sheppy
59b2ea4a7a
add: new storrage exports for carddav
2023-06-09 13:17:37 +00:00
sheppy
2cf87fcc24
add: carddav to backupvm vsyncer
2023-06-09 13:11:34 +00:00
sheppy
b58961ccef
fix: use fq address as user for mail
2023-06-07 09:33:13 +00:00
sheppy
fa27f02259
fix: repair and readd image factory service OIDC
2023-06-07 08:33:14 +00:00
sheppy
7dafe7e3a7
whitespaces: groupvars/all
2023-06-07 08:07:47 +00:00
sheppy
cdecbe56af
add: oauth2proxy cert/keycloak for cert manager
2023-06-07 08:01:33 +00:00
sheppy
2bae3bd42e
fix: group matching in oauthproxy with keycloak
2023-06-07 08:01:04 +00:00
sheppy
8e2daf02be
fix: listen on all (incl. docker) interfaces
2023-05-30 13:16:41 +00:00
sheppy
67bdc58e44
change: enable vpn mgnt interface
2023-05-30 13:07:40 +00:00
sheppy
a7bf391ffe
add: dedicated sqlite path
2023-05-29 16:01:17 +00:00
sheppy
47a43ec0c3
update: openvpn config
2023-05-29 15:36:21 +00:00
sheppy
1ec456d4d1
change: use certificate directly from cert manager
...
- remove dh param by default
2023-05-29 13:03:06 +00:00
sheppy
05c5307adf
fix: use different ccd path
2023-05-29 12:52:28 +00:00
sheppy
d2442982d6
fix: remove obsolete notify
2023-05-29 12:52:17 +00:00
sheppy
502eb36159
fix: data keys path cert manager
2023-05-29 12:40:58 +00:00
sheppy
3347feee8f
feat: openvpn & cert manager
2023-05-29 12:33:06 +00:00
sheppy
5cb291bdfd
feat: media configuration with cert header
2023-05-28 17:06:53 +02:00
sheppy
9a200e1197
add: support for extra root keys & bekama key
2023-05-23 18:08:19 +02:00
sheppy
4b52fbeb7a
add: timetracking/kimai basics
2023-05-14 18:30:54 +02:00
sheppy
fc004b97a0
add: git group vars stub
2023-05-11 19:56:30 +02:00
sheppy
59010c64ba
fix: dubious ownership clone error
2023-05-11 19:56:02 +02:00
sheppy
91c132fb1d
add: upgrade all playbook
2023-04-16 13:26:43 +02:00
sheppy
4b4f4666a3
fix: add restart for redis backend of oauth2proxy
...
- otherwise oauth2proxy break for example on system reboot
2023-04-10 19:20:56 +02:00
sheppy
d8e9a773a9
fix: rudi monitoring reports
2023-04-09 12:07:32 +02:00
sheppy
41a759abd5
add: telephoneNumber to ldap mappings keycloak
2023-04-09 11:41:57 +02:00
sheppy
2fcc84c43f
add: apt file to base installs
2023-04-08 16:12:31 +02:00
sheppy
b55fd11c0a
add: kathi key
2023-04-08 16:10:28 +02:00
sheppy
80f6b89b3d
fix: use start tls for internal smtp
...
do this by adding a new non transparent port forward and connect via this port
and the normal mail.atlantishq.de address
also always copy the passwd file for dovecot
2023-04-06 19:23:20 +02:00
sheppy
fcf62beb1b
fix: encrypted noreply mail service password
2023-04-06 18:52:19 +02:00
sheppy
f6521cd595
update: set new zabbix master server ip
2023-04-02 10:15:19 +02:00
sheppy
2624b84ee0
add: kathi backup server check
2023-04-02 10:15:03 +02:00
sheppy
8c8d2250f7
update: new dkim zabbix server
2023-04-02 10:14:18 +02:00
sheppy
8ae16a65df
add: vault pki basics
2023-03-28 09:18:24 +02:00
sheppy
63f70d07c7
add: zabbix agent role to main playbook
2023-03-28 09:18:11 +02:00
sheppy
fb6b26f85a
add: zabbix host to trusted dkim hosts
2023-03-26 04:09:50 +02:00
sheppy
b49431651e
fix: remove duplicated nsca handler
2023-03-16 19:15:31 +01:00
sheppy
ec2e1de3e2
fix: reference perm mode as octal
2023-03-16 11:27:18 +01:00
sheppy
e89f7fa5c9
fix: wrong ansible module (2)
2023-03-16 11:23:52 +01:00
sheppy
b6a62697f1
fix: wrong ansible module
2023-03-16 11:16:22 +01:00
sheppy
e4b2b8bc7c
add: michy server monitoring
2023-03-16 11:02:27 +01:00
sheppy
61cfe19cdf
change: remove mail from async services
2023-03-16 09:50:20 +01:00
sheppy
f392eeb54f
fix: influx apt list/key double call
2023-03-16 09:48:16 +01:00
sheppy
151e580abe
feat: icinga users file
2023-03-15 16:56:02 +01:00
sheppy
9d51c3fa74
feat: icinga mail notifications
2023-03-15 16:40:20 +01:00
sheppy
e3953b1810
add: smtp/mail configuration keycloak master realm
2023-03-14 17:59:55 +01:00
sheppy
d2227d485f
add: opendkim/spf configuration
2023-03-14 13:45:56 +01:00
sheppy
25ac7e4393
fix: add service mail account noreply
2023-03-14 13:06:38 +01:00
sheppy
8c51b48e84
change: allow broken slas auth clients postfix
2023-03-14 12:44:48 +01:00
sheppy
da239cf89b
add: sender OK avg exerpt
2023-03-14 12:43:38 +01:00
sheppy
d0464a5316
fix: send spammails to different address
2023-03-14 12:43:16 +01:00
sheppy
7f31f9acbc
add: spamsink mail account
2023-03-14 12:18:05 +01:00
sheppy
5f51564e7d
fix: add influx apt list & key
2023-03-14 12:06:43 +01:00
sheppy
23ae78c6ff
fix: service name not shown pynag
2023-03-14 11:51:32 +01:00
sheppy
500a6bd70a
fix: add password and user to compose
2023-03-05 15:46:02 +01:00
sheppy
beb371db3b
fix: paperless lint
2023-03-05 13:38:15 +01:00
sheppy
8110f83898
add: paperless basics
2023-03-05 12:59:01 +01:00
sheppy
0fefb7e83c
fix: dovecot nas auth sha-512 string
2023-03-04 14:25:17 +01:00
sheppy
002fb70481
add: login auth mechanism to dovecot
2023-03-04 14:21:36 +01:00
sheppy
8843697254
update: mail files
2023-03-04 14:09:52 +01:00
sheppy
30477c8871
fix: remove duplicated auth keys task
2023-01-18 19:27:21 +01:00
sheppy
c5e8869a05
fix: add missing ;
2023-01-18 19:20:07 +01:00
sheppy
36fac310c8
fix: add typo3-settings
2023-01-18 19:15:55 +01:00
sheppy
f8b3b8ab40
fix: typo3 backend/BE login not found 404
2023-01-18 19:01:40 +01:00
sheppy
46ef941251
fix: remove hardcoded url
2023-01-18 18:48:38 +01:00
sheppy
e6b04278ae
fix: typo3 gateway
2023-01-18 17:40:09 +01:00
sheppy
c7762f4f5a
feat: add header on backend to identify request
2023-01-16 23:51:53 +01:00
sheppy
13174053f1
fix: use nginx for php fpm
2023-01-16 23:49:09 +01:00
sheppy
269f2787b6
feat: configure php on typo3
2023-01-16 17:15:20 +01:00
sheppy
62039fffa2
feat: typo3 base
2023-01-16 15:41:10 +01:00
sheppy
681ed0d4af
fix: remove unloaded ldapapi:// from systemd config
2023-01-16 14:14:53 +01:00
sheppy
1e1e21ccc4
fix: add restart always to oauth proxy
2023-01-16 13:53:53 +01:00
sheppy
f32bd17013
feat: skip auth paths
2023-01-15 22:46:43 +01:00
sheppy
98aaa561c5
fix: remove duplicated http
2023-01-15 21:24:22 +01:00
sheppy
9c1b9fff8f
fix: oidc oauth2proxy redirect uri
2023-01-15 19:40:29 +01:00
sheppy
38529a428e
feat: more oidc oauth2proxy
2023-01-15 19:37:29 +01:00
sheppy
4fd118fde6
feat: services var
2023-01-15 18:33:56 +01:00
sheppy
0530a5218d
add vars to gitkeep
2023-01-15 18:20:43 +01:00
sheppy
b07065b052
feat: gitkeep vars
2023-01-15 18:20:30 +01:00
sheppy
a684479e05
feat: waitress port from services option
2023-01-15 18:20:10 +01:00
sheppy
25441ea4b2
feat: oauth2 proxy
2023-01-15 18:07:50 +01:00
sheppy
fe2b0f1dab
fix: backup scripts backupvm
2023-01-15 17:42:12 +01:00
sheppy
00e6a694de
feat: slapd via slapcat backup
2023-01-15 17:26:54 +01:00
sheppy
fa61c58471
feat: oauth2proxy compose skel
2023-01-15 11:46:36 +01:00
sheppy
0d63e8855b
fix: split keycloak config
2023-01-15 11:41:52 +01:00
sheppy
6c8718e948
feat: slapd group & systemd
2023-01-15 08:31:53 +01:00
sheppy
6c8a690a39
fix: authorized keycloak clients
2023-01-15 06:19:17 +01:00
sheppy
608965124f
fix: no modify timestamp ldap
2023-01-14 08:11:21 +01:00
sheppy
dc13e7056c
fix: ldap attribute mail
2023-01-14 08:07:19 +01:00
sheppy
4b487106c8
feat: keycloak & ldap
2023-01-14 08:02:39 +01:00
sheppy
90b529fb32
fix: increase monitoring gracetime apt async
2023-01-14 06:22:10 +01:00
sheppy
7a4d6a4531
fix: allow dash in path
2023-01-14 06:13:40 +01:00
sheppy
24e72a80ee
fix: backup caldav script
2023-01-11 04:11:10 +01:00
sheppy
20d630496f
fix: add forgotton proxy remote passive service
2023-01-11 03:47:19 +01:00
sheppy
9fe04399b4
add: warning about icinga config
2023-01-11 03:40:08 +01:00
sheppy
46d17d145d
fix: monitoring tools is loaded by icinga
2023-01-11 03:35:52 +01:00
sheppy
b53c1918c9
feat: more syslog/telegraf stuff
2023-01-11 02:20:00 +01:00
sheppy
88ecce43b0
feat: fully template keycloak clients
2023-01-10 23:03:34 +01:00
sheppy
93df06e477
fix: change icinga log level
2023-01-10 22:36:04 +01:00
sheppy
85de996862
deactivate: dn reachable check
2023-01-09 23:19:40 +01:00
sheppy
02e816c14c
wip: remove darknet reachable check for now
2023-01-09 23:17:15 +01:00
sheppy