Sharif Nassar
73c30c313b
VPN - enforce TLS min version on the client
8 роки тому
Mike Ashley
37a85a8deb
Provide guidance for naming modules
Name a module after the software it provides, not the functionality it
provides. This allows alternative software providing the same
functionality to be located in Sovereign.
8 роки тому
Mike Ashley
f7784c3b55
Merge pull request #549 from mikeashley/owncloud-tweak
Remove unnecessary ownCloud configuration
8 роки тому
Mike Ashley
2d4e6136b0
Merge pull request #544 from mikeashley/noninteractive
Add non-interactive to LE client options
8 роки тому
Allen Riddell
588dd8e388
Merge pull request #555 from Dosenpfand/apache-config-improvements
Remove unneeded/deprecated apache configuration
8 роки тому
Mike Ashley
d90d37d74e
Merge pull request #554 from tomasbedrich/jessie
Fixed LE renew options
8 роки тому
Dosenpfand
f2c14dd911
Remove unneeded/deprecated apache configuration
8 роки тому
Tomas Bedrich
899f527ca3
Updated LE renewal hook system
8 роки тому
Tomas Bedrich
9786230808
Changed LE-renew cron frequency
8 роки тому
Tomas Bedrich
e08acd2deb
Simplified LE renew script
8 роки тому
Mike Ashley
48e025310e
Merge pull request #552 from carljm/fix-fail2ban-dovecot
Fix fail2ban dovecot config.
8 роки тому
Carl Meyer
60855eda70
Fix typo in fail2ban config for dovecot.
8 роки тому
Mike Ashley
3f9ecc2d94
Merge pull request #548 from Dosenpfand/readme-improvements
add www.domain DNS entry to README.md
8 роки тому
Markus Gasser
0d4f23705b
add www.domain DNS entry to README
8 роки тому
Mike Ashley
2243dd73a4
Remove unnecessary ownCloud configuration
The ownCloud configuration file does not get touched. The virtual host
configuration is modified by sovereign but can be updated in place and
Apache restarted.
8 роки тому
Justin Plock
c1c0d0a6c6
Merge pull request #547 from mikeashley/lint-fixes
Add leading 0 to octal file permissions
8 роки тому
Mike Ashley
3d68705341
Add leading 0 to octal file permissions
This is done to suppress warnings from ansible-lint.
8 роки тому
Mike Ashley
4a33ebecdc
Add non-interactive to LE client options
Depending on when the client is run, there are no certificates to
update. By default, the client runs in interactive mode and wants to
notify the user of this. This causes Ansible to hang waiting for an
acknowledgement that will never come. Adding the non-interactive flag
fixes this.
8 роки тому
Mike Ashley
c822f9de14
Merge pull request #533 from carljm/post-renew
Idempotency fixes to LetsEncrypt handling.
8 роки тому
Sven Neuhaus
15a39c695d
Merge pull request #535 from carljm/pg-passwords
Encrypt Postgres passwords, and fix change-reporting.
8 роки тому
Carl Meyer
2737b16477
Use postgresql_user module for configuring PG admin user in owncloud role.
8 роки тому
Carl Meyer
a343509129
No need for letsencrypt.yml to ensure Apache is running.
8 роки тому
Carl Meyer
579afa68d3
Add comment into letsencrypt-gencert script clarifying why we stop Apache.
8 роки тому
Sven Neuhaus
106cd1b2c7
Merge pull request #542 from johngian/fix-znc-persistency
Add directories to allow persistent znc user/modules configuration.
8 роки тому
John Giannelos
0b62ed998b
Add directories to allow persistent znc user/modules configuration.
8 роки тому
Sven Neuhaus
7af11cf4d4
Merge pull request #541 from johngian/fix-monitoring
Fix monitoring config for apache/postgresql.
8 роки тому
John Giannelos
66cc560281
Fix monitoring config for apache/postgresql.
8 роки тому
Mike Ashley
c4ddb31909
Merge pull request #536 from carljm/opendmarc-idempotent
Idempotency/changed-reporting fixes for OpenDMARC tasks.
8 роки тому
Carl Meyer
0abf92734e
Don't stop Apache until we have to; start it again right after.
8 роки тому
Carl Meyer
a636a43948
Don't try to execute any non-executable file in LE postrenew dir.
8 роки тому
Carl Meyer
619eac6534
Adjust comment for clarity.
8 роки тому
Sven Neuhaus
e0dc103581
Merge pull request #534 from carljm/ntp-workaround
Workaround bug with enabling SysV init scripts on Jessie.
8 роки тому
Carl Meyer
15cff22f14
Workaround bug with enabling SysV init scripts in Jessie, for collectd.
8 роки тому
Carl Meyer
d46a9c47ef
Idempotency/changed-reporting fixes for OpenDMARC tasks.
8 роки тому
Carl Meyer
7e817bfae6
Encrypt Postgres passwords, and fix change-reporting.
8 роки тому
Carl Meyer
a5f3ec17c1
Workaround bug with enabling SysV scripts on Jessie.
8 роки тому
Carl Meyer
c3c2cbf096
Don't bounce Apache unless we actually need to.
8 роки тому
Carl Meyer
cc4b3d6fef
Don't request a new LE cert if we have one already.
8 роки тому
Carl Meyer
3009c9d2d3
Fix changed-reporting for LE deps installation.
8 роки тому
Carl Meyer
e8796ecd28
Idempotent and independent post-certificate-renewal tasks.
8 роки тому
Allen Riddell
70460b53a7
Merge pull request #532 from mikeashley/readme-update
Update versions in README
8 роки тому
Mike Ashley
3a630c8236
Update versions in README
8 роки тому
Allen Riddell
50fae9cb73
Merge pull request #531 from spk/use-https-rspamd
Use https for rpsamd key and repository
8 роки тому
Laurent Arnoud
d56f0bd7ef
Use https for rpsamd key and repository
8 роки тому
Allen Riddell
78b3d5825e
Merge pull request #530 from mikeashley/openvpn-update
Only add iptables rules if they don't already exist
8 роки тому
Yannik Sembritzki
66cb39bb46
Only add iptables rules if they don't already exist
8 роки тому
Mike Ashley
9725cdd9d8
Merge pull request #521 from carljm/rmilter
Complete rmilter/rspamd setup.
8 роки тому
Mike Ashley
37b3a11829
Merge pull request #519 from ariddell/feature/unused-var
Remove unused variables in jessie
8 роки тому
Allen Riddell
68cafc79ae
Remove unused variables
- google_auth_version
- znc_version
8 роки тому
Allen Riddell
f21edc8ee4
Merge pull request #518 from nodiscc/patch-1
bash syntax cleanup
8 роки тому