mirror of
https://github.com/liv-io/ansible-roles-openbsd
synced 2026-03-24 03:54:49 +00:00
No description
- Shell 98.8%
- Vim Script 1.2%
84cd050b80
- Rename parameter from 'ipmi_exporter_monitor_monit_state' to 'ipmi_exporter_monit_state' |
||
|---|---|---|
| bash | ||
| ca_certificate | ||
| fstab | ||
| group | ||
| hostname | ||
| hostname_if | ||
| hosts | ||
| ipmi_exporter | ||
| monit | ||
| monit_exporter | ||
| motd | ||
| nginx | ||
| node_exporter | ||
| nsd | ||
| openntpd | ||
| opensmtpd | ||
| openssh | ||
| package | ||
| passwd | ||
| periodic | ||
| pf | ||
| rc | ||
| resolver | ||
| rest_server | ||
| restic | ||
| root | ||
| rsyslog | ||
| shell | ||
| signify | ||
| squid | ||
| sudo | ||
| sysctl | ||
| syslogd | ||
| syspatch | ||
| tinc | ||
| tmux | ||
| unbound | ||
| unbound_adblock | ||
| user | ||
| vim | ||
| wireguard | ||
| .editorconfig | ||
| .gitattributes | ||
| .gitignore | ||
| .pre-commit-config.yaml | ||
| CREDITS.md | ||
| LICENSE | ||
| README.md | ||
ansible-roles-openbsd
Index
About
ansible-roles-openbsd is a collection of well curated Ansible roles for the OpenBSD operating system. All Ansible roles are licensed under the Simplified BSD License.
Features
- Configurations follow the secure-by-default principle
- Roles are mostly self-contained and dependencies avoided
- Roles and services support multiple states (install, remove, enable, disable, inactive)
- Scripts and cronjobs support multiple states (enable, disable)
- Services can be monitored with Monit and exported via monit_exporter to Prometheus
- Scripts support Email and Prometheus monitoring
- Logs can be forwarded with syslog to Loki
- Roles can proxy HTTP/HTTPS traffic through Squid forward proxy
- Host-based firewall restricts ingress and egress traffic by default
- PF can be used as network-based/perimeter firewall
- Restic and rest-server are available as backup solution
- OpenNTPD is configurable as NTP client and server
- Unbound is available as resolving DNS server
- NSD is available as authoritative DNS server
- Prometheus has built-in alerting rules and Grafana dashboards
- Loki has built-in alerting rules and Grafana dashboards
- Parameters are documented with examples
- Changes adhere to semantic versioning guidelines
- Roles contain changelog
Support
The following operating systems are supported:
- OpenBSD 7.7
- OpenBSD 7.8
Dependencies
The Ansible control machine depends on:
- Ansible >= 2.15.0
The Ansible managed node depends on:
- Python >= 3.10.0
License
Distributed under the Simplified BSD License.
See LICENSE file for more information.
Credits
See CREDITS file for more information.
Appendix
Loki/Grafana Dashboards
| Suricata |
|---|
 |
Prometheus/Grafana Dashboards
| System Status | Script Status |
|---|---|
| Node Exporter | IPMI Exporter |
|---|---|
| Network Traffic | Ping Prober |
|---|---|