Questions tagged [configuration-management]

Configuration Management refers to establishing and maintaining standardized system configurations within an organization. This tag encompasses the process of defining the configuration profiles, and the software used to manage and deploy it.

Filter by
Sorted by
Tagged with
0
votes
0answers
9 views

Consul handling dynamic IP address

If suppose I have a node-exporter for my project running on aws instance its IP:port is:- "10.0.0.1:9100". I used the agent service register to add it to the consul. Then used consul_sd to ...
1
vote
2answers
50 views

Breaking down one prometheus.yml file?

I am using Prometheus for our monitoring and I have a lot of configs (our prometheus.yml main config file is 8000+ lines long). I would like to divide this out into logical groupings so that it ...
1
vote
1answer
27 views

dividing line between developer and sysadmin for server patch management [closed]

I know this question probably doesn't go here. but I dont know which overflow site to use. We have a web server that we use for customers to access our things. Our IT/security team believes it is on ...
0
votes
0answers
38 views

Set sysfs network option before interface is up

I want to set /sys/class/net/wwan0/qmi/raw_ip, and I don't want to do it by writing a shell script to take wwan0 down set it, then put wwan0 back up as a systemd unit. I'm trying this on Raspbian ...
0
votes
0answers
66 views

ansible Dynamic inventory Hosts value does not accept list of hosts

I am trying to create dynamic inventory for my setup. everywhere i see examples of IPs and hostname as list. but when i provide hosts value as list it error's out and says it has to be dict. Below ...
0
votes
1answer
35 views

Which server configuration management tool to use for my personal nextcloud deployment [closed]

I want to deploy a personal nextcloud application. I already have setup nextcloud using docker-compose, which tool should I use for server configuration management? I have the following things to ...
0
votes
0answers
10 views

Export apache-2.4 key information

Question Is there a good tool to export key configuration (primary), and metrics (secondary), from Apache which can discover: Served domain names (HTTP_HOST) Served URLs Primary contextRoots - not ...
0
votes
0answers
54 views

Any downside to using `sudo git` to upload `/etc/nginx/sites-available/` and `/etc/nginx/ssl/` config files on github?

I'm contemplating uploading config files from /etc/nginx/sites-available/ and /etc/nginx/ssl to a private Github repository. Doing so would require me to use git with sudo (or from root user) for the ...
0
votes
1answer
27 views

Best practice for production server configuration changes?

Changing the configuration of a production server is dangerous. A safety measure might involve taking a full system image snapshot prior to the change, changing the configuration and then, in the ...
0
votes
1answer
27 views

How to edit .conf files from a script

On a new VPS I might want to ensure that certain config values are set, or amended if they already exist. For example in /etc/systemd/journald.conf I want to set SystemMaxUse=100M if it's not already ...
0
votes
1answer
51 views

Nginx: Limiting number of connections for all content types with exceptions

I'm limiting number of simultaneous connections from one $remote_user to n using conn_limit It works like a charm. However, I will be thrilled to find a way to add exceptions to this. I want user to ...
0
votes
1answer
120 views

Nginx: restrict number of connections per basic auth user

Got nginx serving several big files. Users get access through basic authentication. htpasswd I want to curtail simultaneous download of files to 5 connections max PER USER. There are more than 1 user ...
2
votes
1answer
274 views

How to do docker-compose down without the config file that made the up?

When you do docker-compose up, it's based on a docker-compose.yml file. This usually brings up a network, builds and runs multiple services. If you do the up with the -d flag, the docker-compose ...
1
vote
1answer
41 views

How to fingerprint (euclidian distance) a filesystem on linux?

I have a large number of systems (100s) managed by a small group of people which has changed over time. Each system is installed using a base image (which has its own version which is different ...
0
votes
1answer
72 views

Consul as service discovery and configuration server in on premises local network

We are developing a product that will work as a set of services deployed on-premises (e.g. in the local network of an office, factory, etc.). Since there can be lots of deployment targets for each ...
0
votes
0answers
18 views

Rabbitmq MQTT Management UI message properties

Is there a way that can show message properties for every MQTT published message or subscription on management UI? There are some plugins that has been already installed to my rabbitmq server: ...
1
vote
1answer
112 views

System Center Configuration Manager using 'Run Script' feature on devices with AllSigned Execution Policy

We have System Center Configuration Manager version 1902 managing our devices. I would like to use the nice feature "Run Script", which runs PowerShell scripts on an entire collection of devices, but ...
0
votes
2answers
122 views

Docker remote administration tool for non-clustered workers

I am looking to scale a docker application used to perform periodic performance tests on equipment at several remote locations. This application requires running the same performance tests- using the ...
0
votes
1answer
398 views

Kubernetes nifi application deployment with configuration management

I have deployed my Ni-Fi application using Kubernetes on-prem setup. Now the image which i am using to spin up the docker container is from docker private registry, which i can see when i deployed ...
-1
votes
1answer
38 views

linux servers configuration management best practice [closed]

I have a bunch of servers where I periodically need to perform various operations, such as adding new repositories, installing packages, changing a couple of lines in configuration files, what ...
2
votes
1answer
80 views

Is there such a Chef service that managed by K8s? [closed]

I'm looking for a way to manage a Chef into my K8s cluster. My cluster is scaling up and down and I need a way to bootstrap different dependencies for each new node in the namespace. My nodes are in ...
1
vote
2answers
455 views

Push default settings to clients from print management

We have installed 30 printers to some 500 clients in our company using print management in Windows 2012 Server. Now we changed the default settings to the printers in print management (changed from ...
3
votes
1answer
3k views

Kubernetes, Docker and vm.max_map_count

While attempting to run ElasticSearch on K8 I ran into an error that would kill the container: max virtual memory areas vm.max_map_count [65530] is too low, increase to at least [262144] Fortunately ...
2
votes
2answers
123 views

Firewall configuration as code?

We are currently using a Sophos SG230 as Firewall / upstream router and configuration management is pure horror. Even manually backuping the configuration after every change will result in un-diffable ...
3
votes
1answer
432 views

Puppet: Replacing create_resources() with hash iteration

We're migrating from Puppet 2 to 5. It seems the scoping is a little different. Before, when using create_resources() with a hiera_hash and a default hash, variables from within the calling script ...
1
vote
1answer
35 views

Adding firewalld to existing infrastructure with minimal downtime

I have a mixed Ubuntu 16.04/Ubuntu 18.04 based infrastructure and would like to set up and configure firewalld on hosts. I am going to use an Ansible role for that (I have a Vagrant-based setup to ...
0
votes
2answers
110 views

Ansible: how to manage hosts if they are not always online?

My apologies if this question has been asked before, but I may not be using the correct terminology in my searches... In my spare time I'm managing a limited amount of hosts (desktops and laptops ...
0
votes
1answer
93 views

Ansible cloud stack module nested loop for security groups and ports

I'm trying to set multiple security groups at once using the ansible cloud stack module. The yaml file currently looks like this: - name: add inbound tcp rules to security group web ...
0
votes
1answer
27 views

rudder / plugin datasources

After having successfully compiled, installed and tested the rudder data sources plugin, I deleted some datasources values in datasources plugin, but they are still present into node properties, is it ...
3
votes
1answer
646 views

Using Ansible ini_file with nested dict?

What I am trying to achieve is the following. Suppose we have a playbook similar to the following one: --- - hosts: local tasks: - ini_file: path: test.ini create: yes ...
-1
votes
1answer
208 views

Automating windows configuration [closed]

This is more a workstation question than server itself, but I believe is best suited in this site: I want to automate Windows 10 Pro workstation configuration settings. I want to be able to automate ...
1
vote
1answer
72 views

Rudder plugins compilation

I need to get rudder plugins, I git cloned it but I need to compile it on another machine which does not have access to the internet. I folllowed the instructions to compile the plugin in rudder-...
3
votes
1answer
263 views

How to make Rudder set different config for each node?

How can I make Rudder set a config dynamically depending on which node it is applying the directive? For e.g. - Managing hundreds of nodes, each is supposed to have a file 'storage_password' which ...
1
vote
1answer
141 views

AWS auto-scale shared Wordpress web server - AMI vs user scripts

I have a shared Wordpress hosting server with approximately 50 sites on it, which is fully configured via Ansible. I'm trying to find a good boundary between a) updating AMIs every time a site is ...
0
votes
1answer
2k views

Microsoft Intune conflict resolution

I have a number of devices enrolled in Microsoft Intune. Currently, they all share a single set of Intune configuration profiles and compliance policies; our "all employees" group has the profiles/...
1
vote
0answers
90 views

Can't find jetty config file on Fedora 28

I installed jetty8 on fedora 28, but I do not know where is the configuration file for the server. In Ubuntu the jetty8 configuration file is /etc/default/jetty8. To install jetty I've used: dnf ...
1
vote
1answer
89 views

How to distribure sudoers files with REX Configuration Management

When trying to push a sudoers file to other machines, the rexcm task/command gets stuck. The Problem is (so it seems to me), that the sudoers file is owned by the rex-user when writing and "other" ...
1
vote
1answer
115 views

How to backup a file before changing it with “REX Configuration management” (rexify)

How do I backup files when making a change with rex cm (rexify.org) - or do I have to do this manually? I see no option in the File.pm API - description. I hope there is some undocumented feature. ...
0
votes
0answers
27 views

How do you keep track of how a certain software installation impacts your system?

I would like to get some advice on how you approach a new software installation on Windows to be able to extract the impact that software makes on your system and attack surface. I need to know what ...
0
votes
0answers
37 views

Best way to keep the list of servers, OSs, Databases and so on

I have a Microsoft Visio file in which I list the list of sever my organization has, but not only that, also wich OS they have, Databases, and so on. The problem with the Visio file is that is ...
1
vote
1answer
24 views

Pushing my configuration files to VMs. What’s a good tool to bring this under source control? [closed]

I have a couple of VMs where I go and edit Nginx config files, fail2ban config files, php-fpm files etc. I want to move this to source control and push it out. Sort of similar to this https://...
1
vote
2answers
611 views

Ansible ini_file module does not create sections when no options specified

I use Ansible to build configuration files in ini format. When I use the ini_file module with option and value pair it works as expected, for example: - name: Create configuration file ini_file: ...
2
votes
2answers
174 views

Unable to locate switch on network

I have a HP 2530-8G on the network which we cannot log in to as we do not know the management IP address. The MAC address does not appear in any of the DHCP leases so I would assume it is using a ...
2
votes
2answers
190 views

Shutdown Cron during execution of SaltStack

If we update our systems with SaltStack this takes about 40 seconds. During these 40 seconds the state of the system is not consistent. If there are cron jobs which start during this period, it is ...
0
votes
1answer
43 views

What does Puppet indicate with notice “altered - with untracked files”

I receive the following notice from a puppet agent -t run that does (or at least should) not effect any changes: Info: Applying configuration version '<id> - altered - with untracked files' ...
1
vote
2answers
220 views

“duplicate” a running server

Instead of using Ansible or some other configuration management tool, after many months of being the admin of this ubuntu 16.04 server, I made a lot of changes to the system: changed config files in /...
1
vote
0answers
1k views

Nginx service is running successfully but returns apache default page?

i installed nginx on server(ubuntu 16.04) which already had apache2 and, done this following configuration, ->changed apache port 80 to 8888 so nginx would listen to 80 ->restarted apache and ...
10
votes
1answer
4k views

How to split out Prometheus config files?

Right now we're using Prometheus for our monitoring and we have a lot of config (our prometheus.yml main config file is 1400+ lines long). I would like to split this out into logical groupings (maybe ...
0
votes
2answers
209 views

Where does dependency User[root] (has failures) arise in Puppet manifest

The following Puppet manifest is meant for installing a binary and a systemd service description file, for starting the binary as a service, and for restarting the service when either the binary or ...
0
votes
1answer
919 views

ANSIBLE set tags per item in with_items loop

I have this playbook to create ec2 instances and will like to target each ec2 creation by tags but not working...when i run playbook i do not get any errors but notting gets created. --- - name: ...

1
2 3 4 5
8