Compare commits
7 Commits
01d2efa846
...
master
| Author | SHA1 | Date | |
|---|---|---|---|
| e2cc14b686 | |||
| 96d82469f5 | |||
| ad60e1498d | |||
| f6b7de6a39 | |||
| 761c840268 | |||
| a6c7b185c0 | |||
| 5d3445cfdc |
2
.gitignore
vendored
2
.gitignore
vendored
@@ -2,4 +2,4 @@
|
||||
Gemfile.lock
|
||||
FileList
|
||||
.scannerwork
|
||||
.vscode/
|
||||
.vscode
|
||||
37
README.md
37
README.md
@@ -17,6 +17,10 @@
|
||||
- [confdroid\_nagios](#confdroid_nagios)
|
||||
- [confdroid\_fail2ban](#confdroid_fail2ban)
|
||||
- [control repo template](#control-repo-template)
|
||||
- [confdroid\_automatic](#confdroid_automatic)
|
||||
- [confdroid\_selinux](#confdroid_selinux)
|
||||
- [confdroid\_ssh](#confdroid_ssh)
|
||||
- [confdroid\_java](#confdroid_java)
|
||||
- [FAQ](#faq)
|
||||
|
||||
## Summary
|
||||
@@ -128,15 +132,46 @@ Install, configure and manage fail2ban to protect hosts and services against bru
|
||||
- fail2ban.local (overrides default settings in fail2ban.conf)
|
||||
- jail.conf
|
||||
- jail.local (overrides default settings in jail.conf)
|
||||
- manage service status
|
||||
- manage service
|
||||
|
||||
### [control repo template](https://3for.me/nq00s)
|
||||
|
||||
A template for starting a r10k control repo in a new puppet infrastructure
|
||||
|
||||
### [confdroid_automatic](https://3for.me/wglig)
|
||||
|
||||
Install, configure and manage automatic OS system updates on RHEL-9 like operating systems using DNF.
|
||||
|
||||
- install required binaries,
|
||||
- manage files and directories with proper selinux context
|
||||
- manage main configurations files via parameters
|
||||
- manage service
|
||||
|
||||
### [confdroid_selinux](https://3for.me/z2tsi)
|
||||
|
||||
- Install binaries required for selinux and related tools
|
||||
- manage /etc/sysconfig/selinux file (file system permissions, selinux context, content)
|
||||
- manage current selinux status (permissive,enforcing)
|
||||
|
||||
### [confdroid_ssh](https://3for.me/jhjim)
|
||||
|
||||
Install, configure and manage SSHD and ssh settings
|
||||
|
||||
- install required binaries
|
||||
- manage local custom configuration based on parameters, overriding the defaults
|
||||
- manage selinux rules
|
||||
- manage service
|
||||
- (optional) manage firewall
|
||||
|
||||
### [confdroid_java](https://3for.me/erwc5)
|
||||
|
||||
Install java binaries for usage with other modules, i.e. confdroid_jenkins, as specified in parameters.
|
||||
|
||||
---
|
||||
|
||||
## FAQ
|
||||
|
||||
- Q: "Why are the names of the modules using underscore instead of hyphens?"
|
||||
A: The modules are best deployed through the [R10k](https://github.com/puppetlabs/r10k) service using a Puppetfile. The deployment process using Puppetfile would convert the name of say "confdroid-postgresql" into a module called "confdroid" locally on the puppet server, cutting off everything after the hyphen. It also would then not deploy more than one module, because they all would be called "confdroid"
|
||||
- Q: "why is always only Rocky 9 listed as supported OS"?
|
||||
A: In fact **any** RHEL-9 based OS should work. But all modules are thoroughly being tested under Rocky 9 as OS of choice.
|
||||
|
||||
Reference in New Issue
Block a user