Commit Graph

106 Commits

Author SHA1 Message Date
Fritz Grimpen c5ecf1df63 Enable HSTS for mediawiki 2021-03-10 11:30:18 +00:00
Geno 3c1aed2eee role/nginx: add timer for dehydrated / lets encrypt
fixed #21
2021-03-06 18:51:00 +01:00
Fritz Grimpen aa2063743c NSD configuration for patterns 2021-02-28 13:56:30 +00:00
Fritz Grimpen 036f12630c Enable APC cache in wiki 2021-02-28 03:10:24 +00:00
Fritz Grimpen ff8ad02776 Mete role 2021-02-16 23:38:59 +00:00
Fritz Grimpen d1af9ebbbc Forward kasse.z1.ccchb.de and kasse.zweigstelle.space to wiki 2021-02-14 14:40:32 +00:00
Fritz Grimpen a293199aff Forward jabber.ccchb.de http traffic 2021-02-03 10:16:49 +00:00
Fritz Grimpen ed30097745 First draft for a prosody role 2021-02-03 00:04:38 +00:00
Fritz Grimpen fdd1e5ce35 Handle nginx configuration in mediawiki role 2021-02-02 22:02:44 +00:00
Fritz Grimpen d5a03479af New certbot role covering standalone and webroot setups 2021-02-02 21:49:20 +00:00
Fritz Grimpen ca2aeff2f3 Add wiki playbook 2021-02-02 18:59:23 +00:00
Fritz Grimpen cba94e7929 Manage secrets outside Ansible 2021-02-02 18:29:48 +00:00
Fritz Grimpen c2ea9c6600 Hacky mediawiki role 2021-02-02 18:27:37 +00:00
Fritz Grimpen 1fb963e7fe Add user account for deelkar 2021-02-01 16:43:02 +00:00
Fritz Grimpen 3f45a25add jabber + wiki virtual machines 2021-02-01 14:12:11 +00:00
Fritz Grimpen 66ba886916 Define jabber vm 2021-02-01 12:50:19 +00:00
Crest 494dc7b106 Import the 34c3-nochd mailing list. Closes #23. 2021-02-01 13:10:06 +01:00
genofire 0054e0030f Merge branch 'master' of ssh://dev.ccchb.de:2222/ccchb/ansible 2021-02-01 02:46:03 +01:00
genofire 058910b93a Finish the mail setup. Closes #10. 2021-02-01 02:45:58 +01:00
Fritz Grimpen 652ac59642 Redirect files.ccchb.de and embassy.ccchb.de to wiki 2021-01-31 19:35:13 +00:00
genofire 42113ae4f9 Merge branch 'master' of ssh://dev.ccchb.de:2222/ccchb/ansible 2021-01-31 20:26:53 +01:00
genofire 060ba82d42 Perform daily backups. Close #22 2021-01-31 20:25:31 +01:00
Fritz Grimpen 746a701521 Tentatively redirect ccchb.de and www.ccchb.de to wiki.emma.ccchb.de 2021-01-31 18:30:40 +00:00
genofire 03c34b1216 s6-svscan lost its -s flag with the 2.10.0 release 2021-01-31 19:20:46 +01:00
genofire 07a61ac55f Add mlmmj map 2021-01-31 19:18:31 +01:00
genofire c49a79fe20 Update gitea submodule? 2021-01-31 19:17:40 +01:00
genofire 8725d80892 Merge branch 'master' of ssh://dev.ccchb.de:2222/ccchb/ansible 2021-01-31 19:16:32 +01:00
genofire 98a412c27b Renew Let's Encrypt certificates 2021-01-31 19:16:27 +01:00
Fritz Grimpen d4b4d9bbbe Configure haproxy for wiki.ccchb.de 2021-01-31 18:15:38 +00:00
Fritz Grimpen 75bbbb5429 Add wiki.emma.ccchb.de guest 2021-01-31 18:15:38 +00:00
genofire 7192608aee Mlmmj expects to talk to the relayhost over 127.0.0.1 2021-01-31 18:00:58 +01:00
genofire 4afadb1674 Work around ansible limitations (missing NFSv4 ACL support) 2021-01-31 17:44:26 +01:00
genofire 925499223e Use correct handlers 2021-01-04 23:33:42 +01:00
genofire 964e260a78 Merge branch 'master' of ssh://dev.ccchb.de:2222/ccchb/ansible 2021-01-04 23:17:40 +01:00
genofire 81e2eca425 Who did this? 2021-01-04 23:17:34 +01:00
genofire 49cc270de7 Call subversion without disabling the fucking certificate validation 2021-01-04 23:12:59 +01:00
Geno 68c6b53f68 gitea update 2020-12-14 23:53:27 +01:00
Geno fd68672d7c geno-playground with more ram and cpu (for ffmpeg rendering) 2020-12-11 17:28:43 +01:00
Geno f7c704c10b add osp-edge.ccchb.de to haproxy (of emma) 2020-12-08 22:28:35 +01:00
genofire 531b7ef276 Reenable redis dependency 2020-10-27 21:09:38 +01:00
genofire c18f53b8ea Add rspamd support.
Postfix uses the Rspamd proxy as spam filtering milter
and HAProxy exposes the Rspamd webinterface through HTTPS.

Updates #10
2020-10-26 23:46:16 +01:00
genofire 28fbdff74b Make HAProxy use its new chroot jail in /var/run/haproxy.
Fixes #19
2020-10-26 23:31:57 +01:00
genofire 97daf854d0 Add the missing sender_access map to Postfix's configuration.
Updates #18
2020-10-24 19:34:42 +02:00
genofire de6c1a4d8b Add dns playbook
Fixes #15
2020-10-24 14:11:39 +02:00
genofire 0a6b680cda Write a role to setup a Redis instance.
The role expects two parameters:

  * `redis_instance`: the instance name
  * `redis_client_group`: the group allowed to access the instance's unix socket

Fixes #17
Updates #10
2020-10-24 14:07:10 +02:00
genofire 593d8deddf Only delete old service databases after a *successful* update 2020-10-24 05:25:49 +02:00
genofire e8ad17c054 Add forgotten playbooks.
Changes #10, #15
2020-10-23 19:45:21 +02:00
genofire 01cace0b95 Merge branch 'master' of ssh://dev.ccchb.de:2222/ccchb/ansible into master 2020-10-23 19:37:21 +02:00
genofire 36e65e6fe3 Install and configure nsd and unbound on emma.ccchb.de
Fixes #15
2020-10-23 19:37:15 +02:00
genofire 83a7a1b4d1 Install and configure nsd and unbound on emma.ccchb.de
Fixes #16
2020-10-23 19:35:52 +02:00