roles/server/ldap-server/files

roles/server/ldap-server/tasks

roles/server/ldap-server/tasks

roles/server/ldap-server/tasks

roles/server/ldap-server/tasks

roles/server/ldap-server/handlers

roles/server/ldap-server/files

roles/service/nextcloud/tasks

roles/service/nextcloud/files

[roles/util] ----- meta ----- No dependencies

[roles/util/postgres-db-usr] create postgres db and owner-user

[roles/util/postgres-db-grp-usr] create postgres db, owner-group and user for group - DO NOT USE.

[roles/util/letsencrypt-cert] request letsencrypt-cert helper role

[roles/workstation] ----- meta ----- No dependencies

[roles/workstation/kde-full] install kde with more kde

[roles/workstation/kde] install kde

[roles/workstation/common] common workstation tools.

[roles/workstation/kiosk_mode] borgcube like kiosk mode

[roles/workstation/google-chrome] install google chrome

[roles/workstation/nextcloud] install nextcloud-client

[roles/service] ----- meta ----- No dependencies

[roles/service/sympa] Mailinglist service

[roles/service/mediawiki-no-install] configure a nginx vhost to serve a mediawiki. no setup or updating is done

[roles/service/mattermost] setup mattermost service

[roles/service/nextcloud] setup nextcloud service

[roles/service/munin-server] munin server setup

[roles/service/gitweb] setup gitweb service

[roles/server] ----- meta ----- No dependencies

[roles/server/mail] ----- meta + default ----- Set up postfix + cyrus + spam filtering

[roles/server/mail/postfix] setup postfix mail server

[roles/server/mail/spamassassin] setup spamassassing milter

[roles/server/mail/milter-dmarc] setup dmarc milter

[roles/server/mail/milter-dkim] setup dkim milter

[roles/server/mail/milter-spf] setup spf milter

[roles/server/mail/cyrus] setup cyrus imap/dav server

[roles/server/mail/saslauthd] setup saslauthd

[roles/server/docker-compose/dco-service] docker-compose service

[roles/server/docker-compose] install docker-compose and start default-service

[roles/server/turnserver] install coturn

[roles/server/postgresql] setup postgresql server

[roles/server/letsencrypt-bot] install dehydrated bot - TODO: move to nginx?

[roles/server/nginx/vhost-unified] create nginx vhost

[roles/server/nginx/server] install nginx server

[roles/server/irc-services] install anope

[roles/server/ircd] install inspircd

[roles/server/git-server] install gitolite3

[roles/server/named] install bind9 nameserver. possibly setup zones

[roles/server/dhcpd] install dhcpd

[roles/base] ----- meta -----

[roles/base/create-users] create or update user accounts

[roles/base/tor] install tor with hidden sshd service, possibly copy private key

[roles/base/munin-node] munin node + async proxy setup

[roles/base/ntp] install ntpd. copy server config, if ntp_server is defined

[roles/base/ssh] install + update sshd

[roles/base/wireguard] install wireguard tools

[roles/base/network] setup networking and firewall (nftables) and fail2ban

[rules/base/backup] setup backups

[roles/base/logrotate] install + update logrotate

[roles/base/sysctl] Set system settings - TODO: move to systemd subrole?

[roles/base/hostname] set hostname

[roles/base/cryptsetup-helper] setup cryptsetup helpers

[roles/base/btrfs-helpers] possibly install btrfs helper scripts

[roles/base/grub] configure grub

[roles/base/apt] configure package manager + update pkg-cache + upgrade packages

[roles/base/systemd] ----- meta + defaults -----

[roles/base/systemd/enable-and-start] util to enable + (re)start service and record systemd-preset

[roles/base/systemd/preset] configure systemd-presets

[roles/base/systemd-fail-mail] mail systemd unit errors via email to root

[roles/base/ansible] ----- meta + defaults -----

[roles/base/ansible/autoselfheal] Setup automatic/periodic selfhealing

[roles/base/ansible/setup] set role defaults, install sudo, create remote-management-user + env

[roles/dummy] Role that does nothing

[roles/cleanup] Cleanup stuff. Levels above 5 should be followed by or part of a full somesible run

[roles/custom-command] Execute custom command on host(s)

Somesible public base. Self updating and ansible-pull/auto-selfhealing ready.

README.md

.gitignore

GITOLITE.txt

Initial commit