Commit Graph

1044 Commits

Author SHA1 Message Date
9bceb152f2 Have localhost-deploy ask for become pass
Makes sense given the context
2020-02-17 16:00:11 -06:00
4b4e0c81cb Separate vault passwords from the playbooks, fix ansibleupdate cronjob
Again
2020-02-14 15:40:31 -06:00
b54f52b47b Merge branch 'master' of gitlab.com:rehashedsalt/ansible 2020-02-14 03:18:24 -06:00
bbdaf54af1 Use absolute path on ansiblehost role cronjob
Ups
2020-02-14 03:18:11 -06:00
5034285ac2 Change ansiblehost role to rerun every 12 hours instead of 24
This renews certs at about the requested rate
Hopefully it doesn't break anything. I'm using LTS instances so it should be fine but you never know
2020-02-11 14:43:25 -06:00
9313f26fcb Add local Ansible setup role
Run with -K
2020-02-11 14:42:44 -06:00
4a7c91c361 Move roles around on main host
Which is currently misroled but whatever
2020-02-11 04:26:24 -06:00
bc1b618c05 More instances of bad variable naming 2020-02-11 04:25:42 -06:00
93fad9ab5c God fucking dammit 2020-02-11 04:22:50 -06:00
55cbc1eb2d Fix more bad variables from that copy
Oof
2020-02-11 04:20:25 -06:00
1ee8485b40 Remove leftovers from shamelessly copying a role
Whoops
2020-02-11 04:18:14 -06:00
728a6e4771 Add simple redirect role
And furnish that one, too
2020-02-11 04:16:57 -06:00
18627fbf39 Add simple git web deploy role
And, of course, furnish it
2020-02-11 04:06:29 -06:00
5e445fcd63 Scope variables in main playbook a bit better 2020-02-10 01:29:59 -06:00
90fcbf7cbc Move Apache-PHP to its own role, set up dependencies 2020-02-10 01:19:59 -06:00
685a20bca6 Move SSL-required package into https role 2020-02-10 01:05:38 -06:00
0758ac1908 Remove key from MySql role 2020-02-10 01:02:36 -06:00
3e52a522f3 Generalize https setup into its own role 2020-02-10 00:50:56 -06:00
427804d68b Log cronjob on ansiblehost role 2020-02-08 01:44:06 -06:00
f8c152ebc1 Add fullchain to configs 2020-02-06 14:14:56 -06:00
ec2216a4cb Fix quoting on cronjob 2020-02-06 04:05:34 -06:00
ae29a7f870 Remove deprecated NameVirtualHost 2020-02-06 03:57:35 -06:00
7a1010f389 Fix typo in cronjob minute 2020-02-06 03:47:10 -06:00
96b7f55e63 Set up Nextcloud cronjob 2020-02-06 03:44:37 -06:00
cffd0b38bb Enable strict transport security 2020-02-06 03:22:38 -06:00
67373adcaf Add php configs, also add an unused mysql config 2020-02-06 03:17:15 -06:00
331005ab24 Change nextcloud db name 2020-02-06 01:42:12 -06:00
fc7f10a9e6 Let's uh... actually use the variable we set 2020-02-06 01:16:54 -06:00
adbec68442 We're switchin to prod! 2020-02-06 01:12:23 -06:00
777a9d86a0 Quote creds and modes in ansiblehost tasks 2020-02-06 01:01:18 -06:00
65ae3dd958 I guess we're installing both versions of pip and boto 2020-02-06 00:59:21 -06:00
e707695692 Create more appropriate Nextcloud directory 2020-02-06 00:53:47 -06:00
4e650f80c2 Prune unused files and the workstation role 2020-02-06 00:46:14 -06:00
ada9a5b8c1 Remove sizes from Nextcloud keys
They default to 4096, and I don't want to have to bump them up as necessary
2020-02-06 00:45:01 -06:00
34675072e8 Downgrade Python packages
I guess??
2020-02-06 00:43:43 -06:00
4f0908b245 Apply ansiblehost to inventory, fix syntax error 2020-02-06 00:38:04 -06:00
60acdbc9cb Use blocks to cut down on repeat code in user role 2020-02-06 00:35:06 -06:00
6eacfb3ba4 Remove cockpit user from common role 2020-02-06 00:34:01 -06:00
84949100f3 Remove cockpit role 2020-02-06 00:33:24 -06:00
129cc13848 Repurpose old ansiblehost role
It's now an automatic pullinator
2020-02-06 00:32:31 -06:00
9cf24c1acc Fix permissions on Nextcloud webroot 2020-02-06 00:20:43 -06:00
c2d9a3786f Correct some Apache configs 2020-02-06 00:01:26 -06:00
cbb84598b9 Set up a database for nextcloud 2020-02-05 23:56:41 -06:00
35fd9dd3ab Basic MySQL configuration 2020-02-05 23:43:22 -06:00
823b9bb060 Depend on it 2020-02-05 23:29:50 -06:00
3fa61ca850 Add barebones MySQL role
Which we are going to immediately flesh out
2020-02-05 23:29:39 -06:00
9781ad8426 Fix typo, only generate cert if necessary 2020-02-05 23:19:07 -06:00
67e428dd41 Whoops, got the keys mixed up 2020-02-05 23:01:06 -06:00
6612541a7b Copy over SSL configs after certification, fix using the wrong keys 2020-02-05 22:59:14 -06:00
230d8a2a92 Fix some bad Apache configs, set up ability for apache to nab its keys
Getting there, step by step
2020-02-05 22:48:21 -06:00