lmn-client

it-team/lmn-client

Fork 0

Commit graph

3c87bcbeee Add package selection. Andreas B. Mundt 2020-12-02 13:03:44 +01:00
ddb8ff11d3 Init fvs branch with LDAP auth and mk-homedir. Andreas B. Mundt 2020-11-28 09:23:44 +01:00
9264deb90d Better group handling with keyword 'none'. Andreas B. Mundt 2020-10-26 20:53:53 +01:00
7e34ab8081 Services are socket activated. Andreas B. Mundt 2020-10-26 20:50:00 +01:00
10010f5873 Updates for nextcloud. Andreas B. Mundt 2020-10-26 20:48:03 +01:00
a412984c0b Modify proxy only if none given yet. Andreas B. Mundt 2020-03-17 20:30:23 +01:00
c6ac5fec0f Fix firewalld configuration during installation. Andreas B. Mundt 2020-03-17 08:52:06 +01:00
c78cff8200 Move kerberos integration to the end of tasks. Andreas B. Mundt 2020-03-16 19:43:42 +01:00
8ca41be45a Do not overwrite existing APT configuration. Andreas B. Mundt 2020-03-16 19:37:54 +01:00
6f0197f693 Restart slapd when keytab is available. HTTP service principal. Andreas B. Mundt 2020-03-16 19:36:19 +01:00
f0c65d3cce Activate firewalld rules immediately. Andreas B. Mundt 2020-03-12 16:48:54 +01:00
0b00ac560c Add clients to server's inventory file. Andreas B. Mundt 2020-03-12 16:47:22 +01:00
118e9ceac6 Avoid line breaks when using xxd with long passwords. Andreas B. Mundt 2020-03-11 20:43:09 +01:00
a175139745 Do not try to git clone from the installer chroot. Andreas B. Mundt 2020-03-11 19:46:30 +01:00
a5f7059df0 Provide default variables for backup script. Andreas B. Mundt 2020-03-04 18:25:21 +01:00
3eae7e731a Fix backup script for remote repositories. Andreas B. Mundt 2020-03-04 18:23:13 +01:00
4d70971359 Make sure generated password do not start with dashes. Andreas B. Mundt 2020-02-29 20:28:57 +01:00
a6feab0e38 Minor improvements, nextcloud maintenance task. Andreas B. Mundt 2020-02-29 18:26:20 +01:00
df0afe3b71 Add default NIC to public zone in firewalld. Andreas B. Mundt 2020-02-25 19:56:14 +01:00
849045bfae Add app update task. Andreas B. Mundt 2020-01-26 11:27:29 +01:00
f1008d778f Prepare database after (succussful) download only. Andreas B. Mundt 2020-01-26 10:37:29 +01:00
8c72a4bec7 Implement direct download during installation. Andreas B. Mundt 2020-01-24 19:55:36 +01:00
456f5c9870 Integrate firewalld, minor fixes/improvements. Andreas B. Mundt 2020-01-23 16:01:15 +01:00
29fb8f9420 Move extra_pkgs*-handling to the up2date-debian role. Andreas B. Mundt 2020-01-21 20:50:18 +01:00
e1766a7cfd Prune backups automatically over time. Andreas B. Mundt 2020-01-21 16:41:57 +01:00
23766673be Add host-specific variables for backup dirs and options. Andreas B. Mundt 2020-01-20 19:32:00 +01:00
8a821f501d Move list of apps to playbook variable. Andreas B. Mundt 2020-01-20 19:01:49 +01:00
004919824c Implement borg backup role. Andreas B. Mundt 2020-01-19 18:51:58 +01:00
985cc477b5 Minor fixes and cleanup nextcloud role. Andreas B. Mundt 2020-01-19 18:47:12 +01:00
0a32f99552 App installation and updater. Andreas B. Mundt 2020-01-18 14:42:26 +01:00
31be0f1fc7 Only enable https if not available already. Andreas B. Mundt 2020-01-18 14:39:25 +01:00
6d33f49fad Minor fixes and improvements. Andreas B. Mundt 2020-01-18 14:37:52 +01:00
ee86d488bd Experimental systemd-networkd. Andreas B. Mundt 2020-01-18 14:31:25 +01:00
0f9e8d2124 Implement nextcloudcron systemd timer. Andreas B. Mundt 2020-01-16 18:56:32 +01:00
97e980fbf7 Move content from htaccess file to site config. Separate krb5 config. Andreas B. Mundt 2020-01-15 19:47:06 +01:00
e069171539 Setup fine tuning and app installation. Andreas B. Mundt 2020-01-14 21:09:24 +01:00
23605d6962 Use occ to modify configuration. Andreas B. Mundt 2020-01-14 14:51:52 +01:00
2a161df7bb Implement nextcloud role. Andreas B. Mundt 2020-01-13 20:44:10 +01:00
21309fb788 Improved determination of next available uid/gid pair. Andreas B. Mundt 2020-01-12 09:22:40 +01:00
a58010d8d2 Fix crap in kadmin ACL. Andreas B. Mundt 2019-12-15 18:10:27 +01:00
902a87e258 Add optional posix group handling to script. Andreas B. Mundt 2019-12-14 20:56:45 +01:00
dd284d6abd Use subdirs for user's homes. Andreas B. Mundt 2019-12-14 20:21:06 +01:00
81337ac0db Move hard-coded numbers to variables. Andreas B. Mundt 2019-12-13 18:43:42 +01:00
572dd5a3b0 Add LDAP client config and enable pam_umask. Andreas B. Mundt 2019-12-13 18:41:34 +01:00
98b8d5d6ff Add memberof-overlay to LDAP. Andreas B. Mundt 2019-12-13 18:35:00 +01:00
0829b1b2e8 Kerberize firefox in the local domain. Andreas B. Mundt 2019-12-08 08:43:26 +01:00
a485f5119d Add kerberox* to the README. Andreas B. Mundt 2019-12-06 20:03:44 +01:00
8c896c90e6 Implement posix group for all users in LDAP. Andreas B. Mundt 2019-12-01 18:21:24 +01:00
43cb4dcf13 Add user import/deletion from file option, minor improvements. Andreas B. Mundt 2019-12-01 10:17:08 +01:00
6b3c2f0e0f Add commands: Option to remove machine principals, start ldapvi. Andreas B. Mundt 2019-11-30 09:56:40 +01:00
61e4b1d852 Add kerberize role (providing kerberized ssh so far). Andreas B. Mundt 2019-11-29 15:47:45 +01:00
be829760c6 Improved DHCP configuration, no static IP addresses. Andreas B. Mundt 2019-11-29 14:38:07 +01:00
3b3303e96d Kerberize LDAP access. Andreas B. Mundt 2019-11-28 17:37:19 +01:00
2ff1354fe3 Implement better IP address/network notation. Andreas B. Mundt 2019-11-28 16:34:37 +01:00
3670bf6597 Provide keytab before touching home directories to avoid lock. Andreas B. Mundt 2019-11-27 20:45:27 +01:00
7f49b191ac Make 'ldap', 'kerberos' and 'nfs' hostname aliases. Andreas B. Mundt 2019-11-27 20:21:09 +01:00
9d9da31649 Allow apt-cacher-ng in firewalld. Andreas B. Mundt 2019-11-27 18:31:52 +01:00
1686bf44e7 Improved password management. Make sure the saved password is used after first setup. Andreas B. Mundt 2019-11-27 17:43:58 +01:00
954ac5b0e6 Do not deploy LDAP and KDC during installation as it adds too much complexity. Andreas B. Mundt 2019-11-26 18:52:43 +01:00
284dadc2d3 Cleanup and restructuring. Move pressed-installer tasks to other roles. Andreas B. Mundt 2019-11-25 18:26:21 +01:00
a0ee0fd90d Add firewalld rules to service roles. Andreas B. Mundt 2019-11-24 20:53:54 +01:00
ea36c9beaf Use provided ansible variable to determine debian release. Andreas B. Mundt 2019-11-24 19:44:01 +01:00
f158d8cae1 Add simple script to add/delete users and their group. Andreas B. Mundt 2019-11-23 18:01:24 +01:00
fbf48f44f3 Fixes and improvements, NFS/KDC/LDAP related. Andreas B. Mundt 2019-11-21 19:15:22 +01:00
5d5f75e0c8 Do not preseed desktop environment, leave this to the ansible role. Andreas B. Mundt 2019-11-21 17:19:28 +01:00
ed8b7a7fa6 Use ansible_domain everywhere and bail out if it is empty. Andreas B. Mundt 2019-11-21 15:47:08 +01:00
bbcf45bbeb Implement basic LAN client. Andreas B. Mundt 2019-11-18 18:45:07 +01:00
ce6bd53319 Minor fixes and improvements, mostly KDC/LDAP related. Andreas B. Mundt 2019-11-18 15:31:30 +01:00
ece5bca5b5 Implement NFS4 server role. Andreas B. Mundt 2019-11-17 19:12:22 +01:00
7e1332ee46 Minor fixes for KDC-LDAP. Andreas B. Mundt 2019-11-17 18:25:43 +01:00
18067d8df3 Implement Kerberos KDC-LDAP server role. Andreas B. Mundt 2019-11-17 11:40:22 +01:00
0597d178e0 Implement LDAP server role. Andreas B. Mundt 2019-11-17 11:31:55 +01:00
b3b8d3d342 Add KDE plasma as another kiosk system option. Andreas B. Mundt 2019-10-26 09:15:16 +02:00
fef999e7fe Remove locale 'tr', keep 'de' as example. Andreas B. Mundt 2019-10-25 21:51:23 +02:00
0ff0ff1c1b Set hostname from boot parameters. Andreas B. Mundt 2019-10-25 21:28:32 +02:00
cce0dfcafb Switch from squid to apt-cacher-ng and from shorewall to firewalld. Andreas B. Mundt 2019-10-24 20:27:35 +02:00
8ae165e842 Add minimal role to test only preseeding. Andreas B. Mundt 2019-10-20 17:20:37 +02:00
4fdd640d6e Move variables only relevant for the installation before '---', playbook variable. Andreas B. Mundt 2019-06-12 22:24:16 +02:00
f0004b6fe9 Make sure hostname can be set manually, cleanup/fixes. Andreas B. Mundt 2019-06-08 23:24:25 +02:00
0d534d8939 Define playbook explicitly in preseeded command. Andreas B. Mundt 2019-06-07 10:14:51 +02:00
44a426c383 Fix and simplify package caching. Andreas B. Mundt 2019-05-27 18:04:01 +03:00
dd89bbb9a4 Generate IP address list automatically. Andreas B. Mundt 2019-05-25 22:44:59 +03:00
7404d7ace4 Cleanup and minor improvements. Andreas B. Mundt 2019-05-25 10:39:32 +03:00
fdfd702130 Fix ansible-pull. Andreas B. Mundt 2019-05-24 22:38:53 +03:00
b75f508adf Use systemd module to enable service. Andreas B. Mundt 2019-05-24 22:24:17 +03:00
8118b980ec Use variable for installer version. Andreas B. Mundt 2019-05-24 22:17:33 +03:00
e51f6c5e2d Use systemd service for git repository. Andreas B. Mundt 2019-05-24 19:58:20 +03:00
d7a1a146dd Updates and fixes for buster. Andreas B. Mundt 2019-05-24 17:26:15 +03:00
f6471d8556 Remove unattended-upgrades and make local.yml a symlink. Andreas B. Mundt 2019-05-21 19:14:21 +03:00
c1b498c973 Fix graphics quirk and add HP 550. Andreas B. Mundt 2019-05-20 18:57:39 +03:00
1e83a0f1f6 Add splash screen to the gnome role. Andreas B. Mundt 2019-05-18 18:26:10 +03:00
6f5556e37f Fixes and improvements gnome and kiosk profile. Andreas B. Mundt 2019-04-04 19:17:35 +03:00
a72fae8d38 Updates for buster and gnome desktop. Andreas B. Mundt 2019-04-01 11:47:55 +03:00
ad70eb6034 Prefer simpler setup without ansible vaults. Andreas B. Mundt 2019-03-30 18:51:27 +03:00
7d299549f8 Update package selection. Andreas B. Mundt 2019-03-30 18:41:04 +03:00
b119c75c98 Fixes for the DDNS setup. Andreas B. Mundt 2019-03-30 18:39:12 +03:00
ff070a9465 Allow print job management from gnome GUI. Andreas B. Mundt 2019-03-30 18:12:31 +03:00
47f16792e8 Add abstract to README. Andreas B. Mundt 2018-06-10 20:57:40 +03:00
27ac5a8d30 Improved gnome defaults. Andreas B. Mundt 2018-06-09 19:49:30 +03:00
9010cf710b Add extra package selection. Andreas B. Mundt 2018-06-09 19:48:41 +03:00