sovereign

Commit Graph

Аутор	SHA1	Порука	Датум
Benjamin Reitzammer	d957760697	Making main user's shell configurable	пре 10 година
Justin Plock	3b0308d69e	Allow both TCP and UDP port 53 for DNS lookups through OpenVPN	пре 10 година
Joost Baaij	4837d2e87a	extract NTP logic	пре 10 година
Joost Baaij	2033c37982	Enabled unattended-upgrades This works on Debian/Ubuntu only. There are similar packages for other distributions, but they still need manual configuration. It seemed better to go for the common denominator. unattended-upgrades is usually installed by default anyway, so we are just reinforcing best practices.	пре 10 година
Joost Baaij	335cef5c9f	Enabled POP3S for old-timeys who dig that added dovecot-pop3d allowed in the firewall monitored with monit added relevant tests	пре 10 година
Joshua Lund	4ed07a1e0a	* Made the OpenVPN port and protocol (tcp/udp) configurable * Added 'cipher' and 'auth' lines to the generated client configs	пре 10 година
Luke Cyca	4bc4cebf41	Explicit permissions for all cert files	пре 11 година
Luke Cyca	76d52b63f3	XMPP cert handling improvements, ufw rules, and tests	пре 11 година
Alex Payne	f7f7157cec	more updated variable formatting and accommodation of the YAML parser being a fussbudget	пре 11 година
Alex Payne	34d7595c0b	ensure we can install from third-party repos across playbooks	пре 11 година
Alex Payne	d28f0f82b9	move to non-deprecated template variable formatting	пре 11 година
Luke Cyca	2f145ce543	Two small apache-related fixes	пре 11 година
Luke Cyca	37a0400c22	Standardize apache’s 301 redirect to https, and enable HSTS	пре 11 година
Luke Cyca	bdab1cd6b1	Reworked ufw logic to not use change_when keyword because it's not available in a stable ansible release yet	пре 11 година
Allen Riddell	5b8ba840a4	workaround ufw bug, call ufw enable twice	пре 11 година
Allen Riddell	ae0d1ca8f4	Ignore ufw error resulting from known bug on Debian 7 In order to check the version of the linux distribution we need to set `gather_facts` to True. Closes #73.	пре 11 година
Luke Cyca	7043143f90	Improved idempotency and removed ip detection for checkrbl	пре 11 година
Allen Riddell	88705bb7fa	Replace ferm with ufw	пре 11 година
Bertrand Cachet	373cb4584b	add(apticron): configure email Apticron is configured to send email to {{ admin_email }}	пре 11 година
Luke Cyca	c697e135e9	Move NameVirtualHost directives to ports.conf	пре 11 година
Alex Payne	f27442b678	move tarsnap to its own role	пре 11 година
Luke Cyca	5beacea2d2	Absolute path for tarsnap	пре 11 година
Luke Cyca	ca8a371320	Use combined cert for postfix, dovecot, and znc Fix CAcert usage in postfix and dovecot	пре 11 година
Alex Payne	65103923ec	Fix typo in firm task name	пре 11 година
Luke Cyca	7e2ce80a25	Update apt repo and upgrade safe packages	пре 11 година
Luke Cyca	09c8fcb295	Named all tasks and made them idempotent where possible	пре 11 година
Luke Cyca	6168cd68d0	Automate encfs setup and name mount point more appropriately	пре 11 година
Luke Cyca	12d42ad38a	Configure sshd_config to disable PermitRootLogin and PasswordAuthentication	пре 11 година
Luke Cyca	921cebb41d	Fix invalid service state	пре 11 година
Luke Cyca	5920b17609	Remove usergroup because debian adds it by default as the primary group	пре 11 година
Henrik Hodne	a844401d7c	tarsnap: Only run cron job once per day. The old action would generate a crontab job for `* 3 * * *`, which means every minute at 3am, so 60 times per day.	пре 11 година
Alex Payne	080d38986c	first commit	пре 11 година

34 Комити (876b81a1a7c90c6946a5389e71d5a9111bdbf33c)