Alex Payne
372f84473f
init.d -> systemctl
9 years ago
Alex Payne
69abd70297
Remove references to Debian 7
9 years ago
Alex Payne
2352d2d67e
OpenDMARC running under Postgres (?)
9 years ago
Alex Payne
7275a52ba6
Update to Tomcat 8
9 years ago
Alex Payne
34d537fcf2
Remove Dovecot installation for older distros
9 years ago
Alex Payne
2e966fe790
Don't need older Postgres anymore
9 years ago
Alex Payne
b674e0a669
Unified Solr installation across distros
9 years ago
Alex Payne
a6a3baa49b
Add the repo key for ownCloud under Jessie
9 years ago
Alex Payne
d7da63aced
Use same Prosody installation procedure across distros
9 years ago
Alex Payne
0579cf1ba9
Use same Apache server name configuration across distros
9 years ago
Alex Payne
290a3b4312
Remove wheezy-specific Apache SSL config omission
9 years ago
Alex Payne
474c1d5f92
No longer need `fuse` group in Jessie.
9 years ago
Alex Payne
ecaa4c2330
Partially working Rspamd replacement for dspam
9 years ago
Alex Payne
d998640087
formatting
9 years ago
Alex Payne
cea968d5ae
Only install Roundcube on Trusty for now, since there's no Jessie package.
Not awesome. We need a better alternative, ideally one with a better security stance.
9 years ago
Alex Payne
d010a0cda5
Formatting.
9 years ago
Alex Payne
76050eda6b
Newest Tarsnap.
Formatting the task names.
9 years ago
Alex Payne
ebe3562921
Clean up ownCloud for Jessie and Trusty
9 years ago
Alex Payne
8f73d8a3eb
Pin Selfoss version to an actual release
9 years ago
Alex Payne
d2483d0435
Install collectd from package.
Use newer native "write HTTP" plugin to send metrics to Librato, if configured.
9 years ago
Alex Payne
85be39c073
Makes more sense to put ZNC config file into place first
9 years ago
Alex Payne
65bc7da608
Newebe hasn't been updated in over a year. Removing it.
9 years ago
Alex Payne
123dc51517
Use packaged ZNC
9 years ago
Alex Payne
9247cc62db
Jessie can use gitolite3 package as well
9 years ago
Alex Payne
b674035d21
formatting
9 years ago
Alex Payne
6906412f63
Remove wheezy-specific ufw task.
9 years ago
Alex Payne
6d1eebb9d2
Use Ansible task names, not comments.
9 years ago
Alex Payne
c9b32cd2e2
Same Google auth install should work for both Jessie and Trusty.
Move Apache task to their own file.
9 years ago
Alex Payne
006f8e9b82
Just plain Ruby
9 years ago
Florian Anderiasch
076b6d2452
Fix typo in tarsnap.yml
9 years ago
Alex Payne
58a4532fe7
Better permission handling for OpenDMARC.
Resolves #400 .
9 years ago
Alex Payne
417403f534
Use {{ mail_server_hostname }} over mail.servername
Resolves #402 .
9 years ago
Alex Payne
7bb62ca678
Explicitly require MySQL server as part of OpenDMARC isntall.
Resolves #410 .
9 years ago
Miloš Hadžić
d823ed0848
Use lmtp instead of lda for delivery.
9 years ago
Pavel Karoukin
a86e43d5b4
Couple issues with OpenDMARC on Debian 7:
* fix mail_db_opendmarc_username/mail_db_opendmarc_password variable
not found.
* python-mysqldb package is required. Add it to opendmarc task.
9 years ago
Laurent Arnoud
21e0110684
Ignore copy tasks
9 years ago
Laurent Arnoud
ad22aed4cc
rm used in place of argument state=absent to file module
9 years ago
Laurent Arnoud
343db8edea
Git checkouts must contain explicit version
9 years ago
Laurent Arnoud
a09e2e71c1
tar used in place of unarchive module
9 years ago
Laurent Arnoud
0730284671
curl used in place of get_url module
9 years ago
Laurent Arnoud
311fae7e11
Trailing whitespace
9 years ago
Laurent Arnoud
3b8f15b745
Added whois for fail2ban report
Report will print: "missing whois program"
9 years ago
Will McCutchen
1be1afe1ff
Disable SSL stapling on wheezy
9 years ago
Will McCutchen
16b66cc849
Define apache SSL config in one place
9 years ago
Alex Payne
26d61c68a8
Implement OpenDMARC. Resolves #369 .
9 years ago
Manfred Touron
16c93ea486
Using more verbose 'dependencies' tag (#393 )
9 years ago
Manfred Touron
b49f3a6586
Tagged 'deps' aptitude tasks
9 years ago
John Rogerson
f72e1d2350
Update dovecot version from wheezy backports
For correct implementation of the fix for logjam attack (https://github.com/sovereign/sovereign/pull/372 ), state=latest is needed to grab sufficient version of Dovecot. If not then 37aa7e2cb5 doesn't work.
9 years ago
Sven Neuhaus
a088d9c456
Use "modern" SSLCipherSuite per Mozilla recommendations.
See https://wiki.mozilla.org/Security/Server_Side_TLS for details.
Removes RC4 cipher. Fixes issue #341 .
Also explicitly disabled SSLCompression and enables OCSP stapling.
We should put all these settings in
/etc/apache2/mods-enabled/ssl.conf
to avoid duplication...
9 years ago
Sven Neuhaus
c898aa98d6
Install postgresql 9.4, 9.3 or 9.1 if available
(on Debian Jessie, Ubuntu Trusty or older distributions such as
Debian Wheezy and Ubuntu Precise).
9 years ago