Commit Graph

407 Commits

Author SHA1 Message Date
bafa282482 Add grafana_alloy role: scrape log files to Loki 2026-07-06 13:07:50 +03:00
Alexander Gorelyshev
5322a48353 Merge pull request #107 from corvus-migratorius/ping-exporter-selinux-fix
SELinux workaround
2026-07-02 15:25:13 +04:00
Alexander Gorelyshev
4c06771d1c Implement SELinux workaround tasks 2026-07-02 14:45:09 +04:00
Alexander Gorelyshev
9e052eb769 Implement a workaround for missing SELinux support in the official RPM
https://github.com/czerwonk/ping_exporter/issues/152
2026-06-30 21:06:01 +04:00
Alexander Gorelyshev
b794461e20 Merge pull request #106 from corvus-migratorius/ping-exporter
ping exporter
2026-06-30 17:42:57 +04:00
Alexander Gorelyshev
e1787985a7 Fix RHEL/Rocky 9 compatibility 2026-06-30 17:36:02 +04:00
Alexander Gorelyshev
0e2b10aa1f Simplify version handling 2026-06-30 17:35:41 +04:00
Alexander Gorelyshev
eb85fcac98 Prototype the role 2026-06-30 15:34:30 +04:00
Alexander Gorelyshev
7c27d734fa Merge pull request #103 from corvus-migratorius/fail2ban-rhel-hotfix
fail2ban_rhel hotfix
2026-06-09 20:43:58 +04:00
Alexander Gorelyshev
d1d68bb0a7 Fix a bug in the sshd jail config template 2026-06-09 20:35:36 +04:00
Alexander Gorelyshev
6936935462 Update README.md 2026-06-09 20:35:23 +04:00
Alexander Gorelyshev
66b8706975 Merge pull request #100 from corvus-migratorius/fail2ban-rhel
Prototype a role for installing `fail2ban` on RHEL 9+
2026-06-09 20:22:56 +04:00
Alexander Gorelyshev
bb291e438a Fix jail options not being configurable with default values individually 2026-06-09 20:19:22 +04:00
Alexander Gorelyshev
870dbac530 Fix an incorrect variable name 2026-06-08 20:10:35 +04:00
Alexander Gorelyshev
deaeb1f79e Prototype a role for installing fail2ban on RHEL 9+ 2026-06-08 20:05:29 +04:00
Alexander Gorelyshev
fad0cb0abb Merge pull request #99 from corvus-migratorius/sshd-further-hardening
sshd further hardening
2026-06-08 16:58:32 +04:00
Alexander Gorelyshev
e4b85fa2c9 Rework README.md 2026-06-08 16:23:29 +04:00
Alexander Gorelyshev
06e1f73b07 Update converge.yml 2026-06-08 16:23:15 +04:00
Alexander Gorelyshev
54c19551f3 Fix a tiny stylistic discrepancy 2026-06-08 16:02:47 +04:00
Alexander Gorelyshev
e260c8ac4c Shuffle configuration more logically between tasks 2026-06-08 16:02:30 +04:00
Alexander Gorelyshev
94f363209c Restore task naming consistency 2026-06-08 14:17:10 +04:00
Alexander Gorelyshev
b246eae017 Use full path in config validation consistently 2026-06-08 14:15:09 +04:00
Alexander Gorelyshev
37222f515e Fix handlers 2026-06-08 14:14:09 +04:00
Alexander Gorelyshev
b87da747a7 Ensure DebianBanner is only handled on Debian derivatives 2026-06-08 14:10:13 +04:00
Alexander Gorelyshev
0c1e8cb7d3 Fix incorrect package being installed for RHEL 9+ derivatives 2026-06-08 14:09:24 +04:00
Alexander Gorelyshev
aa24942348 Add controls for tunneling and forwarding 2026-06-08 14:08:28 +04:00
Alexander Gorelyshev
310bda74af Add more configuration restrictions 2026-06-08 12:19:08 +04:00
Alexander Gorelyshev
d62db95075 Make PermitRootLogin regexp more generic 2026-06-08 11:52:20 +04:00
Alexander Gorelyshev
971006fbcd Merge pull request #98 from corvus-migratorius/fix-caddy-shell
Fix the shell path for the caddy user
2026-05-26 17:29:58 +04:00
Alexander Gorelyshev
82690466cc Update pinned version hashes that are suddenly causing CI failures 2026-05-26 16:31:25 +04:00
Alexander Gorelyshev
fe5088f58a Fix the shell path for the caddy user 2026-05-26 16:17:22 +04:00
Alexander Gorelyshev
3ec4e44327 Merge pull request #97 from corvus-migratorius/miniforge-auto-activate-base
Option to auto-activate Miniforge base env
2026-05-19 17:52:52 +04:00
Alexander Gorelyshev
5af2fb493b Fix mamba syntax 2026-05-19 17:43:17 +04:00
Alexander Gorelyshev
0ac66b8f22 Add an option to auto-activate base env (default: true) 2026-05-19 17:33:00 +04:00
Alexander Gorelyshev
e7d5f4d383 Merge pull request #96 from corvus-migratorius/role-miniforge
Migrate the role
2026-05-19 17:04:39 +04:00
Alexander Gorelyshev
e78a36e8b1 Make the task names consistent with the collection convention 2026-05-19 16:59:13 +04:00
Alexander Gorelyshev
b1e2fb0f24 Restore assertion message consistency 2026-05-19 16:46:32 +04:00
Alexander Gorelyshev
c758b4d62d Ensure the bash shell for the test users, for testing purposes 2026-05-19 16:46:10 +04:00
Alexander Gorelyshev
333adfbb6a Fix a regression in the modern Conda initialization interface 2026-05-19 16:45:46 +04:00
Alexander Gorelyshev
b650f1edbc Update the default version to the latest available 2026-05-19 16:45:07 +04:00
Alexander Gorelyshev
f6ddd79a0c Add checks for the installed conda version correctness 2026-05-19 16:44:42 +04:00
Alexander Gorelyshev
f706aa0f38 Migrate the role 2026-05-19 15:05:14 +04:00
Alexander Gorelyshev
fd6e2517a3 Merge pull request #95 from corvus-migratorius/sshd-allow-lists
sshd allow lists
2026-05-19 13:24:15 +04:00
Alexander Gorelyshev
05c5041086 Fix extension 2026-05-19 00:08:21 +04:00
Alexander Gorelyshev
63102b87ed Update the list of excluded paths for ansible-lint 2026-05-18 21:36:12 +04:00
Alexander Gorelyshev
15d3ca8a70 Add a helper pre_tasks unit for Molecule Verify 2026-05-18 21:20:01 +04:00
Alexander Gorelyshev
1d0676f71b Add support for AllowGroups 2026-05-18 21:05:16 +04:00
Alexander Gorelyshev
dfa5ae3a19 Fix a test task 2026-05-18 21:04:43 +04:00
Alexander Gorelyshev
71a02a6035 Rework Molecule tests to support checking the AllowUsers directive 2026-05-18 20:13:56 +04:00
Alexander Gorelyshev
e8376ee112 Add a task for optionally configuring the AllowUsers directive 2026-05-18 20:10:12 +04:00