Bertrand Cachet
df802919f7
add(fail2ban): Add server IP address to ignore IP
ignoreip field inside /etc/fail2ban/jail.local is populated with
server_ip_address variable
11 years ago
Bertrand Cachet
6bfa2c991f
add(tarsnap): Script to rotate backups
Add tasks to install script/tarsnap configuration file and a cronjob to run
the backup job
Number of hourly/daily/weekly/monthly backups kept can be configure from the
tarsnap.sh script
Thanks to this script, we don't use all the backups which save space on
tarsnap server and thus reduce the price to pay
11 years ago
Alex Payne
a9cabad947
Update etc_ferm_ferm.conf
11 years ago
Alex Payne
208934edd6
Merge pull request #56 from ariddell/feature/ferm-adjust
Don't open unused ports
11 years ago
Allen Riddell
580e3ef5c1
Don't open unused ports
Sovereign does not currently use jabber/xmpp or insecure smtp.
11 years ago
Alex Payne
39d12e81e9
Merge pull request #55 from Benny-/master
Skip a2enmod and a2ensite tasks if not required
11 years ago
Benny
c63c48d159
Skip a2enmod and a2ensite tasks if not required
11 years ago
Luke Cyca
ba304cb10b
Cron job to make sure our server isn't on any RBLs
11 years ago
Alex Payne
7240e65644
Update Vagrantfile
11 years ago
Alex Payne
4849fc31ec
Merge pull request #51 from greenalto/vagrantfile_comment
Tell the user to use Vagrant 1.3.x
11 years ago
Alex Payne
c7a70c3bb7
README cleanups
11 years ago
Greg Karékinian
a684e69e33
Tell the user to use Vagrant 1.3.x
11 years ago
Alex Payne
8e5b71a188
hey this ain't Markdown
11 years ago
Alex Payne
f16e080abb
new user vars file, move client usage info to wiki
11 years ago
Alex Payne
4b07b2164e
Merge pull request #47 from greenalto/global_config
Set two variable files from site.yml
11 years ago
Alex Payne
68f67081b1
Merge pull request #49 from lukecyca/apache-vhost-fix
Apache vhost misconfiguration
11 years ago
Alex Payne
17b23bbf99
Merge pull request #50 from lukecyca/tarsnap-warning-fix
Tarsnap warns about leading /
11 years ago
Greg Karékinian
37721a52bb
Add extra comment to sections
That way it's more convenient to uncomment an entire paragraph.
11 years ago
Greg Karékinian
d53d944dfa
Add explanations to the variable files
Refs #39
11 years ago
Greg Karékinian
1e9a560ff6
Comment defaults
That way the default values will not be applied by mistake. The user
needs to uncomment the lines from `vars/users.yml` and set them.
Also renamed openvpn variables.
Refs #39
11 years ago
Greg Karékinian
58dddc55d1
Remove variables from roles
Refs #39
11 years ago
Greg Karékinian
46885dc762
Set two variable files from site.yml
That way we can override all the config from a central location. The
`user.yml` file overrides `defaults.yml`. `user.yml` was added to
`.gitignore` in order to allow a user to change it without having to
worry about merges. It's easy to do a diff to see what changed between
the defaults and your own settings.
Needs documentation, this is just a proposal.
Refs #39
11 years ago
Luke Cyca
c697e135e9
Move NameVirtualHost directives to ports.conf
11 years ago
Luke Cyca
2ccb180e3d
Use relative paths for tarsnap archives
11 years ago
Alex Payne
498719f034
Merge pull request #44 from greenalto/fix_whitespace
Fix trailing whitespace
11 years ago
Greg Karékinian
894808b50c
Fix trailing whitespace
11 years ago
Greg Karékinian
ba3b812bf9
Fix trailing whitespace in Vagrantfile
Also replace the global variable with a local one
11 years ago
Alex Payne
8e7835259e
Merge branch 'postfix-local-mail' of github.com:lukecyca/sovereign into lukecyca-postfix-local-mail
11 years ago
Alex Payne
cad0675096
Merge branch 'master' of github.com:al3x/sovereign
11 years ago
Alex Payne
26233ecb6c
provide absolute path to tarsnap binary in cron job
11 years ago
Alex Payne
f27442b678
move tarsnap to its own role
11 years ago
Luke Cyca
5497f31fb9
Set postfix origin to correctly deliver mail for local users
(such as root's cron errors)
11 years ago
Luke Cyca
5beacea2d2
Absolute path for tarsnap
11 years ago
Alex Payne
7ba90e31c2
mention Roundcube in README
11 years ago
Alex Payne
690f45b3c8
Merge pull request #35 from lisael/feature/roundcube
Feature/roundcube
11 years ago
Alex Payne
450ce6676e
substitute my domain for TODOs. Fixes #37
11 years ago
Alex Payne
51df8484fa
Merge pull request #36 from lukecyca/tls-fixes
TLS fixes & detailed install instructions
11 years ago
Luke Cyca
cf3961b654
Detailed installation instructions
11 years ago
Luke Cyca
ca8a371320
Use combined cert for postfix, dovecot, and znc
Fix CAcert usage in postfix and dovecot
11 years ago
Bruno Dupuis
a2e33a2df1
Added webmail role to site.yml
11 years ago
Bruno Dupuis
c1ceae3e2a
added rouncube webmail
11 years ago
Alex Payne
38c5820c8e
Merge pull request #34 from bcachet/feature/FixPostfixTLSSupport
Fix Postfix TLS configuration
11 years ago
Bertrand Cachet
fbd5deb4ea
Fix Postfix TLS configuration
Fix Postfix configuration file to link to correct SSL certificate locations
11 years ago
Alex Payne
65103923ec
Fix typo in firm task name
11 years ago
Alex Payne
80e173b8da
Merge pull request #30 from lukecyca/cleanup
Misc Cleanup
11 years ago
Luke Cyca
7e2ce80a25
Update apt repo and upgrade safe packages
11 years ago
Luke Cyca
cf9d8350dd
Fix ssh handler typo
11 years ago
Luke Cyca
09c8fcb295
Named all tasks and made them idempotent where possible
11 years ago
Alex Payne
ef97850f15
Merge pull request #29 from lukecyca/encfs
Automate encfs setup and name mount point more appropriately
11 years ago
Alex Payne
295571fe53
Merge pull request #23 from sjahl/mail-aliases
Adding bits for configuring mail aliases.
11 years ago