 185.150.99.255
# IPv6: 2001:678:ed0:f000::
# Servername für DNS-over-TLS: dot.ffmuc.net
# für iOS 14+: DoT-Server-Konfiguration (unsigniert, vom PrHdb)
resolved_nameserver:
- 192.168.162.1
# search domains
#
# If there are more than one search domains, then specify them here in the order in which
# the resolver should also search them
#
#resolved_domains: []
resolved_domains:
- ~.
- blkr.netz
resolved_dnssec: true
# dns.as250.net: 194.150.168.168
#
resolved_fallback_nameserver:
- 194.150.168.168
# ---
# vars used by roles/common/tasks/cron.yml
# ---
cron_user_special_time_entries:
- name: "Restart DNS Cache service 'systemd-resolved'"
special_time: reboot
job: "sleep 10 ; /bin/systemctl restart systemd-resolved"
insertafter: PATH
# ---
# vars used by roles/common/tasks/users.yml
# ---
default_user:
- name: chris
password: $6$bSHlaLHC$URSMVq090e/cJ1v55Jh9ws0w5WekhO7X3Y0RqryAl5R76K9khWBegC76Smjastja.xMiD57/LzUUXW7y9NvAL.
shell: /bin/bash
ssh_keys:
- 'ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIO90culn3sicU2chTHn40ytcTay0nUIHap0uF/5fVM6P chris@sol'
- 'ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIOQHMUKlDh2ufno5pZOhUY5xFljC1R5zQ/GjOHDkS58D root@sol'
- name: sysadm
user_id: 1050
group_id: 1050
group: sysadm
password: $6$EEVWxA5E$bNxU8EOp/tTcYVghFharUM10k3vRt2siEnIiiznfGmhMSM6zJTP0umdxql9VVEj856oKa.Sp.q3N2nthgNMeN1
shell: /bin/bash
ssh_keys:
- 'ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIO90culn3sicU2chTHn40ytcTay0nUIHap0uF/5fVM6P chris@sol'
- 'ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIOQHMUKlDh2ufno5pZOhUY5xFljC1R5zQ/GjOHDkS58D root@sol'
- name: back
user_id: 1060
group_id: 1060
group: back
password: $6$GntX81EP$O1GEmQF.BbOQfTMMw/m/BDKSXmANVpqmz0nyzw4O4R2/iK9huGOAjT/2eq8FVdMghvNOvdwrWtwohO.Mg4V9n.
shell: /bin/bash
ssh_keys:
- 'ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIO90culn3sicU2chTHn40ytcTay0nUIHap0uF/5fVM6P chris@sol'
- 'ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIOQHMUKlDh2ufno5pZOhUY5xFljC1R5zQ/GjOHDkS58D root@sol'
sudo_users:
- chris
- sysadm
- localadmin
# ---
# vars used by roles/common/tasks/users-systemfiles.yml
# ---
# ---
# vars used by roles/common/tasks/webadmin-user.yml
# ---
# ---
# vars used by roles/common/tasks/sudoers.yml
# ---
#
# see: roles/common/tasks/vars
# ---
# vars used by roles/common/tasks/caching-nameserver.yml
# ---
# ---
# vars used by roles/common/tasks/git.yml
# ---
# ---
# vars used by roles/common/tasks/nfs.yml
# ---
nfs_server: 192.168.162.20
# Set 'fs_encrypted' to true if filesystem lives on an encrypted
# partition.
#
# NOTE !!
# Take car to increase 'fsid' in case of more than one export
#
nfs_exports:
- src: 192.168.162.20:/data/samba/shares
path: /data/samba/shares
mount_opts: users,rsize=8192,wsize=8192,hard,intr
export_opt: rw,root_squash,sync,subtree_check
export_networks:
- 192.168.162.0/24
- 10.0.192.0/24
- 10.1.192.0/24
- 192.168.63.0/24
use_fsid_option: true
# ---
# vars used by roles/common/tasks/samba-config-server.yml
# vars used by roles/common/tasks/samba-user.yml
# ---
samba_server_ip: 192.168.162.20
samba_server_cidr_prefix: 24
samba_workgroup: BLKR
samba_netbios_name: FILE-BLKR
samba_server_min_protocol: !!str NT1
samba_groups:
- name: buero
group_id: 1100
- name: verwaltung
group_id: 1110
samba_user:
- name: anya
groups:
- buero
- verwaltung
password: 'Mq9R.WhKtP4v'
- name: chris
groups:
- buero
- verwaltung
password: !vault |
$ANSIBLE_VAULT;1.1;AES256
63643330373231636537366333326630333265303265653933613835656262323863363038653234
3462653135633266373439626263356636646637643035340a653466356235346663626163306363
61313164643061306433643738643563303036646334376536626531383965303036386162393832
6631333038306462610a356535633265633563633962333137326533633834636331343562633765
3631
- name: josephine
groups:
- buero
- verwaltung
password: 'H7jnJ/m9W-bf'
- name: julius
groups:
- buero
- verwaltung
password: 'fx9j/3X-thPr'
- name: julius-e
groups:
- buero
password: '2/kcx3jju-tr'
- name: leonie
groups:
- buero
password: '6.4aVX7rQ-9H'
- name: philip
groups:
- buero
- verwaltung
password: 'fN%749Psv_NR'
- name: buero1
groups:
- buero
password: 'Mfr!7tK+d49C'
- name: buero2
groups:
- buero
password: 'gW-wg3Pttf4/'
- name: buero3
groups:
- buero
password: 'Qc-WyMhJ/3-2'
- name: referendariat
groups:
- buero
password: '4/zCNXnVF7+i'
- name: ref1
groups:
- buero
password: '???'
- name: sebastian
groups:
- buero
password: 'bhNC.P5eTy-2'
base_home: /data/home
# remove_samba_users:
# - name: name1
# - name: name2
#
remove_samba_users: []
samba_shares:
- name: buero
comment: Buero auf Fileserver
path: /data/samba/shares/buero
group_valid_users: buero
group_write_list: buero
file_create_mask: !!str 664
dir_create_mask: !!str 2775
vfs_object_recycle: true
recycle_path: '@Recycle'
- name: Verwaltung
comment: verwaltung auf Fileserver
path: /data/samba/shares/verwaltung
group_valid_users: verwaltung
group_write_list: verwaltung
file_create_mask: !!str 664
dir_create_mask: !!str 2775
vfs_object_recycle: true
recycle_path: '@Recycle'
# ==============================
# ---
# vars used by scripts/reset_root_passwd.yml
# ---
root_user:
name: root
password: $6$J1ssJfdshf/$mknQEPDcW4HN5.wFfawbamamywI7F7fhdZmaR1abNrc4DA7DNRx766lz3ygf9YV3gcmRq3QhJ3fBVlkwGMCvq.

10
host_vars/file-ebs.ebs.netz.yml
View File

@ -32,6 +32,7 @@ network_interfaces:
family: inet family: inet
method: static method: static
hwaddress: 3c:ec:ef:96:ab:f6
description: description:
address: 192.168.182.10 address: 192.168.182.10
netmask: 24 netmask: 24
@ -96,13 +97,6 @@ network_interfaces:
# vars used by roles/common/tasks/apt.yml # vars used by roles/common/tasks/apt.yml
# --- # ---
apt_install_extra_pkgs:
- lvm2
- kpartx
- ntfs-3g
- swtpm
- swtpm-tools
# --- # ---
# vars used by roles/common/tasks/systemd-resolved.yml # vars used by roles/common/tasks/systemd-resolved.yml
@ -171,7 +165,7 @@ resolved_dnssec: true
# dns.as250.net: 194.150.168.168 # dns.as250.net: 194.150.168.168
# #
resolved_fallback_nameserver: resolved_fallback_nameserver:
- 172.16.182.254 - 194.150.168.168
# --- # ---

1
host_vars/ga-st-kvm5.ga.netz.yml
View File

@ -18,6 +18,7 @@ network_interface_required_packages:
- ifmetric - ifmetric
- ifupdown - ifupdown
- ifenslave - ifenslave
- resolvconf
network_interfaces: network_interfaces:

24
hosts
View File

@ -56,7 +56,6 @@ file-ebs.ebs.netz
file-fhxb.fhxb.netz file-fhxb.fhxb.netz
file-km.anw-km.netz file-km.anw-km.netz
file-blkr.blkr.netz file-blkr.blkr.netz
file-blkr-neu.blkr.netz
zapata.opp.netz zapata.opp.netz
gw-replacement.local.netz gw-replacement.local.netz
@ -79,7 +78,6 @@ ga-st-mail.ga.netz
ga-st-kvm1.ga.netz ga-st-kvm1.ga.netz
ga-al-kvm2.ga.netz ga-al-kvm2.ga.netz
ga-al-kvm3.ga.netz ga-al-kvm3.ga.netz
10.221.11.11
server18.warenform.de server18.warenform.de
piwik.warenform.de piwik.warenform.de
@ -131,6 +129,7 @@ o13-mumble-neu.oopen.de
o13-pad.oopen.de o13-pad.oopen.de
o13-pad-neu.oopen.de o13-pad-neu.oopen.de
o13-cryptpad.oopen.de o13-cryptpad.oopen.de
o13-schleuder.oopen.de
o13-web.oopen.de o13-web.oopen.de
o13-web-neu.oopen.de o13-web-neu.oopen.de
@ -306,6 +305,7 @@ o13-mumble-neu.oopen.de
o13-pad.oopen.de o13-pad.oopen.de
o13-pad-neu.oopen.de o13-pad-neu.oopen.de
o13-cryptpad.oopen.de o13-cryptpad.oopen.de
o13-schleuder.oopen.de
o13-web.oopen.de o13-web.oopen.de
o13-web-neu.oopen.de o13-web-neu.oopen.de
@ -465,7 +465,6 @@ file-km.anw-km.netz
# - Kanzlei BLKR # - Kanzlei BLKR
gw-blkr.oopen.de gw-blkr.oopen.de
file-blkr.blkr.netz file-blkr.blkr.netz
file-blkr-neu.blkr.netz
# - Kanzlei EBS Leipzig # - Kanzlei EBS Leipzig
gw-ebs.oopen.de gw-ebs.oopen.de
@ -507,7 +506,6 @@ ga-al-ws1.ga.netz
ga-st-kvm1.ga.netz ga-st-kvm1.ga.netz
ga-al-kvm2.ga.netz ga-al-kvm2.ga.netz
ga-al-kvm3.ga.netz ga-al-kvm3.ga.netz
10.221.11.11
# --- # ---
@ -829,6 +827,7 @@ c.mx.oopen.de
# o13.oopen.de # o13.oopen.de
o13-mail.oopen.de o13-mail.oopen.de
o13-schleuder.oopen.de
# o17.oopen.de # o17.oopen.de
test.mx.oopen.de test.mx.oopen.de
@ -1222,15 +1221,12 @@ file-ebs.ebs.netz
file-fhxb.fhxb.netz file-fhxb.fhxb.netz
file-km.anw-km.netz file-km.anw-km.netz
file-blkr.blkr.netz file-blkr.blkr.netz
file-blkr-neu.blkr.netz
zapata.opp.netz zapata.opp.netz
[nfs_server] [nfs_server]
file-blkr.blkr.netz
file-blkr-neu.blkr.netz
file-ebs.ebs.netz file-ebs.ebs.netz
file-fhxb.fhxb.netz file-fhxb.fhxb.netz
@ -1238,12 +1234,6 @@ file-fhxb.fhxb.netz
[nfs_client] [nfs_client]
[x2go_server]
file-blkr.blkr.netz
file-blkr-neu.blkr.netz
[mumble_server] [mumble_server]
#test.mx.oopen.de #test.mx.oopen.de
@ -1279,7 +1269,6 @@ meet.akweb.de
ga-st-kvm1.ga.netz ga-st-kvm1.ga.netz
ga-al-kvm2.ga.netz ga-al-kvm2.ga.netz
ga-al-kvm3.ga.netz ga-al-kvm3.ga.netz
10.221.11.11
[lxc_host] [lxc_host]
@ -1318,7 +1307,6 @@ bbb-server.b3-bornim.netz
file-ah.kanzlei-kiel.netz file-ah.kanzlei-kiel.netz
file-km.anw-km.netz file-km.anw-km.netz
file-blkr.blkr.netz file-blkr.blkr.netz
file-blkr-neu.blkr.netz
zapata.opp.netz zapata.opp.netz
# - GA - Gemeinschaft Altensclirf # - GA - Gemeinschaft Altensclirf
@ -1365,6 +1353,7 @@ o13-mumble-neu.oopen.de
o13-pad.oopen.de o13-pad.oopen.de
o13-pad-neu.oopen.de o13-pad-neu.oopen.de
o13-cryptpad.oopen.de o13-cryptpad.oopen.de
o13-schleuder.oopen.de
o13-web.oopen.de o13-web.oopen.de
o13-web-neu.oopen.de o13-web-neu.oopen.de
@ -1464,7 +1453,6 @@ file-ebs.ebs.netz
file-fhxb.fhxb.netz file-fhxb.fhxb.netz
file-km.anw-km.netz file-km.anw-km.netz
file-blkr.blkr.netz file-blkr.blkr.netz
file-blkr-neu.blkr.netz
zapata.opp.netz zapata.opp.netz
file-ipa.local.netz file-ipa.local.netz
@ -1549,6 +1537,7 @@ o13-mumble-neu.oopen.de
o13-pad.oopen.de o13-pad.oopen.de
o13-pad-neu.oopen.de o13-pad-neu.oopen.de
o13-cryptpad.oopen.de o13-cryptpad.oopen.de
o13-schleuder.oopen.de
o13-web.oopen.de o13-web.oopen.de
o13-web-neu.oopen.de o13-web-neu.oopen.de
@ -1671,7 +1660,6 @@ file-ebs.ebs.netz
file-fhxb.fhxb.netz file-fhxb.fhxb.netz
file-km.anw-km.netz file-km.anw-km.netz
file-blkr.blkr.netz file-blkr.blkr.netz
file-blkr-neu.blkr.netz
zapata.opp.netz zapata.opp.netz
@ -1794,7 +1782,6 @@ ga-st-mail.ga.netz
ga-st-kvm1.ga.netz ga-st-kvm1.ga.netz
ga-al-kvm2.ga.netz ga-al-kvm2.ga.netz
ga-al-kvm3.ga.netz ga-al-kvm3.ga.netz
10.221.11.11
[o13_server] [o13_server]
@ -1809,5 +1796,6 @@ o13-mumble-neu.oopen.de
o13-pad.oopen.de o13-pad.oopen.de
o13-pad-neu.oopen.de o13-pad-neu.oopen.de
o13-cryptpad.oopen.de o13-cryptpad.oopen.de
o13-schleuder.oopen.de
o13-web.oopen.de o13-web.oopen.de
o13-web-neu.oopen.de o13-web-neu.oopen.de

5
roles/common/files/mailserver/etc/postfix/postfwd.bl-nets
View File

@ -86,6 +86,11 @@
108.171.192.0/19 108.171.192.0/19
# VE ( u.a. cne.gob.ve) # VE ( u.a. cne.gob.ve)
201.130.82.0/23 201.130.82.0/23
# mx1.privateemail.com mx2.privateemail.com
198.54.122.250
198.54.122.240
# US (u.a. direktpaket.com>)
198.54.112.0/20
# classic-british-motorcycles.com # classic-british-motorcycles.com
172.67.189.127 172.67.189.127
104.21.33.94 104.21.33.94

9
roles/common/tasks/main.yml
View File

@ -180,15 +180,6 @@
- nfs - nfs
# tags supported inside x2go-server.yml:
#
# x2go-server
- import_tasks: x2go-server.yml
when: inventory_hostname in groups['x2go_server']
tags:
- x2go
# tags supported inside copy_files.yml: # tags supported inside copy_files.yml:
# #
# copy-files # copy-files

21
roles/common/tasks/x2go-server.yml
View File

@ -1,21 +0,0 @@
---
# ---
# NFS Server
# ---
- name: (x2g-server.yml) Ensure X2Go server packages are installed.
apt:
name:
- x2goserver
- x2goserver-xsession
- x2gobroker-daemon
state: present
when:
- ansible_os_family == "Debian"
- "groups['x2go_server']|string is search(inventory_hostname)"
tags:
- x2g--server

0
zzz.yml Normal file
View File