Commit Graph

419 Commits

Author SHA1 Message Date
45f51b67b1 add tests for ubuntu + task: apt update 2026-07-17 12:24:02 +03:00
09ffb32784 Merge pull request #5 from mondrunov-genlab/add-gitlab-role
fix install (retries, until, delay), add deleting tmp-files and fix permissions for alloy.service
2026-07-16 17:17:37 +03:00
5eeec4ad30 fix space 2026-07-16 17:13:42 +03:00
04e5bc7b50 fix spaces and permissions 2026-07-16 17:10:17 +03:00
8f8c56c04e fix permissions-linter and kics 2026-07-16 16:56:23 +03:00
fdb0700e42 fix linter 2026-07-16 16:41:34 +03:00
e46a17e6b5 fix install (retries, until, delay), add deleting tmp-files and fix permissions for alloy.service 2026-07-16 16:31:14 +03:00
6fccc69e03 Merge branch 'master' into add-grafana-alloy-role 2026-07-08 13:30:44 +03:00
4db76ea7cc fix variables in README and permissions in systemd 2026-07-08 13:27:12 +03:00
afd27e2f17 fix parametres for system user 2026-07-06 17:45:27 +03:00
71cd9946c1 split url and port 2026-07-06 16:38:07 +03:00
e5b9415209 Add grafana_alloy role: scrape log files to Loki 2026-07-06 13:43:06 +03:00
bafa282482 Add grafana_alloy role: scrape log files to Loki 2026-07-06 13:07:50 +03:00
Alexander Gorelyshev
5322a48353 Merge pull request #107 from corvus-migratorius/ping-exporter-selinux-fix
SELinux workaround
2026-07-02 15:25:13 +04:00
Alexander Gorelyshev
4c06771d1c Implement SELinux workaround tasks 2026-07-02 14:45:09 +04:00
Alexander Gorelyshev
9e052eb769 Implement a workaround for missing SELinux support in the official RPM
https://github.com/czerwonk/ping_exporter/issues/152
2026-06-30 21:06:01 +04:00
Alexander Gorelyshev
b794461e20 Merge pull request #106 from corvus-migratorius/ping-exporter
ping exporter
2026-06-30 17:42:57 +04:00
Alexander Gorelyshev
e1787985a7 Fix RHEL/Rocky 9 compatibility 2026-06-30 17:36:02 +04:00
Alexander Gorelyshev
0e2b10aa1f Simplify version handling 2026-06-30 17:35:41 +04:00
Alexander Gorelyshev
eb85fcac98 Prototype the role 2026-06-30 15:34:30 +04:00
Alexander Gorelyshev
7c27d734fa Merge pull request #103 from corvus-migratorius/fail2ban-rhel-hotfix
fail2ban_rhel hotfix
2026-06-09 20:43:58 +04:00
Alexander Gorelyshev
d1d68bb0a7 Fix a bug in the sshd jail config template 2026-06-09 20:35:36 +04:00
Alexander Gorelyshev
6936935462 Update README.md 2026-06-09 20:35:23 +04:00
Alexander Gorelyshev
66b8706975 Merge pull request #100 from corvus-migratorius/fail2ban-rhel
Prototype a role for installing `fail2ban` on RHEL 9+
2026-06-09 20:22:56 +04:00
Alexander Gorelyshev
bb291e438a Fix jail options not being configurable with default values individually 2026-06-09 20:19:22 +04:00
Alexander Gorelyshev
870dbac530 Fix an incorrect variable name 2026-06-08 20:10:35 +04:00
Alexander Gorelyshev
deaeb1f79e Prototype a role for installing fail2ban on RHEL 9+ 2026-06-08 20:05:29 +04:00
Alexander Gorelyshev
fad0cb0abb Merge pull request #99 from corvus-migratorius/sshd-further-hardening
sshd further hardening
2026-06-08 16:58:32 +04:00
Alexander Gorelyshev
e4b85fa2c9 Rework README.md 2026-06-08 16:23:29 +04:00
Alexander Gorelyshev
06e1f73b07 Update converge.yml 2026-06-08 16:23:15 +04:00
Alexander Gorelyshev
54c19551f3 Fix a tiny stylistic discrepancy 2026-06-08 16:02:47 +04:00
Alexander Gorelyshev
e260c8ac4c Shuffle configuration more logically between tasks 2026-06-08 16:02:30 +04:00
Alexander Gorelyshev
94f363209c Restore task naming consistency 2026-06-08 14:17:10 +04:00
Alexander Gorelyshev
b246eae017 Use full path in config validation consistently 2026-06-08 14:15:09 +04:00
Alexander Gorelyshev
37222f515e Fix handlers 2026-06-08 14:14:09 +04:00
Alexander Gorelyshev
b87da747a7 Ensure DebianBanner is only handled on Debian derivatives 2026-06-08 14:10:13 +04:00
Alexander Gorelyshev
0c1e8cb7d3 Fix incorrect package being installed for RHEL 9+ derivatives 2026-06-08 14:09:24 +04:00
Alexander Gorelyshev
aa24942348 Add controls for tunneling and forwarding 2026-06-08 14:08:28 +04:00
Alexander Gorelyshev
310bda74af Add more configuration restrictions 2026-06-08 12:19:08 +04:00
Alexander Gorelyshev
d62db95075 Make PermitRootLogin regexp more generic 2026-06-08 11:52:20 +04:00
Alexander Gorelyshev
971006fbcd Merge pull request #98 from corvus-migratorius/fix-caddy-shell
Fix the shell path for the caddy user
2026-05-26 17:29:58 +04:00
Alexander Gorelyshev
82690466cc Update pinned version hashes that are suddenly causing CI failures 2026-05-26 16:31:25 +04:00
Alexander Gorelyshev
fe5088f58a Fix the shell path for the caddy user 2026-05-26 16:17:22 +04:00
Alexander Gorelyshev
3ec4e44327 Merge pull request #97 from corvus-migratorius/miniforge-auto-activate-base
Option to auto-activate Miniforge base env
2026-05-19 17:52:52 +04:00
Alexander Gorelyshev
5af2fb493b Fix mamba syntax 2026-05-19 17:43:17 +04:00
Alexander Gorelyshev
0ac66b8f22 Add an option to auto-activate base env (default: true) 2026-05-19 17:33:00 +04:00
Alexander Gorelyshev
e7d5f4d383 Merge pull request #96 from corvus-migratorius/role-miniforge
Migrate the role
2026-05-19 17:04:39 +04:00
Alexander Gorelyshev
e78a36e8b1 Make the task names consistent with the collection convention 2026-05-19 16:59:13 +04:00
Alexander Gorelyshev
b1e2fb0f24 Restore assertion message consistency 2026-05-19 16:46:32 +04:00
Alexander Gorelyshev
c758b4d62d Ensure the bash shell for the test users, for testing purposes 2026-05-19 16:46:10 +04:00