Commit Graph

254 Commits

Author SHA1 Message Date
staticsafe
c951fe766d We are disabling the apt-maintenance cron job for now. 2019-10-29 10:13:27 -04:00
staticsafe
4d30f0245e add vhost for irreverent.space to ubuntu/erlking.asininetech.net.yml 2019-10-23 23:35:15 -04:00
staticsafe
05283b00ef Copy pgbackrest logrotate config as well 2019-10-20 21:53:09 -04:00
staticsafe
fbb5391eae Permissions for pgbackrest binary should be 755. 2019-10-20 21:28:45 -04:00
staticsafe
665d24a6cb fix typo in ubuntu/site.yml 2019-10-20 21:04:25 -04:00
staticsafe
74f35940f3 Add pgbackrest-install role 2019-10-20 21:02:36 -04:00
staticsafe
ab33cd0200 Add yet another Bytespider range to block list to firewall rules. 2019-10-17 12:20:28 -04:00
staticsafe
7c7ff101e5 Missed a Bytespider crawler range 2019-10-17 12:03:15 -04:00
staticsafe
f5d7c6dc39 Block aggressive Bytespider crawler across web servers 2019-10-17 11:58:42 -04:00
staticsafe
afa8aa556c Add firewall rules to drop kiwifarms subnets. 2019-10-11 00:00:45 -04:00
staticsafe
7152d8d5f2 should be multiports 2019-10-04 09:44:14 -04:00
staticsafe
d16ec626e1 add OUTPUT rules to allow DHCP on restricted nodes 2019-10-04 09:42:26 -04:00
staticsafe
90d4342ac2 cleanup some more 2019-09-29 22:54:53 -04:00
staticsafe
63490bb22b char.packet.cat is now removed, clean up 2019-09-29 22:54:02 -04:00
staticsafe
4100790fa9 Remove char.packet.cat. 2019-09-29 22:50:57 -04:00
staticsafe
e419d3aefb add drop rule for 159.149.133.66 to deirdre.asininetech.net.rules.v4 2019-09-16 12:05:46 -04:00
staticsafe
bd8a5c8435 Increase worker_connections across the board. 2019-09-03 14:20:40 -04:00
staticsafe
e9ec840823 increase nginx worker_connections to 1024 in ubuntu/deirdre.asininetech.net.yml 2019-09-03 14:07:14 -04:00
staticsafe
0a3cae443f rename some files to new hostnames. 2019-09-03 14:03:12 -04:00
staticsafe
4c23562144 add handlers to firewall-ruleset-deploy 2019-08-25 21:08:39 -04:00
staticsafe
3002276209 clean up of firewall rulesets
remove byte counters, remove chains that didn't need to be there
2019-08-21 23:42:07 -04:00
staticsafe
8e471b7254 add COMMIT after end of filter 2019-08-21 23:23:58 -04:00
staticsafe
df177dd04b clear out packet values in demonreach.asininetech.net.rules.v4 2019-08-21 23:21:17 -04:00
staticsafe
83fcf86900 POSTROUTING should be in nat chain 2019-08-21 23:20:41 -04:00
staticsafe
e86367ed83 add firewall rulesets for demonreach.asininetech.net. 2019-08-21 23:18:16 -04:00
staticsafe
ab7979ce01 add firewall rulesets for grevane.asininetech.net. 2019-08-21 22:46:53 -04:00
staticsafe
135e9bd008 add firewall rulesets for erlking.asininetech.net. 2019-08-21 22:37:20 -04:00
staticsafe
d411bc74dd add firewall rulesets for deirdre.asininetech.net. 2019-08-21 22:26:34 -04:00
staticsafe
ee1e6fb76f add firewall rulesets for catsith.asininetech.net 2019-08-21 22:23:10 -04:00
staticsafe
8b77463939 turn off backups in firewall-ruleset-deploy/tasks/main.yml 2019-08-21 22:15:34 -04:00
staticsafe
985895c082 add firewall rulesets for waldo.asininetech.net. 2019-08-21 22:12:42 -04:00
staticsafe
df3044c9f3 fix another error in gard.asininetech.net.rules.v6 2019-08-21 22:07:24 -04:00
staticsafe
ecda411031 fix syntax error in gard.asininetech.net.rules.v6 2019-08-21 22:02:55 -04:00
staticsafe
70fb7c8212 maybe fully enclosed? 2019-08-21 22:00:48 -04:00
staticsafe
62530669c9 double quotes maybe? 2019-08-21 21:58:10 -04:00
staticsafe
89e35f402b add quotes around ansible_fqdn 2019-08-21 21:56:43 -04:00
staticsafe
7705504cf7 add firewall-ruleset-deploy to site.yml 2019-08-21 21:53:38 -04:00
staticsafe
f1623be2e9 add firewall-ruleset-deploy playbook and gard's ruleset 2019-08-21 21:52:12 -04:00
staticsafe
de780e0254 make sure iptables-persistent and netfilter-persistent is installed via common playbook 2019-08-21 18:45:56 -04:00
staticsafe
a4b94b8ded add char.packet.cat conf 2019-07-27 11:57:05 -04:00
staticsafe
c074a6bb0a add wiki.tenforward.social configs 2019-07-27 11:28:12 -04:00
staticsafe
b7f3e9b2c2 removed erroneous block 2019-07-26 23:42:18 -04:00
staticsafe
74d3a686a5 add as393949.net vhost 2019-07-26 23:39:26 -04:00
staticsafe
7b42ceeca2 Remove warn=false in ubuntu/roles/common/tasks/main.yml 2019-07-21 20:43:43 -04:00
staticsafe
8d6bcde072 set warn=False for non-module apt task 2019-07-21 20:43:06 -04:00
staticsafe
32190262bc stop using with_items for apt in ubuntu/roles/common/tasks/main.yml 2019-07-21 20:34:13 -04:00
staticsafe
26d749a670 make sure PATH is set in ubuntu/roles/apt-maintenance/files/apt-maintenance.sh 2019-07-14 08:18:44 -04:00
staticsafe
c82b4f2ccf remove MAILTO from apt-maintenance.sh 2019-07-12 23:42:20 -04:00
staticsafe
c1e39c3f73 remove insertafter from ubuntu/roles/apt-maintenance/tasks/main.yml 2019-07-12 23:40:21 -04:00
staticsafe
e7865d16c9 Add MAILTO variable addition into apt-maintenance/tasks/main.yml 2019-07-12 23:39:01 -04:00
staticsafe
616b5c1a83 make sure /root/scripts exists 2019-07-12 23:13:48 -04:00
staticsafe
1ca719c43f Copy script to dif location and add cronjob to root 2019-07-12 23:11:51 -04:00
staticsafe
e698c4a809 Change permission of script to 755 2019-07-12 11:30:46 -04:00
staticsafe
cd6efefd3f turn off backups for apt-maintenance/tasks/main.yml 2019-07-10 10:15:54 -04:00
staticsafe
d0452a3e95 modify apt-maintenance.sh to add a mailto addr 2019-07-10 10:13:44 -04:00
staticsafe
4761744224 add apt-maintenance defs in ubuntu/site.yml 2019-07-07 20:04:04 -04:00
staticsafe
acdb50458f Add apt-maintenance role 2019-07-07 20:00:42 -04:00
Sadiq Saif
785924e5ba
Update dev-glitch nginx to use TLSv1.3 2019-07-03 21:11:04 -04:00
Sadiq Saif
178a01cba2
Delete mercy.sickstack.com.yml
server terminated
2019-07-03 21:07:42 -04:00
Sadiq Saif
06ddcd9929
Delete mei.sickstack.com.yml
server terminated
2019-07-03 21:07:06 -04:00
Sadiq Saif
ebfc8eff5c
Delete ivy.asininetech.com.yml
server terminated
2019-07-03 21:06:48 -04:00
Sadiq Saif
b1e6c25fbf
Delete aphrodite.selfie.town config
Server terminated
2019-07-03 21:06:26 -04:00
Sadiq Saif
6241b2e321
Update tfmain nginx to use TLSv1.3 2019-07-03 21:06:03 -04:00
Sadiq Saif
075c8cd1ec
Update mastodon.zombocloud.com's nginx config to use TLSv1.3 2019-07-03 21:05:08 -04:00
Sadiq Saif
b21cf6176c
Update webserver1 nginx config to use TLSv1.3 2019-07-03 21:04:35 -04:00
staticsafe
c76ff142ab Rename the yml file for ivy 2019-03-23 19:42:51 -04:00
staticsafe
ad9cc8af24 remove invalid variables in grafana 2019-03-23 16:42:01 -04:00
staticsafe
8c4b104f35 Change grafana listen to localhost 2019-03-23 16:37:13 -04:00
staticsafe
e4563e9c30 add webserver config to ubuntu/prometheus.sickstack.com.yml 2019-03-23 15:45:38 -04:00
staticsafe
07c937e944 remove include from ubuntu/prometheus.sickstack.com.yml 2019-03-23 13:13:58 -04:00
staticsafe
a6b4f8fafc include should in vars? 2019-03-23 12:59:59 -04:00
staticsafe
be0c6f6c32 include secrets.yml for ubuntu/prometheus.sickstack.com.yml 2019-03-23 12:54:10 -04:00
staticsafe
7992363f14 add grafana to ubuntu/prometheus.sickstack.com.yml 2019-03-23 12:48:55 -04:00
staticsafe
49f6e93d96 add netdata.internal.sickstack.com to server_name
in ubuntu/mei.sickstack.com.yml
2019-03-23 11:51:59 -04:00
staticsafe
e94bc70c6d eh? 2019-03-23 11:28:49 -04:00
staticsafe
d63b44bc6f okay maybe this one? 2019-03-23 11:22:49 -04:00
staticsafe
9aae6acae5 okay I think this is the right format? 2019-03-23 11:20:55 -04:00
staticsafe
19250e5b21 let's try a different format 2019-03-23 11:17:52 -04:00
staticsafe
89c3f8d997 complete prometheus.sickstack.com.yml 2019-03-23 11:16:03 -04:00
staticsafe
faa099e917 add ubuntu/prometheus.sickstack.com.yml 2019-03-23 11:07:06 -04:00
staticsafe
6540d059d7 turn off access logging in netdata 2019-03-19 13:05:44 -04:00
staticsafe
2f54131368 Add ubuntu/mei.sickstack.com.yml 2019-03-19 11:11:14 -04:00
staticsafe
e0f2bedf62 Use variable method for listing package installs in ubuntu/roles/icinga-client/tasks/main.yml 2019-02-03 13:35:19 -05:00
staticsafe
279b4e10f0 Modify icinga-client role to add some systemd options 2019-02-03 13:11:39 -05:00
staticsafe
aa14f2f64f Merge branch 'nextgen' of github.com:staticsafe/ansible-playbooks into nextgen 2019-01-19 18:31:01 -05:00
staticsafe
aff6f703ed Add ubuntu/dev.glitch.social.yml 2019-01-19 18:30:53 -05:00
Sadiq Saif
94ae12002a
Update package removal list
add snapd and lxcfs to removal list
2019-01-15 21:22:27 -05:00
staticsafe
1f81721ab6 Remove letsencrypt from packages list. 2019-01-12 15:13:10 -05:00
staticsafe
040efa346f Add ubuntu/aphrodite.selfie.town.yml 2018-12-29 11:43:19 -05:00
staticsafe
d6dd8b95c3 Add ubuntu/aphrodite.selfie.town.yml and remove selfie.town config from mercy.sickstack.com.yml 2018-12-29 11:42:36 -05:00
staticsafe
f27f5135a4 common configuration should include turning off MOTD 2018-09-25 21:02:34 -04:00
staticsafe
df28d10f01 hosts group should be myubuntunodes 2018-09-25 20:40:33 -04:00
staticsafe
482bbc8cf1 add turn-off-motd-news role 2018-09-25 20:38:53 -04:00
Sadiq Saif
eb4ca4c8fe
Update PHP upstream to 7.2 2018-08-26 12:04:52 -04:00
staticsafe
3ff719370f Remove pixelfed upstream from nginx config 2018-08-25 22:29:30 -04:00
staticsafe
05f8b1a1a0 client_max_body_size 0 for selfie.town 2018-08-25 21:47:01 -04:00
staticsafe
f5a495818f Switch back to default pool for pixelfed 2018-08-25 21:38:28 -04:00
staticsafe
c011cc7485 Use separate PHP upstream for pixelfed 2018-08-25 21:29:48 -04:00
staticsafe
a887f9615b Add selfie.town vhost to ubuntu/mercy.sickstack.com.yml 2018-08-25 20:57:09 -04:00
staticsafe
c1ebd44be3 Add HTTP to HTTPS redirect for wiki.sickstack.com 2018-06-10 15:53:16 -04:00