27 Commits (a2afadd8db632b0ed771cf57f5755bc1e1b59728)

Author SHA1 Message Date
  Luke Cyca 4bc4cebf41 Explicit permissions for all cert files 10 years ago
  Luke Cyca 76d52b63f3 XMPP cert handling improvements, ufw rules, and tests 10 years ago
  Alex Payne f7f7157cec more updated variable formatting and accommodation of the YAML parser being a fussbudget 10 years ago
  Alex Payne 34d7595c0b ensure we can install from third-party repos across playbooks 10 years ago
  Alex Payne d28f0f82b9 move to non-deprecated template variable formatting 10 years ago
  Luke Cyca 2f145ce543 Two small apache-related fixes 10 years ago
  Luke Cyca 37a0400c22 Standardize apache’s 301 redirect to https, and enable HSTS 10 years ago
  Luke Cyca bdab1cd6b1 Reworked ufw logic to not use change_when keyword 10 years ago
  Allen Riddell 5b8ba840a4 workaround ufw bug, call ufw enable twice 10 years ago
  Allen Riddell ae0d1ca8f4 Ignore ufw error resulting from known bug on Debian 7 10 years ago
  Luke Cyca 7043143f90 Improved idempotency and removed ip detection for checkrbl 10 years ago
  Allen Riddell 88705bb7fa Replace ferm with ufw 10 years ago
  Bertrand Cachet 373cb4584b add(apticron): configure email 10 years ago
  Luke Cyca c697e135e9 Move NameVirtualHost directives to ports.conf 10 years ago
  Alex Payne f27442b678 move tarsnap to its own role 10 years ago
  Luke Cyca 5beacea2d2 Absolute path for tarsnap 10 years ago
  Luke Cyca ca8a371320 Use combined cert for postfix, dovecot, and znc 10 years ago
  Alex Payne 65103923ec Fix typo in firm task name 10 years ago
  Luke Cyca 7e2ce80a25 Update apt repo and upgrade safe packages 10 years ago
  Luke Cyca 09c8fcb295 Named all tasks and made them idempotent where possible 10 years ago
  Luke Cyca 6168cd68d0 Automate encfs setup and name mount point more appropriately 10 years ago
  Luke Cyca 12d42ad38a Configure sshd_config to disable PermitRootLogin and PasswordAuthentication 10 years ago
  Luke Cyca 921cebb41d Fix invalid service state 10 years ago
  Luke Cyca 5920b17609 Remove usergroup because debian adds it by default as the primary group 10 years ago
  Henrik Hodne a844401d7c tarsnap: Only run cron job once per day. 11 years ago
  Alex Payne 080d38986c first commit 11 years ago