liv-io
Joined 8 years ago
Karma
153
Submissions
21
Member since
Apr 2
https://liv.io
View on Hacker NewsRecent submissions
Comment · 3 years ago
For all the RHEL to Debian refugees, here are some Ansible roles. I made the jump when they killed CentOS:
Comment · 3 years ago
Luckily, it did not happen to me. I manage the "timezone" by default.
For anyone interested, I manage around 20+ Proxmox machines with these Ansible roles:
https://github.com/liv-io/ansible-roles-debian
Example playbook:
https://github.com/liv-io/ansible-playbooks-example/blob/mas...
Comment · 6 years ago
This might help you on your start:
Comment · 6 years ago
Seems like some folks are considering to create an alternative:
https://blog.centos.org/2020/12/future-is-centos-stream/#com...
https://join.slack.com/t/hpcng/shared_invite/zt-gy0st6mt-ijg...
Comment · 6 years ago
I'd recommend you to use Unbound and specify the named.root or (root.hints) file:
https://www.internic.net/domain/named.root
This Ansible role takes care of configuring it all (CentOS):
https://github.com/liv-io/ansible-roles-centos/tree/master/u...
I have it for FreeBSD and OpenBSD too:
https://github.com/liv-io/ansible-roles-bsd/tree/master/unbo...
Comment · 6 years ago
Or have it all automated using Ansible:
https://github.com/liv-io/ansible-roles-bsd
Including Prometheus monitoring and Loki logging (on Linux though and work in progress)
Comment · 6 years ago
Your response made me smile. Glad to see there are still reasonable folks out there.
Working for a startup without a "resume-driven-development" CTO gave me the freedom to go "servermore" architecture with max flexibility.
Comment · 6 years ago
This could have been written by me. And for who ever doesn't have time to maintain roles, there is Ansible Galaxy or tons of roles in GitHub, including mine: https://github.com/liv-io
Comment · 6 years ago
Arecibo?
Makes me want to listen to Carbon Based Lifeforms:
https://www.youtube.com/watch?v=ifiICunJ-ZA
Comment · 6 years ago
I've created an extended example for the firewall configuration:
https://github.com/liv-io/ansible-playbooks-example/blob/mas...
https://github.com/liv-io/ansible-playbooks-example/blob/mas...
Comment · 6 years ago
@0xC45: as a fellow OpenBSD user you might find my Ansible roles useful.
I also run OpenBSD HA firewall clusters with trunking (aggr), VLANs at home and work:
- https://github.com/liv-io/ansible-roles-bsd/tree/master/host... # interface configuration
- https://github.com/liv-io/ansible-roles-bsd/tree/master/open... # firewall configuration
Comment · 6 years ago
For anyone who wants to operate it in a broader scale:
https://github.com/liv-io/ansible-roles-centos/tree/master/w...
Comment · 7 years ago
Instead of one role for hardening, I try to write my roles with secure defaults:
https://github.com/liv-io/ansible-roles-centos