Justin Plock
1d7986fd96
Enable UFW and deny everything by default
Removed unused status checks on UFW
преди 10 години
Justin Plock
ea0b288818
Moved ufw firewall rules into individual roles
преди 10 години
Luke Cyca
805e428124
Merge pull request #237 from thomwiggers/remove_ahbl
Remove ahbl as it's being winded down
преди 10 години
Thom Wiggers
6312286b64
Remove ahbl as it's being winded down
http://ahbl.org/content/changes-ahbl
Fixes #232
преди 10 години
Luke Cyca
4f2321051d
Merge pull request #230 from Alkpone/master
cgit dependency missing
преди 10 години
Alban Seurat
c22d179e83
cgit dependency missing
преди 10 години
Luke Cyca
9b8e017533
Merge pull request #224 from nstanke/patch-2
fixes #156
преди 10 години
Norman S.
53010bed89
fixes #156
fixes #156 by adding the -L flag, as suggested by @ventolin
преди 10 години
Luke Cyca
cb0ad7e3b7
Merge pull request #223 from alexdunae/conditional-tarsnap-install
Only install Tarsnap when requested version is missing
преди 10 години
Luke Cyca
dee5c9321f
Merge pull request #222 from yourcelf/patch-1
Fix README to reflect changes in #176
преди 10 години
Luke Cyca
0b516d484f
Merge pull request #215 from squarepegsys/master
add cgi module for cgit
преди 10 години
Alex Dunae
b44972ab87
Only install Tarsnap when version is missing
Checks if the exact version of Tarsnap is already installed and, if so,
skips the download and build steps.
преди 10 години
Charlie DeTar
73ca531f74
Fix README to reflect changes in #176
Change instructions for creating the tarsnap key to generate it at "decrypted_tarsnap.key".
преди 10 години
Mike Hostetler
8ec36ca875
add cgi module for cgit
преди 10 години
Luke Cyca
4349e03dfc
Merge pull request #213 from thomwiggers/patch-1
Make sure that only ZNC can read its certificate
преди 10 години
Thom Wiggers
8578f49e21
Make sure that only ZNC can read its certificate
To bring this certificate in line with how those in ssl.yml are managed.
преди 10 години
Luke Cyca
18ea566cee
Merge pull request #210 from jlund/ovpn-enhancements
Update OpenVPN role to generate self-contained "unified" .ovpn profiles
преди 10 години
Joshua Lund
64883159e9
* Update OpenVPN role to generate self-contained "unified" .ovpn
profiles
* The role now generates .ovpn profiles with embedded CA, certificate,
key, and HMAC firewall key information. These .ovpn profiles are
compatible with OpenVPN for iOS and Android, and only a single file
needs to be transferred to your mobile device.
* Added explicit route information to the .ovpn profile
преди 10 години
Luke Cyca
8a271d748d
Merge pull request #192 from larryfox/cgit
Add git hosting
преди 10 години
Larry Fox
22a71efc24
add short blurb about git hosting
преди 10 години
Luke Cyca
a88b465aff
Merge pull request #207 from jplock/jp-fix-libpam-dev
Use libpam0g-dev instead of libpam-dev
преди 10 години
Luke Cyca
5cca325d83
Merge pull request #206 from jplock/jp-2fa-openvpn
OpenVPN 2FA support
преди 10 години
Luke Cyca
bd9e2e4122
Merge pull request #209 from chid/patch-1
Update README.textile
преди 10 години
Charley Peng
9f34d8c9d5
Update README.textile
fix broken link to getting ansible
преди 10 години
Luke Cyca
c9bb3dc2c4
Merge pull request #205 from jplock/jp-fix-2fa-vagrant
Skip the google authenticator generation if we're running as vagrant
преди 10 години
Luke Cyca
d5951797e1
Merge pull request #204 from jplock/jp-2fa-webmail
Add a 2FA plugin for Roundcube (fixes #201 )
преди 10 години
Justin Plock
ed75c9469b
libpam-dev didn't exist for some people so switching to libpam0g-dev instead
преди 10 години
Justin Plock
921ae6957e
Optional 2FA support for OpenVPN (requires uncommenting on the server and pushing new client configs)
преди 10 години
Justin Plock
e88fb57cba
Skip the google authenticator generation if we're running as vagrant. Vagrant can't sudo to the sovereign test user so this won't work.
преди 10 години
Justin Plock
408d83341f
Add a 2FA plugin for Roundcube (fixes #201 )
преди 10 години
Luke Cyca
3ea5e23c9e
Merge pull request #203 from jplock/jp-fix-google-auth-generation
Fix Google Authenticator file generation
преди 10 години
Justin Plock
2d751ab680
The .google_authenticator file has to be generated by the user that is going to attempt to use it. Also, -W doesn't seem to work (results an in INVALID_WINDOW error in /var/log/auth.log), so use -w 1 to allow for a single concurrent token
преди 10 години
Luke Cyca
aa02a19972
Update README with 2-factor auth
преди 10 години
Luke Cyca
6af323dca3
Merge pull request #199 from jplock/jp-googleauth
Added Google Authenticator 2FA logins
преди 10 години
Justin Plock
c037dce07a
Clarified parameters are bit in a comment
преди 10 години
Justin Plock
22a8717f6d
Automatically generate the Google authenticator file for the default user
преди 10 години
Justin Plock
84c9febec7
Added Google Authenticator 2FA logins
преди 10 години
Luke Cyca
a5a3e2d06b
Merge pull request #198 from jplock/jp-sshd-simplification
Modify sshd_config in place
преди 10 години
Justin Plock
89f018bd23
In preparation for using any 2FA solution, it will most likely need to modify sshd_config, so let's change the file in place instead of overwriting it completely.
преди 10 години
Luke Cyca
7118c07753
Merge pull request #193 from nstanke/patch-1
reduce z-push logrotation to 5 versions
преди 10 години
Norman S.
b1092e800b
changed from 52 to 5 versions.
преди 10 години
Larry Fox
e67ef75d63
add cgit test
преди 10 години
Larry Fox
092cb287e0
add gitolite and some cgit settings
преди 10 години
Larry Fox
158503b6ca
add cgit
преди 10 години
Luke Cyca
2ef34ef1db
Merge pull request #191 from jplock/jp-hostname
Set a ServerName for apache (fixes #187 )
преди 10 години
Justin Plock
9f918363b9
Set a ServerName for apache (fixes #187 )
преди 10 години
Luke Cyca
b08dd123a5
Merge pull request #189 from nstanke/patch-1
add z-push logrotation
преди 10 години
Norman S.
d8153552b8
add logrotate task
преди 10 години
Norman S.
a6889500b6
add logrotate task
преди 10 години
Luke Cyca
d2fd59a6d1
Merge pull request #186 from jplock/jp-roundcube-fixes
Properly generate a PHP /etc/roundcube/debian-db.php file
преди 10 години