Thomas Buck
4ab56bdf6e
Added gitea
5 年之前
Thomas Buck
72cb7a3d23
letsencrypt cert folder should stay with ssl-cert group
5 年之前
Thomas Buck
5215ac9a25
Password lookup called wrong, all generated passwords were 20 chars long, regardless of specification.
5 年之前
Thomas Buck
bad2e4f9a1
Add tmux to common programs. Generate german locale. Remove unneeded empty lines.
5 年之前
Thomas Buck
04ba7ad539
Added Fathom statistics tracker to blog task
5 年之前
Thomas Buck
4cf67e7aed
Explicitly install postgres-9.6 and fix monit pid-file location for it.
5 年之前
Thomas Buck
f34c0c827f
Typo in common apache config, file actually ends with .conf
5 年之前
Thomas Buck
c41cd737fd
Support multiple domains for letsencrypt
5 年之前
Thomas Buck
1b7628c756
Install ACL so newer ansible versions can properly upload scripts from and for unprivileged users.
5 年之前
Thomas Buck
c71c6d8559
Use new style of calling apt in ansible
5 年之前
Thomas Buck
3dc25b1bc9
common was missing db admin user pass in default vars.
5 年之前
Thomas Buck
472dd068c2
Remove unneeded testing / vagrant stuff.
5 年之前
Thomas Buck
03f37267df
Remove cgit/gitolite git repo hosting
5 年之前
Thomas Buck
82a931b55d
Remove Tarsnap stuff
5 年之前
Thomas Buck
31afcaa7b9
Remove encfs and call directory data instead of decrypted
5 年之前
Thomas Buck
183b80da8d
Remove Google Authenticator / Two-Factor Authentification
5 年之前
Brett Haines
eddcdd7993
Updating fail2ban jail list
6 年之前
Óscar Nájera
8f0cc14f76
Fix: Ansible uses the value present in apt module state parameter
6 年之前
Óscar Nájera
ae0594dc4a
use mozilla sshd config on algorithms
6 年之前
Bryan Voss
128b7e63a2
Update for Debian 9
7 年之前
Ndubisi Nwaku
55770977da
Add group name ssl-cert for SSL certificates
7 年之前
Aleksandr Bogdanov
cdc0d3fb4e
Fixing encfs shell invocation for ansible 2 compatibility
7 年之前
Óscar Nájera
0635815b52
Ensure en_US.UTF-8 locale is present
7 年之前
Wolfgang Steitz
3a42d15850
setup posgres within the common role
Postgres is used by several roles, but the setup is currently part of the 'mailserver' role. By moving it to 'common', it's possible to disable the mailserver without breaking the others.
8 年之前
Mike Ashley
fc023dfc31
Clean up merge
Clean up some artifacts from the merge to match the `jessie` branch.
Keep the changes on master made with commits bfe6fe84 and e229c551 .
8 年之前
Tomas Bedrich
3efc7ae54e
Allowed SSH agent forwarding when using sudo
8 年之前
Dosenpfand
9697cbe6b3
Silence letsencrypt cron output unless there is an error
8 年之前
Tomas Bedrich
7a399d45ca
Fix SSH connections to Github
8 年之前
Mike Ashley
0e7adf6e3a
Fix bug exposed by commit 264c232b (#572 )
The `private_key` variable used to check for changes was never
registered.
8 年之前
Simon Schoeters
264c232bbf
Remove duplicate when statement in Let's Encrypt task
While adding the Let's Encrypt offline testing block in 1746afcc we
accidentially duplicated a the 'when' statement. Ansible only looks at
the last when statement for a given block meaning the earlier one has no
use. This commit merges both lines in one.
8 年之前
Allen Riddell
9f34027d8b
Add common default vars to role
8 年之前
Allen Riddell
e95caea06c
common: use password lookup to generate passwords
See https://docs.ansible.com/ansible/playbooks_lookups.html
8 年之前
Dosenpfand
f2c14dd911
Remove unneeded/deprecated apache configuration
8 年之前
Tomas Bedrich
899f527ca3
Updated LE renewal hook system
8 年之前
Tomas Bedrich
9786230808
Changed LE-renew cron frequency
8 年之前
Tomas Bedrich
e08acd2deb
Simplified LE renew script
8 年之前
Carl Meyer
60855eda70
Fix typo in fail2ban config for dovecot.
8 年之前
Mike Ashley
3d68705341
Add leading 0 to octal file permissions
This is done to suppress warnings from ansible-lint.
8 年之前
Mike Ashley
4a33ebecdc
Add non-interactive to LE client options
Depending on when the client is run, there are no certificates to
update. By default, the client runs in interactive mode and wants to
notify the user of this. This causes Ansible to hang waiting for an
acknowledgement that will never come. Adding the non-interactive flag
fixes this.
8 年之前
Carl Meyer
a343509129
No need for letsencrypt.yml to ensure Apache is running.
8 年之前
Carl Meyer
579afa68d3
Add comment into letsencrypt-gencert script clarifying why we stop Apache.
8 年之前
Carl Meyer
0abf92734e
Don't stop Apache until we have to; start it again right after.
8 年之前
Carl Meyer
a636a43948
Don't try to execute any non-executable file in LE postrenew dir.
8 年之前
Carl Meyer
a5f3ec17c1
Workaround bug with enabling SysV scripts on Jessie.
8 年之前
Carl Meyer
c3c2cbf096
Don't bounce Apache unless we actually need to.
8 年之前
Carl Meyer
cc4b3d6fef
Don't request a new LE cert if we have one already.
8 年之前
Carl Meyer
3009c9d2d3
Fix changed-reporting for LE deps installation.
8 年之前
Carl Meyer
e8796ecd28
Idempotent and independent post-certificate-renewal tasks.
8 年之前
nodiscc
d876c87e21
bash syntax cleanup
as per discussion in https://github.com/sovereign/sovereign/pull/504
8 年之前
Carl Meyer
b93deb9411
Remove stray + prefix in sudoers file.
8 年之前