Commit graph

19 commits

Author SHA1 Message Date
2da305fb5f Update salt state for gvaweb
This commit improves the gvaweb celery worker setup based on the work
that has been done for gvaldap before. Old files have been removed and
the setup uses the macros from gnuviechadmin/gvaapp_macros.sls.
2020-03-04 00:49:58 +01:00
7381b5bfd8 Implement proper provisioning for gvaldap
- merge improvements from the internal saltstack repository
- define dummy secrets in the pillars
- use systemd to setup the gvaldap celery worker
2020-03-04 00:10:16 +01:00
738107b523 Streamline base state extract vagrant specifics
- manage all wanted apt repositories
- move vagrant specific stuff to vagrant state
- use better password for slapd
2020-03-03 17:24:56 +01:00
c4dcf12a0a Move webserver configuration to nginx state 2017-08-20 13:56:10 +02:00
9a557fa69f Add salt state and pillar data for gvaweb 2017-08-20 13:34:17 +02:00
87d2af1a8a Add salt states for gvapgsql 2017-08-20 12:55:04 +02:00
f08deff9b5 Add Vagrant and salt automation for gvamysql 2016-09-25 17:29:52 +02:00
b90230997c Protect /etc/salt/grains
Make sure that the permissions of /etc/salt/grains only allow access for the
root user.
2016-09-25 17:27:42 +02:00
cf6dd52186 Unset locale variables for celery worker launch
Celery has problems when non-ASCII characters are included in log messages
(i.e. from called system commands). Therefore environment variables that
influence the locale setting are reset before running the celery worker.
2016-09-25 16:35:04 +02:00
06d63c111b Use correct directory for /srv/sftp/home 2016-09-25 16:31:28 +02:00
231976d1dc Make fileserver setup deterministic
Create the home directories before trying to bind mount them to /srv/nfs4
subdirectories. Remove unneeded acl parameter that lead to rewrites of
/etc/fstab for every salt run.
2016-09-25 13:50:53 +02:00
ef7fbd0afd Use cmd with runas parameter
Replace the deprecated user and group parameters with runas to fix
deprecation warnings.
2016-09-24 23:53:49 +02:00
95b2e521eb Setup backports and ensure python-cryptography
Make sure that the jessie-backports repository is available and that the
python-cryptography package from that repository is used.
2016-09-24 23:52:37 +02:00
b72b6c960d Add fileserver and ldapclient sls 2016-09-24 21:51:59 +02:00
1cf93b8f30 Port rsa_key and x509_certificate to cryptography 2016-09-24 21:51:02 +02:00
9101abcefd Add libjpeg-dev to webinterfaces states
The documentation build uses sphinxcontrib-blockdiag to build block
diagrams. The pillow package needed by this packaged requires
libjpeg-dev for compilation.
2016-02-07 23:01:48 +01:00
7ec29b9ce2 Make gvafile deployment work
This commit refactors to gnuviechadmin.base state by moving the Django
specific parts into gnuviechadmin.django that is now used by
gnuviechadmin.gvaldap and gnuviechadmin.webinterface. The script
templates gnuviechadmin/gvafile/run_celery.sh and
gnuviechadmin/gvafile/settings.sh have been added.
2016-02-06 14:23:05 +01:00
1bb9742751 Setup initial gvafile pillar and state data 2016-02-06 13:54:57 +01:00
3fd146215f Rename roots to states
This commit renames the roots directory to states because it contains
salt states.
2016-01-31 21:16:14 +01:00