aboutsummaryrefslogtreecommitdiffstats
path: root/ansible (follow)
Commit message (Expand)AuthorAgeLines
...
* Install emacs-noxGravatar Johannes Christ2024-06-18-0/+8
* Install tmuxGravatar Johannes Christ2024-06-18-1/+3
* Install vimGravatar Johannes Christ2024-06-17-0/+7
* Update Grafana repository to use explicit keyringGravatar Joe Banks2024-06-07-3/+3
* Add systemd overrides with new security preferencesGravatar Joe Banks2024-06-07-0/+38
* Add NGINX access and error logsGravatar Joe Banks2024-06-07-0/+10
* Add relabing stages to name custom log extractorsGravatar Joe Banks2024-06-07-0/+11
* Update configuration template with authenticationGravatar Joe Banks2024-06-07-9/+18
* Update documentation for Alloy with Loki configurationGravatar Joe Banks2024-06-07-3/+4
* Add Alloy vars file with endpoint and authenticationGravatar Joe Banks2024-06-07-0/+14
* Add host vars for database host to export PostgreSQL logGravatar Joe Banks2024-06-07-0/+4
* Extend Alloy configuration to include some default files + extra filesGravatar Joe Banks2024-06-07-0/+27
* Update default variables for Alloy with empty extra files listGravatar Joe Banks2024-06-07-0/+2
* Update Alloy README to document extra filesGravatar Joe Banks2024-06-07-0/+7
* Add Alloy role to all host deployment sectionGravatar Joe Banks2024-06-07-0/+1
* Add role to install and template configuration for AlloyGravatar Joe Banks2024-06-07-0/+85
* Remove become_ask_pass preference from Ansible configurationGravatar Joe Banks2024-06-07-1/+0
* Add new sudoers rule for NOPASSWD sudoGravatar Joe Banks2024-06-07-0/+2
* Add PostgreSQL user to cert reader groupGravatar Joe Banks2024-06-06-0/+1
* Update directory permissions of certbot generated certificatesGravatar Joe Banks2024-06-06-1/+2
* use host issued certs for postgres server instead of snakeoil'sGravatar shtlrs2024-06-06-4/+4
* Add automatic HBA rules for all users to connect via mTLSGravatar Joe Banks2024-06-04-3/+9
* Add devops user accountGravatar Joe Banks2024-06-04-42/+69
* Add CA file to postgresql.confGravatar Joe Banks2024-06-04-0/+2
* Add pg_ident.conf fileGravatar Joe Banks2024-06-04-1/+18
* Install PostgreSQL documentation packageGravatar Johannes Christ2024-06-04-0/+1
* add pixels user and dbGravatar shtlrs2024-06-02-39/+60
* Force line-endings to LF in Ansible gitattributesGravatar Joe Banks2024-06-02-1/+1
* add metabase user and databaseGravatar shtlrs2024-06-02-0/+8
* Add PostgreSQL alerts to Ansible Prometheus configurationGravatar Joe Banks2024-06-02-0/+30
* Filter CNs of client certificates for PrometheusGravatar Joe Banks2024-06-02-0/+8
* Allow node_exporter scraping in nftablesGravatar Joe Banks2024-06-02-0/+3
* Move default server config to a templateGravatar Joe Banks2024-06-02-2/+2
* Issue certificate for hostname and sub-services, not both in oneGravatar Joe Banks2024-06-02-1/+2
* Deploy host-specific configs in NGINXGravatar Joe Banks2024-06-02-8/+20
* Create new reverse proxying config for PrometheusGravatar Joe Banks2024-06-02-0/+18
* Move files config to new NGINX turing host variablesGravatar Joe Banks2024-06-02-10/+13
* Add NGINX deployment to lovelaceGravatar Joe Banks2024-06-02-0/+1
* Remove Prometheus rules from nftablesGravatar Joe Banks2024-06-02-9/+0
* Revert Prometheus listen settings to HTTPGravatar Joe Banks2024-06-02-28/+0
* Bump ansible/roles/nftables from `015a7ed` to `4acd4ae`Gravatar dependabot[bot]2024-06-02-0/+0
* Template config instead of YAML copy for PrometheusGravatar Joe Banks2024-06-01-1/+1
* Update Prometheus config to include Postgres exporterGravatar Joe Banks2024-06-01-2/+15
* add hba conf for metabase to connect to siteGravatar shtlrs2024-06-01-0/+11
* grant correct privileges to site and grafanaGravatar shtlrs2024-06-01-37/+75
* Make issuing pg grants configurable (#327)Gravatar Amrou Bellalouna2024-06-01-0/+53
* whitelist ips of netcup and linode servers (#326)Gravatar Amrou Bellalouna2024-05-31-13/+18
* Add sudo.tls.pydis.wtf to allowed SANs for PrometheusGravatar Joe Banks2024-05-30-0/+1
* Enable mTLS SAN validationGravatar Joe Banks2024-05-30-0/+3
* Restart Prometheus instead of reload after web config updateGravatar Joe Banks2024-05-30-1/+1