Andrea Cimbalo
b9de7c75fe
role nginx: add options for proxy directive and additional root location configuration
6 years ago
Andrea Cimbalo
414d5496bd
fix parent template in roles/dokuwiki/templates/dokuwiki.conf
6 years ago
Edoardo Putti
c2aeb32e2c
remove motd as it is not installed by default
6 years ago
Edoardo Putti
0a1220bc25
add shadow lists playbook
6 years ago
Edoardo Putti
7c32a6a7be
use filter when finding reverse proxy destionation
6 years ago
Edoardo Putti
15aa44e5b6
add login message after ssh login
6 years ago
Edoardo Putti
727188b058
add defaults for ssh server role
6 years ago
Andrea Cimbalo
b0c90d61ba
Add fullchain template
6 years ago
Edoardo Putti
44d21ea747
[fix] typo in cert_request module
6 years ago
Edoardo Putti
b6ca4aba33
[fix] typo in cert_request module
6 years ago
Edoardo Putti
7333719055
draft for sign_request module
6 years ago
Edoardo Putti
e5e615a7c8
integrate debug in ca-dialog
move debug messages from roles in task ca-dialog
6 years ago
Edoardo Putti
bd1aa8edd6
set default values for paths to openvpn files
6 years ago
Edoardo Putti
a0772bb643
use module cert_request where possible
this module read a file containing a public key and prepares
the sign_request for a ssl_host or ssh_host request
6 years ago
Edoardo Putti
a473a9edd9
[fix] update synapse role default
this role variables will be used during templating
for nginx reverse proxy
6 years ago
Edoardo Putti
fcbed30139
add systemd unit to login api server
6 years ago
Edoardo Putti
4e6905a3d1
change from GARR's mirror to debian default
6 years ago
Edoardo Putti
5d2fd43425
simplify nginx role templating
- remove the handling of which template to use
- do not access parent role
- update riot-web nginx configuration
- update icinga role to use new nginx templating
- update synapse nginx configuration
- update matrix role to use new nginx templates
- update dokuwiki to use new nginx template
- extend nginx template in dokuwiki
- update login role to new nginx templates
- add protocol for default option
- add extra block to nginx template
- update riote-web version
- fix template extension for riot web nginx definition
- update login template for nginx endpoint
7 years ago
Edoardo Putti
f4d861dd58
setup ca with fullchain for openvpn
6 years ago
Edoardo Putti
f0cf5d9be9
fix certbot role
- handle errors when starting/stopping webserver
- fix typo
7 years ago
Edoardo Putti
cc9e7d8193
default failed attribute to False
7 years ago
Edoardo Putti
57aaf9c123
handle creation of ssh certificate when none
7 years ago
Edoardo Putti
858402d8a4
update openvpn role, ssh_server role
7 years ago
Edoardo Putti
6a49fde5bd
format nicely debug messages in openvpn role
7 years ago
Edoardo Putti
2168f7bd8c
use ca_dialog in openvpn role
7 years ago
Edoardo Putti
b0b87a4fe7
add return codes conforming to ssh-keycheck
7 years ago
Edoardo Putti
6fc0a0543b
replace ssh certificate check with module
7 years ago
Edoardo Putti
12b8e1aa27
move certbot from cron to systemd service and timer
7 years ago
Edoardo Putti
f5a3d32c18
format correctly defaults yaml file for nginx role
7 years ago
Edoardo Putti
7520cea3f4
format nicely certbot command
7 years ago
Edoardo Putti
73cbf6a1a8
ubnind port 80 during certificate request
7 years ago
Edoardo Putti
970ffeb2d8
minor formatting for yaml in certbot role
7 years ago
Edoardo Putti
83a49ba79c
take public ip instead of hardcoded
7 years ago
Edoardo Putti
ebcb91a510
add debug message about certification authority host
7 years ago
Edoardo Putti
9f5edc8739
add website for certification authority information
7 years ago
Edoardo Putti
f68e03eb31
add last ssh logins to motd
7 years ago
Andrea Cimbalo
3245be02ea
add hostObject from libpam-ldap
7 years ago
Edoardo Putti
56614c0acc
parse ssh-keygen output from python
this module will help parsing the result of ssh certificates
and certification authorities to validate them
7 years ago
Edoardo Putti
56cd4eaf1f
update to latest release of ca_manager
7 years ago
Edoardo Putti
610f796a71
add playbook for host bakulilik
7 years ago
Edoardo Putti
a1dbe9960a
add message for certificate request
7 years ago
Edoardo Putti
554410590b
fix typo as authorities_request is not defined
7 years ago
Andrea Cimbalo
2de8869ba3
add new ssh and ssl CA pub keys
7 years ago
Andrea Cimbalo
de2b758a71
add log file for login service
7 years ago
Andrea Cimbalo
14ddc33402
add new ssh and ssl CA
7 years ago
Edoardo Putti
362fd2515e
set requirements for ansible
7 years ago
Edoardo Putti
a79525f3d7
remove example inventory as the real one is available
7 years ago
Edoardo Putti
35f0f8307c
version bump for ca_manager as we solved the root ca problem
7 years ago
Edoardo Putti
0c8c2bb8e1
change the path for shell and server
7 years ago
Edoardo Putti
ce001b6bef
draft for installing ca_manager from pip
7 years ago