sovereign

Commit graph

Autor	SHA1	Nachricht	Datum
Thomas Buck	72cb7a3d23	letsencrypt cert folder should stay with ssl-cert group	vor 5 Jahren
Thomas Buck	5215ac9a25	Password lookup called wrong, all generated passwords were 20 chars long, regardless of specification.	vor 5 Jahren
Thomas Buck	bad2e4f9a1	Add tmux to common programs. Generate german locale. Remove unneeded empty lines.	vor 5 Jahren
Thomas Buck	04ba7ad539	Added Fathom statistics tracker to blog task	vor 5 Jahren
Thomas Buck	4cf67e7aed	Explicitly install postgres-9.6 and fix monit pid-file location for it.	vor 5 Jahren
Thomas Buck	f34c0c827f	Typo in common apache config, file actually ends with .conf	vor 5 Jahren
Thomas Buck	c41cd737fd	Support multiple domains for letsencrypt	vor 5 Jahren
Thomas Buck	1b7628c756	Install ACL so newer ansible versions can properly upload scripts from and for unprivileged users.	vor 5 Jahren
Thomas Buck	c71c6d8559	Use new style of calling apt in ansible	vor 5 Jahren
Thomas Buck	3dc25b1bc9	common was missing db admin user pass in default vars.	vor 5 Jahren
Thomas Buck	472dd068c2	Remove unneeded testing / vagrant stuff.	vor 5 Jahren
Thomas Buck	03f37267df	Remove cgit/gitolite git repo hosting	vor 5 Jahren
Thomas Buck	82a931b55d	Remove Tarsnap stuff	vor 5 Jahren
Thomas Buck	31afcaa7b9	Remove encfs and call directory data instead of decrypted	vor 5 Jahren
Thomas Buck	183b80da8d	Remove Google Authenticator / Two-Factor Authentification	vor 5 Jahren
Brett Haines	eddcdd7993	Updating fail2ban jail list	vor 6 Jahren
Óscar Nájera	8f0cc14f76	Fix: Ansible uses the value present in apt module state parameter	vor 6 Jahren
Óscar Nájera	ae0594dc4a	use mozilla sshd config on algorithms	vor 6 Jahren
Bryan Voss	128b7e63a2	Update for Debian 9	vor 7 Jahren
Ndubisi Nwaku	55770977da	Add group name ssl-cert for SSL certificates	vor 7 Jahren
Aleksandr Bogdanov	cdc0d3fb4e	Fixing encfs shell invocation for ansible 2 compatibility	vor 7 Jahren
Óscar Nájera	0635815b52	Ensure en_US.UTF-8 locale is present	vor 7 Jahren
Wolfgang Steitz	3a42d15850	setup posgres within the common role Postgres is used by several roles, but the setup is currently part of the 'mailserver' role. By moving it to 'common', it's possible to disable the mailserver without breaking the others.	vor 8 Jahren
Mike Ashley	fc023dfc31	Clean up merge Clean up some artifacts from the merge to match the `jessie` branch. Keep the changes on master made with commits bfe6fe84 and e229c551.	vor 8 Jahren
Tomas Bedrich	3efc7ae54e	Allowed SSH agent forwarding when using sudo	vor 8 Jahren
Dosenpfand	9697cbe6b3	Silence letsencrypt cron output unless there is an error	vor 8 Jahren
Tomas Bedrich	7a399d45ca	Fix SSH connections to Github	vor 8 Jahren
Mike Ashley	0e7adf6e3a	Fix bug exposed by commit 264c232b (#572) The `private_key` variable used to check for changes was never registered.	vor 8 Jahren
Simon Schoeters	264c232bbf	Remove duplicate when statement in Let's Encrypt task While adding the Let's Encrypt offline testing block in 1746afcc we accidentially duplicated a the 'when' statement. Ansible only looks at the last when statement for a given block meaning the earlier one has no use. This commit merges both lines in one.	vor 8 Jahren
Allen Riddell	9f34027d8b	Add common default vars to role	vor 8 Jahren
Allen Riddell	e95caea06c	common: use password lookup to generate passwords See https://docs.ansible.com/ansible/playbooks_lookups.html	vor 8 Jahren
Dosenpfand	f2c14dd911	Remove unneeded/deprecated apache configuration	vor 8 Jahren
Tomas Bedrich	899f527ca3	Updated LE renewal hook system	vor 8 Jahren
Tomas Bedrich	9786230808	Changed LE-renew cron frequency	vor 8 Jahren
Tomas Bedrich	e08acd2deb	Simplified LE renew script	vor 8 Jahren
Carl Meyer	60855eda70	Fix typo in fail2ban config for dovecot.	vor 8 Jahren
Mike Ashley	3d68705341	Add leading 0 to octal file permissions This is done to suppress warnings from ansible-lint.	vor 8 Jahren
Mike Ashley	4a33ebecdc	Add non-interactive to LE client options Depending on when the client is run, there are no certificates to update. By default, the client runs in interactive mode and wants to notify the user of this. This causes Ansible to hang waiting for an acknowledgement that will never come. Adding the non-interactive flag fixes this.	vor 8 Jahren
Carl Meyer	a343509129	No need for letsencrypt.yml to ensure Apache is running.	vor 8 Jahren
Carl Meyer	579afa68d3	Add comment into letsencrypt-gencert script clarifying why we stop Apache.	vor 8 Jahren
Carl Meyer	0abf92734e	Don't stop Apache until we have to; start it again right after.	vor 8 Jahren
Carl Meyer	a636a43948	Don't try to execute any non-executable file in LE postrenew dir.	vor 8 Jahren
Carl Meyer	a5f3ec17c1	Workaround bug with enabling SysV scripts on Jessie.	vor 8 Jahren
Carl Meyer	c3c2cbf096	Don't bounce Apache unless we actually need to.	vor 8 Jahren
Carl Meyer	cc4b3d6fef	Don't request a new LE cert if we have one already.	vor 8 Jahren
Carl Meyer	3009c9d2d3	Fix changed-reporting for LE deps installation.	vor 8 Jahren
Carl Meyer	e8796ecd28	Idempotent and independent post-certificate-renewal tasks.	vor 8 Jahren
nodiscc	d876c87e21	bash syntax cleanup as per discussion in https://github.com/sovereign/sovereign/pull/504	vor 8 Jahren
Carl Meyer	b93deb9411	Remove stray + prefix in sudoers file.	vor 8 Jahren
Allen Riddell	a77f9b95ad	Replace deprecated sudo_user with become_user The ``sudo`` and ``sudo_user`` directives are replaced with ``become`` and ``become_user`` in Ansible 1.9.	vor 8 Jahren

Erste Vorherige 1 2 3 4 Nächste Letzte

190 Commits (1b74757068dd4a70c9671fec73e1a2f6d293ae46)