Sharif Nassar
73c30c313b
VPN - enforce TLS min version on the client
пре 8 година
Dosenpfand
f2c14dd911
Remove unneeded/deprecated apache configuration
пре 8 година
Tomas Bedrich
899f527ca3
Updated LE renewal hook system
пре 8 година
Tomas Bedrich
9786230808
Changed LE-renew cron frequency
пре 8 година
Tomas Bedrich
e08acd2deb
Simplified LE renew script
пре 8 година
Carl Meyer
60855eda70
Fix typo in fail2ban config for dovecot.
пре 8 година
Mike Ashley
2243dd73a4
Remove unnecessary ownCloud configuration
The ownCloud configuration file does not get touched. The virtual host
configuration is modified by sovereign but can be updated in place and
Apache restarted.
пре 8 година
Mike Ashley
3d68705341
Add leading 0 to octal file permissions
This is done to suppress warnings from ansible-lint.
пре 8 година
Mike Ashley
4a33ebecdc
Add non-interactive to LE client options
Depending on when the client is run, there are no certificates to
update. By default, the client runs in interactive mode and wants to
notify the user of this. This causes Ansible to hang waiting for an
acknowledgement that will never come. Adding the non-interactive flag
fixes this.
пре 8 година
Carl Meyer
2737b16477
Use postgresql_user module for configuring PG admin user in owncloud role.
пре 8 година
Carl Meyer
a343509129
No need for letsencrypt.yml to ensure Apache is running.
пре 8 година
Carl Meyer
579afa68d3
Add comment into letsencrypt-gencert script clarifying why we stop Apache.
пре 8 година
John Giannelos
0b62ed998b
Add directories to allow persistent znc user/modules configuration.
пре 8 година
John Giannelos
66cc560281
Fix monitoring config for apache/postgresql.
пре 8 година
Carl Meyer
0abf92734e
Don't stop Apache until we have to; start it again right after.
пре 8 година
Carl Meyer
a636a43948
Don't try to execute any non-executable file in LE postrenew dir.
пре 8 година
Carl Meyer
619eac6534
Adjust comment for clarity.
пре 8 година
Carl Meyer
15cff22f14
Workaround bug with enabling SysV init scripts in Jessie, for collectd.
пре 8 година
Carl Meyer
d46a9c47ef
Idempotency/changed-reporting fixes for OpenDMARC tasks.
пре 8 година
Carl Meyer
7e817bfae6
Encrypt Postgres passwords, and fix change-reporting.
пре 8 година
Carl Meyer
a5f3ec17c1
Workaround bug with enabling SysV scripts on Jessie.
пре 8 година
Carl Meyer
c3c2cbf096
Don't bounce Apache unless we actually need to.
пре 8 година
Carl Meyer
cc4b3d6fef
Don't request a new LE cert if we have one already.
пре 8 година
Carl Meyer
3009c9d2d3
Fix changed-reporting for LE deps installation.
пре 8 година
Carl Meyer
e8796ecd28
Idempotent and independent post-certificate-renewal tasks.
пре 8 година
Laurent Arnoud
d56f0bd7ef
Use https for rpsamd key and repository
пре 8 година
Yannik Sembritzki
66cb39bb46
Only add iptables rules if they don't already exist
пре 8 година
Carl Meyer
1a3d01f311
Complete rmilter/rspamd setup.
пре 8 година
nodiscc
d876c87e21
bash syntax cleanup
as per discussion in https://github.com/sovereign/sovereign/pull/504
пре 8 година
Carl Meyer
d46fb1521b
Make OpenDMARC cron job email root only on error.
пре 8 година
Carl Meyer
57982401a9
Pass {auth_type} to milters, fixing OpenDKIM signing of authenticated SMTP messages.
пре 8 година
Carl Meyer
b93deb9411
Remove stray + prefix in sudoers file.
пре 8 година
Yannik Sembritzki
d2821753a7
DRY in openvpn role and allow other rc.local tasks
пре 8 година
Allen Riddell
a77f9b95ad
Replace deprecated sudo_user with become_user
The ``sudo`` and ``sudo_user`` directives are replaced with ``become``
and ``become_user`` in Ansible 1.9.
пре 8 година
Mike Ashley
3d4987c4e2
Use a more descriptive name for cert generation script
пре 8 година
Mike Ashley
a38f4e08d3
Force download of letsencrypt release
The installer automatically updates itself, which registers as a change
in the git repo. To maintain idempotency of the task list, the repo
download must be forced.
пре 8 година
Mike Ashley
a17b576e78
Update ownCloud role for ownCloud 8.2
- Remove unnecessary dependencies
- Clean up postgresql server setup
- Install from official package repository
- Expect package installer to enable modules that are needed
- Update virtual host config with owncloud 8.2 configuration
- Update post-deploy instructions
пре 8 година
Mike Ashley
5385badd49
Correct bug in SSL cert setup for test environment
пре 8 година
Mike Ashley
bc5bfa4b21
Determine registered subdomains at deploy-time for LE
пре 9 година
Mike Ashley
2ad6f78e45
Address incomplete chain error
Fix Apache's configuration for version 2.4.8 and above. See
https://community.letsencrypt.org/t/untrusted-on-mobile-newbe/7903
пре 9 година
Mike Ashley
58e9e7a445
Add a short introduction to Let's Encrypt
пре 9 година
Mike Ashley
0302a8fa0a
Correct certificate paths for ZNC
пре 9 година
Mike Ashley
86048ee397
Update prosody to use LE certs directly
Don't copy the LE certificates. Instead use the ssl-cert group to
manage access to the LE certificates directly. See
https://github.com/letsencrypt/letsencrypt/issues/1425 for a request to
have the LE client do this itself.
пре 9 година
Mike Ashley
1746afcc3a
Arrange automated tests to not use Let's Encrypt
пре 9 година
Mike Ashley
8f1b6a9ed8
Arrange for services to restart on cert renewal
пре 9 година
Mike Ashley
65729d12f8
Update xmpp role for LE certificate
пре 9 година
Mike Ashley
ec7b5867d3
Update ircbouncer role for LE certificate
пре 9 година
Mike Ashley
beaceafbd1
Update mailserver role to use LE certificate
пре 9 година
Mike Ashley
8ff2181585
Update tarsnap role to include LE files
пре 9 година
Mike Ashley
7bb523950e
Draft design description for Let's Encrypt support
пре 9 година