NaeiKinDus
|
f0d464d988
|
chore(security): updated default ClamAV version to 1.4.1
|
2024-12-27 00:00:00 +00:00 |
|
NaeiKinDus
|
21185a17c4
|
feat(security): moved nftables reserved networks behind a feature flag and no longer block 0.0.0.0/8 and 169.254.0.0/16 by default to ease DHCP and APIPA configuration
|
2024-12-27 00:00:00 +00:00 |
|
NaeiKinDus
|
667c7de87e
|
fix(provisioner): fixed wrong variable used to retrieve github token when installing k3sup
|
2024-12-27 00:00:00 +00:00 |
|
NaeiKinDus
|
04fa08133e
|
feat(development): moved Virtualbox installation behind a feature flag, defaults to false
|
2024-12-27 00:00:00 +00:00 |
|
NaeiKinDus
|
6ef571ceb9
|
fix(common): added missing privileges elevation to firmware management tools installation step
|
2024-12-27 00:00:00 +00:00 |
|
NaeiKinDus
|
ff7c9d8b91
|
feat(common): add new timer function to ZSH
|
2024-09-23 00:00:00 +00:00 |
|
NaeiKinDus
|
c3305093e4
|
feat(vault): separated vault binary install and service configuration; use provisioner artifacts directory to store HC vault setup information; set group level HC vault instance info
|
2024-09-23 00:00:00 +00:00 |
|
NaeiKinDus
|
31aaf10a5c
|
feat(nginx): added new nginx role to install and configure nginx webservers
|
2024-08-17 00:00:00 +00:00 |
|
NaeiKinDus
|
15cd8bf8da
|
feat(common): moved installation of firmware management tools behind a check, useful for external servers that prohibit usage of such tools
|
2024-08-08 00:00:00 +00:00 |
|
NaeiKinDus
|
3701ea6276
|
fix(security,common)!: moved sysctl and resolvconf tasks from common to security role to fix DNS resolution fail due to firewall rules
|
2024-08-08 00:00:00 +00:00 |
|
NaeiKinDus
|
b7ba39bce9
|
feat(security): tightened files mode for ssh configuration and enabled ipv6 on ssh, along with an increase on max sessions from 3 to 5
|
2024-08-08 00:00:00 +00:00 |
|
NaeiKinDus
|
3acdd804df
|
fix(security): fixed invalid template generation for nft rules 02 and 03 when ipv6 addresses are specified in controllers ips list
|
2024-08-08 00:00:00 +00:00 |
|
NaeiKinDus
|
b83c6c1d4f
|
fix(security): fixed wordwrap breaking long strings (ipv6 addresses) in nftables.conf
|
2024-08-08 00:00:00 +00:00 |
|
NaeiKinDus
|
8577acb156
|
feat(security): add a way to override supervisors ip addresses for external devices
|
2024-08-08 00:00:00 +00:00 |
|
NaeiKinDus
|
641bf17fa4
|
feat(security): add tags to target security role or firewall actions
|
2024-08-08 00:00:00 +00:00 |
|
NaeiKinDus
|
6b15ecc3a6
|
feat(k3s): add possibility to provide a custom backend; moved opentofu states to postgresql on actinium
|
2024-07-29 00:00:00 +00:00 |
|
NaeiKinDus
|
193ee7c447
|
feat(k3s): allow custom Helm manifests installation
|
2024-07-29 00:00:00 +00:00 |
|
NaeiKinDus
|
f9aa2cfed5
|
fix(postgresql): added check to detect possible errors when executing custom init script
|
2024-07-28 00:00:00 +00:00 |
|
NaeiKinDus
|
7d6155f97e
|
feat(postgresql): added new role to install pgsql server
|
2024-07-27 00:00:00 +00:00 |
|
NaeiKinDus
|
068a2e2790
|
fix(security): fixed an issue leading to an invalid nftables.conf file being generated using provisioners ip addresses
|
2024-07-27 00:00:00 +00:00 |
|
NaeiKinDus
|
e260d25245
|
feat(common): add acl package
|
2024-07-21 00:00:00 +00:00 |
|
NaeiKinDus
|
3ec536f299
|
feat: added tags for multiple roles used by internal.yml playbook
|
2024-07-13 00:00:00 +00:00 |
|
NaeiKinDus
|
6876a18241
|
fix(provisioner): added missing github_token parameter when installing k3sup
|
2024-07-11 00:00:00 +00:00 |
|
NaeiKinDus
|
e52f87a448
|
feat(security): update / install clamav only if desired version and installed version differs
|
2024-07-11 00:00:00 +00:00 |
|
NaeiKinDus
|
31e40cc47a
|
fix(security): fixed incorrect target file for wait_for step when deploying clamav
|
2024-07-11 00:00:00 +00:00 |
|
NaeiKinDus
|
14a46715c7
|
feat(security): allow all registered provisioners to connect without limitations instead of the one running playbooks only
|
2024-07-11 00:00:00 +00:00 |
|
NaeiKinDus
|
332e367c3c
|
feat(provisioner): add variable that contains hostnames and DNS IP of registered provisioners in provisioner_facts
|
2024-07-11 00:00:00 +00:00 |
|
NaeiKinDus
|
5d716cbf51
|
feat(workstation): added apt-file package
|
2024-07-10 00:00:00 +00:00 |
|
NaeiKinDus
|
95bb861049
|
refactor(k3s): replace code with what the provisioner role now offers and store opentofu data accordingly
|
2024-07-10 00:00:00 +00:00 |
|
NaeiKinDus
|
1b3e0c401c
|
feat(role): add provisioner role
|
2024-07-10 00:00:00 +00:00 |
|
NaeiKinDus
|
5c67a916ee
|
feat(github_artifact): add force parameter to force installation
|
2024-07-07 00:00:00 +00:00 |
|
NaeiKinDus
|
890c7646fa
|
refactor(development): use kubectl role instead of custom code
|
2024-07-07 00:00:00 +00:00 |
|
NaeiKinDus
|
41cb71e364
|
feat(role): add kubectl role
|
2024-07-07 00:00:00 +00:00 |
|
NaeiKinDus
|
247e2dbdad
|
refactor(development): use helm role instead of custom code
|
2024-07-07 00:00:00 +00:00 |
|
NaeiKinDus
|
d151db8ebf
|
feat(role): add helm role
|
2024-07-07 12:43:01 +00:00 |
|
NaeiKinDus
|
ddf406fd37
|
feat(vault): add a HashiCorp Vault role
|
2024-06-26 00:00:00 +00:00 |
|
NaeiKinDus
|
e33c3718bf
|
feat(k3s): add deployment rules for Helm and OpenTofu projects
|
2024-06-09 00:00:00 +00:00 |
|
NaeiKinDus
|
1f367782f5
|
feat!: added ansible-galaxy requirements installation task; changed task name of python venv setup from venv:setup to setup:venv
|
2024-02-07 00:00:00 +00:00 |
|
NaeiKinDus
|
d1c59d65de
|
feat: added mariadb role
|
2024-02-07 00:00:00 +00:00 |
|
NaeiKinDus
|
83c6ce3513
|
feat: k3s role
|
2024-02-04 14:48:13 +00:00 |
|
NaeiKinDus
|
b7a09296bc
|
fix(security): flush handlers immediately after modifying firewall rules
|
2024-01-21 00:00:00 +00:00 |
|
NaeiKinDus
|
779f2766f2
|
refactor!: switch hosts variables to a flat layout
|
2024-01-21 00:00:00 +00:00 |
|
NaeiKinDus
|
f669dea62a
|
fix(common): invalid "creates" statement for inxi
|
2024-01-19 00:00:00 +00:00 |
|
NaeiKinDus
|
70c9d5f3cc
|
feat(workstation): added mpv and mesa-utils
|
2024-01-15 00:00:00 +00:00 |
|
NaeiKinDus
|
0ebe1e620d
|
fix(common): fixed outdated apt cache when adding new packages
|
2024-01-06 00:00:00 +00:00 |
|
NaeiKinDus
|
da45c7c409
|
refactor(security): reworked firewall configuration and added support for DNS, HTTP and ICMP rules; added autoconf for resolv.conf to match FW rules
|
2024-01-06 00:00:00 +00:00 |
|
NaeiKinDus
|
3a7440f570
|
test(molecule): load group files and allow override from platform_vars.yml
|
2024-01-06 00:00:00 +00:00 |
|
NaeiKinDus
|
19f509888a
|
fix(security): typo in supervisors ip6 variable name
|
2023-12-26 00:00:00 +00:00 |
|
NaeiKinDus
|
8de6baedbf
|
feat(common): added knot-dnsutils and alpine cli mail client
|
2023-12-26 00:00:00 +00:00 |
|
NaeiKinDus
|
b152857cdd
|
fix(common): fixed circular dig reference
|
2023-12-26 00:00:00 +00:00 |
|
