Compare commits
3 Commits
3e63bed204
...
2ee7378075
Author | SHA1 | Date | |
---|---|---|---|
2ee7378075 | |||
111326755b | |||
c47fe10369 |
@ -75,6 +75,7 @@
|
|||||||
generate_systemd:
|
generate_systemd:
|
||||||
path: /home/containers/.config/systemd/user/
|
path: /home/containers/.config/systemd/user/
|
||||||
restart_policy: on-failure
|
restart_policy: on-failure
|
||||||
|
time: 3600
|
||||||
names: true
|
names: true
|
||||||
new: true
|
new: true
|
||||||
|
|
||||||
|
@ -83,6 +83,7 @@
|
|||||||
generate_systemd:
|
generate_systemd:
|
||||||
path: /home/containers/.config/systemd/user/
|
path: /home/containers/.config/systemd/user/
|
||||||
restart_policy: on-failure
|
restart_policy: on-failure
|
||||||
|
time: 3600
|
||||||
names: true
|
names: true
|
||||||
new: true
|
new: true
|
||||||
|
|
||||||
|
@ -84,6 +84,7 @@
|
|||||||
generate_systemd:
|
generate_systemd:
|
||||||
path: /home/containers/.config/systemd/user/
|
path: /home/containers/.config/systemd/user/
|
||||||
restart_policy: on-failure
|
restart_policy: on-failure
|
||||||
|
time: 3600
|
||||||
names: true
|
names: true
|
||||||
new: true
|
new: true
|
||||||
|
|
||||||
|
@ -88,6 +88,7 @@
|
|||||||
generate_systemd:
|
generate_systemd:
|
||||||
path: /home/containers/.config/systemd/user/
|
path: /home/containers/.config/systemd/user/
|
||||||
restart_policy: on-failure
|
restart_policy: on-failure
|
||||||
|
time: 3600
|
||||||
names: true
|
names: true
|
||||||
new: true
|
new: true
|
||||||
|
|
||||||
@ -159,6 +160,8 @@
|
|||||||
generate_systemd:
|
generate_systemd:
|
||||||
path: /home/containers/.config/systemd/user/
|
path: /home/containers/.config/systemd/user/
|
||||||
restart_policy: on-failure
|
restart_policy: on-failure
|
||||||
|
requires: [container-db_gitea]
|
||||||
|
time: 3600
|
||||||
names: true
|
names: true
|
||||||
new: true
|
new: true
|
||||||
|
|
||||||
|
@ -77,6 +77,7 @@
|
|||||||
generate_systemd:
|
generate_systemd:
|
||||||
path: /home/containers/.config/systemd/user/
|
path: /home/containers/.config/systemd/user/
|
||||||
restart_policy: on-failure
|
restart_policy: on-failure
|
||||||
|
time: 3600
|
||||||
names: true
|
names: true
|
||||||
new: true
|
new: true
|
||||||
|
|
||||||
|
@ -105,6 +105,7 @@
|
|||||||
generate_systemd:
|
generate_systemd:
|
||||||
path: /home/containers/.config/systemd/user/
|
path: /home/containers/.config/systemd/user/
|
||||||
restart_policy: on-failure
|
restart_policy: on-failure
|
||||||
|
time: 3600
|
||||||
names: true
|
names: true
|
||||||
new: true
|
new: true
|
||||||
|
|
||||||
@ -132,6 +133,7 @@
|
|||||||
generate_systemd:
|
generate_systemd:
|
||||||
path: /home/containers/.config/systemd/user/
|
path: /home/containers/.config/systemd/user/
|
||||||
restart_policy: on-failure
|
restart_policy: on-failure
|
||||||
|
time: 3600
|
||||||
names: true
|
names: true
|
||||||
new: true
|
new: true
|
||||||
|
|
||||||
@ -193,6 +195,8 @@
|
|||||||
generate_systemd:
|
generate_systemd:
|
||||||
path: /home/containers/.config/systemd/user/
|
path: /home/containers/.config/systemd/user/
|
||||||
restart_policy: on-failure
|
restart_policy: on-failure
|
||||||
|
requires: [container-db_nextcloud, container-redis_nextcloud]
|
||||||
|
time: 3600
|
||||||
names: true
|
names: true
|
||||||
new: true
|
new: true
|
||||||
|
|
||||||
|
@ -69,6 +69,7 @@
|
|||||||
generate_systemd:
|
generate_systemd:
|
||||||
path: /home/containers/.config/systemd/user/
|
path: /home/containers/.config/systemd/user/
|
||||||
restart_policy: on-failure
|
restart_policy: on-failure
|
||||||
|
time: 3600
|
||||||
names: true
|
names: true
|
||||||
new: true
|
new: true
|
||||||
|
|
||||||
|
@ -126,6 +126,7 @@
|
|||||||
generate_systemd:
|
generate_systemd:
|
||||||
path: /home/containers/.config/systemd/user/
|
path: /home/containers/.config/systemd/user/
|
||||||
restart_policy: on-failure
|
restart_policy: on-failure
|
||||||
|
time: 3600
|
||||||
names: true
|
names: true
|
||||||
new: true
|
new: true
|
||||||
|
|
||||||
|
2
roles/cockpit/files/10-globally-managed-devices.conf
Normal file
2
roles/cockpit/files/10-globally-managed-devices.conf
Normal file
@ -0,0 +1,2 @@
|
|||||||
|
[keyfile]
|
||||||
|
unmanaged-devices=none
|
@ -30,6 +30,20 @@
|
|||||||
group: root
|
group: root
|
||||||
mode: 0644
|
mode: 0644
|
||||||
|
|
||||||
|
# https://cockpit-project.org/faq.html#error-message-about-being-offline
|
||||||
|
- name: Allow NetworkManager to manage network interfaces
|
||||||
|
become_user: root
|
||||||
|
become: true
|
||||||
|
ansible.builtin.copy:
|
||||||
|
src: files/10-globally-managed-devices.conf
|
||||||
|
dest: /etc/NetworkManager/conf.d/
|
||||||
|
owner: root
|
||||||
|
group: root
|
||||||
|
mode: "0644"
|
||||||
|
|
||||||
|
- name: Set-up a dummy network interface faking internet connection
|
||||||
|
ansible.builtin.command: "nmcli con add type dummy con-name fake ifname fake0 ip4 1.2.3.4/24 gw4 1.2.3.1"
|
||||||
|
|
||||||
- name: Permit traffic from any IP to cockpit socket
|
- name: Permit traffic from any IP to cockpit socket
|
||||||
become: true
|
become: true
|
||||||
community.general.ufw:
|
community.general.ufw:
|
||||||
|
Loading…
Reference in New Issue
Block a user