main #31

Merged
juan merged 154 commits from main into lab 2024-10-16 15:22:43 +00:00

154 Commits

Author SHA1 Message Date
Juan Ferrer 2fa6db793c refs #8025 gitignore duplication removed, vars moved to inventory 2024-10-16 16:59:30 +02:00
Juan Ferrer 8c56ffd03b Merge pull request '8025-awxRefactor-debianBootStrap' (!30) from 8025-awxRefactor-debianBootStrap into main
Reviewed-on: #30
Reviewed-by: Juan Ferrer <juan@verdnatura.es>
2024-10-16 14:49:32 +00:00
Juan Ferrer 2cdc90dd05 Merge branch 'main' into 8025-awxRefactor-debianBootStrap 2024-10-16 14:47:29 +00:00
Xavi Lleó 0864b8a2f5 Refs #8025 Rol debian-bas. nrpe task - add server_address={{ ansible_default_ipv4.address }} to 90-vn.cfg 2024-10-16 16:29:41 +02:00
Xavi Lleó 39c493c306 Refs #8025 Rol debian-bas. bacula task - Configure master cert directly to passbolt without global variable 2024-10-16 16:18:22 +02:00
Juan Ferrer 93b51f522e refs #8025 Disable deprecation warnings 2024-10-16 16:02:37 +02:00
Xavi Lleó ddfa6cdef9 Refs #8025 Rol debian-bas. ssh task - remove no necessary register 2024-10-16 14:12:48 +02:00
Xavi Lleó 921e3538cd Refs #8025 Rol debian-base&guest. ssh task - unify generate SSH key pairs. Add witness task to control initial setup. Separate conf ssh files for failban & ssh task. Remove handler that uses shell, no need it for pam update. 2024-10-16 14:04:55 +02:00
Juan Ferrer 4ac86abe43 refs #8025 License date fix 2024-10-16 09:21:54 +02:00
Xavi Lleó fa8a788a94 Merge branch 'main' into 8025-awxRefactor-debianBootStrap 2024-10-15 16:17:09 +02:00
Xavi Lleó 72e30fa606 Refs #8025 Rol debian-base. bacula task - don´t restart if no changes 2024-10-15 15:58:24 +02:00
Xavi Lleó ce7f8503f1 Refs #8025 - Rol debian-base: Refactor Bacula task to manage certs from a variable - your live in a variable way. 2024-10-15 15:28:06 +02:00
Juan Ferrer 070c526ce2 refs #8025 Inventories removed, license added 2024-10-15 14:50:12 +02:00
Xavi Lleó 944e91071a Refs #8025 Role debian-base: task bacula. Copy pub cert. 2024-10-15 13:40:10 +02:00
Xavi Lleó 6e0d940cc0 Refs #8025 Role debian-base: Fail2ban task add register to do last step when jail.local changes 2024-10-15 12:28:15 +02:00
Xavi Lleó d141bc8a75 Refs #8025 Role debian-base: Refactor vn-repo to ensure idempotency and enhance major Bacula task. 2024-10-15 12:24:26 +02:00
Xavi Lleó 684a298e03 Refs #8025 Rol debian-base. fail2ban task - ensure /var/log/auth exists before restarting Fail2ban for systemd exit code 0 2024-10-14 13:53:36 +02:00
Xavi Lleó 49c42b4127 Refs #8025 Rol debian-base. fail2ban task - Add email notification and whois report action for sshd in local jail. 2024-10-14 12:10:28 +02:00
Xavi Lleó 43019754c4 Refs #8025 Rol debian-base. ssh task - add notify to restart sshd when changes came. 2024-10-14 09:36:10 +02:00
Xavi Lleó 588db894a1 Refs #8025 Rol debian-base. All task - Refactor from octal permissions to plain text 2024-10-10 16:12:29 +02:00
Xavi Lleó 3e7771ba4c Refs #8025 Rol debian-base. Task ssh refactor 2024-10-10 16:06:01 +02:00
Xavi Lleó 94ca22734d Refs #8025 Rol debian-base. Task ssh to conf.d directory 2024-10-10 15:48:34 +02:00
Xavi Lleó e195130241 Refs #8025 Rol debian-base. Task fail2ban jinga template. 2024-10-10 14:47:43 +02:00
Xavi Lleó 06cc6fa26b Refs #8025 Rol debian-base. Task ssh move from debian-once to ., refactor handlers 2024-10-10 13:36:16 +02:00
Xavi Lleó 33586c7f96 Refs #8025 Rol debian-base. Task install, nrpe, fail2ban fix, refactor handlers 2024-10-10 13:21:32 +02:00
Xavi Lleó d14b123219 Refs #8025 Rol debian-base. Task timesync systemd fix, vars add to defaults, refactor handlers 2024-10-10 11:49:42 +02:00
Xavi Lleó 616beda4b7 Refs #8025 Debian-base - minor fix nrpe to bind ipv4 2024-10-08 16:35:53 +02:00
Xavi Lleó 3ad39e03a8 Refs #8025 Rol debian-base. Task nrpe fix, vars remove and move to group_vars and defaults. 2024-10-08 16:12:56 +02:00
Xavi Lleó 88c47d3c3a Refs #8025 Rol debian-base. Task relayhost fix and handler exim update config. 2024-10-08 12:34:52 +02:00
Juan Ferrer 09ed8be828 refs #8025 README run fix 2024-10-08 12:07:51 +02:00
Juan Ferrer 7235b8ab37 refs #8025 README setup fix 2024-10-08 12:01:39 +02:00
Juan Ferrer 557a4a0905 refs #8025 README setup fix 2024-10-08 12:00:30 +02:00
Juan Ferrer 69d8ff371a refs #8025 run-playbook.sh vault-pass fix 2024-10-08 11:55:12 +02:00
Juan Ferrer 0260125e66 refs #8025 README run playbook fix 2024-10-08 11:53:46 +02:00
Xavi Lleó f6bef9c98a refs #8025 Merge with main 2024-10-08 09:34:38 +02:00
Juan Ferrer d4c21376cd refs #8025 passbolt create fixes 2024-10-07 19:29:20 +02:00
Juan Ferrer fed934b5db refs #8025 passbolt create fixes 2024-10-07 19:26:29 +02:00
Juan Ferrer 153493a875 refs #8025 root task debug fix 2024-10-07 18:42:54 +02:00
Juan Ferrer a0c48b9aad refs #8025 hostname sintax fix 2024-10-07 18:41:33 +02:00
Juan Ferrer bd310a73df refs #8025 Create passbolt password, FQDN fix 2024-10-07 18:39:47 +02:00
Xavi Lleó 32fa5102ce Refs #8025 debian base rol - more locales and group vars 2024-10-07 16:41:41 +02:00
Xavi Lleó 7ec58a2f89 Refs #8025 debian base rol - approche install packages, triggers-notify in main 2024-10-07 15:42:12 +02:00
Xavi Lleó 4139e78a9d Refs #8025 Update notify triggers in the debconf Ansible module for locales and tzdata to reconfigure packages. 2024-10-07 13:10:30 +02:00
Xavi Lleó 24864f694f Refs #8025 tasks from debian-base role tzdata refactor 2024-10-07 12:35:23 +02:00
Xavi Lleó 606548db7e Refs #8025 Resolv task moved to debian-base role - Review & refactor tasks from debian-base role defuser, install and locate 2024-10-07 12:06:19 +02:00
Xavi Lleó d6c51141bf Refs #8025 Solution to approach resolv.conf only on case no dhcp-client is used 2024-10-07 09:43:51 +02:00
Juan Ferrer 0936c97025 refs #8025 PVE fixes 2024-10-04 17:16:51 +02:00
Xavi Lleó 757d3dfe29 refs #8025 Little modifications - Using module systemd insted service. Other approach to hosts file. More strict disable apparmor. 2024-10-04 13:15:55 +02:00
Juan Ferrer c30bfd3ee5 refs #8025 README install improved, added local inventory 2024-10-04 08:35:07 +02:00
Xavi Lleó 9dfbe294bc Refs #8025 Añadido host ansible-client al inventario de lab 2024-10-03 16:08:45 +02:00
Juan Ferrer 6d68f76434 refs #8025 Include all EE context files 2024-10-03 15:05:48 +02:00
Juan Ferrer 67ae879edf refs #8025 README awx link fix, host ansible-test added 2024-10-03 14:48:39 +02:00
Xavi Lleó 9464d6d8a3 Refs #8025 Crazy git 2024-10-03 10:45:21 +02:00
Xavi Lleó ed9e69b96b Refs #8025 Sincro 2024-10-03 09:42:08 +02:00
Juan Ferrer 069d072643 refs #8025 README: venv doc improved 2024-10-02 20:33:47 +02:00
Juan Ferrer ba4e5fd635 refs #8025 run-playbook.sh: PYTHONPATH commented 2024-10-02 20:17:47 +02:00
Juan Ferrer 1b7506d647 refs #8025 Added Passbolt env config template 2024-10-02 20:14:27 +02:00
Xavi Lleó c16fe4755e Refs #8025 Debian.yml - Forward Fast Juan 2024-10-02 14:02:22 +02:00
Juan Ferrer 6bce31ab19 refs #8025 Fix: Get NSLCD password from Passbolt 2024-10-02 13:34:54 +02:00
Juan Ferrer 5f7041dfbf refs #8025 Passbolt integration, README improved, ansible vault deleted, EE fixes 2024-10-02 13:20:37 +02:00
Xavi Lleó 896ba27da5 refs #8025 Configure base Debian host - Detalles en los nombres de las tareas y la condición when de Configure virtual machine 2024-10-02 12:15:01 +02:00
Juan Ferrer 8184838a8d refs #8025 #7892 defuser bug fix, disable apparmor 2024-10-01 16:01:16 +02:00
Juan Ferrer 1adc5db4df Merge branch 'main' of https://gitea.verdnatura.es/verdnatura/vn-ansible 2024-10-01 14:14:58 +02:00
Juan Ferrer 0a73bc63b3 refs #8025 #7892 roles debian-once & debian-host, sysctl, README, environment 2024-10-01 14:14:51 +02:00
David Lopez 26556cf5b3 Merge pull request 'Actualizar roles/debian-qemu/tasks/hotplug.yml' (!28) from davidl-patch-1 into main
Reviewed-on: #28
Reviewed-by: Juan Ferrer <juan@verdnatura.es>
2024-10-01 09:19:41 +00:00
David Lopez e50986db64 Actualizar roles/debian-qemu/tasks/hotplug.yml 2024-10-01 09:18:56 +00:00
Juan Ferrer 71dfa53a8c refs #8025 python depts fix 2024-10-01 06:49:36 +02:00
Juan Ferrer 210edd5b79 refs #8025 passbolt test 2024-09-30 14:25:35 +02:00
Juan Ferrer 5bf05ebb29 refs #8025 inventory dns suffix and patterns, added ceph pve and kube playboks, small refactor 2024-09-30 08:07:30 +02:00
Juan Ferrer 7b90daa253 Update README.md 2024-09-27 18:40:43 +00:00
Juan Ferrer a6bb9da5c4 Update README.md 2024-09-27 18:40:10 +00:00
Juan Ferrer 1553e27281 Update README.md 2024-09-27 18:34:39 +00:00
Juan Ferrer 18ac55d1c8 refs #8025 vault_password_file commented 2024-09-27 14:07:07 +02:00
Juan Ferrer 1e565544fe refs #8025 Vault added, core hosts splitted, tasks parametized, auth enabled 2024-09-27 13:26:47 +02:00
Juan Ferrer ca9b87b8f8 refs #8025 README ping description 2024-09-26 14:57:01 +02:00
Juan Ferrer 5480687b33 refs #8025 Tags doc added 2024-09-26 14:55:41 +02:00
Juan Ferrer 39144527bb refs #8025 Disable gather and become for ping 2024-09-26 14:16:04 +02:00
Juan Ferrer bd9059f3c5 refs #8025 Production hosts updated, tags without brackets 2024-09-26 13:49:23 +02:00
Juan Ferrer ae9dbd78ac refs #8025 Remove lab network reference 2024-09-26 13:02:40 +02:00
Juan Ferrer 4f264468a2 refs #8025 Remove lab unreachable hosts 2024-09-26 13:01:03 +02:00
Juan Ferrer 3f647cfd5c refs #8025 clean: tags added, added task to remove old bashrc config 2024-09-26 12:50:51 +02:00
Juan Ferrer 77616531ab refs #8025 Tags added, added clean playbook, sudoers moved to guest 2024-09-26 12:16:03 +02:00
Juan Ferrer ae8ff99fc9 refs #8025 lab inventory: added pvelab infra and guest 2024-09-26 10:55:54 +02:00
Juan Ferrer 77da5cd525 refs #8025 awx playbook doc 2024-09-25 23:31:56 +02:00
Juan Ferrer dff36cc46f refs #8025 awx playbook, sudoers permission fix 2024-09-25 23:27:55 +02:00
Juan Ferrer fc7a5e6d7d refs #8025 Create awx user 2024-09-25 23:21:02 +02:00
Juan Ferrer cddc0b4444 Merge pull request '8025-awxRefactor' (!26) from 8025-awxRefactor into main
Reviewed-on: #26
Reviewed-by: Javier Lopez <jlopez@verdnatura.es>
2024-09-24 13:51:24 +00:00
Juan Ferrer 0307c105b2 refs #8025 vault keys fixes 2024-09-24 14:26:55 +02:00
Juan Ferrer e3344b7ef2 refs #8025 README run playbook clarified 2024-09-24 13:10:26 +02:00
Juan Ferrer 4845d08548 refs #8025 remove path quotes 2024-09-24 13:04:59 +02:00
Juan Ferrer 06986ae2bd refs #8025 windows playbooks abreviated to win 2024-09-24 13:01:01 +02:00
Juan Ferrer 74c03400eb refs #8025 README fix 2024-09-24 12:28:52 +02:00
Juan Ferrer f8a765e47c refs #8025 README fix 2024-09-24 12:28:10 +02:00
Juan Ferrer c8b0d9fb1c refs #8025 send-mail made generic 2024-09-24 12:27:24 +02:00
Juan Ferrer 4f20789f61 refs #8025 Collections README line break fixes 2024-09-24 12:21:50 +02:00
Juan Ferrer e43c32fdf0 refs #8025 README added, intentories dir, lab inventory added 2024-09-24 12:20:42 +02:00
Juan Ferrer 876dc60606 refs #8025 Duplicated hosts removed 2024-09-24 10:38:19 +02:00
Juan Ferrer f033c92278 refs #8025 Code reorganization 2024-09-24 10:37:09 +02:00
Juan Ferrer 29bfaf6b33 refs #8025 relayhost fixes, self vars moved to global 2024-09-24 10:25:40 +02:00
Juan Ferrer fffa279650 refs #8025 autofs task restored 2024-09-24 09:45:24 +02:00
Juan Ferrer 46b9c9d6be refs #8025 awx role sudoers file renamed 2024-09-24 09:38:32 +02:00
Juan Ferrer 9868439750 refs #8025 Roles merged, passwords moved to global vars, rename .yaml to .yml 2024-09-24 09:38:05 +02:00
Juan Ferrer c7299d8499 refs #8025 Hosts reorganized, clearer names for roles 2024-09-23 16:58:52 +02:00
Juan Ferrer 9b358d0262 refs #8025 Remove non-production hosts from inventory 2024-09-23 16:35:42 +02:00
Juan Ferrer 0b7ab9a834 refs #8025 send-mail refactor 2024-09-23 16:34:09 +02:00
Juan Ferrer cdeb3098dc refs #8025 Merge roles 2024-09-23 16:32:28 +02:00
Juan Ferrer ea6a8bed79 refs #8025 Project structure & clean 2024-09-23 14:30:38 +02:00
Juan Ferrer 1fa424975a MOTD updated 2024-09-09 09:11:54 +02:00
Juan Ferrer b6d7ca1590 fix: refs #7735 MOTD updated and fixes 2024-09-08 16:40:23 +02:00
David Lopez eb08a7f164 Actualizar roles/config-motd/tasks/main.yaml 2024-09-07 09:31:52 +00:00
David Lopez 9b1180816f Actualizar roles/config-motd/tasks/main.yaml 2024-09-07 09:30:57 +00:00
David Lopez e589f73dcf Actualizar roles/config-motd/tasks/main.yaml 2024-09-07 09:22:41 +00:00
David Lopez ba2ac1562a Actualizar roles/config-motd/tasks/main.yaml 2024-09-07 09:22:19 +00:00
David Lopez 96260ba51a Actualizar roles/config-motd/vars/main.yaml 2024-09-07 09:21:45 +00:00
David Lopez 0d5998da18 Actualizar roles/config-motd/vars/main.yaml 2024-09-07 09:20:45 +00:00
David Lopez af1c0522f0 Añadir roles/config-motd/files/90-vn 2024-09-07 09:20:08 +00:00
David Lopez 721d9136ab Actualizar roles/config-nagios-nrpe/tasks/main.yaml 2024-09-06 20:20:05 +00:00
David Lopez ca6d0623c7 Actualizar linux-config-nagios-nrpe.yaml 2024-09-06 20:18:01 +00:00
David Lopez 05e294deec Actualizar linux-config-nagios-nrpe.yaml 2024-09-06 20:14:28 +00:00
David Lopez ce78324462 Actualizar linux-config-nagios-nrpe.yaml 2024-09-06 20:11:11 +00:00
David Lopez 022304c9f8 Actualizar linux-config-nagios-nrpe.yaml 2024-09-06 20:09:44 +00:00
David Lopez 3080f9f7b5 Actualizar linux-config-nagios-nrpe.yaml 2024-09-06 20:04:53 +00:00
David Lopez 1cfb9e1443 Actualizar linux-config-nagios-nrpe.yaml 2024-09-06 19:55:47 +00:00
David Lopez 5486ed7f9a Actualizar hosts 2024-09-06 19:04:22 +00:00
David Lopez 721014704f Actualizar hosts 2024-09-06 18:33:18 +00:00
David Lopez 864db55e11 Actualizar hosts 2024-09-06 18:25:18 +00:00
David Lopez 4029140e0c Actualizar hosts 2024-09-06 18:01:21 +00:00
David Lopez 767a5d5595 add vm-test 2024-09-06 17:51:16 +00:00
David Lopez 001c7d00a3 Actualizar linux-config-nagios-nrpe.yaml 2024-09-02 16:43:43 +00:00
David Lopez e6137447f6 Actualizar linux-config-nagios-nrpe.yaml 2024-08-30 19:03:12 +00:00
David Lopez 75b08e8556 Actualizar roles/config-nagios-nrpe/tasks/main.yaml 2024-08-30 18:15:06 +00:00
David Lopez d786c12628 Actualizar hosts 2024-08-30 18:08:09 +00:00
David Lopez 163ad42636 Actualizar hosts 2024-08-24 11:25:58 +00:00
David Lopez 679739ce0a Actualizar roles/config-ntp/tasks/main.yaml 2024-08-24 10:52:20 +00:00
David Lopez f4c4266510 Actualizar roles/config-ntp/tasks/main.yaml 2024-08-24 10:49:49 +00:00
David Lopez 9b7b6f6476 Actualizar roles/config-ntp/tasks/main.yaml
/etc/systemd/timesyncd.conf  line: "FallbackNTP=ntp.roa.es"
2024-08-24 10:45:05 +00:00
David Lopez b27f23261a Actualizar roles/config-install-packages/tasks/main.yaml 2024-08-24 09:46:35 +00:00
Ruben Blanco 5a7a807531 Merge pull request 'Baja host Backup-San' (!25) from 7692-BajaHostBackup_San into main
Reviewed-on: #25
2024-07-24 14:36:42 +00:00
Ruben Blanco 1393795a8d Baja host Backup-San 2024-07-24 16:35:11 +02:00
Ruben Blanco b5e29f522c Merge pull request 'exim4 update patch package exim4 vulnerability cve-2024-39929' (!23) from 7727-PatchExim4CVE_2024_39929 into main
Reviewed-on: #23
2024-07-17 09:33:17 +00:00
Ruben Blanco 8ab5a49339 exim4 update patch package exim4 vulnerability cve-2024-39929 2024-07-15 19:06:09 +02:00
Ruben Blanco ba91f3e521 Merge pull request 'refs #7538 Swarm nodes removed' (!21) from 7539-removeSwarmNodes into main
Reviewed-on: #21
2024-06-19 13:19:37 +00:00
Juan Ferrer f0196ff78a Merge branch 'main' into 7539-removeSwarmNodes 2024-06-19 15:17:47 +02:00
Ruben Blanco 601a0fb32a Merge pull request 'refs #7482 Remove old hosts' (!22) from 7482-removeOldHosts into main
Reviewed-on: #22
2024-06-19 12:50:52 +00:00
Javier Lopez e0915c6582 Merge pull request 'Refs 7415 - Added new Debian template' (!19) from 7415-newTemplateDebian into main
Reviewed-on: #19
Reviewed-by: Juan Ferrer <juan@verdnatura.es>
2024-06-19 05:55:03 +00:00
Javier Lopez 627ef87a7e Main branch merged into this branch avoiding conflicts 2024-06-19 07:54:08 +02:00
Juan Ferrer e4743e333c refs #7482 Remove old hosts 2024-06-18 19:55:30 +02:00
Juan Ferrer f2e3cf3f0a refs #7538 Swarm nodes removed 2024-06-18 18:59:28 +02:00
Ruben Blanco 61f6e6bd33 Merge pull request 'add_host_to_lab' (#20) from add_host_to_lab into main
Reviewed-on: #20
2024-06-18 12:14:16 +00:00
Ruben Blanco a9913cbd43 add host vars openvpn-freeradius 2024-06-18 14:10:21 +02:00
Ruben Blanco 2c71068f50 add host 2024-06-18 14:05:46 +02:00
Javier Lopez 406b5b633b Refs 7415 - Rename template name 2024-06-17 11:32:46 +02:00
Javier Lopez 323fabf4db Update minimal packages to install 2024-06-17 10:07:46 +02:00
Javier Lopez 1552906509 Refs 7415 - Added new Debian template 2024-06-14 13:45:38 +02:00