sovereign

Commit Graph

Автор	SHA1	Съобщение	Дата
Alex Payne	b11fb68559	Automatically set up passwordless sudo for deploy user. Closes #343.	преди 9 години
Aleksandr Bogdanov	a849948e8d	Choosing the closest ubuntu mirror before anything else	преди 9 години
fengor	7ed46f590c	renamed templates to be consistent with coding standard. removed comment line in ssh_config	преди 9 години
Marius Voila	ec69fef60c	removed old template	преди 9 години
Marius Voila	2ae2c3683c	removed template and implemented logic	преди 9 години
fengor	39566abb6c	More secure defaults for ssh. Ciphers, Kex and MAC can be set via defaults.var	преди 9 години
Marius Voila	67e1bf0fc3	fail2ban support for Trusty	преди 9 години
Marius Voila	e62bd7c71a	fail2ban support for Trusty	преди 9 години
Justin Plock	89f018bd23	In preparation for using any 2FA solution, it will most likely need to modify sshd_config, so let's change the file in place instead of overwriting it completely.	преди 10 години
Justin Plock	9f918363b9	Set a ServerName for apache (fixes #187)	преди 10 години
Joost Baaij	ae2e74bb79	make NTP pool configurable use the world-wide pool by default, but specify north-america in user.yml. Also, documentation. This way Sovereign will still behave the same, but the NTP servers can be changed when desired.	преди 10 години
Joost Baaij	715399a2f1	added pop3s and imaps ports to fail2ban. Otherwise only pop and imap (un-secured) are blocked. Which we don't use.	преди 10 години
Mark Paschal	10aff54015	Only ban in response to fail2ban results Don't mail them individually to the destemail. The destemail setting is thus no longer used, but let's set it anyway to be clear where it will mail if you change the action back.	преди 10 години
Luke Cyca	e46ad018ba	Improved test suite, rewritten in python Added friendly_networks variable to denote whitelisted networks	преди 10 години
Luke Cyca	b1a3b8b67d	Use discovered IPv4 address	преди 10 години
Bertrand Cachet	f43c57e132	fix(apticron): apticron emails are sent to root Instead of sending email to {{ admin_email }} we send them to root user. These emails will be redirected to the appropriate user via mail_virtual_aliases variables	преди 11 години
Bertrand Cachet	373cb4584b	add(apticron): configure email Apticron is configured to send email to {{ admin_email }}	преди 11 години
Bertrand Cachet	df802919f7	add(fail2ban): Add server IP address to ignore IP ignoreip field inside /etc/fail2ban/jail.local is populated with server_ip_address variable	преди 11 години
Luke Cyca	12d42ad38a	Configure sshd_config to disable PermitRootLogin and PasswordAuthentication	преди 11 години
Luke Cyca	dfe8bd1cca	TODO for fail2ban ignoreip Removed your hardcoded server IP	преди 11 години
Alex Payne	080d38986c	first commit	преди 11 години

24 Ревизии (27cc1a5ff029598e349497745d060d5ca7e79a76)