1. 20 Mar, 2021 1 commit
    • Nico's avatar
      revproxy-03: disable grafana · fe1d2280
      Nico authored
      Grafana has now moved to ffs05, hence disable for ffs03 to avoid the
      renew getting stuck.
      fe1d2280
  2. 13 Feb, 2021 2 commits
  3. 21 Jan, 2021 2 commits
  4. 16 Jan, 2021 1 commit
  5. 14 Jan, 2021 3 commits
  6. 12 Jan, 2021 1 commit
  7. 10 Jan, 2021 5 commits
  8. 09 Jan, 2021 3 commits
  9. 02 Jan, 2021 2 commits
  10. 11 Dec, 2020 4 commits
  11. 05 Dec, 2020 3 commits
    • Nico's avatar
      add playbook to remove salt · b20b5607
      Nico authored
      This is currently completely untested.
      b20b5607
    • Nico's avatar
      roles: users: handle revoking root access · 78534d55
      Nico authored
      When a user used to have root access but is then removed, we still left
      the pubkey in place. Correctly handle this case by removing all pubkeys
      of all users which don't have root access.
      78534d55
    • Nico's avatar
      roles: users: add support for revoking ssh keys · 3bff3d93
      Nico authored
      When a SSH key was lost or isn't used any more, we should be able to
      remove it from all systems.
      
      This can be done by specififing a new key revoked_pubkeys in a
      user_database entry.
      
      At the same time, revoke two keys of mine which are no longer in use.
      3bff3d93
  12. 04 Dec, 2020 5 commits
  13. 03 Dec, 2020 1 commit