ryanc/ansible
1
0
Fork 0
Code Issues 4 Pull Requests Releases Wiki Activity
306 Commits 1 Branch 0 Tags 1.2 MiB
7caf443b35
Commit Graph

271 Commits

Author SHA1 Message Date
Ryan Cavicchioni
06cdf0c610
go 1.15.2 2020-10-10 10:50:10 -05:00
Ryan Cavicchioni
93d7895bea
Allow 127.0.0.0/8 to connect to NTP on chrony 2020-10-10 10:48:38 -05:00
Ryan Cavicchioni
32c79b486a
rate limit login pages for grafana and gitea 2020-09-20 22:45:35 -05:00
Ryan Cavicchioni
dadbca219e
use upstream nginx package 2020-09-20 22:44:45 -05:00
Ryan Cavicchioni
66312d4a90
Syslog firewall rules 2020-09-20 22:41:51 -05:00
Ryan Cavicchioni
63c737518b
InfluxDB rules 2020-09-20 22:41:25 -05:00
Ryan Cavicchioni
fef33bc4a9
whitespace 2020-09-20 22:40:39 -05:00
Ryan Cavicchioni
c7d8b074cf
DNS firewall rules 2020-09-20 22:40:03 -05:00
Ryan Cavicchioni
9e0ada65f2
teleport firewall rules 2020-09-20 22:35:20 -05:00
Ryan Cavicchioni
036cdd6e57
syslog clean up 2020-09-20 22:24:49 -05:00
Ryan Cavicchioni
198730b50e
install iperf 2020-09-20 22:24:15 -05:00
Ryan Cavicchioni
73d17efdff
minecraft 1.16.3 2020-09-20 22:23:21 -05:00
Ryan Cavicchioni
1e3cc26560
craftbukkit 1.16.1 2020-08-22 10:03:20 -05:00
Ryan Cavicchioni
73a1e1fafc
add teleport role 2020-08-22 10:02:43 -05:00
Ryan Cavicchioni
ba8f63cda4
fix restic locking 2020-08-22 10:01:56 -05:00
Ryan Cavicchioni
8a5ddd5273
minecraft 1.16.2 2020-08-22 10:01:25 -05:00
Ryan Cavicchioni
cfe9012e32
remove minecraft multi-instance support 2020-08-22 10:00:13 -05:00
Ryan Cavicchioni
302b6525f6
fix certbot verification path 2020-08-22 09:59:26 -05:00
Ryan Cavicchioni
4f2e05439e
enable flux 2020-08-22 09:57:58 -05:00
Ryan Cavicchioni
c1da21773f
add fun commands 2020-08-22 09:57:45 -05:00
Ryan Cavicchioni
98f98bab16
gitea 1.12.2 2020-08-22 09:57:45 -05:00
Ryan Cavicchioni
277a1bc569
uncommitted grafana code 2020-06-12 16:32:02 -05:00
Ryan Cavicchioni
91d2fcbf27
spiped removal 2020-06-12 16:30:06 -05:00
Ryan Cavicchioni
3a43d5ec60
restart craftbukkit if jar changes 2020-06-12 16:29:32 -05:00
Ryan Cavicchioni
00d74fc10f
autossh removal 2020-06-12 16:29:02 -05:00
Ryan Cavicchioni
ca5e9bd44e
add certs role 2020-05-23 16:41:09 -05:00
Ryan Cavicchioni
dae3c475fb
whitespace fix 2020-05-23 16:40:00 -05:00
Ryan Cavicchioni
3c222eee69
gitea 1.11.5 2020-05-23 16:39:37 -05:00
Ryan Cavicchioni
94cbb6d917
add more minecraft message regex captures 2020-05-23 16:39:37 -05:00
Ryan Cavicchioni
ca2eeaf2e7
disable craftbukkit max tick 2020-05-09 11:00:59 -05:00
Ryan Cavicchioni
e41d3c6b7b
add lava death regex 2020-05-09 11:00:39 -05:00
Ryan Cavicchioni
e75481b2f5
fix warning regarding null byte 2020-05-09 11:00:06 -05:00
Ryan Cavicchioni
1cc7ba9fb1
use lock files to prevent restic jobs from stacking 2020-04-22 21:39:16 -05:00
Ryan Cavicchioni
92bc6f43c8
add craftbukkit restic hook 2020-04-20 22:30:18 -05:00
Ryan Cavicchioni
5e85d23c6c
add more standard tools 2020-04-20 22:30:18 -05:00
Ryan Cavicchioni
b2f56598fa
get restic path from environment 2020-04-20 22:30:18 -05:00
Ryan Cavicchioni
e08ed9a2ec
add restic self-update 2020-04-20 22:28:21 -05:00
Ryan Cavicchioni
7b242c65a6
fix upgrade bug 2020-04-20 22:26:41 -05:00
Ryan Cavicchioni
8dae1331f7
go 1.14.2 2020-04-20 22:26:35 -05:00
Ryan Cavicchioni
f81634f0d5
gitea 1.11.4 2020-04-20 22:25:47 -05:00
Ryan Cavicchioni
acae6acb07
add craftbukkit role 2020-04-20 22:25:07 -05:00
Ryan Cavicchioni
81daf417d8
fix issues with restic minecraft hook 2020-01-28 00:06:49 -06:00
Ryan Cavicchioni
4dd6380c0b
disable/enable minecraft instances 2020-01-26 15:18:17 -06:00
Ryan Cavicchioni
22dbc01a3c
gitea 1.10.2 2020-01-26 15:16:18 -06:00
Ryan Cavicchioni
75188b008e
install serveral system tools 
refs #4
 2020-01-23 08:03:35 -06:00
Ryan Cavicchioni
05a67e2db4
keep 5 days of syslog files uncompressed 2020-01-23 08:03:08 -06:00
Ryan Cavicchioni
11898e4ee7
support for multiple instances of minecraft in restic minecraft hook 2020-01-23 08:01:58 -06:00
Ryan Cavicchioni
5b65beff27
don't register change when checking restic repo 2020-01-23 08:01:23 -06:00
Ryan Cavicchioni
befad13cb5
add spiped role 2020-01-23 08:00:57 -06:00
Ryan Cavicchioni
c63271c8b5
add basic go role 2020-01-23 07:59:32 -06:00
Ryan Cavicchioni
b769ea477b
minecraft multi-instance support 2020-01-22 20:16:31 -06:00
Ryan Cavicchioni
2b1ba0d6fc
upgrade minecraft 2020-01-22 20:16:00 -06:00
Ryan Cavicchioni
831655600c
add mbuffer, socat, spipe and pv 
closes #2
 2020-01-15 20:42:28 -06:00
Ryan Cavicchioni
4fc6c1ab78
add telegraf.d support 2020-01-05 16:46:26 -06:00
Ryan Cavicchioni
b39e213bc3
add lua, add python packages 2020-01-01 11:20:31 -06:00
Ryan Cavicchioni
ced9d028f8
fix error in rsyslog configuration 
umask is not supported in an action
 2020-01-01 11:19:44 -06:00
Ryan Cavicchioni
3b5c2242d1
add iptables whitelist for DNS 2020-01-01 11:19:19 -06:00
Ryan Cavicchioni
f7273def95
add gitea backup directory 2020-01-01 11:18:26 -06:00
Ryan Cavicchioni
2b4fdbc661
add nsd role 2020-01-01 11:17:43 -06:00
Ryan Cavicchioni
2da2a1affc
Add simple Discord bot to notify of Minecraft events 2019-12-30 19:53:35 -06:00
Ryan Cavicchioni
d8ffc99fdd
add restic hook for gitea 2019-12-27 00:05:28 -06:00
Ryan Cavicchioni
91bd92045e
restic script fixes 2019-12-27 00:04:59 -06:00
Ryan Cavicchioni
27e305a6ec
add p7zip and unzip 2019-12-27 00:03:29 -06:00
Ryan Cavicchioni
e44e06594e
fix order of restic job hooks 2019-12-25 17:23:36 -06:00
Ryan Cavicchioni
07a5dd96b2
update rclone 2019-12-23 11:56:32 -06:00
Ryan Cavicchioni
3349430416
Add minecraft restic hook 2019-12-23 11:32:19 -06:00
Ryan Cavicchioni
52d9dc0f57
restic should log to syslog 2019-12-23 11:30:21 -06:00
Ryan Cavicchioni
d86b692e4f
add pre/post hooks to restic scripts 2019-12-23 11:30:07 -06:00
Ryan Cavicchioni
55ba448f13
fix restic sleep bugs 2019-12-23 11:29:36 -06:00
Ryan Cavicchioni
55676661db
add more standard utils 2019-12-18 22:09:35 -06:00
Ryan Cavicchioni
8ab9c36366
add more restic helper scripts 2019-12-18 22:09:05 -06:00
Ryan Cavicchioni
0eb5699a8d
enable remote syslog 2019-12-18 22:08:03 -06:00
Ryan Cavicchioni
0ff318ae00
update minecraft server 2019-12-18 22:07:13 -06:00
Ryan Cavicchioni
4a7cd07ac9
add restic wrapper scripts 2019-12-15 20:52:36 -06:00
Ryan Cavicchioni
95b7f4115c
add restic role 2019-12-15 00:40:49 -06:00
Ryan Cavicchioni
818a7aaefd
add utils role 2019-12-13 21:48:59 -06:00
Ryan Cavicchioni
93d140015b
gitea 1.10.1 2019-12-10 21:59:45 -06:00
Ryan Cavicchioni
0e9c3a402b
Update minecraft server to 1.15 2019-12-10 20:42:43 -06:00
Ryan Cavicchioni
6e49a596e7
Remove unused autossh environment variables 2019-12-03 20:55:54 -06:00
Ryan Cavicchioni
576c5c6f17
Fix /var/log/syslog directory ownership 2019-12-03 20:41:50 -06:00
Ryan Cavicchioni
962a6542be
Support unattended-upgrades rebooting the system based on logged in users 2019-12-03 20:32:18 -06:00
Ryan Cavicchioni
54a6e007b6
Fix grafana port 2019-12-03 20:19:45 -06:00
Ryan Cavicchioni
aaa3d221e1
Disable autossh built-in monitoring 2019-12-03 20:18:54 -06:00
Ryan Cavicchioni
4f85a73714
Set gitea RuntimeDirectory 2019-12-03 20:18:11 -06:00
Ryan Cavicchioni
8b3ecdbb9c
Set autossh systemd RuntimeDirectory 2019-12-03 20:17:37 -06:00
Ryan Cavicchioni
25bde1105f
Add tmpfiles.d override for file permissions 
The permissions for /var/log/syslog were being reset on boot
 2019-12-03 20:14:59 -06:00
Ryan Cavicchioni
02919f87fc
Fix typos 2019-12-03 20:14:33 -06:00
Ryan Cavicchioni
3bb250084a
Fix formatting error 2019-12-03 20:14:07 -06:00
Ryan Cavicchioni
ccdf6fab93
Add InfluxDB role 2019-12-01 20:40:40 -06:00
Ryan Cavicchioni
c13ce7cb4d
Add grafana role 2019-12-01 20:40:29 -06:00
Ryan Cavicchioni
e13a935f80
Add autossh role 2019-12-01 20:40:12 -06:00
Ryan Cavicchioni
f99c956212
Fix certbot command 2019-12-01 13:45:19 -06:00
Ryan Cavicchioni
8488dc650a
Allow gitea role to use UNIX socket 2019-12-01 13:44:49 -06:00
Ryan Cavicchioni
6936849797
Fix Minecraft backup script wording 2019-11-29 15:05:35 -06:00
Ryan Cavicchioni
c255787630
Add backup completion message 2019-11-29 15:02:40 -06:00
Ryan Cavicchioni
3e5f948a00
Add log levels to Minecraft backup script 2019-11-29 15:00:53 -06:00
Ryan Cavicchioni
a459473252
Fix gitea directory modes 2019-11-29 13:17:37 -06:00
Ryan Cavicchioni
eac790014f
Configure gitea for production mode 2019-11-29 13:17:13 -06:00
Ryan Cavicchioni
3d8e67e686
Simplify firewall IP and network lists 2019-11-28 22:47:59 -06:00
Ryan Cavicchioni
2c7182fe37
Manage postfix aliases 2019-11-28 21:47:08 -06:00
Ryan Cavicchioni
084e118a93
Set system name for apticron 2019-11-28 21:46:04 -06:00
Ryan Cavicchioni
9f12ae25fd
Remove mandatory user groups 
This triggers a change on every run even though there wasn't one.
 2019-11-28 12:55:51 -06:00
Ryan Cavicchioni
3ca199ed20
Fix gitea log directory permissions 2019-11-27 16:43:45 -06:00
Ryan Cavicchioni
30c8de817e
Add more variables 2019-11-27 16:43:31 -06:00
Ryan Cavicchioni
bd04d892f8
Added cerbot renewal jobs 2019-11-27 16:10:19 -06:00
Ryan Cavicchioni
f292c531db
Fix rsyslog file and directory permissions 2019-11-27 16:09:22 -06:00
Ryan Cavicchioni
134fd61d6b
Add mandatory interactive user group 2019-11-25 18:58:52 -06:00
Ryan Cavicchioni
ce85694a58
Remove comment 2019-11-25 18:28:49 -06:00
Ryan Cavicchioni
4540766d80
Clean up ulogd.conf template 2019-11-25 18:24:14 -06:00
Ryan Cavicchioni
13d12faa86
Add iptable SSH whitelist 2019-11-24 19:10:21 -06:00
Ryan Cavicchioni
4ddd1ed439
Change default iptables policy 
We have a final reject rule and this will prevent disconnections during a reload
 2019-11-24 19:01:07 -06:00
Ryan Cavicchioni
b8c39416de
Install iptables 2019-11-24 18:55:55 -06:00
Ryan Cavicchioni
43a882e7d9
Add gitea role 2019-11-24 18:50:21 -06:00
Ryan Cavicchioni
932f04db5b
Add certbot role 2019-11-24 18:50:05 -06:00
Ryan Cavicchioni
e3cdb84192
Created stripped down default nginx virtual host configuration 2019-11-24 16:31:06 -06:00
Ryan Cavicchioni
8a31ccb6ac
Add initial sudo role 2019-11-22 21:09:18 -06:00
Ryan Cavicchioni
885a37ee0a
Create directory for rsyslog archival storage 2019-11-22 21:08:34 -06:00
Ryan Cavicchioni
9232d1e761
Suppress logging of rclone passwords 2019-11-21 21:46:34 -06:00
Ryan Cavicchioni
c8ac7c5f0a
Remove rsyslog logrotate job, remove default log files 2019-11-21 21:41:29 -06:00
Ryan Cavicchioni
b8d6c5a3f7
Remove unused variable 2019-11-15 20:47:24 -06:00
Ryan Cavicchioni
fdd0858c73
Change time of minecraft backup clean up cron job 2019-11-15 20:43:43 -06:00
Ryan Cavicchioni
ef924eaf5d
Added role to manage the hosts file 2019-11-15 20:43:08 -06:00
Ryan Cavicchioni
31400a85ac
Added telegraf ping monitors 
Checks basic network connectivity to default gateways and dns.google
 2019-11-15 20:40:01 -06:00
Ryan Cavicchioni
602907dd7c
Add rsyslog compress cron job 2019-11-10 15:37:48 -06:00
Ryan Cavicchioni
9856e2bdbb
Add minecraft backup path variable 2019-11-10 15:37:18 -06:00
Ryan Cavicchioni
fd344fd385
Add rclone role 2019-11-10 15:36:23 -06:00
Ryan Cavicchioni
0779fbabef
Whitespace fix 2019-11-03 11:32:38 -06:00
Ryan Cavicchioni
140932154d
Add minecraft backup clean up cron job 2019-11-03 11:31:37 -06:00
Ryan Cavicchioni
33e83dd740
Add rsyslog role 2019-11-03 11:31:08 -06:00
Ryan Cavicchioni
c5d36282db
Remove default network configuration YAML 2019-10-27 18:39:54 -05:00
Ryan Cavicchioni
6622e3299d
Set system hostname 2019-10-27 18:38:54 -05:00
Ryan Cavicchioni
d07e73ac4c
Use KVM/Spice agent when applicable 2019-10-27 18:38:13 -05:00
Ryan Cavicchioni
341a1a94b8
Fix formatting 2019-10-27 18:37:35 -05:00
Ryan Cavicchioni
d9b189158c
Add minecraft backup 2019-10-27 18:36:54 -05:00
Ryan Cavicchioni
babccb4991
Add postfix role 2019-10-27 18:35:12 -05:00
Ryan Cavicchioni
cfdbeb0f2d
Add users role 2019-10-27 18:34:27 -05:00
Ryan Cavicchioni
497c70a3bf
Add telegraf role 2019-10-27 18:33:06 -05:00
Ryan Cavicchioni
7e6e1e157c
Add nginx role 2019-10-27 18:32:25 -05:00
Ryan Cavicchioni
761a515e0f
Run apt update 2019-10-27 18:31:43 -05:00
Ryan Cavicchioni
9c620cb28f
Better way to handle the serial console 2019-10-05 17:58:44 -05:00
Ryan Cavicchioni
317bed2eb6
Refactor network role 2019-10-05 16:43:05 -05:00
Ryan Cavicchioni
8a4679c6f2
Start ttys0 for serial console 2019-10-05 16:42:23 -05:00
Ryan Cavicchioni
ea9daeb109
Add users role 2019-10-05 16:42:04 -05:00
Ryan Cavicchioni
78f4ce9ee5
Add Minecraft server role 2019-10-05 16:41:47 -05:00
Ryan Cavicchioni
2d0c10aa35
Add vm_guest additions role 2019-10-05 16:41:25 -05:00
Ryan Cavicchioni
bdb914b03b
Fix chrony restart error 2019-10-05 16:40:45 -05:00
Ryan Cavicchioni
db3ccb5769
s/cooldown/cooloff/g 2019-09-02 17:54:36 +00:00
Ryan Cavicchioni
3e8161f350
Add default rules for OUTPUT and FORWARD chains 2019-09-02 17:54:06 +00:00
Ryan Cavicchioni
dbaebf70b8
Fix ulogd service names 2019-09-02 17:53:12 +00:00
Ryan Cavicchioni
e711ee3a22
Add nflog group for packet captures 2019-09-02 17:51:48 +00:00