Compare commits

..

30 Commits

Author SHA1 Message Date
d8b6e9a91d chore: spacing 2026-06-08 09:27:53 +00:00
f5ea5d8335 fix: update instead of upgrade 2026-06-08 09:23:20 +00:00
123c0f8e69 chore: cleaning 2026-06-08 09:18:48 +00:00
38b27a41fd add: fail gracefully when no ready 2026-06-08 08:46:11 +00:00
422adf9c6e add: check if version has changed 2026-06-08 08:44:01 +00:00
5c49bb402e fix: variable name 2026-06-08 08:37:48 +00:00
21bbe4a5e3 fix: quotes 2026-06-08 08:34:27 +00:00
70b58bc4bf test: force update for vertex 2026-06-08 08:33:19 +00:00
b69381adc3 test: simulate update 2026-06-08 08:32:40 +00:00
e95cfeccb3 fix: notifications priority 2026-06-08 07:54:44 +00:00
e96b437df7 fix: jinja condition 2026-06-08 07:45:00 +00:00
8f2494d080 change: clearer ntfy notification 2026-06-08 07:43:52 +00:00
568c514d3f fix: use file lock 2026-06-08 06:57:26 +00:00
2398dac8c2 fix: revert condition 2026-06-05 19:16:49 +00:00
5f9a4ae25c change: use check mode to verify updates available 2026-06-05 19:10:28 +00:00
41955a69f7 fix: add update packages changed condition to reboot 2026-06-05 07:36:29 +00:00
b43300db27 change: notification message 2026-06-04 21:31:11 +00:00
8b72074f8a chore: cleaning 2026-06-04 21:28:01 +00:00
d3e928275a fix: merge apt update and upgrade 2026-06-04 21:21:34 +00:00
7bad4fbf3c feat: split the playbook into 3 plays 2026-06-04 20:58:32 +00:00
11cc7fbc97 fix: remove reboot condition 2026-06-03 20:59:34 +00:00
7362282a0e fix: disable maintenance before checking ceph 2026-06-03 20:15:31 +00:00
ec1c36b455 add: author 2026-06-03 19:55:21 +00:00
d82c3639ce fix: 10-wan script 2026-06-03 19:52:00 +00:00
5b9847e80a add: 10-wan CARP script 2026-06-03 19:37:31 +00:00
e9104c64f2 fix: use inventory_hostname_short 2026-06-03 18:47:15 +00:00
8aee8506ce fix: become false for ntfy 2026-06-03 18:44:33 +00:00
1b204f0191 fix: search using whitespaces for quorum check 2026-06-03 18:36:26 +00:00
03d5289740 fix: env to var 2026-06-03 18:31:24 +00:00
67613c009d add: update Proxmox VE playbook 2026-06-03 18:20:15 +00:00
4 changed files with 1 additions and 42 deletions

2
.gitignore vendored
View File

@@ -2,5 +2,3 @@
**/.terraform* **/.terraform*
*.tfstate* *.tfstate*
*credentials.auto.tfvars *credentials.auto.tfvars
# Bruno
.bruno

View File

@@ -1,20 +0,0 @@
---
all:
children:
opnsense:
vars:
ansible_connection: local
children:
opnsense_backup:
hosts:
cerbere-head2:
ansible_host: 192.168.88.3
main_role: BACKUP
hypervisor: TrueNAS
opnsense_master:
hosts:
cerbere-head1:
ansible_host: 192.168.88.2
main_role: MASTER
hypervisor: Proxmox
proxmox_vmid: 122

View File

@@ -94,10 +94,6 @@
retries: 60 retries: 60
delay: 15 delay: 15
- name: Pause 15s
ansible.builtin.pause:
seconds: 15
- name: Update packages - name: Update packages
ansible.builtin.apt: ansible.builtin.apt:
upgrade: full upgrade: full

View File

@@ -38,9 +38,6 @@ if ($vhid !== $primary_vhid) {
// Interface key to manage // Interface key to manage
$ifkey = 'wan'; $ifkey = 'wan';
$real_if = get_real_interface('wan');
// Fallback gateway name
$gw_name = 'LAN_GW';
// Determine whether WAN interface is currently enabled // Determine whether WAN interface is currently enabled
$ifkey_enabled = !empty($config['interfaces'][$ifkey]['enable']) ? true : false; $ifkey_enabled = !empty($config['interfaces'][$ifkey]['enable']) ? true : false;
// Lock file to prevent interface flapping // Lock file to prevent interface flapping
@@ -83,18 +80,6 @@ if ($type === "MASTER") {
unset($config['interfaces'][$ifkey]['enable']); unset($config['interfaces'][$ifkey]['enable']);
write_config("disable interface '$ifkey' due CARP event '$type'", false); write_config("disable interface '$ifkey' due CARP event '$type'", false);
interface_configure(false, $ifkey, false, false); interface_configure(false, $ifkey, false, false);
// Remove WAN default gateway
mwexec("/sbin/route delete default");
foreach ($config['OPNsense']['Gateways']['gateway_item'] as $gw) {
if ($gw['name'] === $gw_name) {
$gw_ip = $gw['gateway'];
break;
}
}
// Shutdown WAN interface
mwexec("/sbin/ifconfig {$real_if} down")
// Add fallback default gateway
mwexec("/sbin/route add default {$gw_ip}");
// Create lock file // Create lock file
file_put_contents($lock_file, time()); file_put_contents($lock_file, time());
sleep($lock_default_age); sleep($lock_default_age);