dustin
/
configpolicy
1
1
Fork 0
Code Issues Releases Activity
configpolicy/roles
History
Dustin c5fe4a66aa roles/dch-proxy: Deploy reverse HTTP/HTTPS proxy 
The *dch-proxy* role sets up HAProxy to provide a revers proxy for all
public-facing web services on the Pyrocufflink network. It uses the TLS
Server Name Indication (SNI) extension to determine the proper backend
server based on the name requested by the client.

For now, only Gitea is configured; the name *git.pyrocufflink.blue* is
proxied to *git0.pyrocufflink.blue*. All other names are proxied to
Myala.
 		2018-06-12 22:31:15 -05:00
..
ansible/tasks roles/ansible: Install python-netaddr 2018-04-08 12:33:54 -05:00
apache hosts: Add git0.pyrocufflink.blue 2018-06-04 20:03:55 -05:00
base roles/base: Basic config management support 2018-01-29 15:02:10 -06:00
dch-gw dch-gw: Host Pyrocufflink VPN locally 2018-05-20 13:23:20 -05:00
dch-proxy roles/dch-proxy: Deploy reverse HTTP/HTTPS proxy 2018-06-12 22:31:15 -05:00
dch-vpn-server roles/dch-vpn-server: Deploy pyrocufflink VPN 2018-05-20 12:58:07 -05:00
dhcpcd dhcpd: Install and configure ISC DHCPD 2018-03-27 20:44:43 -05:00
dhcpd roles/dhcpd: Allow disabling DDNS per-subnet 2018-05-06 13:38:15 -05:00
freeradius roles/freeradius: Optimize defaults cleanup 2018-05-06 18:39:39 -05:00
gitea roles/gitea: Allow configuring clone URLs 2018-06-04 20:03:55 -05:00
haproxy roles/haproxy: Basic setup for HAproxy 2018-06-12 22:31:15 -05:00
hostname hostname: Also write /etc/hosts 2018-04-08 10:11:43 -05:00
jenkins-slave roles/jenkins-slave: Prepare host for Jenkins 2018-04-08 11:59:18 -05:00
kerberos roles/kerberos: Configure mit-krb5 2018-01-29 15:05:51 -06:00
named roles/named: Support global forwarders 2018-04-06 20:11:08 -05:00
nftables roles/nftables: Basic nftables configuration 2018-03-27 20:44:43 -05:00
nsswitch roles/nsswitch: Configure glibc name service 2018-03-11 18:16:17 -05:00
ntpd ntp: Initial PB and role to set up ntpd 2018-04-22 11:19:22 -05:00
postfix roles/postfix: Deploy Postfix MTA 2018-04-15 11:37:25 -05:00
postgresql-server roles/postgresql-server: Deploy PostgreSQL 2018-04-14 15:23:44 -05:00
radvd roles/radvd: Support multiple prefixes per network 2018-04-06 20:16:02 -05:00
rhel-network roles/rhel-network: Add static route support 2018-03-27 20:44:43 -05:00
samba roles/samba: Remove socket options 2018-05-28 09:51:20 -05:00
samba-dc roles/samba-dc: Support configuring TLS 2018-05-28 15:24:34 -05:00
ssh-hostkeys roles/ssh-hostkeys: Add keys for git0.p.b 2018-06-09 14:36:17 -05:00
sshd roles/sshd: Configure OpenSSH daemon 2018-06-06 21:44:28 -05:00
strongswan roles/strongswan: Base role for strongSwan setup 2018-05-20 12:56:27 -05:00
sudo roles/sudo: Configure sudo and policy 2018-03-11 18:16:17 -05:00
system-auth roles/system-auth: Configure PAM system authentication 2018-03-11 18:16:17 -05:00
trustca roles/trustca: Generic role for adding CA certs 2018-06-04 20:03:55 -05:00
winbind roles/winbind: Use ad idmap backend 2018-04-08 14:40:04 -05:00
zabbix-agent roles/zabbix-agent: Use variable for Include 2018-04-14 16:22:48 -05:00
zabbix-server roles/zabbix-server: Redirect HTTP -> HTTPS 2018-06-09 14:35:22 -05:00