| Age | Commit message (Collapse) | Author | Files | Lines | |
|---|---|---|---|---|---|
| 2 days | Disable ipv6 completely and remove related code | Ahmed Abdelhalim | 1 | -3/+0 | |
| Co-Authored-By: Claude.ai | |||||
| 3 days | Add missing vars and fix mappings in examples | Ahmed Abdelhalim | 1 | -1/+1 | |
| 13 days | Configure preference of ip family (ipv4 > ipv6) | Ahmed Abdelhalim | 1 | -0/+1 | |
| 2026-07-10 | Extract logind lid configuration into it's own role | Ahmed Abdelhalim | 1 | -1/+1 | |
| 2026-07-08 | Route IPv6 through WireGuard VPN via radvd and static gateway | Ahmed Abdelhalim | 1 | -0/+5 | |
| Add radvd to gateway role to advertise Pi as high-preference IPv6 default router using the stable ULA prefix (fd1e:.../64). With FritzBox also sending RAs, devices end up with ECMP between Pi and FritzBox. To solve this, add network_ipv6_gateway (Pi's link-local) as a static route with metric 100 to all managed hosts — beats RA metric 425, ensuring all IPv6 default traffic goes through Pi. Fix IPv6 MASQUERADE in gateway-apply-rules: - Direct mode: add MASQUERADE on end0 (LAN devices use ULA source addresses not known to FritzBox, so Pi must NAT them) - FORWARD rules: restrict to RELATED,ESTABLISHED only — previously the broad ACCEPT rule passed un-NAT'd packets alongside masqueraded copies, causing duplicate SYNs, conntrack corruption, and RSTs - MASQUERADE/clear rules: match by interface not by source subnet (devices may use any source address, not just the ULA prefix) - VPN mode return traffic: explicitly restrict to wg+→end0 direction Add network_ipv6_gateway var (optional) to network role NM templates (ethernet, wifi, bridge) — injects a static IPv6 default route at metric 100 when set. Add rpi5 static route to FritzBox link-local so Pi keeps IPv6 after FritzBox RA is disabled. Force SSH to IPv4 for *.local hosts (AddressFamily inet) — prevents Ansible from hanging on mDNS returning multiple IPv6 addresses. Update gateway and pihole READMEs with two-step IPv6 setup process. Co-Authored-By: Claude.ai | |||||
| 2026-07-08 | Fix install proxmoxer using pip | Ahmed Abdelhalim | 1 | -2/+2 | |
| Using mise or python role broke on other machines so went with the simplest solution for now, it's safe to break the system packages for python as this is not used internally in other ways Also proxmoxer 2+ is needed to work with the proxmox module | |||||
| 2026-07-06 | Fix network setup on pve | Ahmed Abdelhalim | 1 | -2/+1 | |
| 2026-07-06 | Fix pve network setup | Ahmed Abdelhalim | 1 | -7/+1 | |
| 2026-07-03 | Refactor pve roles to create storage separately | Ahmed Abdelhalim | 1 | -4/+3 | |
| 2026-07-03 | Refactor pve and add pve-network role to configure the pve network | Ahmed Abdelhalim | 1 | -2/+6 | |
| 2026-07-03 | Disable unstable ipv6 setup for now | Ahmed Abdelhalim | 1 | -3/+0 | |
| 2026-07-03 | Update ethtool to handle laptop lid suspend issues | Ahmed Abdelhalim | 1 | -0/+3 | |
| When using WoL with laptops (ex Lenovo) closing the lid suspends the laptop and breaks WoL, this is to allow configuring the lid behavior | |||||
| 2026-06-30 | Fix ipv6 with examples | Ahmed Abdelhalim | 1 | -0/+3 | |
| 2026-06-30 | Disable ipv6 by defaults | Ahmed Abdelhalim | 1 | -3/+0 | |
| Since ipv6 seems to be causing a lot of issues with the new ISP | |||||
| 2026-06-30 | Update pve admin password in example and real configurations | Ahmed Abdelhalim | 1 | -0/+3 | |
| 2026-06-27 | Add restic role w/testing | Ahmed Abdelhalim | 1 | -0/+2 | |
| 2026-05-06 | Add proxmox VE (with kernel helper) on pve.local | Ahmed Abdelhalim | 1 | -0/+6 | |
| 2026-05-04 | Add pve host mapping | Ahmed Abdelhalim | 1 | -0/+7 | |
 |
index : ansible-distro-configure.git | |
| Ansible Roles to configure different (linux) distros |
| summaryrefslogtreecommitdiffstats |