aboutsummaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeLines
...
* Install postgres roleGravatar Chris Lovering2022-01-21-0/+18
| | | | .
* Add basic postgres varsGravatar Chris Lovering2022-01-21-0/+7
|
* Enable ansible ssh pipelining globallyGravatar Chris Lovering2022-01-21-0/+3
| | | | | | | | See https://github.com/ansible/ansible/issues/16048#issuecomment-229012509 for why we do this. The drawback of this is that it is incompatible with sudo's requiretty setting (or su, which always requires a tty). This is because of a quirk of the Python interpreter, which enters interactive mode automatically when you pipe in data from a (pseudo) tty. However, modern Debian, which we run, comes with requiretty disabled.
* Add ufw role to playbookGravatar MarkKoz2022-01-11-0/+6
|
* Install UFWGravatar MarkKoz2022-01-11-0/+7
|
* Ensure SSH is allowed before setting default denyGravatar MarkKoz2022-01-11-5/+5
| | | | | Ansible relies on SSH, so it's good to ensure that's allowed before blocking everything else.
* Add basic UFW rulesGravatar MarkKoz2022-01-11-0/+21
|
* Update local env setup instructionsGravatar MarkKoz2022-01-11-0/+2
|
* Make wireguard port a variableGravatar MarkKoz2022-01-11-2/+4
|
* Update README with directory structureGravatar Joe Banks2022-01-11-9/+20
|
* Inject extra public keys for DevOps membersGravatar Joe Banks2022-01-11-0/+12
|
* Add handler for reloading WireGuard when config is modifiedGravatar Joe Banks2022-01-11-0/+6
|
* Assign WireGuard subnets to each hostGravatar Joe Banks2022-01-11-0/+5
|
* Add WireGuard role to playbookGravatar Joe Banks2022-01-11-0/+6
|
* Add role for setting up WireGuard mesh networkGravatar Joe Banks2022-01-11-0/+69
|
* Automatically add new issues to the project board (#12)Gravatar Joe Banks2022-01-11-0/+16
|
* Add dnspython to requirements.txtGravatar Joe Banks2022-01-11-0/+1
| | | | | | The lookup('dig', '...') function requires dnspython to be installed on the local machine so that queries can be processed. We're now using this to resolve the FQDNs of machines to IPs to inject into /etc/hosts.
* Resolve inventory hostnames with dnspython when injecting to /etc/hostsGravatar Joe Banks2022-01-11-1/+1
|
* Use FQDNs for Ansible inventoryGravatar Joe Banks2022-01-10-5/+5
|
* Add JumpCloud Agent (#6)Gravatar Joe Banks2022-01-10-0/+46
| | | | Co-authored-by: ChrisJL <[email protected]> Co-authored-by: Chris Lovering <[email protected]>
* Merge pull request #7 from python-discord/correct-workflow-step-namesGravatar Hassan Abouelela2022-01-10-9/+9
|\ | | | | Correct GitHub workflow step names
| * Correct GitHub workflow step namesGravatar Chris Lovering2022-01-10-9/+9
|/
* Merge pull request #5 from python-discord/vendor-ansible-lintGravatar Hassan Abouelela2022-01-10-7/+85
|\ | | | | Ansible-lint in pre-commit and dep caching in workflows
| * Add missing if statement to status embed workflowGravatar Chris Lovering2022-01-10-1/+2
| |
| * Update lint flow to cache and use pre-commit configGravatar Chris Lovering2022-01-10-6/+50
| |
| * Add config for pre-commitGravatar Chris Lovering2022-01-10-0/+20
| | | | | | | | .
| * Setup project deps for ansible-lint and update READMEGravatar Chris Lovering2022-01-10-0/+13
|/
* Merge pull request #4 from python-discord/status-embed-flowGravatar Joe Banks2022-01-10-0/+98
|\
| * Add a status embed workflowGravatar Chris Lovering2022-01-10-0/+72
| | | | | | | | This embed webhooks a summary of PR workflows to the devops channel
| * Upload PR artifact as part of lint flowGravatar Chris Lovering2022-01-10-0/+26
|/ | | | This is so that it is available to other flows to parse, such as the status embed flow
* Merge pull request #3 from python-discord/jb3/playbook-lintGravatar Joe Banks2022-01-10-0/+23
|\
| * Override ansible-lint version to rich 11 compatible versionGravatar Joe Banks2022-01-10-0/+2
| |
| * Lint Ansible playbooksGravatar Joe Banks2022-01-10-0/+21
|/
* Update list syntax for common handlersGravatar Joe Banks2022-01-10-1/+2
|
* Merge pull request #1 from python-discord/jb3/common-roleGravatar Joe Banks2022-01-10-0/+50
|\
| * Add common role for configuring hostnames and SSHGravatar Joe Banks2022-01-10-0/+50
|/
* Add Ansible inventoryGravatar Joe Banks2022-01-10-0/+12
|
* Add Ansible configuration fileGravatar Joe Banks2022-01-10-0/+5
|
* Initial commitGravatar Joe Banks2022-01-10-0/+23