jokester/ansible-playbooks
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
143 Commits 1 Branch 0 Tags
f6c4d36bbe5726bbfc86b6baa5dc6fc8ae326e52
Commit Graph
5 Commits
Author SHA1 Message Date
Clément Désiles 8756eb1183 feat(monitoring): add smartctl, fail2ban, wireguard exporters and dashboards 
- smartctl_exporter (disks), fail2ban exporter, wireguard exporter
- grafana dashboards for each exporter
- prometheus: firewall source rules, honor_labels/params scrape config
- node_exporter: zfs collector
- wireguard: nftables dep, resolvconf wrapper, reload fix
- remove superseded monitoring role
 2026-09-08 23:03:34 +02:00
Clément Désiles 120615c38f fix(fail2ban): start under ProtectSystem=strict hardening 
- log to journald via fail2ban.local (logtarget is a fail2ban.conf option,
  not jail.local) so the server can start without /var/log write access
- create the socket dir via RuntimeDirectory=fail2ban instead of a
  non-creating ReadWritePaths entry
- add ufw write paths so bans persist under the read-only namespace
- manage override.conf unconditionally and restart on change
 2026-09-05 16:21:49 +02:00
Clément Désiles ba37edd498 doc: add more ufw comments 2025-11-10 23:57:34 +01:00
Clément Désiles 2c421611ae chore: ansible-lint 2025-11-02 21:18:15 +01:00
Clément Désiles c612cc7839 chore: first commit 2025-07-25 20:23:54 +02:00