c9abc779a0
Merge pull request 'fix: yumrepo purge after deploy' ( #33 ) from neoloc/yumresources into develop
...
Reviewed-on: https://git.query.consul/unkinben/puppet-prod/pulls/33
2024-06-14 23:32:41 +10:00
380bb7bcb5
fix: yumrepo purge after deploy
...
- ensure the resources resource for yumrepo runs after deploying yumrepo resources
- rm all almalinux*.repo files before attempting to create yumrepo
resources
2024-06-14 23:21:14 +10:00
1b5e6120e7
Merge pull request 'feat: ensure tftpd started on cobbler' ( #32 ) from neoloc/tftpservice into develop
...
Reviewed-on: https://git.query.consul/unkinben/puppet-prod/pulls/32
2024-06-14 23:13:21 +10:00
82ce3ed4d7
feat: ensure tftpd started on cobbler
2024-06-14 23:11:49 +10:00
3adc343f68
Merge pull request 'chore: add ssh principals' ( #31 ) from neoloc/puppetca_ssh_principal into develop
...
Reviewed-on: https://git.query.consul/unkinben/puppet-prod/pulls/31
2024-06-11 20:31:30 +10:00
ca558d493b
Merge pull request 'chore: cleanup old enc class' ( #30 ) from neoloc/cleanup_enc into develop
...
Reviewed-on: https://git.query.consul/unkinben/puppet-prod/pulls/30
2024-06-11 20:31:08 +10:00
cbbcfa3b9e
chore: cleanup old enc class
2024-06-11 20:29:21 +10:00
6b0e0daecb
chore: add ssh principals
...
- add ssh principals for consul service addresses
2024-06-11 20:20:12 +10:00
846e2b71f8
Merge pull request 'fix: add cluster ip to sshd ListenAddress' ( #29 ) from neoloc/proxmox_ssh_ip into develop
...
Reviewed-on: https://git.query.consul/unkinben/puppet-prod/pulls/29
2024-06-11 20:06:35 +10:00
6f7740e6a2
fix: add cluster ip to sshd ListenAddress
...
- ensure cluster communication over ssh can function
2024-06-11 20:02:04 +10:00
abd2eb5c9b
adding hieradata/nodes/ausyd1nxvm1037.main.unkin.net.yaml
2024-06-10 22:18:16 +10:00
b4c20fd7d6
feat: add sonarr module
2024-06-10 22:13:43 +10:00
b7a22551b1
feat: add sonar role
2024-06-10 21:21:20 +10:00
e00a78e5fb
Merge pull request 'fix: resolve vncproxy issue' ( #28 ) from neoloc/proxmox_ssh into develop
...
Reviewed-on: https://git.query.consul/unkinben/puppet-prod/pulls/28
2024-06-10 13:02:18 +10:00
a143732b3b
fix: resolve vncproxy issue
...
https://forum.proxmox.com/threads/lc_pve_ticket-not-set-vnc-proxy-without-password-is-forbiddentask-error-failed-to-run-vncproxy.98192/
2024-06-10 13:01:45 +10:00
45f3cb39c7
Merge pull request 'fix: proxmox root ssh' ( #27 ) from neoloc/proxmox_ssh into develop
...
Reviewed-on: https://git.query.consul/unkinben/puppet-prod/pulls/27
2024-06-10 12:07:43 +10:00
2b36ee3efa
fix: proxmox root ssh
...
- allow proxmox hosts to accept root logins
2024-06-10 12:07:08 +10:00
56711212a7
Merge pull request 'Adding hieradata/node/ausyd1nxvm1039.main.unkin.net.yaml' ( #26 ) from autonode/ausyd1nxvm1039.main.unkin.net into develop
...
Reviewed-on: https://git.query.consul/unkinben/puppet-prod/pulls/26
2024-06-10 11:58:06 +10:00
4ab5fd6be3
Adding hieradata/node/ausyd1nxvm1039.main.unkin.net.yaml
2024-06-10 11:57:51 +10:00
42be771732
Merge pull request 'Adding hieradata/node/ausyd1nxvm1038.main.unkin.net.yaml' ( #25 ) from autonode/ausyd1nxvm1038.main.unkin.net into develop
...
Reviewed-on: https://git.query.consul/unkinben/puppet-prod/pulls/25
2024-06-10 11:54:28 +10:00
255cf38c67
Adding hieradata/node/ausyd1nxvm1038.main.unkin.net.yaml
2024-06-10 11:51:29 +10:00
9c23c0005a
Merge pull request 'adding hieradata/nodes/ausyd1nxvm1037.main.unkin.net.yaml' ( #24 ) from autonode/ausyd1nxvm1037.main.unkin.net into develop
...
Reviewed-on: https://git.query.consul/unkinben/puppet-prod/pulls/24
2024-06-10 11:51:04 +10:00
5e13f1a1e8
adding hieradata/nodes/ausyd1nxvm1037.main.unkin.net.yaml
2024-06-10 11:50:15 +10:00
6944d67e04
Merge pull request 'neoloc/sshsign_hostkeys' ( #23 ) from neoloc/sshsign_hostkeys into develop
...
Reviewed-on: https://git.query.consul/unkinben/puppet-prod/pulls/23
2024-06-09 20:39:46 +10:00
965e334636
Merge branch 'develop' into neoloc/sshsign_hostkeys
2024-06-09 20:39:27 +10:00
d4163233f6
Merge branch 'develop' into neoloc/sshsign_hostkeys
2024-06-09 20:38:25 +10:00
52b06dcd8e
feat: manage ssh known hosts
...
- disable use of stored configs for ssh-known-hosts
- manage the /etc/ssh/ssh_known_hosts content
2024-06-09 20:26:34 +10:00
9d3ddb37df
Merge pull request 'fix: dont manage loopback' ( #22 ) from neoloc/networking_loopback into develop
...
Reviewed-on: https://git.query.consul/unkinben/puppet-prod/pulls/22
2024-06-09 09:07:29 +10:00
934f4be03c
fix: dont manage loopback
...
- dont manage the lo interface
- cleanup /etc/hosts records
2024-06-09 09:06:54 +10:00
777fe1aef6
feat: manage ssh server
...
- add ssh module
- include the ssh::server class
- manage sshd settings
2024-06-08 17:20:56 +10:00
57b935b33e
Merge pull request 'neoloc/networking' ( #21 ) from neoloc/networking into develop
...
Reviewed-on: https://git.query.consul/unkinben/puppet-prod/pulls/21
2024-06-08 17:08:51 +10:00
da9d52e117
chore: set per-node interface/gateway details
2024-06-08 17:07:58 +10:00
06545c6298
feat: change hiera_include, hiera_exclude
...
- change hiera_classes to hiera_include
- add method to remove classes from hiera_include through hiera_exclude
2024-06-08 17:07:58 +10:00
51eeb13793
feat: add networking module
...
- manage interfaces and routes
- set default params for hosts
- add params class to networking module
- set defaults for debian
2024-06-08 17:07:51 +10:00
721d14378a
Merge pull request 'feat: manage the facts soft limit' ( #20 ) from neoloc/puppet_fact_soft_limit into develop
...
Reviewed-on: https://git.query.consul/unkinben/puppet-prod/pulls/20
2024-06-08 13:58:39 +10:00
aaf482c9b9
feat: manage the facts soft limit
...
- set the facts soft limit for agents and servers
- prevent warnings about reaching the default 2048 soft limit
2024-06-08 13:56:53 +10:00
33ba0bb896
feat: networking required modules
...
- add networking, kmod and filemapper plugins
2024-06-07 22:12:26 +10:00
07c896b924
Merge pull request 'fix: make ntp check script executable' ( #19 ) from neoloc/consul_ntp_script into develop
...
Reviewed-on: https://git.query.consul/unkinben/puppet-prod/pulls/19
2024-06-03 20:24:55 +10:00
6822a39dc3
fix: make ntp check script executable
2024-06-03 20:23:23 +10:00
b85f14ed89
Merge pull request 'chore: update apt mirror url' ( #18 ) from neoloc/debian_repository into develop
...
Reviewed-on: https://git.query.consul/unkinben/puppet-prod/pulls/18
2024-06-03 20:19:55 +10:00
e3f34a7cc4
chore: update apt mirror url
...
- change apt mirror url to use edgecache service
2024-06-03 20:19:12 +10:00
c000244c5a
Merge pull request 'fix: add missing check script' ( #17 ) from neoloc/ntp_consul_checkscript into develop
...
Reviewed-on: https://git.query.consul/unkinben/puppet-prod/pulls/17
2024-06-02 19:32:37 +10:00
76fc6b9fa1
fix: add missing check script
2024-06-02 19:32:02 +10:00
902e55f655
Merge pull request 'feat: create ntp consul service' ( #16 ) from neoloc/ntp_consul_service into develop
...
Reviewed-on: https://git.query.consul/unkinben/puppet-prod/pulls/16
2024-06-02 19:27:09 +10:00
da3444e49f
feat: create ntp consul service
...
- create consul policy for ntp servers
- add consul service check and check script
2024-06-02 19:23:39 +10:00
b468f67103
feat: sign ssh host keys
...
- manage python script/venv to sign ssh host certificates
- add approle_id to puppetmaster eyaml files
- add class to sign ssh-rsa host keys
- add facts to check if the current principals match the desired principals
2024-06-01 22:51:42 +10:00
9819ce7f4d
Merge pull request 'ferat: change to gitea hosted package repo' ( #8 ) from neoloc/unkinrepo into develop
...
Reviewed-on: https://git.service.au-syd1.consul/unkinben/puppet-prod/pulls/8
2024-06-01 18:39:55 +10:00
cc7165055d
Merge pull request 'feat: refacter gitea profile' ( #7 ) from neoloc/gitea_refactor into develop
...
Reviewed-on: https://git.query.consul/unkinben/puppet-prod/pulls/7
2024-06-01 17:28:28 +10:00
4bd3310ea8
feat: refacter gitea profile
...
- move more data to hiera
- change how the custom_configuration is made
2024-06-01 17:16:37 +10:00
d7208c5e40
Merge branch 'develop' into neoloc/doc_updates
2024-06-01 15:00:52 +10:00
