docs, config and ansible stuff for the "Erstaufnahmeeinrichtung Am Deutschen Platz"
 
 
 
Go to file
Gregor Michels 75549ae079 add a way to build an offline copy of the documentation
that looks pretty shitty :)
2022-07-03 02:13:11 +02:00
ansible-environment add venv for ansible 2022-07-03 01:24:40 +02:00
documentation add a way to build an offline copy of the documentation 2022-07-03 02:13:11 +02:00
files pass: add clarifying notes about gpg keys 2022-07-01 02:24:06 +02:00
password-store add playbook_provision_monitoring 2022-07-03 02:09:02 +02:00
templates add playbook_provision_monitoring 2022-07-03 02:09:02 +02:00
.gitignore add a way to build an offline copy of the documentation 2022-07-03 02:13:11 +02:00
README.md add a way to build an offline copy of the documentation 2022-07-03 02:13:11 +02:00
ansible-environment.txt add venv for ansible 2022-07-03 01:24:40 +02:00
ansible-inventory rename some ansible files/directories 2022-07-03 02:07:50 +02:00
ansible.cfg rename some ansible files/directories 2022-07-03 02:07:50 +02:00
environment environment: also configure http(s) proxy and enter python venv 2022-07-03 02:07:50 +02:00
playbook_create_ssh_config.yml playbook_create_ssh_config: make jumphosts possible 2022-06-30 01:41:11 +02:00
playbook_distribute_authorized_keys.yml playbook_distribute_authorized_keys: make available on all platforms! 2022-06-30 02:38:24 +02:00
playbook_provision_accesspoints.yml accesspoints: also install iwinfo 2022-07-03 00:43:26 +02:00
playbook_provision_backbone.yml poc for tunnel provisioning 2022-06-28 21:59:22 +02:00
playbook_provision_eap-adp-jump01.yml add vm eap-adp-jump01 2022-06-28 00:11:01 +02:00
playbook_provision_hyper01.yml add playbook_provision_hyper01 2022-07-03 02:07:50 +02:00
playbook_provision_monitoring.yml add playbook_provision_monitoring 2022-07-03 02:09:02 +02:00

README.md

Freifunk Leipzig - Erstaufnahme Einrichtung - Am Deutschen Platz

This repo contains the config and documentation for our installation at the "Erstaufnahme Einrichtung - Am Deutschen Platz"


more documentation / information will follow


Admin Guide

requirements:

  • ansible
  • pandoc (for offline documentation generation)
  • pass

Password Manager

  1. import all gpg keys (only on first use or new admin - all keys need to be trusted - use --edit-key to edit the trust level):
user@freifunk-admin:~/ffl-eae-adp/files/gpg$ gpg --import *
gpg: key F937CB4882C16136: "hirnpfirsich@ffl-eae-adp-password" not changed
gpg: key 2438B8ADFDF45447: 1 signature not checked due to a missing key
gpg: key 2438B8ADFDF45447: "Alexander Böhm <alexander.boehm@malbolge.net>" not changed
gpg: Total number processed: 2
gpg:              unchanged: 2
user@freifunk-admin:~/ffl-eae-adp/files/gpg$
  1. source environment (on every new shell):
user@freifunk-admin:~/ffl-eae-adp$ . environment 
  1. use :)
user@freifunk-admin:~/ffl-eae-adp$ pass
Password Store
├── accesspoints
│   ├── ap-0b99
│   ├── ap-1a38
│   ├── ap-2bbf
│   ├── ap-8f39
[...]
user@freifunk-admin:~/ffl-eae-adp

SSH

use playbook_create_ssh_config.yml to generate an ssh_config file that gets linked into your ssh_config. optionally specify a jumphost (ie. eae-adp-jump01)

user@freifunk-admin:~/ffl-eae-adp$ ansible-playbook -e jumphost=eae-adp-jump01 playbook_create_ssh_config.yml 

PLAY [generate ssh_config] ******************************************************************************************************************************************************************************************************

TASK [generate ssh_config file] *************************************************************************************************************************************************************************************************
changed: [localhost]

TASK [include custom ssh_config] ************************************************************************************************************************************************************************************************
ok: [localhost]

PLAY RECAP **********************************************************************************************************************************************************************************************************************
localhost                  : ok=2    changed=1    unreachable=0    failed=0    skipped=0    rescued=0    ignored=0   

user@freifunk-admin:~/ffl-eae-adp$ ssh gw-core01 uptime
 23:54:52 up  6:49,  load average: 0.05, 0.01, 0.00
user@freifunk-admin:~/ffl-eae-adp$