Recherche avancée
Résultats de recherche
18 résultats trouvés au total
Documentation publique
Ansible
At Firewall Services we use ansible. And we use it a lot !
Monitoring
All monitoring related stuff. Mainly (but not limited to) Zabbix
Authentication
Basics
Roles
General
General concepts of FWS' roles
Ansible roles
Have a look at our ansible roles, we deploy a lot of stuff with it :-)
First steps
Initial configuration Clone our ansible-roles repo git clone https://git.fws.fr/fws/ansible-roles.git cd ansible-roles Create the configuration directories Those directories will holds configurations of your hosts, groups etc. # This dir will contain you...
Roles
Roles and their configuration Role directories A role is a set of instruction which describe how to install or update a functionnality. Roles are under the roles directory (no joke ;-)). Each role have several sub directories: defaults : contains defaul...
Playbooks
Playbooks A playbook is a yaml file which list a set of action to run, and in which order. You can create your own tasks in a playbook, but most of the time, you'll just assign roles to hosts, or group of hosts in a playbook. You can create your playbooks wh...
The "common" role
This role will setup a lot of different stuff of your system. I use it on all my servers. It's tested on : CentOS Linux 7 CentOS Linux 8 CentOS Stream 8 Debian 8 Debian 9 Debian 10 (and derivatives like Proxmox VE for example) He...
BookStack
Status Production Supported distro CentOS 7/8 This roles deploys the BookStack application Backend server Sample backend server httpd_ansible_vhosts: - name: docs.example.org document_root: /opt/bookstack_1/app/public bookstack_public_url: ht...
CorwdSec
Status Production Supported distro CentOS 7/8 This role deploys the crowdsec agent. CrowdSec agent Here's a sample config for the agent. Running with local and central API enabled, using a MySQL bakend cs_db_engine: mysql cs_capi_enabled: True cs_lapi...
Graylog to CrowdSec
Background Crowdsec's architecture allows running several agents, each parsing the local logs on the server it's running, and sending events to a local API. While this approach works and is flexible, it might not be the most efficient. In my case, all my ser...
n8n
Status Production Supported distro CentOS 8 This role deploys the n8n workflow manager. Here's a sample configuration n8n_src_ip: - 10.29.1.14 # Access only for the rev proxy n8n_public_url: https://workflow.example.org/ And a sample reverse proxy c...
General
Most of our roles follow the same principles : Limit the required configuration : most defaults trie to auto configure themselves Auto generate password and other secrets when they are not defined Handle upgrades : we don't only manage installations, but al...
Auth BookStack on Lemonldap::NG
BookStack can use an SAML2 IDP to authenticate users. And Lemonldap::NG can be used as such, but there are a few things to configure to have this working. In this example, Lemonldap::NG portal is https://auth.example.org and BookStack is https://bookstack.exa...