Commit graph

148 commits

Author SHA1 Message Date
b7fd16cc81 Fixes for consul, update podman 2020-10-27 01:31:13 -04:00
128491d154 Restart nexus after updating certs 2020-10-21 21:25:52 -04:00
cec3286081 https vault 2020-10-17 01:09:24 -04:00
6097e64618 Remove http for jenkins 2020-10-13 22:57:55 -04:00
9b44abb656 Add jenkins nomad job seriously god, kill me 2020-10-13 22:56:43 -04:00
b08a231443 Add docker configs for jenkins with ssl god kill me 2020-10-13 22:56:33 -04:00
ab729b2c46 Add vault policy for nomad 2020-10-13 22:56:21 -04:00
1559206ae4 Fix up vault ssl, fix up vault cert since it needs a bundled cert 2020-10-13 21:42:39 -04:00
b5d51f7e3f Explicitly define ports for consul and vault 2020-10-12 22:39:23 -04:00
b5b9dc2024 Update nomad 2020-10-12 22:38:49 -04:00
add2a72c0a Add ssl to vault 2020-10-12 21:59:24 -04:00
41c9283eb1 Make nomad/consul servers serial:1 2020-10-12 21:58:52 -04:00
4c4134dcdb Basic jenkins install (no ssl) with nomad 2020-10-03 20:35:33 -04:00
e10b2a5172 Basic setup for nomad container users/groups 2020-10-03 17:22:04 -04:00
dce8d35fe4 Add reloads for new certs in consul 2020-09-30 22:40:16 -04:00
9fa7686534 Add tls to nomad 2020-09-30 22:37:18 -04:00
eca78a092d Enable https on consul 2020-09-30 22:16:38 -04:00
4989911add Basic dockerfile 2020-09-30 21:05:42 -04:00
d0e3bd6c32 Add podman shell to nomad clients 2020-09-30 20:59:50 -04:00
02f28798fd fix hostname for fbsd 2020-09-24 15:33:35 -04:00
571c9f25b8 Fix consul perms 2020-09-20 23:26:28 -04:00
1b18334068 move non-template out of templates, add docker registry configuration to nexus, add nexus service for dns 2020-09-20 23:03:54 -04:00
ce0b27f5d0 Fix reload for consul, add nexus service to consul, fix cert location so update-ca-certificates can actually pick it up 2020-09-20 21:42:35 -04:00
70b6576e96 Add nexus with ssl 2020-09-20 01:14:59 -04:00
60a56bdc97 open dns to other machines (for allowing pfsense), enable tls for docker registry, add docker_registry to site 2020-09-07 20:45:26 -04:00
0d04d2f038 delete consul debug output
this is why you don't hack at 330 in the morning
2020-08-31 11:52:11 -04:00
7c2084790f Set default token instead of agent to get dns working, set node name to be the short name instead of fqdn 2020-08-30 03:33:20 -04:00
be8d9c68da Add docker to requirements for running docker containers, add insecure docker registry 2020-08-29 20:32:34 -04:00
8a1941fc58 Add nomad server/client, fix ansible policy to allow for cert creation 2020-08-29 20:25:30 -04:00
2ec415f2ef Fix systemd unit file, remove vault since its now in common 2020-08-29 20:25:03 -04:00
89add56fed Add masked.name ca/intermediary certs, add hosts 2020-08-29 20:24:35 -04:00
2eaf118b5a Add nomad client and server policies 2020-08-29 20:23:55 -04:00
4a43799bf4 split out docker role 2020-08-29 20:23:41 -04:00
edaa4cc9f6 Split out playbooks, start on registry 2020-08-29 20:23:24 -04:00
ee97d0611f Add masked.name to consul, get certs from vault 2020-08-29 20:22:52 -04:00
326d017271 Add pki to common 2020-08-29 20:21:40 -04:00
1cdfa9cd69 Remove unused client key since auto_encrypt is enabled 2020-08-27 16:30:56 -04:00
13f08c52e5 Add consul clients, DRY up consul_dc 2020-08-27 16:29:53 -04:00
0d9e708735 Add vault server, add some generic consul acls and vault policies 2020-08-27 15:26:40 -04:00
52e5d17486 add consul server configuration 2020-08-27 15:23:27 -04:00
f2e657ff8b add some values for vault to group_vars, clean up playbooks, update requirements 2020-08-27 15:19:37 -04:00
09c54475a3 Add domain and raft protocol 2020-08-21 00:34:41 -04:00
8988e78e39 Wrap up basic consul server 2020-08-21 00:26:07 -04:00
aabc5936b7 Fix group of consul on fbsd 2020-08-20 13:49:46 -04:00
dcc0291ddb unarchive not working on fbsd 2020-08-20 01:11:33 -04:00
f2cd627f30 first pass 2020-08-20 00:02:35 -04:00
5db0c5d226 Add ansible readme 2020-08-19 23:40:41 -04:00
bca6b3ee6a Initial commit 2020-08-19 23:35:02 -04:00