Andreas B. Mundt
25dd1161e4
Nicer ordering.
2021-02-08 10:57:43 +01:00
Andreas B. Mundt
de52a1eb33
Provide ssh hostkey.
2020-12-18 09:28:26 +01:00
Andreas B. Mundt
7238875d0c
Further split roles. Mount user home on the clients (sshfs).
...
The following roles are available:
fvs-sssd
Configures LDAP as ID and AUTH provider using sssd.
fvs-mount
Provides all private user directories on login with pam_mount.
Machines provided so far are:
The server providing the home directory: fvs-home.yml
A standard client: fvs-client.yml
2020-12-18 09:28:26 +01:00
Andreas B. Mundt
77c8c26e38
Exclude local user from mounts.
2020-12-17 10:28:24 +01:00
Andreas B. Mundt
c3ca8606d6
Use variables and add mount options for more privacy.
2020-12-15 09:55:54 +01:00
Andreas B. Mundt
a37164d01a
Split role in desktop and infrastructure parts.
2020-12-13 19:31:25 +01:00
Andreas B. Mundt
f764745db6
Fix check for disk partition.
2020-12-13 19:31:25 +01:00
Andreas B. Mundt
eab730e0ea
Mount share directory on login.
2020-12-13 19:31:25 +01:00
Andreas B. Mundt
c4b6d86638
Allow to use wireshark for all users.
2020-12-08 19:40:50 +01:00
Andreas B. Mundt
4f73a9ead6
Use private groups for all LDAP users.
2020-12-08 19:39:06 +01:00
Andreas B. Mundt
e1cea0c0a3
Mount data disk next to homes.
2020-12-08 19:38:50 +01:00
Andreas B. Mundt
7828de3347
mkhome must happen before creating the mount point. More privacy.
2020-12-05 11:39:52 +01:00
Andreas B. Mundt
9c3d5e5f2e
Fix booting from network.
2020-12-05 09:01:58 +01:00
Andreas B. Mundt
b5f1e4b66f
Skip auto login user (kiosk mode), but keep useful tasks.
2020-12-04 19:22:22 +01:00
Andreas B. Mundt
8aec6687d7
Mount smb home next to local home directory.
2020-12-04 19:22:09 +01:00
Andreas B. Mundt
1c14ea3939
Add home page. Self-signed certificate.
2020-12-04 17:59:38 +01:00
Andreas B. Mundt
3c87bcbeee
Add package selection.
2020-12-04 17:52:22 +01:00
Andreas B. Mundt
ddb8ff11d3
Init fvs branch with LDAP auth and mk-homedir.
2020-11-30 13:45:15 +01:00
Andreas B. Mundt
9264deb90d
Better group handling with keyword 'none'.
2020-10-26 20:53:53 +01:00
Andreas B. Mundt
7e34ab8081
Services are socket activated.
2020-10-26 20:50:00 +01:00
Andreas B. Mundt
10010f5873
Updates for nextcloud.
2020-10-26 20:48:03 +01:00
Andreas B. Mundt
a412984c0b
Modify proxy only if none given yet.
2020-03-17 20:30:23 +01:00
Andreas B. Mundt
c6ac5fec0f
Fix firewalld configuration during installation.
2020-03-17 09:10:07 +01:00
Andreas B. Mundt
c78cff8200
Move kerberos integration to the end of tasks.
2020-03-16 20:01:33 +01:00
Andreas B. Mundt
8ca41be45a
Do not overwrite existing APT configuration.
2020-03-16 19:37:54 +01:00
Andreas B. Mundt
6f0197f693
Restart slapd when keytab is available. HTTP service principal.
2020-03-16 19:36:19 +01:00
Andreas B. Mundt
f0c65d3cce
Activate firewalld rules immediately.
2020-03-12 16:48:54 +01:00
Andreas B. Mundt
0b00ac560c
Add clients to server's inventory file.
2020-03-12 16:47:22 +01:00
Andreas B. Mundt
118e9ceac6
Avoid line breaks when using xxd with long passwords.
2020-03-11 20:43:09 +01:00
Andreas B. Mundt
a175139745
Do not try to git clone from the installer chroot.
2020-03-11 19:46:30 +01:00
Andreas B. Mundt
a5f7059df0
Provide default variables for backup script.
2020-03-04 18:25:21 +01:00
Andreas B. Mundt
3eae7e731a
Fix backup script for remote repositories.
2020-03-04 18:23:13 +01:00
Andreas B. Mundt
4d70971359
Make sure generated password do not start with dashes.
2020-02-29 20:28:57 +01:00
Andreas B. Mundt
a6feab0e38
Minor improvements, nextcloud maintenance task.
2020-02-29 18:26:20 +01:00
Andreas B. Mundt
df0afe3b71
Add default NIC to public zone in firewalld.
2020-02-25 19:56:14 +01:00
Andreas B. Mundt
849045bfae
Add app update task.
2020-01-26 11:27:29 +01:00
Andreas B. Mundt
f1008d778f
Prepare database after (succussful) download only.
2020-01-26 10:37:29 +01:00
Andreas B. Mundt
8c72a4bec7
Implement direct download during installation.
2020-01-26 10:26:42 +01:00
Andreas B. Mundt
456f5c9870
Integrate firewalld, minor fixes/improvements.
2020-01-23 16:01:15 +01:00
Andreas B. Mundt
29fb8f9420
Move extra_pkgs*-handling to the up2date-debian role.
2020-01-21 20:50:18 +01:00
Andreas B. Mundt
e1766a7cfd
Prune backups automatically over time.
2020-01-21 18:50:37 +01:00
Andreas B. Mundt
23766673be
Add host-specific variables for backup dirs and options.
2020-01-21 15:41:11 +01:00
Andreas B. Mundt
8a821f501d
Move list of apps to playbook variable.
2020-01-20 19:01:49 +01:00
Andreas B. Mundt
004919824c
Implement borg backup role.
2020-01-19 20:13:46 +01:00
Andreas B. Mundt
985cc477b5
Minor fixes and cleanup nextcloud role.
2020-01-19 20:13:46 +01:00
Andreas B. Mundt
0a32f99552
App installation and updater.
2020-01-18 14:42:26 +01:00
Andreas B. Mundt
31be0f1fc7
Only enable https if not available already.
2020-01-18 14:39:25 +01:00
Andreas B. Mundt
6d33f49fad
Minor fixes and improvements.
2020-01-18 14:37:52 +01:00
Andreas B. Mundt
ee86d488bd
Experimental systemd-networkd.
2020-01-18 14:31:25 +01:00
Andreas B. Mundt
0f9e8d2124
Implement nextcloudcron systemd timer.
2020-01-16 18:56:32 +01:00
