aboutsummaryrefslogtreecommitdiffstats
path: root/roles (follow)
Commit message (Collapse)AuthorAgeLines
* Add nginx deploymentGravatar Johannes Christ2022-02-20-0/+109
| | | | | | | | | | | Includes documented roles for: - installing nginx & configuring handlers - installing the mTLS certificate for Cloudflare - installing firewall rules They are kept separate for now, for composability. Closes #22.
* Add PostUp directive for routing wg subnetGravatar Joe Banks2022-02-11-0/+2
|
* Add podman role and improve playbook organizationGravatar Johannes Christ2022-02-05-0/+55
| | | | | | | | This PR adds a new podman role, see #18. The playbook is merged into sections for each group of hosts that we want to deploy to. To limit by role now, use tags, such as `-t role::podman`.
* Epand entire dict when adding psql users and databasesGravatar Chris Lovering2022-01-21-7/+2
| | | | This will allow us to add more key: value pairs in future, without having to update it in two places
* Add users and databases to portgres after installGravatar Chris Lovering2022-01-21-0/+17
|
* Install postgres roleGravatar Chris Lovering2022-01-21-0/+18
| | | | .
* Add basic postgres varsGravatar Chris Lovering2022-01-21-0/+7
|
* Install UFWGravatar MarkKoz2022-01-11-0/+7
|
* Ensure SSH is allowed before setting default denyGravatar MarkKoz2022-01-11-5/+5
| | | | | Ansible relies on SSH, so it's good to ensure that's allowed before blocking everything else.
* Add basic UFW rulesGravatar MarkKoz2022-01-11-0/+21
|
* Make wireguard port a variableGravatar MarkKoz2022-01-11-2/+2
|
* Inject extra public keys for DevOps membersGravatar Joe Banks2022-01-11-0/+12
|
* Add handler for reloading WireGuard when config is modifiedGravatar Joe Banks2022-01-11-0/+6
|
* Add role for setting up WireGuard mesh networkGravatar Joe Banks2022-01-11-0/+69
|
* Resolve inventory hostnames with dnspython when injecting to /etc/hostsGravatar Joe Banks2022-01-11-1/+1
|
* Add JumpCloud Agent (#6)Gravatar Joe Banks2022-01-10-0/+31
| | | | Co-authored-by: ChrisJL <[email protected]> Co-authored-by: Chris Lovering <[email protected]>
* Update list syntax for common handlersGravatar Joe Banks2022-01-10-1/+2
|
* Add common role for configuring hostnames and SSHGravatar Joe Banks2022-01-10-0/+45