Thomas Buck
630e548fe9
add tasks for creating swapfiles. move tasks from common/main to common/basics.
2 лет назад
Thomas Buck
e6bd74153d
creating domain list for letsencrypt dynamically. some other small fixes.
3 лет назад
Thomas Buck
b37d78c1f9
more fixes to support debian 10
3 лет назад
Thomas Buck
37dd16fb67
add sslletsencrypt and sslselfsigned roles for internal servers
3 лет назад
Thomas Buck
8b83bd66b1
Properly setup hostname
5 лет назад
Thomas Buck
bad2e4f9a1
Add tmux to common programs. Generate german locale. Remove unneeded empty lines.
5 лет назад
Thomas Buck
1b7628c756
Install ACL so newer ansible versions can properly upload scripts from and for unprivileged users.
5 лет назад
Thomas Buck
c71c6d8559
Use new style of calling apt in ansible
5 лет назад
Thomas Buck
31afcaa7b9
Remove encfs and call directory data instead of decrypted
5 лет назад
Thomas Buck
183b80da8d
Remove Google Authenticator / Two-Factor Authentification
5 лет назад
Óscar Nájera
8f0cc14f76
Fix: Ansible uses the value present in apt module state parameter
6 лет назад
Bryan Voss
128b7e63a2
Update for Debian 9
7 лет назад
Óscar Nájera
0635815b52
Ensure en_US.UTF-8 locale is present
7 лет назад
Wolfgang Steitz
3a42d15850
setup posgres within the common role
Postgres is used by several roles, but the setup is currently part of the 'mailserver' role. By moving it to 'common', it's possible to disable the mailserver without breaking the others.
8 лет назад
Mike Ashley
3d68705341
Add leading 0 to octal file permissions
This is done to suppress warnings from ansible-lint.
8 лет назад
Mike Ashley
8e1d473027
Use Let's Encrypt for generating site certificates
This method uses Subjective Alternative Names (SANs) to get one
certificate for all the subdomains that Sovereign employs, whether or
not the user configured their site with the roles.
9 лет назад
Mike Ashley
195d8811fc
Remove references to Trusty and Wheezy
Make a clean distinction between Debian 7 and Debian 8. Anticipate the
next Ubuntu LTS release (Xenial) that is planned for support.
8 лет назад
Laurent Arnoud
1419c4e26e
Use common_timezone and fix idempotence
Thanks-to: 8e693b3db3
Conflicts:
roles/common/tasks/main.yml
9 лет назад
Laurent Arnoud
dfb1b764d7
Use common_timezone and fix idempotence
Thanks-to: 8e693b3db3
9 лет назад
Alex Payne
c9b32cd2e2
Same Google auth install should work for both Jessie and Trusty.
Move Apache task to their own file.
9 лет назад
Alex Payne
006f8e9b82
Just plain Ruby
9 лет назад
Manfred Touron
16c93ea486
Using more verbose 'dependencies' tag (#393 )
9 лет назад
Manfred Touron
b49f3a6586
Tagged 'deps' aptitude tasks
9 лет назад
Laurent Arnoud
353e69d299
Remove duplication with items unattended upgrades
9 лет назад
Laurent Arnoud
89d47731ff
Add molly-guard and unattended-upgrades as common pkgs
9 лет назад
Aleksandr Bogdanov
a849948e8d
Choosing the closest ubuntu mirror before anything else
10 лет назад
Sven Neuhaus
ae58053653
Create /decrypted directory even if encfs is not used.
Helps with issue #120 .
9 лет назад
fengor
2fd1e1b722
readded google authenticator lines
10 лет назад
fengor
224e8cb339
Setting timezone to UTC
10 лет назад
Lorenzo Villani
d5ecf673d3
Calm OCD by sorting almost every with_items block in alphabetical order
10 лет назад
Lorenzo Villani
e7703d0d9c
Add support for Apache 2.4 on Ubuntu 14.04
10 лет назад
Sven Neuhaus
63ba754eb7
libpam-google-authenticator uses distribution package on Ubuntu 14.04
10 лет назад
Gelnior
7995bac36c
put back enc.fs (removed by mistake)
10 лет назад
Gelnior
bd57edd5a5
newebe config: fix Newebe config file task
10 лет назад
Justin Plock
22a8717f6d
Automatically generate the Google authenticator file for the default user
10 лет назад
Justin Plock
84c9febec7
Added Google Authenticator 2FA logins
10 лет назад
Justin Plock
9f918363b9
Set a ServerName for apache (fixes #187 )
10 лет назад
Joost Baaij
4837d2e87a
extract NTP logic
11 лет назад
Joost Baaij
2033c37982
Enabled unattended-upgrades
This works on Debian/Ubuntu only.
There are similar packages for other distributions, but they still
need manual configuration. It seemed better to go for the common
denominator. unattended-upgrades is usually installed by default
anyway, so we are just reinforcing best practices.
11 лет назад
Alex Payne
f7f7157cec
more updated variable formatting and accommodation of the YAML parser being a fussbudget
11 лет назад
Alex Payne
34d7595c0b
ensure we can install from third-party repos across playbooks
11 лет назад
Luke Cyca
2f145ce543
Two small apache-related fixes
11 лет назад
Luke Cyca
37a0400c22
Standardize apache’s 301 redirect to https, and enable HSTS
11 лет назад
Allen Riddell
88705bb7fa
Replace ferm with ufw
11 лет назад
Bertrand Cachet
373cb4584b
add(apticron): configure email
Apticron is configured to send email to {{ admin_email }}
11 лет назад
Alex Payne
f27442b678
move tarsnap to its own role
11 лет назад
Luke Cyca
7e2ce80a25
Update apt repo and upgrade safe packages
11 лет назад
Luke Cyca
09c8fcb295
Named all tasks and made them idempotent where possible
11 лет назад
Luke Cyca
6168cd68d0
Automate encfs setup and name mount point more appropriately
11 лет назад
Luke Cyca
921cebb41d
Fix invalid service state
11 лет назад