fripost-ansible - Fripost ansible scripts

	Commit message (Collapse)	Author	Age	Files
*	tr/-/_/ in group names.	Guilhem Moulin	2020-01-22	1
\| \| \| \| \| \| \| \| \| \| \| \|	This avoids [DEPRECATION WARNING]: The TRANSFORM_INVALID_GROUP_CHARS settings is set to allow bad characters in group names by default, this will change, but still be user configurable on deprecation. This feature will be removed in version 2.10. Deprecation warnings can be disabled by setting deprecation_warnings=False in ansible.cfg. [WARNING]: Invalid characters were found in group names but not replaced, use -vvvv to see details
*	ntp.conf: reduce delta with the packaged version.	Guilhem Moulin	2018-12-09	1
\|
*	Localize the NTP pool hostnames.	Guilhem Moulin	2016-07-09	1
\|
*	Tunnel internal NTP traffic through IPSec.	Guilhem Moulin	2016-05-22	1
\| \| \| \| \| \| \|	More precisely, between our NTP-master (stratum 1) host and the other machines (all stratum 2). Providing authentification and integrity for internal NTP traffic ensures a consistent time within our internal infrastructure.
*	Fix NTP configuration.	Guilhem Moulin	2015-06-07	1
\| \| \| \|	We've yet to get authenticated time, though.
*	Assume a DNS entry for each role.	Guilhem Moulin	2015-06-07	1
\| \| \| \| \| \|	E.g., ldap.fripost.org, ntp.fripost.org, etc. (Ideally the DNS zone would be provisioned by ansible, too.) It's a bit unclear how to index the subdomains (mx{1,2,3}, etc), though.
*	Configure NTP.	Guilhem Moulin	2015-06-07	1
	We use a "master" NTP server, which synchronizes against stratum 1 servers (hence is a stratum 2 itself); all other clients synchronize to this master server through IPSec.