Žiadny popis

Marek Küthe 3828d5f8f4 add irc 2 rokov pred
group_vars 3828d5f8f4 add irc 2 rokov pred
host_vars 9f0e32328f seperate routes logically via vrf 2 rokov pred
roles 3828d5f8f4 add irc 2 rokov pred
.ansible-lint 275e07d074 improve style 2 rokov pred
.gitignore 9d6e08876b add password file to gitignore 2 rokov pred
LICENSE 4f2c6cfebf Initial commit 2 rokov pred
README.md 0911af8650 add coredns installation role 2 rokov pred
ansible.cfg 68314d1862 add more options to wireguard 2 rokov pred
aurora.mk16.de.yml 58ff9d61fe try to speed up ansible 2 rokov pred
herzstein.mk16.de.yml ef69890b75 add role 2 rokov pred
inventory.yml ef69890b75 add role 2 rokov pred
laplace.mk16.de.yml 58ff9d61fe try to speed up ansible 2 rokov pred
p2p-node.de.yml a7a6799996 add herzstein 2 rokov pred
p2p-router.de.yml a7a6799996 add herzstein 2 rokov pred
pw_file.sh 76dd7cc01c add new things 2 rokov pred
reseau.mk16.de.yml 7e793cf231 routing tables != vrf -> renaming 2 rokov pred
stricker.mk16.de.yml 58ff9d61fe try to speed up ansible 2 rokov pred
trolljaeger.mk16.de.yml 58ff9d61fe try to speed up ansible 2 rokov pred
update.yml f9ef4e0862 add servers to inventory 2 rokov pred

README.md

Ansible configuration for a CRXN Router

Roles

  • motd - Removes long motd message
  • packages - Update, upgrade, and autoremove packages. Install a few useful packages.
  • firewall - Install ufw and add rules
  • fail2ban - Install fail2ban and configuring it for SSH

  • sysctl-tweaks - Install a few sysctl-tweaks

  • unattended-upgrades - Install and enable unattended-upgrades

  • babeld-compile - Compiles babeld from upstream git repo and install it

  • fastd-compile - Compiles fastd from upstream git repo and install it

  • babelweb2-compile - Fetch and compile babelweb2

  • babelweb2 - Enabled babelweb2 for autostart and setup a nginx reverse proxy for it

  • nginx - Install and enable nginx for autostart

  • dummy-interface - Configures a dummy interface for crxn and a static route in the kernel

  • babeld - babeld configuration files

  • gre - Install GRE peer configurations

  • vxlan - Install VXLAN peer configurations

  • openvpn - Install OpenVPN peer configurations

  • fastd - Install fastd peer configurations

  • wireguard - Install wireguard peer configurations

  • hardening - Disables core dumping and downloads a few packages to improve system security

  • coredns - Install coredns and create a empty configuration file