Commit graph

405 commits

Author SHA1 Message Date
Andreas B. Mundt
9264deb90d Better group handling with keyword 'none'. 2020-10-26 20:53:53 +01:00
Andreas B. Mundt
7e34ab8081 Services are socket activated. 2020-10-26 20:50:00 +01:00
Andreas B. Mundt
10010f5873 Updates for nextcloud. 2020-10-26 20:48:03 +01:00
Andreas B. Mundt
a412984c0b Modify proxy only if none given yet. 2020-03-17 20:30:23 +01:00
Andreas B. Mundt
c6ac5fec0f Fix firewalld configuration during installation. 2020-03-17 09:10:07 +01:00
Andreas B. Mundt
c78cff8200 Move kerberos integration to the end of tasks. 2020-03-16 20:01:33 +01:00
Andreas B. Mundt
8ca41be45a Do not overwrite existing APT configuration. 2020-03-16 19:37:54 +01:00
Andreas B. Mundt
6f0197f693 Restart slapd when keytab is available. HTTP service principal. 2020-03-16 19:36:19 +01:00
Andreas B. Mundt
f0c65d3cce Activate firewalld rules immediately. 2020-03-12 16:48:54 +01:00
Andreas B. Mundt
0b00ac560c Add clients to server's inventory file. 2020-03-12 16:47:22 +01:00
Andreas B. Mundt
118e9ceac6 Avoid line breaks when using xxd with long passwords. 2020-03-11 20:43:09 +01:00
Andreas B. Mundt
a175139745 Do not try to git clone from the installer chroot. 2020-03-11 19:46:30 +01:00
Andreas B. Mundt
a5f7059df0 Provide default variables for backup script. 2020-03-04 18:25:21 +01:00
Andreas B. Mundt
3eae7e731a Fix backup script for remote repositories. 2020-03-04 18:23:13 +01:00
Andreas B. Mundt
4d70971359 Make sure generated password do not start with dashes. 2020-02-29 20:28:57 +01:00
Andreas B. Mundt
a6feab0e38 Minor improvements, nextcloud maintenance task. 2020-02-29 18:26:20 +01:00
Andreas B. Mundt
df0afe3b71 Add default NIC to public zone in firewalld. 2020-02-25 19:56:14 +01:00
Andreas B. Mundt
849045bfae Add app update task. 2020-01-26 11:27:29 +01:00
Andreas B. Mundt
f1008d778f Prepare database after (succussful) download only. 2020-01-26 10:37:29 +01:00
Andreas B. Mundt
8c72a4bec7 Implement direct download during installation. 2020-01-26 10:26:42 +01:00
Andreas B. Mundt
456f5c9870 Integrate firewalld, minor fixes/improvements. 2020-01-23 16:01:15 +01:00
Andreas B. Mundt
29fb8f9420 Move extra_pkgs*-handling to the up2date-debian role. 2020-01-21 20:50:18 +01:00
Andreas B. Mundt
e1766a7cfd Prune backups automatically over time. 2020-01-21 18:50:37 +01:00
Andreas B. Mundt
23766673be Add host-specific variables for backup dirs and options. 2020-01-21 15:41:11 +01:00
Andreas B. Mundt
8a821f501d Move list of apps to playbook variable. 2020-01-20 19:01:49 +01:00
Andreas B. Mundt
004919824c Implement borg backup role. 2020-01-19 20:13:46 +01:00
Andreas B. Mundt
985cc477b5 Minor fixes and cleanup nextcloud role. 2020-01-19 20:13:46 +01:00
Andreas B. Mundt
0a32f99552 App installation and updater. 2020-01-18 14:42:26 +01:00
Andreas B. Mundt
31be0f1fc7 Only enable https if not available already. 2020-01-18 14:39:25 +01:00
Andreas B. Mundt
6d33f49fad Minor fixes and improvements. 2020-01-18 14:37:52 +01:00
Andreas B. Mundt
ee86d488bd Experimental systemd-networkd. 2020-01-18 14:31:25 +01:00
Andreas B. Mundt
0f9e8d2124 Implement nextcloudcron systemd timer. 2020-01-16 18:56:32 +01:00
Andreas B. Mundt
97e980fbf7 Move content from htaccess file to site config. Separate krb5 config. 2020-01-15 19:47:06 +01:00
Andreas B. Mundt
e069171539 Setup fine tuning and app installation. 2020-01-14 21:09:24 +01:00
Andreas B. Mundt
23605d6962 Use occ to modify configuration. 2020-01-14 14:51:52 +01:00
Andreas B. Mundt
2a161df7bb Implement nextcloud role. 2020-01-13 20:44:10 +01:00
Andreas B. Mundt
21309fb788 Improved determination of next available uid/gid pair. 2020-01-12 09:24:48 +01:00
Andreas B. Mundt
a58010d8d2 Fix crap in kadmin ACL. 2019-12-15 18:10:27 +01:00
Andreas B. Mundt
902a87e258 Add optional posix group handling to script. 2019-12-15 08:39:37 +01:00
Andreas B. Mundt
dd284d6abd Use subdirs for user's homes. 2019-12-14 20:26:25 +01:00
Andreas B. Mundt
81337ac0db Move hard-coded numbers to variables. 2019-12-14 19:27:44 +01:00
Andreas B. Mundt
572dd5a3b0 Add LDAP client config and enable pam_umask. 2019-12-14 12:15:29 +01:00
Andreas B. Mundt
98b8d5d6ff Add memberof-overlay to LDAP. 2019-12-13 18:35:00 +01:00
Andreas B. Mundt
0829b1b2e8 Kerberize firefox in the local domain. 2019-12-08 08:49:38 +01:00
Andreas B. Mundt
a485f5119d Add kerberox* to the README. 2019-12-06 20:03:44 +01:00
Andreas B. Mundt
8c896c90e6 Implement posix group for all users in LDAP. 2019-12-01 18:21:24 +01:00
Andreas B. Mundt
43cb4dcf13 Add user import/deletion from file option, minor improvements. 2019-12-01 13:49:36 +01:00
Andreas B. Mundt
6b3c2f0e0f Add commands: Option to remove machine principals, start ldapvi. 2019-11-30 10:42:42 +01:00
Andreas B. Mundt
61e4b1d852 Add kerberize role (providing kerberized ssh so far). 2019-11-29 15:47:45 +01:00
Andreas B. Mundt
be829760c6 Improved DHCP configuration, no static IP addresses. 2019-11-29 14:38:07 +01:00