NaeiKinDus
|
c3305093e4
|
feat(vault): separated vault binary install and service configuration; use provisioner artifacts directory to store HC vault setup information; set group level HC vault instance info
|
2024-09-23 00:00:00 +00:00 |
|
NaeiKinDus
|
31aaf10a5c
|
feat(nginx): added new nginx role to install and configure nginx webservers
|
2024-08-17 00:00:00 +00:00 |
|
NaeiKinDus
|
15cd8bf8da
|
feat(common): moved installation of firmware management tools behind a check, useful for external servers that prohibit usage of such tools
|
2024-08-08 00:00:00 +00:00 |
|
NaeiKinDus
|
3701ea6276
|
fix(security,common)!: moved sysctl and resolvconf tasks from common to security role to fix DNS resolution fail due to firewall rules
|
2024-08-08 00:00:00 +00:00 |
|
NaeiKinDus
|
b7ba39bce9
|
feat(security): tightened files mode for ssh configuration and enabled ipv6 on ssh, along with an increase on max sessions from 3 to 5
|
2024-08-08 00:00:00 +00:00 |
|
NaeiKinDus
|
3acdd804df
|
fix(security): fixed invalid template generation for nft rules 02 and 03 when ipv6 addresses are specified in controllers ips list
|
2024-08-08 00:00:00 +00:00 |
|
NaeiKinDus
|
b83c6c1d4f
|
fix(security): fixed wordwrap breaking long strings (ipv6 addresses) in nftables.conf
|
2024-08-08 00:00:00 +00:00 |
|
NaeiKinDus
|
8577acb156
|
feat(security): add a way to override supervisors ip addresses for external devices
|
2024-08-08 00:00:00 +00:00 |
|
NaeiKinDus
|
641bf17fa4
|
feat(security): add tags to target security role or firewall actions
|
2024-08-08 00:00:00 +00:00 |
|
NaeiKinDus
|
6b15ecc3a6
|
feat(k3s): add possibility to provide a custom backend; moved opentofu states to postgresql on actinium
|
2024-07-29 00:00:00 +00:00 |
|
NaeiKinDus
|
193ee7c447
|
feat(k3s): allow custom Helm manifests installation
|
2024-07-29 00:00:00 +00:00 |
|
NaeiKinDus
|
f9aa2cfed5
|
fix(postgresql): added check to detect possible errors when executing custom init script
|
2024-07-28 00:00:00 +00:00 |
|
NaeiKinDus
|
7d6155f97e
|
feat(postgresql): added new role to install pgsql server
|
2024-07-27 00:00:00 +00:00 |
|
NaeiKinDus
|
068a2e2790
|
fix(security): fixed an issue leading to an invalid nftables.conf file being generated using provisioners ip addresses
|
2024-07-27 00:00:00 +00:00 |
|
NaeiKinDus
|
e260d25245
|
feat(common): add acl package
|
2024-07-21 00:00:00 +00:00 |
|
NaeiKinDus
|
3ec536f299
|
feat: added tags for multiple roles used by internal.yml playbook
|
2024-07-13 00:00:00 +00:00 |
|
NaeiKinDus
|
6876a18241
|
fix(provisioner): added missing github_token parameter when installing k3sup
|
2024-07-11 00:00:00 +00:00 |
|
NaeiKinDus
|
e52f87a448
|
feat(security): update / install clamav only if desired version and installed version differs
|
2024-07-11 00:00:00 +00:00 |
|
NaeiKinDus
|
31e40cc47a
|
fix(security): fixed incorrect target file for wait_for step when deploying clamav
|
2024-07-11 00:00:00 +00:00 |
|
NaeiKinDus
|
14a46715c7
|
feat(security): allow all registered provisioners to connect without limitations instead of the one running playbooks only
|
2024-07-11 00:00:00 +00:00 |
|
NaeiKinDus
|
332e367c3c
|
feat(provisioner): add variable that contains hostnames and DNS IP of registered provisioners in provisioner_facts
|
2024-07-11 00:00:00 +00:00 |
|
NaeiKinDus
|
5d716cbf51
|
feat(workstation): added apt-file package
|
2024-07-10 00:00:00 +00:00 |
|
NaeiKinDus
|
95bb861049
|
refactor(k3s): replace code with what the provisioner role now offers and store opentofu data accordingly
|
2024-07-10 00:00:00 +00:00 |
|
NaeiKinDus
|
1b3e0c401c
|
feat(role): add provisioner role
|
2024-07-10 00:00:00 +00:00 |
|
NaeiKinDus
|
5c67a916ee
|
feat(github_artifact): add force parameter to force installation
|
2024-07-07 00:00:00 +00:00 |
|
NaeiKinDus
|
890c7646fa
|
refactor(development): use kubectl role instead of custom code
|
2024-07-07 00:00:00 +00:00 |
|
NaeiKinDus
|
41cb71e364
|
feat(role): add kubectl role
|
2024-07-07 00:00:00 +00:00 |
|
NaeiKinDus
|
247e2dbdad
|
refactor(development): use helm role instead of custom code
|
2024-07-07 00:00:00 +00:00 |
|
NaeiKinDus
|
d151db8ebf
|
feat(role): add helm role
|
2024-07-07 12:43:01 +00:00 |
|
NaeiKinDus
|
ddf406fd37
|
feat(vault): add a HashiCorp Vault role
|
2024-06-26 00:00:00 +00:00 |
|
NaeiKinDus
|
e33c3718bf
|
feat(k3s): add deployment rules for Helm and OpenTofu projects
|
2024-06-09 00:00:00 +00:00 |
|
NaeiKinDus
|
1f367782f5
|
feat!: added ansible-galaxy requirements installation task; changed task name of python venv setup from venv:setup to setup:venv
|
2024-02-07 00:00:00 +00:00 |
|
NaeiKinDus
|
d1c59d65de
|
feat: added mariadb role
|
2024-02-07 00:00:00 +00:00 |
|
NaeiKinDus
|
83c6ce3513
|
feat: k3s role
|
2024-02-04 14:48:13 +00:00 |
|
NaeiKinDus
|
b7a09296bc
|
fix(security): flush handlers immediately after modifying firewall rules
|
2024-01-21 00:00:00 +00:00 |
|
NaeiKinDus
|
779f2766f2
|
refactor!: switch hosts variables to a flat layout
|
2024-01-21 00:00:00 +00:00 |
|
NaeiKinDus
|
f669dea62a
|
fix(common): invalid "creates" statement for inxi
|
2024-01-19 00:00:00 +00:00 |
|
NaeiKinDus
|
70c9d5f3cc
|
feat(workstation): added mpv and mesa-utils
|
2024-01-15 00:00:00 +00:00 |
|
NaeiKinDus
|
0ebe1e620d
|
fix(common): fixed outdated apt cache when adding new packages
|
2024-01-06 00:00:00 +00:00 |
|
NaeiKinDus
|
da45c7c409
|
refactor(security): reworked firewall configuration and added support for DNS, HTTP and ICMP rules; added autoconf for resolv.conf to match FW rules
|
2024-01-06 00:00:00 +00:00 |
|
NaeiKinDus
|
3a7440f570
|
test(molecule): load group files and allow override from platform_vars.yml
|
2024-01-06 00:00:00 +00:00 |
|
NaeiKinDus
|
19f509888a
|
fix(security): typo in supervisors ip6 variable name
|
2023-12-26 00:00:00 +00:00 |
|
NaeiKinDus
|
8de6baedbf
|
feat(common): added knot-dnsutils and alpine cli mail client
|
2023-12-26 00:00:00 +00:00 |
|
NaeiKinDus
|
b152857cdd
|
fix(common): fixed circular dig reference
|
2023-12-26 00:00:00 +00:00 |
|
NaeiKinDus
|
04fe2d0c74
|
chore: added nft script to tests ignore list
|
2023-12-25 00:00:00 +00:00 |
|
NaeiKinDus
|
fa47334af3
|
feat(workstation): added noseyparker and accompanying Taskfile entry
|
2023-12-25 00:00:00 +00:00 |
|
NaeiKinDus
|
f1b58d6a62
|
fix(workstation): use user-based installation of flatpak apps and repos
|
2023-12-25 00:00:00 +00:00 |
|
NaeiKinDus
|
2dc90631fb
|
refactor(security): fix line indentation in mangle table template
|
2023-12-25 00:00:00 +00:00 |
|
NaeiKinDus
|
3659c15749
|
fix(security): find controllers IP from SSH connection, not from hostname lookup
|
2023-12-25 00:00:00 +00:00 |
|
NaeiKinDus
|
d65aa3e6cc
|
fix(development): invalid command used to start rust installer
|
2023-12-25 00:00:00 +00:00 |
|
