configpolicy/group_vars
Dustin c300dc1b6c chrony: Add role/PB for chrony
I continually struggle with machines' (physical and virtual, even the
Roku devices!) clocks getting out of sync.  I have been putting off
fixing this because I wanted to set up a Windows-compatible NTP server
(i.e. on the domain controllers, with Kerberos signing), but there's
really no reason to wait for that to fix the clocks on all the
non-Windows machines, especially since there are exactly 0 Windows
machines on the network right now.

The *chrony* role and corresponding `chrony.yml` playbook are generic,
configured via the `chrony_pools`, `chrony_servers`, and `chrony_allow`
variables.  The values for these variables will configure the firewall
to act as an NTP server, synchronizing with the NTP pool on the
Internet, while all other machines will synchronize with it.  This
allows machines on networks without Internet access to keep their clocks
in sync.
2025-03-16 16:37:19 -05:00
..
dch-gw Move dch_networks definition to all group 2018-10-13 12:43:35 -05:00
public-web r/webites: Add apps.du5t1n.xyz F-Droid repo 2024-11-05 06:47:02 -06:00
pxe hosts: Migrate remaining hosts to Restic 2024-09-07 20:45:24 -05:00
pyrocufflink all: Set root authorized keys 2025-02-08 15:29:57 -06:00
unifi unifi: Scrape logs from UniFi and device syslog 2024-02-28 19:04:30 -06:00
Fedora.yml r/useproxy: Configure system-wide proxy 2024-08-12 18:47:04 -05:00
Fedora37.yml Fedora37: Set collectd SELinux domain permissive 2022-12-19 10:22:00 -06:00
all.yml all: Set root authorized keys 2025-02-08 15:29:57 -06:00
aria2.yml aria2: Deploy aria2 download manager 2018-08-19 14:17:48 -05:00
bitwarden_rs.yml r/bitwarden_rs: Redirect to canonical host name 2024-11-05 06:37:03 -06:00
burp-client.yml hosts: Add burp1.p.b 2020-01-25 13:57:04 -06:00
burp-server.yml burp-server: Keep more backups 2023-07-17 16:36:37 -05:00
chrony.yml chrony: Add role/PB for chrony 2025-03-16 16:37:19 -05:00
collectd.yml Switch Prometheus/collectd to pull 2021-10-30 16:41:17 -05:00
dch-proxy.yml Merge remote-tracking branch 'refs/remotes/origin/master' 2025-01-28 17:34:37 -06:00
dch-vpn.yml dch-vpn: Avoid configuring firewalld 2018-10-13 12:19:25 -05:00
file-servers.yml hosts: Migrate remaining hosts to Restic 2024-09-07 20:45:24 -05:00
frigate-prod.yml frigate: Configure HTTPS proxy with creds 2024-08-14 20:26:11 -05:00
frigate.yml r/frigate-caddy: Deploy Caddy in front of Frigate 2024-08-12 18:47:04 -05:00
gitea.yml hosts: Migrate remaining hosts to Restic 2024-09-07 20:45:24 -05:00
home-assistant.yml home-assistant: Back up Zigbee/ZWave/Mosquitto 2022-12-23 06:56:52 -06:00
jenkins-slave.yml jenkins-slave: Allow Jenkins to connect to Docker 2019-09-19 19:50:35 -05:00
k8s-controller.yml k8s-controller: Do not reboot after auto-updates 2024-06-23 10:43:15 -05:00
k8s-iot-net-ctrl.yml hosts: Add k8s-iot-net-ctrl group 2025-01-31 19:49:51 -06:00
k8s-longhorn.yml kubernetes: Manage worker nodes 2024-11-24 10:33:21 -06:00
k8s-node.yml kubernetes: Manage worker nodes 2024-11-24 10:33:21 -06:00
koji-hub.yml hosts: Add koji0.pyrocufflink.blue 2018-08-12 10:27:20 -05:00
koji.yml hosts: Add koji0.pyrocufflink.blue 2018-08-12 10:27:20 -05:00
kubelet.yml r/collectd: Ignore filesystems by path 2022-08-05 18:56:48 -05:00
loki.yml r/loki-caddy: Caddy reverse proxy for Loki 2024-11-05 06:54:27 -06:00
minio-backups.yml minio-backups: No syslog for nginx access logs 2024-10-20 12:10:17 -05:00
needproxy.yml r/useproxy: Configure system-wide proxy 2024-08-12 18:47:04 -05:00
nextcloud.yml nextcloud: Scrape logs with Promtail 2024-10-13 18:05:50 -05:00
nut-monitor.yml nut-monitor: Require both UPS to be online 2024-01-25 21:22:04 -06:00
postgresql.yml postgresql: Add receipts/user DB 2025-03-16 14:47:30 -05:00
prometheus.yml Switch Prometheus/collectd to pull 2021-10-30 16:41:17 -05:00
pyrocufflink-dhcp.yml pyrocufflink-dhcp: DHCP reservations for VM hosts 2021-02-17 20:33:41 -06:00
radius.yml Move APs to Management network 2018-07-15 09:19:39 -05:00
remote-blackbox.yml remote-blackbox: Add group 2025-01-26 13:08:59 -06:00
repohost.yml r/repohost: Configure Yum package repo host 2023-11-07 20:51:10 -06:00
restic.yml restic: Add role+playbook for Restic backups 2024-09-04 09:40:29 -05:00
samba-dc.yml r/samba-cert: Obtain LDAP/TLS cert via ACME 2024-06-12 18:33:24 -05:00
smtp-relay.yml smtp-relay: Rewrite dustin@hatch.name 2024-08-22 16:17:00 -05:00
sudo.yml users: Configure sudo on some machines 2025-01-26 13:08:59 -06:00
taiga.yml taiga: Add playbook for Taiga 2019-09-19 19:51:45 -05:00
vm-hosts.yml Deploy new Kubernetes nodes 2024-11-24 10:33:21 -06:00
zabbix-server.yml zabbix-server: Allow SMTP relay from any loopback 2019-04-15 10:05:04 -05:00
zabbix.yml hosts: Add hosts to zabbix group 2018-04-14 15:47:49 -05:00