Thomas Buck
b12aa08e13
fix commento websocket proxy
il y a 2 ans
Thomas Buck
4000f47560
fixed branch for commento wildcard domains
il y a 2 ans
Thomas Buck
029bbca332
various fixes. noreply mail account, commento, fathom, postgres.
il y a 3 ans
Thomas Buck
90f33b9045
some attempts to get commento (plusplus) working
il y a 3 ans
Thomas Buck
e6bd74153d
creating domain list for letsencrypt dynamically. some other small fixes.
il y a 3 ans
Thomas Buck
c2f9a9da97
update commento and gitea to current version
il y a 3 ans
Thomas Buck
b37d78c1f9
more fixes to support debian 10
il y a 3 ans
Thomas Buck
97ceee0704
remove unnecessary secret_* everywhere
il y a 3 ans
Thomas Buck
efc165f792
Support custom 404 pages in blog
il y a 5 ans
Thomas Buck
345e85490d
add another custom postgres user and database for own small php scripts and stuff like that.
il y a 5 ans
Thomas Buck
08a0e8efd7
Disable account registration for gitea and commento
il y a 5 ans
Thomas Buck
df70d73549
Rename fathom subdomain to stats and make it a variable.
il y a 5 ans
Thomas Buck
e74015eadf
Also redirect normal web access to www domain.
il y a 5 ans
Thomas Buck
d023141dc0
Allow short open tags in PHP code and enable for blog hosting.
il y a 5 ans
Thomas Buck
2d359819a2
Similar log settings for all apache virtual hosts
il y a 5 ans
Thomas Buck
30832be156
Add Commento to blog task and add example index page for webhosting.
il y a 5 ans
Thomas Buck
96696af9bc
Tweak fathom task
il y a 5 ans
Thomas Buck
7b8f15528d
Fix a bunch of broken http->https redirects and make them always temporary
il y a 5 ans
Thomas Buck
cce03e9f94
Add well-known directory to all hosts served by Apache
il y a 5 ans
Thomas Buck
eb39986288
fix fathom monit wrong task name and missing ignore_errors for first run. fix typo.
il y a 5 ans
Thomas Buck
caf49050d2
Remove useless step in apache related tasks that forced apache restart.
il y a 5 ans
Thomas Buck
5215ac9a25
Password lookup called wrong, all generated passwords were 20 chars long, regardless of specification.
il y a 5 ans
Thomas Buck
04ba7ad539
Added Fathom statistics tracker to blog task
il y a 5 ans
Thomas Buck
3c51ebedd4
Apache now configurable for multiple virtual domains.
il y a 5 ans
Mike Ashley
d3abc02f84
Clean up Apache SSL configuration
Avoid using the Include directive. Move most of the SSL configuration
to the global configuration and leave enabling the SSL engine to each
virtual host that wants to use it.
il y a 8 ans
Laurent Arnoud
ad22aed4cc
rm used in place of argument state=absent to file module
il y a 9 ans
Will McCutchen
16b66cc849
Define apache SSL config in one place
il y a 9 ans
Sven Neuhaus
a088d9c456
Use "modern" SSLCipherSuite per Mozilla recommendations.
See https://wiki.mozilla.org/Security/Server_Side_TLS for details.
Removes RC4 cipher. Fixes issue #341 .
Also explicitly disabled SSLCompression and enables OCSP stapling.
We should put all these settings in
/etc/apache2/mods-enabled/ssl.conf
to avoid duplication...
il y a 9 ans
Sven Neuhaus
a849a49f37
Fix: Files shouldn't be owned or writeable by httpd unless necessary.
il y a 9 ans
Patrick O'Doherty
6f6fc6a90f
Disable SSLv3 in all Apache vhosts
il y a 10 ans
Sven Neuhaus
0a164d519f
Fix syntax for "removes" options
il y a 10 ans
Sven Neuhaus
ab614fd70a
Added rules for dealing with old virtualhost files in
/etc/apache2/sites-available and old (dangling) symlinks in
/etc/apaches/sites-enabled.
Also, remove unnecessary apache2 restart after creating a new
virtualhost but not yet enabling it.
il y a 10 ans
Sven Neuhaus
0f6dfdc6ca
More apache fixes.
The virtual site files must be owned by root (serious security issue)
and they must have the .conf filename suffix for a2ensite on
Ubuntu 14.04LTS (apache 2.4.7).
il y a 10 ans
James Ravn
e3825cf6dd
Revert "Redirects naked domain to www"
This reverts commit 703d356492 .
il y a 10 ans
James Ravn
703d356492
Redirects naked domain to www
Properly behaving websites should 301 redirect the naked domain.
il y a 10 ans
Alex Payne
d28f0f82b9
move to non-deprecated template variable formatting
il y a 11 ans
Luke Cyca
37a0400c22
Standardize apache’s 301 redirect to https, and enable HSTS
il y a 11 ans
Luke Cyca
93e7b3e3bd
Use common domain variable instead of blog_domain
il y a 11 ans
Greg Karékinian
58dddc55d1
Remove variables from roles
Refs #39
il y a 11 ans
Luke Cyca
c697e135e9
Move NameVirtualHost directives to ports.conf
il y a 11 ans
Luke Cyca
09c8fcb295
Named all tasks and made them idempotent where possible
il y a 11 ans
Luke Cyca
d5b2d7ade0
Improved apache SSL config, and disabled directory index
il y a 11 ans
Alex Payne
080d38986c
first commit
il y a 11 ans