Commits · d381b2e885fede1e3e9a88e79588379dc8bcd92e · Arch Linux / infrastructure

01 Aug, 2016 2 commits
- vostok: Mark common role with tag common · d381b2e8
  Florian Pritz authored Aug 01, 2016
```
Signed-off-by: Florian Pritz <bluewind@xinu.at>
```
  d381b2e8
- common: Add checkservices script · d94ba56d
  Florian Pritz authored Aug 01, 2016
```
Signed-off-by: Florian Pritz <bluewind@xinu.at>
```
  d94ba56d
30 Jul, 2016 1 commit
- Give angvp root · e191dc70
  Florian Pritz authored Jul 30, 2016
```
Signed-off-by: Florian Pritz <bluewind@xinu.at>
```
  e191dc70
28 Jul, 2016 3 commits

Move apollo hostvars to hostvars file · 21f9619e
Florian Pritz authored Jul 28, 2016
```
Signed-off-by: Florian Pritz <bluewind@xinu.at>
```
21f9619e
Move vostok hostvars to hostvars file · c3b09e58
Florian Pritz authored Jul 28, 2016
```
Signed-off-by: Florian Pritz <bluewind@xinu.at>
```
c3b09e58

dbscripts: Reenable http vhost · ece940ee

Florian Pritz authored Jul 28, 2016



A simple redirect breaks the syncrepo script because it doesn't follow
redirects. Copy the vhost for now and deduplicate it later.
Signed-off-by: Florian Pritz <bluewind@xinu.at>

ece940ee

27 Jul, 2016 4 commits

dbscripts: Add HTTPS for the dev mirror · 9d368337
Florian Pritz authored Jul 26, 2016
```
Signed-off-by: Florian Pritz <bluewind@xinu.at>
```
9d368337

nginx: Move sslsettings include to http block · e424db12

Florian Pritz authored Jul 26, 2016



The settings don't hurt normal http connections if they are defined at
the top level.
Signed-off-by: Florian Pritz <bluewind@xinu.at>

e424db12

common: Force netmask to /32 · 1a992475

Florian Pritz authored Jul 27, 2016



For some reason orion has a netmask of /8 which doesn't work in
hetzner's network since all traffic to other machines must pass through
a switch. Fix this by forcing a /32 netmask.

This change also requires us to set the gateway via the Peer option
because it would otherwise not be reachable.
Signed-off-by: Florian Pritz <bluewind@xinu.at>

1a992475

Move network config to common · d12b3565

Florian Pritz authored Jul 27, 2016



This allows to change it after deployment
Signed-off-by: Florian Pritz <bluewind@xinu.at>

d12b3565

23 Jul, 2016 1 commit
- Add pierre to tu · 3524c76d
  Florian Pritz authored Jul 23, 2016
```
Signed-off-by: Florian Pritz <bluewind@xinu.at>
```
  3524c76d
19 Jul, 2016 1 commit
- Add remy to TU group · 3349f4a3
  Florian Pritz authored Jul 19, 2016
```
Signed-off-by: Florian Pritz <bluewind@xinu.at>
```
  3349f4a3
18 Jul, 2016 8 commits
- Put vault-password-file setting into ansible.cfg · 849eb43d
  Florian Pritz authored Jul 18, 2016
```
Uhm, yeah. Forget I ever created a wrapper for that...
Signed-off-by: Florian Pritz <bluewind@xinu.at>
```
  849eb43d
- apollo: Fix typo in opendkim tag name · 0d2ea540
  Florian Pritz authored Jul 18, 2016
```
Signed-off-by: Florian Pritz <bluewind@xinu.at>
```
  0d2ea540
- apollo: Add dedicated role tags for postfix and opendkim · b9cb1e5f
  Florian Pritz authored Jul 18, 2016
```
Signed-off-by: Florian Pritz <bluewind@xinu.at>
```
  b9cb1e5f
- apollo: Add dovecot and postfwd · f1dec701
  Florian Pritz authored Jul 18, 2016
```
Signed-off-by: Florian Pritz <bluewind@xinu.at>
```
  f1dec701
- dovecot: Add pigeonhole package · dc0305ea
  Florian Pritz authored Jul 18, 2016
```
Signed-off-by: Florian Pritz <bluewind@xinu.at>
```
  dc0305ea
- nginx: Add inventory_hostname vhost for SSL certs · 39aca49b
  Florian Pritz authored Jul 18, 2016
```
This allows each host with nginx to easily get some kind of SSL cert
for testing purposes or services where the CN does not matter.
Signed-off-by: Florian Pritz <bluewind@xinu.at>
```
  39aca49b
- Add wrapper for ansible command · 77c4e116
  Florian Pritz authored Jul 18, 2016
```
Signed-off-by: Florian Pritz <bluewind@xinu.at>
```
  77c4e116
- Switch to more general wrapper script for running playbooks and vault · 0596dec5
  Florian Pritz authored Jul 18, 2016
```
Signed-off-by: Florian Pritz <bluewind@xinu.at>
```
  0596dec5
17 Jul, 2016 2 commits

Add role/postfwd · ac7a2f15

Florian Pritz authored Jul 17, 2016



Config copied from nymeria.
Signed-off-by: Florian Pritz <bluewind@xinu.at>

ac7a2f15

Add role/dovecot · 7adb07bd

Florian Pritz authored Jul 17, 2016



Config copied from nymeria with improved indentation.
Signed-off-by: Florian Pritz <bluewind@xinu.at>

7adb07bd

14 Jul, 2016 1 commit
- Add missing ssh keys for daniel · 2857090e
  Florian Pritz authored Jul 14, 2016
```
Signed-off-by: Florian Pritz <bluewind@xinu.at>
```
  2857090e
13 Jul, 2016 1 commit
- Add allan to tu group · 65041fcf
  Florian Pritz authored Jul 13, 2016
```
Signed-off-by: Florian Pritz <bluewind@xinu.at>
```
  65041fcf
11 Jul, 2016 9 commits
- postfix: Make transport map a template · 095a4bc1
  Florian Pritz authored Jul 11, 2016
```
Signed-off-by: Florian Pritz <bluewind@xinu.at>
```
  095a4bc1
- opendkim: Verify key in dns before starting service · 78a7aacb
  Florian Pritz authored Jul 11, 2016
```
Signed-off-by: Florian Pritz <bluewind@xinu.at>
```
  78a7aacb
- apollo: Fix order of opendkim role · b238f13c
  Florian Pritz authored Jul 11, 2016
```
Needs to be after postfix since it uses the postfix group for some files
Signed-off-by: Florian Pritz <bluewind@xinu.at>
```
  b238f13c
- hosts: Switch apollo to dns · 666aaf89
  Florian Pritz authored Jul 11, 2016
```
Signed-off-by: Florian Pritz <bluewind@xinu.at>
```
  666aaf89
- apollo: Enable postfix and opendkim · ac518769
  Florian Pritz authored Jul 11, 2016
```
Signed-off-by: Florian Pritz <bluewind@xinu.at>
```
  ac518769
- postfix: Switch to ${indexed} variable for databases · 41fdc1dd
  Florian Pritz authored Jul 11, 2016
```
Signed-off-by: Florian Pritz <bluewind@xinu.at>
```
  41fdc1dd
- postfix: Disable lists.archlinux.org transport · 82b6d58d
  Florian Pritz authored Jul 11, 2016
```
Reenable this when mailman is actually running on the same box
Signed-off-by: Florian Pritz <bluewind@xinu.at>
```
  82b6d58d
- postfix: merge main.cf from nymeria · 8a365054
  Florian Pritz authored Jul 11, 2016
```
Signed-off-by: Florian Pritz <bluewind@xinu.at>
```
  8a365054
- Make seblu root · 22f48217
  Sven-Hendrik Haase authored Jul 11, 2016
  
  22f48217
29 Jun, 2016 4 commits
- Fix subdomain name · a50316fc
  Sven-Hendrik Haase authored Jun 29, 2016
  
  a50316fc
- Add planet role to apollo for planet.archlinux.org · e1406014
  Sven-Hendrik Haase authored Jun 29, 2016
  
  e1406014
- Fix certbot line · a9f543ce
  Sven-Hendrik Haase authored Jun 29, 2016
  
  a9f543ce
- Add more subdomains · 7c395d98
  Sven-Hendrik Haase authored Jun 29, 2016
  
  7c395d98
25 Jun, 2016 2 commits
- Remove commented ssh key, jsteel · f19719df
  Florian Pritz authored Jun 25, 2016
```
Signed-off-by: Florian Pritz <bluewind@xinu.at>
```
  f19719df
- Add missing keys, jsteel · aed16939
  Florian Pritz authored Jun 25, 2016
```
Signed-off-by: Florian Pritz <bluewind@xinu.at>
```
  aed16939
21 Jun, 2016 1 commit
- Add guillaume to TU group · ae437c56
  Florian Pritz authored Jun 21, 2016
```
Signed-off-by: Florian Pritz <bluewind@xinu.at>
```
  ae437c56