Zolfa
8b4fc582fe
playbooks: enable proxy protocol forwarding
Setting `reverse_proxy_proxy_protocol: true` and
`nginx_proxy_protocol: true` in nginx roles enable the forwarding of
the original connection address from the reverse_proxy to the target
nginx instance, using the established TCP PROXY PROTOCOL (adding a TCP
header, so working also for TLS connections that are not terminated at
the reverse proxy).
**Warning**
The `reverse_proxy_proxy_protocol` settings acts globally on the
reverse proxy nodes, so every virtual server on the reverse proxy must
accept and correctly handle proxy protocol headers.
This settings must be the same for every host sharing the same reverse
proxy, otherwise the setting will be changed globally at every run.
4 years ago
Zolfa
d96c1a9743
roles/nextcloud: bump to 20.0.4
4 years ago
Zolfa
65b416472d
roles/gitea: bump to 1.13.0
4 years ago
Zolfa
2fd28f981d
roles/borgrepo: encryption and multi-remote, to test
4 years ago
Zolfa
0ae3508cc1
roles/coturn: use new port_forwarding var prefix
4 years ago
Zolfa
e14b94088d
roles/gitea: customizable ssh port
4 years ago
Zolfa
c20cd34962
roles/lxc_guest: fix: wrong indent
4 years ago
Zolfa
7d08549f69
roles/lxc_guest: enable unattented upgrade
4 years ago
Zolfa
c112650dc2
roles/port_forwarding: add prefix to var names
4 years ago
Zolfa
a34c5fe37d
roles/nextcloud: bump to 20.0.3
4 years ago
Zolfa
6c9e2fb272
roles/riot-web: bump to 1.7.15, add tags
4 years ago
Zolfa
f160a4ccec
roles/nextcloud: bump to 19.0.3
new php packages required added
4 years ago
Zolfa
ba31d469b6
roles/gitea: new role!
5 years ago
Zolfa
e9fd8f7de2
roles/matrix-synapse: update to debian bullseye
5 years ago
Zolfa
a76d3c0d44
roles/matrix-synapse: better ldap integration
read password from config file instead of generating one new every time
5 years ago
Zolfa
96aba4b73e
roles/*: tags refactoring
5 years ago
Zolfa
375d1db38b
roles/riot-web: update to 1.6.8
5 years ago
Zolfa
16279790a0
roles/icinga2: update to php7.4
5 years ago
Zolfa
14dbd2059e
roles/icinga2: read ldap secret from config file
5 years ago
Zolfa
2b068f1a95
host/gitea: add backup configuration
5 years ago
Zolfa
e6e5388b22
ldap: use `uid` instead of `cn` for usernames
5 years ago
Zolfa
996ee61205
roles/ldap/acl: rules for group (non root) sub-admins
5 years ago
Zolfa
de3e0ac650
bulk playbooks renaming
5 years ago
Zolfa
1ea9cab1d9
playbook to upgrade os package managers
5 years ago
Zolfa
f01b9fcd2e
prepare_lxc_container: var to skip ssh config for thin vm
5 years ago
Zolfa
e095830fd8
playbook nextcloud with onlyoffice and backup
5 years ago
Zolfa
41ed7f2d7f
playbook status with ldap mirror
5 years ago
Zolfa
2fe5d4f99a
playbook ldap with replication
5 years ago
Zolfa
21ca2fb0a9
roles/service: linux alpine support
5 years ago
Zolfa
fd02d01aaa
roles/onlyoffice: fix to run 5.5.3
5 years ago
Zolfa
b01feabffb
backup status monitoring
5 years ago
Zolfa
cec0b7cf50
roles/borg[server|repo]: new roles!
5 years ago
Zolfa
454bf96086
roles/nextcloud: ldap tunings
5 years ago
Zolfa
849e99d150
roles/nextcloud: bumps to .5 and php 7.4
Plus some php cache tunings
5 years ago
Zolfa
507072ba09
roles/icinga2: add dns monitoring for web services
5 years ago
Zolfa
e6f1e96a6c
roles/coturn: add support for alpine linux
5 years ago
Zolfa
48a365730f
roles/lxc_guest: add support for alpine linux vm
5 years ago
Zolfa
5efe297f0c
roles/icinga2: support for backup ldap servers
5 years ago
Zolfa
5278d25567
roles/icinga2: improved web service syntax
http external web services are monitored as separeted host
5 years ago
Zolfa
db3c3009c3
roles/coturn: use only loopback topology
To avoid excessive consumption of UDP port that seems to be detected
and blocked by SIAF upstream firewall.
Only loopback relay is permitted, so the only TURN Topology allowed
is:
Forward:
Client 1 <--TURN--> (udp/88) Server <--RTP--> Server (udp/88) <--TURN--> Client 2
Topologies like:
Client 1 <--TURN--> (udp/88) Server (udp/>10000) <--RTP--> Client 2
Are not allowed.
5 years ago
Zolfa
3f8db5cc20
roles/ldap: improved log and repl fix
5 years ago
Zolfa
ca11d57162
roles/onlyoffice: new role !
5 years ago
Zolfa
35bc3004d3
roles/etherpad: new role !
5 years ago
Zolfa
cf34d9522c
roles/ldap: monitoring fact added
5 years ago
Zolfa
42212333a4
roles/icinga2: ssh control persist and ldap checks
5 years ago
Zolfa
78dfe4819f
roles/ldap: add syncrepl support
5 years ago
Zolfa
11fc50313e
roles/ldap: test_user instead of pippo
5 years ago
Zolfa
aac0856524
roles/nextcloud: fix folder permission
5 years ago
Zolfa
6a8ed9911d
prepare_host: typo
5 years ago
Zolfa
26097f8b44
roles/lxc and prepare host: apt autorefresh
5 years ago