ansible/oopen-server
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Commit Graph

  • 9e9bc4f230 Remove legacy chrooted sftp group 'sftp_users' from o32, o25 and test.mx. master chrisandClaude Opus 5.5 2026-11-14 11:04:45 +01:00
  • 67c1086e2c Role common: add task sftpd.yml for chrooted SFTP access. chrisandClaude Opus 5.5 2026-11-14 10:42:42 +01:00
  • 2b5bffe2be Add host 'sftp-nd.oopen.de' and activate backups. chris 2026-11-13 18:14:18 +01:00
  • 827bfbe3cf Role ipt-server: install firewall on o13-web (was missing by mistake). chrisandClaude Opus 5.5 2026-11-13 00:22:57 +01:00
  • eb229a01b1 Retire old server firewall management (roles firewall/ipt-server part, modify-ipt-server). chrisandClaude Opus 5.5 2026-11-12 21:28:09 +01:00
  • 97bf3d65f3 Role ipt-server: migrate o13-git, first install on h.mx, remove obsolete host_vars of oolm-db. chrisandClaude Opus 5.5 2026-11-12 20:17:39 +01:00
  • 7e294de2ca Role ipt-server: add group so36_server to the playbook and migrate its 12 hosts. chrisandClaude Opus 5.5 2026-11-12 20:04:19 +01:00
  • 57970a6567 Role ipt-server: initiativenserver: clamp IPv6 HTTPS MSS to 1360 again. chrisandClaude Opus 5.5 2026-11-12 19:38:34 +01:00
  • f3d8b0b0ce Role ipt-server: migrate fifth group of 23 hosts (with IPv6 overrides). chrisandClaude Opus 5.5 2026-11-12 19:34:12 +01:00
  • 29e5b06b9a Role ipt-server: migrate fourth group of 17 hosts (mail, meet, web-0x). chrisandClaude Opus 5.5 2026-11-12 18:12:45 +01:00
  • 3be7ebc251 Role ipt-server: migrate third group of 16 hosts. chrisandClaude Opus 5.5 2026-11-12 15:02:13 +01:00
  • 26df44ee57 Role ipt-server: migrate second group of 15 hosts. chrisandClaude Opus 5.5 2026-11-12 13:16:26 +01:00
  • 7a3fe8254d Role ipt-server: migrate first group of 12 hosts. chrisandClaude Opus 5.5 2026-11-12 12:26:42 +01:00
  • a0e573f1ae Role ipt-server: detect ulogd2 via systemd instead of ps (logging_ipv{4,6}.conf). chrisandClaude Opus 5.5 2026-11-11 23:17:05 +01:00
  • 801b4baf87 Role ipt-server: migrate server18/22/24/25.warenform.de (IPv6 firewall enabled again). chrisandClaude Opus 5.5 2026-11-11 22:36:30 +01:00
  • 1838f63bec Role ipt-server: migrate piwik.warenform.de. chrisandClaude Opus 5.5 2026-11-11 18:59:34 +01:00
  • 02990faf70 Role ipt-server: configurable rate for the new-TCP-connection limit; new defaults. chrisandClaude Opus 5.5 2026-11-11 18:51:16 +01:00
  • 534ad28be9 install_update_dovecot.conf.j2: support of dynamic setting dovecots xmpp_listener. chris 2026-11-11 02:01:58 +01:00
  • 8334191250 update.. chris 2026-11-11 01:53:02 +01:00
  • dd0f4990e1 mainly postfwd konfigurations. chris 2026-11-09 00:07:38 +01:00
  • 2089be116e hosts: add o13-web and psono-ndm to no_ipt_firewall (no ipt firewall installed). chrisandClaude Opus 5.5 2026-11-04 00:56:04 +01:00
  • ecc2ae2fbe Role ipt-server: restart docker after a firewall restart; roll out to 18 hosts. chrisandClaude Opus 5.5 2026-11-04 00:30:08 +01:00
  • f14b8817c0 Inventory/host_vars cleanup. chrisandClaude Opus 5.5 2026-11-03 23:43:34 +01:00
  • 3a73ed9583 Inventory cleanup; add ipt-server host_vars for all ipt hosts. chrisandClaude Opus 5.5 2026-11-03 23:08:58 +01:00
  • 8484fd1508 extract-fw-host-vars.py: use the SSH user from ~/.ssh/config unless --user is given. chrisandClaude Opus 5.5 2026-11-03 20:36:01 +01:00
  • 0499706703 extract-fw-host-vars.py: write host_vars/<host>/<short>-ipt-server.yml by default. chrisandClaude Opus 5.5 2026-11-03 01:28:00 +01:00
  • b585f3c122 Role ipt-server: migrate o34.oopen.de (fw_manage_config: true). chrisandClaude Opus 5.5 2026-11-03 01:21:03 +01:00
  • 3e6486c5b5 extract-fw-host-vars.py: abort if a conf file cannot be read; add --from-dir. Migrate cl-test. chrisandClaude Opus 5.5 2026-11-03 01:00:55 +01:00
  • ec62f54ab4 Role ipt-server: restart fail2ban after a firewall restart if it is running. chrisandClaude Opus 5.5 2026-11-03 00:52:08 +01:00
  • 3d6840ef3a Role ipt-server: allow IPv6-only overrides of shared variables; migrate nd, oolm-shop, web-01, web0. chrisandClaude Opus 5.5 2026-11-03 00:50:03 +01:00
  • fe2e749b63 Change git_other_repositories from empty dictionary to empty list chris 2026-11-03 00:17:24 +01:00
  • 19e1e24b26 Remove vault password configuration from oopen_server.yml chris 2026-11-03 00:17:02 +01:00
  • 221c7a0552 Add vault password configuration for privilege escalation chris 2026-11-03 00:08:41 +01:00
  • 402a6c9e89 Role ipt-server: sync with ipt-server repo (93d9af8); adapt extract-fw-host-vars.py. chrisandClaude Opus 5.5 2026-11-02 22:01:28 +01:00
  • 4a6fc84c01 Update Samba user password for enhanced security chris 2026-10-31 09:49:20 +01:00
  • bf50baa357 Rename 'vze' to 'vfk' in Samba user and share configurations chris 2026-10-31 09:48:59 +01:00
  • 9c6f2f89a0 Add ga-al-gw-neu.ga.netz to multiple sections in hosts file chris 2026-10-31 09:48:48 +01:00
  • 29f6dc7e32 Disable systemd-resolved for multiple host. chris 2026-10-31 09:47:46 +01:00
  • 758739ec2b Update git_firewall_repository to use an empty array and add OpenVPN repository configuration chris 2026-10-30 21:25:57 +01:00
  • a0c99ae1ba Fix recursion configuration check in named.conf.options.gateway.j2 chris 2026-10-30 21:23:57 +01:00
  • a99b593b67 Add network configuration and DNS settings for various hosts chris 2026-10-30 21:13:28 +01:00
  • 056038c780 update.. chris 2026-10-12 18:51:07 +02:00
  • 11eee62a3c add extrepo.yml: Workaround für einen ifupdown-Paketbug. chris 2026-08-28 17:21:44 +02:00
  • b50f65ed14 file-dissens-common.ym: add new user. remove old users. chris 2026-08-28 17:21:11 +02:00
  • e7a9c4b661 backup-common.yml: remove server-agr from daily backups. chris 2026-08-28 17:20:10 +02:00
  • b4a09a7b94 feat(ipt-firewall): add ipt-firewall configuration for mm-irights, mm-nd, and mm-rav hosts chris 2026-08-09 23:14:08 +02:00
  • 33e8368d76 Rnaem SSH keys. chris 2026-08-09 23:13:48 +02:00
  • 53e17715fd feat(mm-nd): add extra user configuration and sudoers for nd-admin chris 2026-08-09 23:09:35 +02:00
  • 845052a9db fix(o45): correct formatting in ipt-firewall configuration for a.mx.oopen.de chris 2026-08-09 00:37:29 +02:00
  • d94d28ca67 feat(mm-nd): update DNS settings and add cron jobs for service monitoring chris 2026-08-09 00:35:57 +02:00
  • fff295759c feat(o45): add ipt-firewall configuration for a.mx.oopen.de chris 2026-08-09 00:35:36 +02:00
  • ed45c5596c feat(o45): add configuration files and firewall settings for o45 host chris 2026-08-09 00:34:20 +02:00
  • c6205045c5 feat(o45): add configuration files for o45 host and update apt tasks for compatibility chris 2026-08-09 00:33:51 +02:00
  • 05cb840e6d feat(redis): replace apt update task with command to ensure compatibility chris 2026-08-09 00:33:03 +02:00
  • 80a4e33fc2 add user bauhofer chris 2026-08-07 19:32:41 +02:00
  • ead9de9bac feat: add workaround for cssh/Perl-Tk under Wayland to allow local X11 access chris 2026-08-07 12:54:52 +02:00
  • c4acc32add feat: update apt upgrade tasks to conditionally refresh cache based on apt_update variable chris 2026-08-07 11:43:28 +02:00
  • 6ba7c61cb7 fix(common): avoid localhost become prompts, stabilize redis apt upgrade, and lint handlers chris 2026-08-06 17:09:17 +02:00
  • 88f40fe0cd feat: update apt packages for webserver and add extra Python packages chris 2026-08-06 14:49:53 +02:00
  • 79a38027df set become false for localhost checks in users-systemfiles to prevent sudo timeout chris 2026-08-06 14:48:15 +02:00
  • 55f9a6f5b8 refactot encrytion- and decryption scripts. chris 2026-08-03 15:43:39 +02:00
  • a318e1258c Encrypt actual hosts file - outfile: hosts.BAK. chris 2026-08-03 15:42:50 +02:00
  • 19eafadac4 chore: remove obsolete playbooks and scripts chris 2026-08-03 12:36:38 +02:00
  • 5af310e55a fix: set changed_when to false for apt update command. chris 2026-07-31 13:09:11 +02:00
  • 965ad5cde2 fix: specify ansible.builtin.template for service file and configuration deployments chris 2026-07-30 23:48:29 +02:00
  • 9c6094cef8 add host ki-fm.oopen.de chris 2026-07-30 12:54:19 +02:00
  • 4f8e5f4454 fix(file-ah-common.yml): correct indentation for samba user group assignments chris 2026-07-30 01:53:06 +02:00
  • ca02faf748 fix(sshd_config.j2): update condition for SFTP subsystem configuration to use common variable chris 2026-07-30 01:38:49 +02:00
  • 1c1ae9464c fix(yum.yml): change package state to 'present' for consistency and improve comment clarity chris 2026-07-29 23:40:23 +02:00
  • 451baa5f9a fix(sudoers.yml): improve formatting of comments for clarity in sudoers configuration tasks chris 2026-07-29 23:34:58 +02:00
  • b87c60c41e fix(samba-remove-user.yml): enhance command structure and error handling for samba user removal tasks chris 2026-07-29 23:32:24 +02:00
  • e125f9952f fix(samba-user.yml): improve command structure and enhance error handling for samba user management chris 2026-07-29 23:30:04 +02:00
  • 71e9cf6551 fix(show.yml): improve formatting of hostname display message for clarity chris 2026-07-29 23:21:15 +02:00
  • fc9c1548c3 fix(sshd.yml): standardize variable names for SSHD configuration facts and improve clarity chris 2026-07-29 18:08:17 +02:00
  • b5a4edc181 fix(webadmin-user.yml): standardize variable names for local template directory references chris 2026-07-29 18:03:07 +02:00
  • fea739f0e6 fix(webadmin-user.yml): update inventory checks and standardize variable names for clarity chris 2026-07-29 17:53:55 +02:00
  • e72d9aac70 fix(users.yml): replace deprecated 'authorized_key' with 'ansible.posix.authorized_key' for improved compatibility chris 2026-07-29 17:46:31 +02:00
  • eece49f53b fix(users-systemfiles.yml): standardize variable names and improve clarity in user file checks and backups chris 2026-07-29 17:44:18 +02:00
  • b14e82c6c2 fix(git.yml): improve error handling and register results for backup and samba repositories chris 2026-07-29 17:31:36 +02:00
  • 56ba319f2f fix(redis-server.yml): standardize variable names and improve configuration clarity chris 2026-07-28 22:47:20 +02:00
  • c443ce7c79 fix(yml): update SSH keypair paths for ga-al-relay and ga-st-mail configurations chris 2026-07-28 22:47:03 +02:00
  • dc61dfc049 fix(yml): uncomment and standardize commented configuration options for clarity chris 2026-07-28 22:04:09 +02:00
  • 81e1f3fb3e fix(ntp.yml): standardize variable naming and replace command with copy module for backup chris 2026-07-28 22:03:46 +02:00
  • 86aec11206 fix(common.yml): update SSH keypair paths for b.mx and d.mx configurations chris 2026-07-28 21:55:46 +02:00
  • b3babf6831 fix(mail-common.yml): update SSH keypair paths and format email messages for clarity chris 2026-07-28 21:28:43 +02:00
  • 4d92340f9b chore(ansible): clean up host_vars YAML and normalize mail text blocks chris 2026-07-28 21:24:03 +02:00
  • ae60fa01a5 refactor(mx-common.yml): update paths for SSH keypair and file configurations delete: remove obsolete postfix configuration files for rate limiting and user info chris 2026-07-28 02:16:07 +02:00
  • 9181734c51 fix(systemd-services): add condition to prevent service management for specific lxc_guest items chris 2026-07-28 01:52:41 +02:00
  • 1849c6d72d refactor(systemd-services): streamline service checks for Debian and RedHat OS chris 2026-07-28 01:24:58 +02:00
  • 5525fa3e73 refactor(systemd-resolved): rename facts to common_resolved variables for consistency chris 2026-07-28 01:10:41 +02:00
  • 5832d0b938 chore(main.yml): clear apt_remove list and comment out previous entries chris 2026-07-28 01:02:48 +02:00
  • 4310ae08b0 fix(copy_files.yml): correct formatting of template files task chris 2026-07-28 00:48:36 +02:00
  • 385b4a6802 refactor(copy_files.yml): simplify template file handling by removing redundant tasks chris 2026-07-28 00:46:19 +02:00
  • c30543280b feat(git.yml): enhance error handling for backup and samba server repository installations chris 2026-07-28 00:36:36 +02:00
  • 7e5fe673cf feat(postfwd.cf): add final=yes to rate limiting rules for enhanced message handling chris 2026-07-28 00:32:28 +02:00
  • 032ea670ef chore(main.yml): remove commented-out entries for authorized SSH keys chris 2026-07-28 00:13:02 +02:00
  • 00457b2ac7 chore(first-run.yml): remove obsolete first-run tasks for package installation chris 2026-07-28 00:11:19 +02:00
  • 095f5de034 feat(git.yml): enhance version handling for git repositories to prioritize 'master' if available chris 2026-07-28 00:02:49 +02:00
  • e60c1b81d1 feat(git.yml): add version handling for git repository installations chris 2026-07-27 22:16:45 +02:00
  • eb2c7cc15a chore(main.yml): set default git branch to main; Also includes various unrelated housekeeping updates in this file. chris 2026-07-27 22:16:27 +02:00