dustin
/
configpolicy
1
1
Fork 0
Code Issues Releases Activity
configpolicy/roles
History
Dustin 806e94209e r/keepalived: Deploy keepalived 
[keepalived][0] is a free implementation of the Virtual Router
Redundancy Protocol (VRRP), which is a simple method for automatically
assigning an IP address to one of several potential hosts based on
certain criteria.  It is particularly useful in conjunction with a load
balancer like HAProxy, to provide layer 3 redundancy in addition to
layer 7.  We will use it for both the reverse proxy for the public
websites and the Kubernetes API server.

[0]: https://www.keepalived.org/
 		2025-07-22 15:30:39 -05:00
..
alertmanager r/alertmanager: Deploy AlertManager 2022-08-10 22:18:53 -05:00
ansible/tasks
…
apache r/apache: Use variables for HTTPS cert/key content 2025-07-13 16:02:57 -05:00
aria2
…
base r/base: Install python3-libdnf5 2025-01-31 18:55:58 -06:00
bitwarden_rs r/bitwarden_rs: Redirect to canonical host name 2024-11-05 06:37:03 -06:00
blackbox-exporter r/blackbox-exporter: Rework to run as container 2025-01-26 13:06:54 -06:00
btop btop: Install btop and run it on the console 2024-09-01 09:24:53 -05:00
burp-client synapse: Back up data using BURP 2023-05-23 09:52:50 -05:00
burp-server
…
caddy r/frigate-caddy: Deploy Caddy in front of Frigate 2024-08-12 18:47:04 -05:00
cert/tasks
…
certbot
…
chrony chrony: Add role/PB for chrony 2025-03-16 16:37:19 -05:00
collectd r/collectd: Ignore efivarfs mounts 2024-02-16 20:24:46 -06:00
collectd-nut r/collectd-nut: Configure nut plugin for collectd 2021-10-31 14:26:26 -05:00
collectd-prometheus r/collectd-prometheus: Work w/o firewalld, selinux 2022-08-10 19:47:12 -05:00
collectd-sensors/tasks r/collectd-sensors: Install collectd sensors plugin 2022-07-21 13:14:25 -05:00
collectd-version r/collectd-version: Auto-restart service 2024-06-12 19:03:11 -05:00
containers-image r/containers-image: Fix registries.conf path 2025-07-14 16:21:58 -05:00
cri-o r/{cri-o,kubelet}: Support versioned packages 2025-01-31 18:57:21 -06:00
cronie/tasks
…
dch-gw
…
dch-openvpn-server
…
dch-proxy r/dch-proxy: Use separate sockets for HTTP v4/v6 2024-11-05 06:34:55 -06:00
dch-selinux r/dch-selinux: Install from dch-yum repository 2024-06-12 18:42:22 -05:00
dch-storage-net
…
dch-vpn-server
…
dch-yum r/dch-yum: Explicitly disable proxy for repo 2024-02-27 17:42:10 -06:00
dhcpcd
…
dhcpd
…
dnf-automatic r/dnf-automatic: Allow excluding packages 2024-06-23 10:43:15 -05:00
doas r/doas: Configure sudo alternative 2024-11-24 10:33:21 -06:00
docker
…
dockerhub-proxy docker-proxy: Deploy a proxy/cache for Docker Hub 2025-07-12 16:45:47 -05:00
elasticsearch
…
fileserver r/fileserver: Restrict non-administrators to SFTP 2024-02-01 10:29:32 -06:00
formsubmit r/formsubmit: Deploy formsubmit app 2022-02-27 17:42:15 -06:00
freeradius
…
frigate r/frigate: Update to v0.15 2025-04-20 16:23:04 -05:00
frigate-caddy r/frigate: Fix Authelia redirect 2025-04-21 08:27:34 -05:00
frigate-exporter r/frigate-exporter: Deploy Prometheus exporter 2024-10-21 20:27:31 -05:00
gasket-dkms r/gasket-dkms: Build/sign Coral TPU driver 2024-08-12 18:47:04 -05:00
gitea r/gitea: Serve kickstarts over HTTP 2024-12-27 10:51:00 -06:00
grafana r/grafana: Allow configuring LDAP CA cert 2022-08-11 21:40:19 -05:00
graylog
…
haproxy r/haproxy: Enable Prometheus metrics 2024-11-05 06:23:49 -06:00
hass-dhcp r/hass-dhcp: Start dnsmasq after network is up 2022-08-21 08:03:00 -05:00
hassdb/tasks
…
homeassistant r/homeassistant: Protect ~/.ssh 2023-06-08 10:05:36 -05:00
hostname
…
jellyfin r/jellyfin: Fix system.xml template whitespace 2024-12-12 06:36:23 -06:00
jenkins-slave
…
journal2ntfy journal2ntfy: Script to send log messagess via ntfy 2023-05-17 14:51:21 -05:00
k8s-worker r/k8s-worker: Fix typo in variable name 2025-07-14 16:18:35 -05:00
keepalived r/keepalived: Deploy keepalived 2025-07-22 15:30:39 -05:00
kerberos
…
koji-builder
…
koji-client
…
koji-gc
…
koji-hub
…
koji-web
…
kojira
…
kubelet kubelet: Configure cri-o container registries 2025-07-12 16:45:47 -05:00
lego r/lego-nginx: Configure LEGO for nginx 2025-07-12 16:45:47 -05:00
lego-nginx r/lego-nginx: Configure LEGO for nginx 2025-07-12 16:45:47 -05:00
logrotate/tasks
…
loki loki: Add role+playbook for Grafana Loki 2024-10-20 12:10:55 -05:00
loki-caddy r/loki-caddy: Caddy reverse proxy for Loki 2024-11-05 06:54:27 -06:00
minio r/minio: Do not pull images automatically 2025-07-02 09:23:18 -05:00
minio-backups-cert r/minio-backups-cert: Fix nsupdate kinit for f42 2025-07-12 16:08:21 -05:00
minio-nginx r/minio-nginx: Reverse proxy for MinIO 2024-09-01 08:59:28 -05:00
mongodb
…
mosquitto r/mosquitto: Support persistence 2022-05-29 11:25:25 -05:00
motioneye
…
named r/named: Fix typo in firewalld condition 2022-08-20 18:18:38 -05:00
nbd-server r/nbd-server: Deploy nbd-server 2022-08-15 16:55:36 -05:00
net-ifaces
…
netboot r/netboot/basementhud: Configure NBD export 2022-08-15 17:18:48 -05:00
nextcloud r/nextcloud: Configure trashbin retention 2024-10-13 18:38:12 -05:00
nextcloud-base nextcloud: Support remote database server 2024-09-02 20:29:51 -05:00
nextcloud-db nextcloud: Support remote database server 2024-09-02 20:29:51 -05:00
nextcloud-db-cert r/nextcloud-db-cert: Fetch client cert from k8s 2024-09-02 20:35:32 -05:00
nftables
…
nginx r/nginx: Fix disabling access/error log files 2025-07-14 16:11:35 -05:00
nsswitch
…
ntpd
…
nut r/nut{,-monitor}: Enable nut.target 2024-01-22 09:03:15 -06:00
nut-common r/nut{,-monitor}: Enable nut.target 2024-01-22 09:03:15 -06:00
nut-monitor r/nut{,-monitor}: Enable nut.target 2024-01-22 09:03:15 -06:00
postfix r/postfix: Support rewriting recipient addresses 2024-08-22 16:17:00 -05:00
postgres-exporter r/postgresql-server: Set become on postgres tasks 2024-11-16 11:50:28 -06:00
postgresql-cert r/postgresql-server-base: Factor out prep steps 2024-11-17 10:27:31 -06:00
postgresql-data r/postgresql-data: Manage users and databases 2025-02-01 17:36:58 -06:00
postgresql-server r/postgresql-server-base: Factor out prep steps 2024-11-17 10:27:31 -06:00
postgresql-server-base r/pgsql-server-base: Add post-upgrade capability 2024-11-17 10:27:31 -06:00
promtail r/promtail: Optionally run with DAC_READ_SEARCH 2024-02-28 19:00:26 -06:00
protonvpn r/protonvpn: Move remote_addrs file to /var 2022-08-20 18:18:21 -05:00
pxe r/pxe: Depend on apache role 2025-07-13 16:02:57 -05:00
rabbitmq/tasks
…
radvd
…
redis/tasks
…
repohost r/repohost: Configure Yum package repo host 2023-11-07 20:51:10 -06:00
restic r/restic: Enhance restic-backup security sandbox 2024-09-04 17:43:24 -05:00
rhel-network
…
samba
…
samba-cert r/samba-cert: Save firewall configuration 2024-06-20 19:42:13 -05:00
samba-dc r/samba-dc: Enable auto-restart for samba.service 2024-08-09 08:11:39 -05:00
scrape-collectd r/scrape-collectd: Also scrape unmanaged targets 2023-09-27 20:24:47 -05:00
serial-console
…
serterm r/serterm: Deploy serial terminal multiplexer 2024-11-10 13:15:08 -06:00
squid r/squid: Support configuring auth_param 2024-08-14 20:26:11 -05:00
ssh-host-certs r/ssh-host-certs: Manage SSH host certificates 2023-11-07 21:27:02 -06:00
ssh-hostkeys hosts: Add dc-nrtxms.p.b 2023-10-28 16:07:39 -05:00
ssh-user-ca r/ssh-user-ca: Add missing handlers file 2024-02-22 10:16:48 -06:00
sshd
…
statsd-exporter r/statsd-exporter: Deploy statsd exporter 2024-10-13 19:59:52 -05:00
strongswan
…
strongswan-swanctl
…
sudo r/sudo: Optionally enable pam_ssh_agent_auth 2024-01-28 12:16:35 -06:00
synapse r/synapse: Increase service startup timeout 2024-01-21 19:05:00 -06:00
system-auth r/system-auth: skip session winbind for local users 2024-08-13 21:04:42 -05:00
systemd-base/handlers r/statsd-exporter: Deploy statsd exporter 2024-10-13 19:59:52 -05:00
systemd-networkd r/systemd-networkd: Enable and start the service 2021-10-31 14:29:30 -05:00
systemd-resolved r/systemd-resolved: Manage systemd resolver daemon 2022-08-12 14:35:14 -05:00
taiga
…
tftp/tasks r/tftp: Deploy TFTP server 2022-08-15 17:06:20 -05:00
trustca
…
unifi r/unifi: Open firewall port for syslog server 2025-03-29 09:27:28 -05:00
useproxy r/useproxy: Configure dnf to use proxy 2025-03-29 09:30:08 -05:00
victoria-logs r/victoria-logs: Update to v1.23.3 2025-06-03 18:59:25 -05:00
victoria-metrics r/v-m: Add role for Victoria Metrics 2022-08-10 19:47:12 -05:00
victoria-metrics-nginx r/v-m-nginx: Prevent requesting reload 2022-08-12 13:14:05 -05:00
vmagent r/vmagent: Rework as container deployment 2025-01-26 13:08:59 -06:00
vmalert vmalert: Allow configuring http.pathPrefix 2022-08-12 13:10:36 -05:00
vmhost r/vmhost: Update for latest libvirt 2025-03-29 07:34:58 -05:00
wal-g-pg r/wal-g-pg: Handle versioned storage locations 2024-11-17 10:27:31 -06:00
websites r/webites: Add apps.du5t1n.xyz F-Droid repo 2024-11-05 06:47:02 -06:00
wheelhost
…
winbind r/winbind: Disable offline login by default 2023-10-27 17:37:49 -05:00
zabbix-agent
…
zabbix-server
…
zezere
…
zigbee2mqtt r/z*2mqtt: Restart services after unexpected stop 2022-08-21 22:25:12 -05:00
zwavejs2mqtt r/z*2mqtt: Restart services after unexpected stop 2022-08-21 22:25:12 -05:00