Почетна Преглед Помоћ
Пријавите се
mark22k
/
ansible-crxn-router
огледало од https://codeberg.org/mark22k/ansible-crxn-router.git
Прати 1
Волим 0
Креирај огранак 0
Датотеке Дискусије 0

Нема описа

Дрво: 14c9b1256e
Гране Ознаке
ansible-crxn...
ZIP TAR.GZ
Marek Küthe 14c9b1256e Adjuct MTU пре 6 месеци
group_vars 2243d6f229 Update crazytrace пре 11 месеци
host_vars 14c9b1256e Adjuct MTU пре 6 месеци
roles 2f1edac66e Update to babel metric пре 7 месеци
.ansible-lint e5ed55facc improve style пре 1 година
.gitignore 9d6e08876b add password file to gitignore пре 2 година
.yamlfmt e5ed55facc improve style пре 1 година
LICENSE 4f2c6cfebf Initial commit пре 2 година
README.md be240ab785 Switch from ufw to nftables пре 11 месеци
ansible.cfg 804b9b6718 remove firejail workaround as it seems fixed now; related https://github.com/ansible/ansible/issues/80057, https://github.com/netblue30/firejail/issues/1518 пре 2 година
inventory.yml b9cbafa0c3 improve style пре 1 година
pw_file.sh e255636888 outsource pw script пре 1 година
reseau.mk16.de.yml 2f1edac66e Update to babel metric пре 7 месеци
update.yml b37de67f22 Update role name пре 10 месеци

README.md

Ansible configuration for a CRXN Router

Roles

  • motd - Removes long motd message
  • packages - Update, upgrade, and autoremove packages. Install a few useful packages.
  • install-nftables - Install firewall
  • config-nftables - Add firewall rules

  • fail2ban - Install fail2ban and configuring it for SSH

  • sysctl-tweaks - Install a few sysctl-tweaks

  • unattended-upgrades - Install and enable unattended-upgrades

  • babeld-compile - Compiles babeld from upstream git repo and install it

  • fastd-compile - Compiles fastd from upstream git repo and install it

  • babelweb2-compile - Fetch and compile babelweb2

  • babelweb2 - Enabled babelweb2 for autostart and setup a nginx reverse proxy for it

  • nginx - Install and enable nginx for autostart

  • dummy-interface - Configures a dummy interface for crxn and a static route in the kernel

  • babeld - babeld configuration files

  • gre - Install GRE peer configurations

  • vxlan - Install VXLAN peer configurations

  • openvpn - Install OpenVPN peer configurations

  • fastd - Install fastd peer configurations

  • wireguard - Install wireguard peer configurations

  • hardening - Disables core dumping and downloads a few packages to improve system security

  • coredns - Install coredns and create a empty configuration file