Thomas Buck
630e548fe9
add tasks for creating swapfiles. move tasks from common/main to common/basics.
2 年之前
Thomas Buck
e6bd74153d
creating domain list for letsencrypt dynamically. some other small fixes.
3 年之前
Thomas Buck
b37d78c1f9
more fixes to support debian 10
3 年之前
Thomas Buck
37dd16fb67
add sslletsencrypt and sslselfsigned roles for internal servers
3 年之前
Thomas Buck
8b83bd66b1
Properly setup hostname
5 年之前
Thomas Buck
bad2e4f9a1
Add tmux to common programs. Generate german locale. Remove unneeded empty lines.
5 年之前
Thomas Buck
1b7628c756
Install ACL so newer ansible versions can properly upload scripts from and for unprivileged users.
5 年之前
Thomas Buck
c71c6d8559
Use new style of calling apt in ansible
5 年之前
Thomas Buck
31afcaa7b9
Remove encfs and call directory data instead of decrypted
5 年之前
Thomas Buck
183b80da8d
Remove Google Authenticator / Two-Factor Authentification
5 年之前
Óscar Nájera
8f0cc14f76
Fix: Ansible uses the value present in apt module state parameter
6 年之前
Bryan Voss
128b7e63a2
Update for Debian 9
7 年之前
Óscar Nájera
0635815b52
Ensure en_US.UTF-8 locale is present
7 年之前
Wolfgang Steitz
3a42d15850
setup posgres within the common role
Postgres is used by several roles, but the setup is currently part of the 'mailserver' role. By moving it to 'common', it's possible to disable the mailserver without breaking the others.
8 年之前
Mike Ashley
3d68705341
Add leading 0 to octal file permissions
This is done to suppress warnings from ansible-lint.
8 年之前
Mike Ashley
8e1d473027
Use Let's Encrypt for generating site certificates
This method uses Subjective Alternative Names (SANs) to get one
certificate for all the subdomains that Sovereign employs, whether or
not the user configured their site with the roles.
9 年之前
Mike Ashley
195d8811fc
Remove references to Trusty and Wheezy
Make a clean distinction between Debian 7 and Debian 8. Anticipate the
next Ubuntu LTS release (Xenial) that is planned for support.
8 年之前
Laurent Arnoud
1419c4e26e
Use common_timezone and fix idempotence
Thanks-to: 8e693b3db3
Conflicts:
roles/common/tasks/main.yml
9 年之前
Laurent Arnoud
dfb1b764d7
Use common_timezone and fix idempotence
Thanks-to: 8e693b3db3
9 年之前
Alex Payne
c9b32cd2e2
Same Google auth install should work for both Jessie and Trusty.
Move Apache task to their own file.
9 年之前
Alex Payne
006f8e9b82
Just plain Ruby
9 年之前
Manfred Touron
16c93ea486
Using more verbose 'dependencies' tag (#393 )
9 年之前
Manfred Touron
b49f3a6586
Tagged 'deps' aptitude tasks
9 年之前
Laurent Arnoud
353e69d299
Remove duplication with items unattended upgrades
9 年之前
Laurent Arnoud
89d47731ff
Add molly-guard and unattended-upgrades as common pkgs
9 年之前
Aleksandr Bogdanov
a849948e8d
Choosing the closest ubuntu mirror before anything else
10 年之前
Sven Neuhaus
ae58053653
Create /decrypted directory even if encfs is not used.
Helps with issue #120 .
9 年之前
fengor
2fd1e1b722
readded google authenticator lines
10 年之前
fengor
224e8cb339
Setting timezone to UTC
10 年之前
Lorenzo Villani
d5ecf673d3
Calm OCD by sorting almost every with_items block in alphabetical order
10 年之前
Lorenzo Villani
e7703d0d9c
Add support for Apache 2.4 on Ubuntu 14.04
10 年之前
Sven Neuhaus
63ba754eb7
libpam-google-authenticator uses distribution package on Ubuntu 14.04
10 年之前
Gelnior
7995bac36c
put back enc.fs (removed by mistake)
10 年之前
Gelnior
bd57edd5a5
newebe config: fix Newebe config file task
10 年之前
Justin Plock
22a8717f6d
Automatically generate the Google authenticator file for the default user
10 年之前
Justin Plock
84c9febec7
Added Google Authenticator 2FA logins
10 年之前
Justin Plock
9f918363b9
Set a ServerName for apache (fixes #187 )
10 年之前
Joost Baaij
4837d2e87a
extract NTP logic
11 年之前
Joost Baaij
2033c37982
Enabled unattended-upgrades
This works on Debian/Ubuntu only.
There are similar packages for other distributions, but they still
need manual configuration. It seemed better to go for the common
denominator. unattended-upgrades is usually installed by default
anyway, so we are just reinforcing best practices.
11 年之前
Alex Payne
f7f7157cec
more updated variable formatting and accommodation of the YAML parser being a fussbudget
11 年之前
Alex Payne
34d7595c0b
ensure we can install from third-party repos across playbooks
11 年之前
Luke Cyca
2f145ce543
Two small apache-related fixes
11 年之前
Luke Cyca
37a0400c22
Standardize apache’s 301 redirect to https, and enable HSTS
11 年之前
Allen Riddell
88705bb7fa
Replace ferm with ufw
11 年之前
Bertrand Cachet
373cb4584b
add(apticron): configure email
Apticron is configured to send email to {{ admin_email }}
11 年之前
Alex Payne
f27442b678
move tarsnap to its own role
11 年之前
Luke Cyca
7e2ce80a25
Update apt repo and upgrade safe packages
11 年之前
Luke Cyca
09c8fcb295
Named all tasks and made them idempotent where possible
11 年之前
Luke Cyca
6168cd68d0
Automate encfs setup and name mount point more appropriately
11 年之前
Luke Cyca
921cebb41d
Fix invalid service state
11 年之前