Infrastructure/ansible
5
0
Fork 0
Code Issues Pull requests 3 Projects Releases Packages Wiki Activity Actions

Reconfigure IPv6

Browse source 
Reconfigure IPv6

Reconfigure IPv6

Reconfigure IPv6

Reconfigure IPv6

Reconfigure IPv6

Reconfigure IPv6

Reconfigure IPv6

Configure IPv6

Reconfigure IPv6

Reconfigure IPv6

Reconfigure IPv6

Reconfigure IPv6

Reconfigure IPv6

Reconfigure IPv6

Reconfigure IPv6

Reconfigure IPv6

Configure IPv6

Update IPv6 address for noc02 rule

Update IPv6 address in confg for noc02 address change

Update IPv6 address for proxy04

Update IPv6 address for torrent02
This commit is contained in:
Eddie Jennings, Jr 2021-09-24 22:59:07 -04:00 • committed by kevin
parent 4d30c7add3
commit 6ef496d56a
13 changed files with 32 additions and 22 deletions
Download patch file Download diff file Expand all files Collapse all files

5
inventory/host_vars/download-ib01.fedoraproject.org
View file

@ -12,8 +12,9 @@ volgroup: /dev/vg_guests
eth0_ip: 152.19.134.145 eth0_ip: 152.19.134.145
eth0_nm: 255.255.255.128 eth0_nm: 255.255.255.128
has_ipv6: yes has_ipv6: yes
eth0_ipv6: "2610:28:3090:3001:dead:beef:cafe:fed6" eth0_ipv6: "2600:2701:4000:5211:dead:beef:00fe:fed6"
eth0_ipv6_gw: "2610:28:3090:3001::1" eth0_ipv6_nm: 104
eth0_ipv6_gw: "2600:2701:4000:5211::1"
datacenter: ibiblio datacenter: ibiblio
postfix_group: vpn postfix_group: vpn

5
inventory/host_vars/noc02.fedoraproject.org
View file

@ -8,8 +8,9 @@ volgroup: /dev/vg_guests
eth0_ip: 152.19.134.192 eth0_ip: 152.19.134.192
eth0_nm: 255.255.255.128 eth0_nm: 255.255.255.128
has_ipv6: yes has_ipv6: yes
eth0_ipv6: "2610:28:3090:3001:dead:beef:cafe:fed9" eth0_ipv6: "2600:2701:4000:5211:dead:beef:00fe:fed9"
eth0_ipv6_gw: "2610:28:3090:3001::1" eth0_ipv6_nm: 104
eth0_ipv6_gw: "2600:2701:4000:5211::1"
postfix_maincf: "postfix/main.cf/main.cf.noc02.fedoraproject.org" postfix_maincf: "postfix/main.cf/main.cf.noc02.fedoraproject.org"
postfix_mastercf: "postfix/master.cf/master.cf.noc02.fedoraproject.org" postfix_mastercf: "postfix/master.cf/master.cf.noc02.fedoraproject.org"
postfix_transport_filename: transports.noc02.fedoraproject.org postfix_transport_filename: transports.noc02.fedoraproject.org

5
inventory/host_vars/ns02.fedoraproject.org
View file

@ -8,8 +8,9 @@ volgroup: /dev/vg_guests
eth0_ip: 152.19.134.139 eth0_ip: 152.19.134.139
eth0_nm: 255.255.255.128 eth0_nm: 255.255.255.128
has_ipv6: yes has_ipv6: yes
eth0_ipv6: "2610:28:3090:3001:dead:beef:cafe:fed5" eth0_ipv6: "2600:2701:4000:5211:dead:beef:00fe:fed7"
eth0_ipv6_gw: "2610:28:3090:3001::1" eth0_ipv6_nm: 104
eth0_ipv6_gw: "2600:2701:4000:5211::1"
postfix_group: vpn postfix_group: vpn
vpn: true vpn: true

5
inventory/host_vars/people02.fedoraproject.org
View file

@ -9,8 +9,9 @@ volgroup: /dev/vg_guests
eth0_ip: 152.19.134.199 eth0_ip: 152.19.134.199
eth0_nm: 255.255.255.128 eth0_nm: 255.255.255.128
has_ipv6: yes has_ipv6: yes
eth0_ipv6: "2610:28:3090:3001:5054:ff:fea7:9474" eth0_ipv6: "2600:2701:4000:5211:dead:beef:00a7:9474"
eth0_ipv6_gw: "2610:28:3090:3001::1" eth0_ipv6_nm: 104
eth0_ipv6_gw: "2600:2701:4000:5211::1"
ks_url: http://209.132.181.6/repo/rhel/ks/kvm-rhel-7-people ks_url: http://209.132.181.6/repo/rhel/ks/kvm-rhel-7-people
ks_repo: http://209.132.181.6/repo/rhel/RHEL7-x86_64/ ks_repo: http://209.132.181.6/repo/rhel/RHEL7-x86_64/

6
inventory/host_vars/proxy04.fedoraproject.org
View file

@ -28,9 +28,9 @@ eth0_ipv4_nm: 25
eth0_ipv4_gw: 152.19.134.129 eth0_ipv4_gw: 152.19.134.129
has_ipv6: yes has_ipv6: yes
eth0_ipv6: "2610:28:3090:3001:dead:beef:cafe:fed3" eth0_ipv6: "2600:2701:4000:5211:dead:beef:00fe:fed3"
eth0_ipv6_nm: 64 eth0_ipv6_nm: 104
eth0_ipv6_gw: "2610:28:3090:3001::1" eth0_ipv6_gw: "2600:2701:4000:5211::1"
mac0: "52:54:00:e3:bb:8f" mac0: "52:54:00:e3:bb:8f"
public_hostname: proxy04.fedoraproject.org public_hostname: proxy04.fedoraproject.org

6
inventory/host_vars/proxy12.fedoraproject.org
View file

@ -28,9 +28,9 @@ eth0_ipv4_nm: 25
eth0_ipv4_gw: 152.19.134.129 eth0_ipv4_gw: 152.19.134.129
has_ipv6: yes has_ipv6: yes
eth0_ipv6: "2610:28:3090:3001:5054:ff:feda:bbd8" eth0_ipv6: "2600:2701:4000:5211:dead:beef:00da:bbd8"
eth0_ipv6_nm: 64 eth0_ipv6_nm: 104
eth0_ipv6_gw: "2610:28:3090:3001::1" eth0_ipv6_gw: "2600:2701:4000:5211::1"
mac0: "52:54:00:84:5d:9f" mac0: "52:54:00:84:5d:9f"
public_hostname: proxy12.fedoraproject.org public_hostname: proxy12.fedoraproject.org

5
inventory/host_vars/smtp-mm-ib01.fedoraproject.org
View file

@ -6,8 +6,9 @@ volgroup: /dev/vg_guests
eth0_ip: 152.19.134.143 eth0_ip: 152.19.134.143
eth0_nm: 255.255.255.128 eth0_nm: 255.255.255.128
has_ipv6: yes has_ipv6: yes
eth0_ipv6: "2610:28:3090:3001:5054:ff:fe58:5c17" eth0_ipv6: "2600:2701:4000:5211:dead:beef:0058:5c17"
eth0_ipv6_gw: "2610:28:3090:3001::1" eth0_ipv6_nm: 104
eth0_ipv6_gw: "2600:2701:4000:5211::1"
vmhost: ibiblio05.fedoraproject.org vmhost: ibiblio05.fedoraproject.org
datacenter: ibiblio datacenter: ibiblio

5
inventory/host_vars/torrent02.fedoraproject.org
View file

@ -8,8 +8,9 @@ volgroup: /dev/vg_guests
eth0_ip: 152.19.134.148 eth0_ip: 152.19.134.148
eth0_nm: 255.255.255.128 eth0_nm: 255.255.255.128
has_ipv6: yes has_ipv6: yes
eth0_ipv6: "2610:28:3090:3001:dead:beef:cafe:fed7" eth0_ipv6: "2600:2701:4000:5211:dead:beef:00fe:fed7"
eth0_ipv6_gw: "2610:28:3090:3001::1" eth0_ipv6_nm: 104
eth0_ipv6_gw: "2600:2701:4000:5211::1"
ks_url: http://209.132.181.6/repo/rhel/ks/kvm-rhel-7-ext ks_url: http://209.132.181.6/repo/rhel/ks/kvm-rhel-7-ext
ks_repo: http://209.132.181.6/repo/rhel/RHEL7-x86_64/ ks_repo: http://209.132.181.6/repo/rhel/RHEL7-x86_64/

4
inventory/host_vars/unbound-ib01.fedoraproject.org
View file

@ -7,6 +7,10 @@ ks_repo: http://infrastructure.fedoraproject.org/repo/rhel/RHEL7-x86_64/
volgroup: /dev/vg_guests volgroup: /dev/vg_guests
eth0_ip: 152.19.134.150 eth0_ip: 152.19.134.150
eth0_nm: 255.255.255.128 eth0_nm: 255.255.255.128
has_ipv6: yes
eth0_ipv6: "2600:2701:4000:5211:dead:beef:00fe:fed1"
eth0_ipv6_nm: 104
eth0_ipv6_gw: "2600:2701:4000:5211::1"
vmhost: ibiblio05.fedoraproject.org vmhost: ibiblio05.fedoraproject.org
datacenter: ibiblio datacenter: ibiblio
postfix_group: vpn postfix_group: vpn

2
roles/base/templates/iptables/ip6tables
View file

@ -28,7 +28,7 @@
-A INPUT -m conntrack --ctstate NEW -m tcp -p tcp --dport 22 -j ACCEPT -A INPUT -m conntrack --ctstate NEW -m tcp -p tcp --dport 22 -j ACCEPT
# for nrpe (if we want noc02 to be able to get into remote systems) # for nrpe (if we want noc02 to be able to get into remote systems)
#-A INPUT -p tcp -m tcp --dport 5666 -s 2610:28:3090:3001:dead:beef:cafe:fed9 -j ACCEPT #-A INPUT -p tcp -m tcp --dport 5666 -s 2600:2701:4000:5211:dead:beef:00fe:fed9 -j ACCEPT
# if the host/group defines incoming tcp_ports - allow them # if the host/group defines incoming tcp_ports - allow them
{% if tcp_ports is defined %} {% if tcp_ports is defined %}

2
roles/mediawiki/templates/LocalSettings.php.fp.j2
View file

@ -356,7 +356,7 @@ $wgSquidServersNoPurge = array(
# proxy04 # proxy04
"152.19.134.142", "152.19.134.142",
"2610:28:3090:3001:dead:beef:cafe:fed3", "2600:2701:4000:5211:dead:beef:00fe:fed3",
"192.168.1.14", "192.168.1.14",
# proxy05 # proxy05

2
roles/nagios_server/templates/httpd/nagios.conf.j2
View file

@ -40,7 +40,7 @@ Alias /robots.txt /var/www/robots.txt
<Location /apache-status> <Location /apache-status>
SetHandler server-status SetHandler server-status
{% if vars['nagios_location'] == 'external' %} {% if vars['nagios_location'] == 'external' %}
Require ip 2610:28:3090:3001:dead:beef:cafe:fed9 Require ip 2600:2701:4000:5211:dead:beef:00fe:fed9
{% else %} {% else %}
Require ip 10.3.163.10 Require ip 10.3.163.10
{% endif %} {% endif %}

2
roles/torrent/files/opentracker-ipv6.conf
View file

@ -7,7 +7,7 @@
# If no listen option is given (here or on the command line), opentracker # If no listen option is given (here or on the command line), opentracker
# listens on 0.0.0.0:6969 tcp and udp. # listens on 0.0.0.0:6969 tcp and udp.
# #
listen.tcp_udp [2610:28:3090:3001:dead:beef:cafe:fed7]:6969 listen.tcp_udp [2600:2701:4000:5211:dead:beef:00fe:fed7]:6969
# listen.tcp_udp 192.168.0.1:80 # listen.tcp_udp 192.168.0.1:80
# listen.tcp_udp 10.0.0.5:6969 # listen.tcp_udp 10.0.0.5:6969
# #