~systemd~ package).
#+CAPTION: [[file:roles_t/front/tasks/main.yml][=roles_t/all/tasks/main.yml=]]
-#+BEGIN_SRC conf :tangle roles_t/all/tasks/main.yml :noweb yes
+#+BEGIN_SRC conf :tangle roles_t/all/tasks/main.yml :noweb no-export
- name: Install systemd-resolved.
become: yes
#+NAME: postfix-front
#+CAPTION: ~postfix-front~
-#+BEGIN_SRC conf :noweb yes
+#+BEGIN_SRC conf :noweb no-export
- { p: smtpd_tls_cert_file, v: /etc/server.crt }
- { p: smtpd_tls_key_file, v: /etc/server.key }
<<postfix-front-networks>>
start and enable the service.
#+CAPTION: [[file:roles_t/front/tasks/main.yml][=roles_t/front/tasks/main.yml=]]
-#+BEGIN_SRC conf :tangle roles_t/front/tasks/main.yml :noweb yes
+#+BEGIN_SRC conf :tangle roles_t/front/tasks/main.yml :noweb no-export
- name: Install Postfix.
become: yes
and enables it to start at every reboot.
#+CAPTION: [[file:roles_t/front/tasks/main.yml][=roles_t/front/tasks/main.yml=]]
-#+BEGIN_SRC conf :tangle roles_t/front/tasks/main.yml :noweb yes
+#+BEGIN_SRC conf :tangle roles_t/front/tasks/main.yml :noweb no-export
- name: Install Dovecot IMAPd.
become: yes
#+NAME: apache-userdir-front
#+CAPTION: ~apache-userdir-front~
-#+BEGIN_SRC conf :noweb yes
+#+BEGIN_SRC conf :noweb no-export
UserDir /home/www-users
<Directory /home/www-users/>
Require all granted
#+NAME: apache-front
#+CAPTION: ~apache-front~
-#+BEGIN_SRC conf :noweb yes
+#+BEGIN_SRC conf :noweb no-export
ServerName {{ domain_name }}
ServerAdmin webmaster@{{ domain_name }}
~a2ensite -q small.example.org~ to enable it.
#+CAPTION: [[file:roles_t/front/tasks/main.yml][=roles_t/front/tasks/main.yml=]]
-#+BEGIN_SRC conf :tangle roles_t/front/tasks/main.yml :noweb yes
+#+BEGIN_SRC conf :tangle roles_t/front/tasks/main.yml :noweb no-export
- name: Install Apache2.
become: yes
#+NAME: openvpn-front
#+CAPTION: ~openvpn-front~
-#+BEGIN_SRC conf :noweb yes
+#+BEGIN_SRC conf :noweb no-export
server {{ public_vpn_net_and_mask }}
client-config-dir /etc/openvpn/ccd
<<openvpn-front-routes>>
configure the OpenVPN server on Front.
#+CAPTION: [[file:roles_t/front/tasks/main.yml][=roles_t/front/tasks/main.yml=]]
-#+BEGIN_SRC conf :tangle roles_t/front/tasks/main.yml :noweb yes
+#+BEGIN_SRC conf :tangle roles_t/front/tasks/main.yml :noweb no-export
- name: Install OpenVPN.
become: yes
The first step is to install Kamailio.
#+CAPTION: [[file:roles_t/front/tasks/main.yml][=roles_t/front/tasks/main.yml=]]
-#+BEGIN_SRC conf :tangle roles_t/front/tasks/main.yml :noweb yes
+#+BEGIN_SRC conf :tangle roles_t/front/tasks/main.yml :noweb no-export
- name: Install Kamailio.
become: yes
Finally, Kamailio can be configured and started.
#+CAPTION: [[file:roles_t/front/tasks/main.yml][=roles_t/front/tasks/main.yml=]]
-#+BEGIN_SRC conf :tangle roles_t/front/tasks/main.yml :noweb yes
+#+BEGIN_SRC conf :tangle roles_t/front/tasks/main.yml :noweb no-export
- name: Configure Kamailio.
become: yes
The following tasks install and configure BIND9 on Core.
#+CAPTION: [[file:roles_t/core/tasks/main.yml][=roles_t/core/tasks/main.yml=]]
-#+BEGIN_SRC conf :tangle roles_t/core/tasks/main.yml :noweb yes
+#+BEGIN_SRC conf :tangle roles_t/core/tasks/main.yml :noweb no-export
- name: Install BIND9.
become: yes
The default daemon's default configuration is fine.
#+CAPTION: [[file:roles_t/core/tasks/main.yml][=roles_t/core/tasks/main.yml=]]
-#+BEGIN_SRC conf :tangle roles_t/core/tasks/main.yml :noweb yes
+#+BEGIN_SRC conf :tangle roles_t/core/tasks/main.yml :noweb no-export
- name: Install NTP.
become: yes
#+NAME: postfix-core
#+CAPTION: ~postfix-core~
-#+BEGIN_SRC conf :noweb yes
+#+BEGIN_SRC conf :noweb no-export
<<postfix-relaying>>
- { p: smtpd_tls_security_level, v: none }
- { p: smtp_tls_security_level, v: none }
~postmap transport~ command must also be run.
#+CAPTION: [[file:roles_t/core/tasks/main.yml][=roles_t/core/tasks/main.yml=]]
-#+BEGIN_SRC conf :tangle roles_t/core/tasks/main.yml :noweb yes
+#+BEGIN_SRC conf :tangle roles_t/core/tasks/main.yml :noweb no-export
- name: Install Postfix.
become: yes
and enables it to start at every reboot.
#+CAPTION: [[file:roles_t/core/tasks/main.yml][=roles_t/core/tasks/main.yml=]]
-#+BEGIN_SRC conf :tangle roles_t/core/tasks/main.yml :noweb yes
+#+BEGIN_SRC conf :tangle roles_t/core/tasks/main.yml :noweb no-export
- name: Install Dovecot IMAPd.
become: yes
provided the Core service.
#+CAPTION: [[file:roles_t/core/tasks/main.yml][=roles_t/core/tasks/main.yml=]]
-#+BEGIN_SRC conf :tangle roles_t/core/tasks/main.yml :noweb yes
+#+BEGIN_SRC conf :tangle roles_t/core/tasks/main.yml :noweb no-export
- name: Install fetchmail.
become: yes
#+NAME: apache-userdir-core
#+CAPTION: ~apache-userdir-core~
-#+BEGIN_SRC conf :noweb yes
+#+BEGIN_SRC conf :noweb no-export
UserDir Public/HTML
<Directory /home/*/Public/HTML/>
Require all granted
#+NAME: apache-live
#+CAPTION: ~apache-live~
-#+BEGIN_SRC conf :noweb yes
+#+BEGIN_SRC conf :noweb no-export
<VirtualHost *:80>
ServerName live
ServerAlias live.{{ domain_priv }}
#+NAME: apache-test
#+CAPTION: ~apache-test~
-#+BEGIN_SRC conf :noweb yes
+#+BEGIN_SRC conf :noweb no-export
<VirtualHost *:80>
ServerName test
ServerAlias test.{{ domain_priv }}
#+NAME: apache-campus
#+CAPTION: ~apache-campus~
-#+BEGIN_SRC conf :noweb yes
+#+BEGIN_SRC conf :noweb no-export
<VirtualHost *:80>
ServerName www
ServerAlias www.{{ domain_priv }}
The ~a2ensite~ command enables them.
#+CAPTION: [[file:roles_t/core/tasks/main.yml][=roles_t/core/tasks/main.yml=]]
-#+BEGIN_SRC conf :tangle roles_t/core/tasks/main.yml :noweb yes
+#+BEGIN_SRC conf :tangle roles_t/core/tasks/main.yml :noweb no-export
- name: Install live web site.
become: yes
#+NAME: openvpn-core
#+CAPTION: ~openvpn-core~
-#+BEGIN_SRC conf :noweb yes
+#+BEGIN_SRC conf :noweb no-export
client
dev-type tun
dev ovpn
for Core.
#+CAPTION: [[file:roles_t/core/tasks/main.yml][=roles_t/core/tasks/main.yml=]]
-#+BEGIN_SRC conf :tangle roles_t/core/tasks/main.yml :noweb yes
+#+BEGIN_SRC conf :tangle roles_t/core/tasks/main.yml :noweb no-export
- name: Install OpenVPN.
become: yes
: sudo ufw enable
#+CAPTION: [[file:roles_t/gate/tasks/main.yml][=roles_t/gate/tasks/main.yml=]]
-#+BEGIN_SRC conf :tangle roles_t/gate/tasks/main.yml :noweb yes
+#+BEGIN_SRC conf :tangle roles_t/gate/tasks/main.yml :noweb no-export
- name: Install UFW.
become:
#+NAME: openvpn-gate
#+CAPTION: ~openvpn-gate~
-#+BEGIN_SRC conf :noweb yes
+#+BEGIN_SRC conf :noweb no-export
server {{ campus_vpn_net_and_mask }}
client-config-dir /etc/openvpn/ccd
<<openvpn-gate-routes>>
configure the OpenVPN server on Gate.
#+CAPTION: [[file:roles_t/gate/tasks/main.yml][=roles_t/gate/tasks/main.yml=]]
-#+BEGIN_SRC conf :tangle roles_t/gate/tasks/main.yml :noweb yes
+#+BEGIN_SRC conf :tangle roles_t/gate/tasks/main.yml :noweb no-export
- name: Install OpenVPN.
become: yes
- System mail name: new.small.private
#+CAPTION: [[file:roles_t/campus/tasks/main.yml][=roles_t/campus/tasks/main.yml=]]
-#+BEGIN_SRC conf :tangle roles_t/campus/tasks/main.yml :noweb yes
+#+BEGIN_SRC conf :tangle roles_t/campus/tasks/main.yml :noweb no-export
- name: Install Postfix.
become: yes
#+END_SRC
#+CAPTION: [[file:inst][=inst=]]
-#+BEGIN_SRC perl :tangle inst :noweb yes
+#+BEGIN_SRC perl :tangle inst :noweb no-export
sub write_template ($$$$$$$$$);
sub read_file ($);
sub add_client ($$$);