liv-io

For all the RHEL to Debian refugees, here are some Ansible roles. I made the jump when they killed CentOS:

https://github.com/liv-io/ansible-roles-debian

Luckily, it did not happen to me. I manage the "timezone" by default.

For anyone interested, I manage around 20+ Proxmox machines with these Ansible roles:

https://github.com/liv-io/ansible-roles-debian

Example playbook:

https://github.com/liv-io/ansible-playbooks-example/blob/mas...

This might help you on your start:

https://github.com/liv-io/ansible-roles-bsd

Seems like some folks are considering to create an alternative:

https://blog.centos.org/2020/12/future-is-centos-stream/#com...

https://join.slack.com/t/hpcng/shared_invite/zt-gy0st6mt-ijg...

I'd recommend you to use Unbound and specify the named.root or (root.hints) file:

https://www.internic.net/domain/named.root

This Ansible role takes care of configuring it all (CentOS):

https://github.com/liv-io/ansible-roles-centos/tree/master/u...

I have it for FreeBSD and OpenBSD too:

https://github.com/liv-io/ansible-roles-bsd/tree/master/unbo...

Or have it all automated using Ansible: https://github.com/liv-io/ansible-roles-bsd

Including Prometheus monitoring and Loki logging (on Linux though and work in progress)

Your response made me smile. Glad to see there are still reasonable folks out there. Working for a startup without a "resume-driven-development" CTO gave me the freedom to go "servermore" architecture with max flexibility.

This could have been written by me. And for who ever doesn't have time to maintain roles, there is Ansible Galaxy or tons of roles in GitHub, including mine: https://github.com/liv-io

Arecibo? Makes me want to listen to Carbon Based Lifeforms: https://www.youtube.com/watch?v=ifiICunJ-ZA

I've created an extended example for the firewall configuration: https://github.com/liv-io/ansible-playbooks-example/blob/mas...

https://github.com/liv-io/ansible-playbooks-example/blob/mas...

@0xC45: as a fellow OpenBSD user you might find my Ansible roles useful.

I also run OpenBSD HA firewall clusters with trunking (aggr), VLANs at home and work:

- https://github.com/liv-io/ansible-roles-bsd/tree/master/host... # interface configuration

- https://github.com/liv-io/ansible-roles-bsd/tree/master/open... # firewall configuration

For anyone who wants to operate it in a broader scale: https://github.com/liv-io/ansible-roles-centos/tree/master/w...

Instead of one role for hardening, I try to write my roles with secure defaults: https://github.com/liv-io/ansible-roles-centos

Thank you, happy to read! I hope more people discover the beauty of OpenBSD. Sane defaults, security standards and developers. Can't be grateful enough for their work.

I can only recommend the same, OpenBSD + pf is simply perfect. If you manage a couple of firewalls add Ansible and you'll never consider vendor firewall appliances again: https://github.com/liv-io/ansible-roles-bsd/tree/master/open...

what a great day, thanks so much OpenBSD developers! I have to update some Ansible roles this weekend :)