Thomas Buck
e6bd74153d
creating domain list for letsencrypt dynamically. some other small fixes.
3 vuotta sitten
Thomas Buck
484ee1eb99
ZNC password hash and salt generation was not working. Now using builtin znc tool to generate it. Also changed znc config options slightly.
5 vuotta sitten
Óscar Nájera
8f0cc14f76
Fix: Ansible uses the value present in apt module state parameter
6 vuotta sitten
chadrh
595075268e
Add dependencies tag to some tasks where it was missing
7 vuotta sitten
Mike Ashley
3d68705341
Add leading 0 to octal file permissions
This is done to suppress warnings from ansible-lint.
8 vuotta sitten
John Giannelos
0b62ed998b
Add directories to allow persistent znc user/modules configuration.
8 vuotta sitten
Carl Meyer
e8796ecd28
Idempotent and independent post-certificate-renewal tasks.
8 vuotta sitten
Mike Ashley
0302a8fa0a
Correct certificate paths for ZNC
8 vuotta sitten
Mike Ashley
8f1b6a9ed8
Arrange for services to restart on cert renewal
8 vuotta sitten
Mike Ashley
ec7b5867d3
Update ircbouncer role for LE certificate
9 vuotta sitten
Mike Ashley
4afa3c97b0
Use systemd service unit configuration for ZNC
8 vuotta sitten
Mike Ashley
b9eb9ef9bb
Fix znc configuration
The znc package installs the client but does not set it up as a
service. This patch restores the service configuration that
was done on wheezy/trusty.
8 vuotta sitten
Sebastian Kriems
fe536873b7
ufw tasks shall have the ufw tag
resolves #453
Conflicts:
roles/common/tasks/ufw.yml
9 vuotta sitten
Sebastian Kriems
968abba197
ufw tasks shall have the ufw tag
resolves #453
9 vuotta sitten
Alex Payne
123dc51517
Use packaged ZNC
9 vuotta sitten
Laurent Arnoud
a09e2e71c1
tar used in place of unarchive module
9 vuotta sitten
Manfred Touron
16c93ea486
Using more verbose 'dependencies' tag (#393 )
9 vuotta sitten
Manfred Touron
b49f3a6586
Tagged 'deps' aptitude tasks
9 vuotta sitten
catern
54e62152d2
ZNC: don't make install if configure or make fail
ZNC module compilation can fail on memory-limited systems, causing ZNC
to not work properly. But even after the failure, make install still
creates /usr/local/bin/znc. Thus Ansible would skip the ZNC build and
install step on future runs, despite ZNC not being correctly installed,
causing the playbook to appear to complete successfully and requiring
manual troubleshooting.
10 vuotta sitten
Lorenzo Villani
3b4bf9c591
Install ZNC Monit config file only when needed
This commit moves the monitoring role to the bottom of site.yml so that
it is executed after all other roles.
This is needed because the monitoring role conditionally installs Monit
configuration file based on whether some other packages have been
installed or not (such as ZNC).
This patch also adds a comment to the "monitoring" entry within the
"roles" list and a `roles/monitoring/README.md` file telling users why
the monitoring role has to come last.
Resolves #284
10 vuotta sitten
Lorenzo Villani
661ed29a3e
Use /usr/sbin/nologin as login shells for vmail and znc users
10 vuotta sitten
Alex Payne
2d2f8a53fb
Only monitor ZNC with monit if role is used.
The other services monitored by the default monit task should always be present except in very custom setups.
Resolves #255 .
10 vuotta sitten
Lorenzo Villani
d5ecf673d3
Calm OCD by sorting almost every with_items block in alphabetical order
10 vuotta sitten
Luke Cyca
785cad2e84
Upgrade ZNC to 1.4
10 vuotta sitten
Justin Plock
ea0b288818
Moved ufw firewall rules into individual roles
10 vuotta sitten
Thom Wiggers
8578f49e21
Make sure that only ZNC can read its certificate
To bring this certificate in line with how those in ssl.yml are managed.
10 vuotta sitten
Alex Payne
f7f7157cec
more updated variable formatting and accommodation of the YAML parser being a fussbudget
11 vuotta sitten
Alex Payne
d28f0f82b9
move to non-deprecated template variable formatting
11 vuotta sitten
Luke Cyca
2c083c44e6
Create znc config directory
11 vuotta sitten
Luke Cyca
0877ee4a89
Fix znc download URL
This URL works for all releases, not just the latest one.
11 vuotta sitten
Luke Cyca
f6d74de487
Provide a good initial config for znc (but leave it alone after that)
11 vuotta sitten
Hector Castro
2e7005eaec
Fix SSL certificate for ZNC so that it begins with a private key.
11 vuotta sitten
Luke Cyca
ca8a371320
Use combined cert for postfix, dovecot, and znc
Fix CAcert usage in postfix and dovecot
11 vuotta sitten
Alex Payne
3ccefb5f03
use shell for znc compile. Fixes #12
11 vuotta sitten
Alex Payne
080d38986c
first commit
11 vuotta sitten