Mike Ashley
ce03947fbe
Merge pull request #563 from ariddell/feature/missing-handler
news role: add missing restart apache handler
8 years ago
Sharif Nassar
73c30c313b
VPN - enforce TLS min version on the client
8 years ago
Allen Riddell
97480c334e
Uncomment required vars in group_vars/sovereign
All of the variables need to be set.
8 years ago
Allen Riddell
e0347b657d
DOC: user-set vars now in group_vars/sovereign
8 years ago
Allen Riddell
19ff4c5958
Add readlater/wallabag default vars to role
8 years ago
Allen Riddell
712ea7aee2
news role: add missing restart apache handler
8 years ago
Allen Riddell
4339192052
Add news/selfoss default vars to role
8 years ago
Allen Riddell
9067f4cc27
Add git role default vars to role
8 years ago
Allen Riddell
86bc3ab073
Add tarsnap default vars to role
8 years ago
Allen Riddell
ab9ebd6e5c
Add owncloud default vars to role
8 years ago
Allen Riddell
9e71d9067f
Add openvpn default vars to role
8 years ago
Allen Riddell
98cb6dd610
Add prosody/xmpp default vars to role
8 years ago
Allen Riddell
a3b1852723
Add ircbouncer required vars to group_vars/sovereign
8 years ago
Allen Riddell
f31ac23001
Add monitoring default vars to role
8 years ago
Allen Riddell
ca6eb2d85b
Add mailserver default vars to role
8 years ago
Allen Riddell
9f34027d8b
Add common default vars to role
8 years ago
Allen Riddell
e95caea06c
common: use password lookup to generate passwords
See https://docs.ansible.com/ansible/playbooks_lookups.html
8 years ago
Allen Riddell
7b71f9a8f0
Delete bespoke vars/
Preserve testing.yml
8 years ago
Allen Riddell
06f43905c9
Hosts are now under the [sovereign] group
Allows hosts to use vars in `group_vars/sovereign`
8 years ago
Allen Riddell
7c26e01602
DOC: sudo is not installed by default on jessie
8 years ago
Mike Ashley
37a85a8deb
Provide guidance for naming modules
Name a module after the software it provides, not the functionality it
provides. This allows alternative software providing the same
functionality to be located in Sovereign.
8 years ago
Mike Ashley
f7784c3b55
Merge pull request #549 from mikeashley/owncloud-tweak
Remove unnecessary ownCloud configuration
8 years ago
Mike Ashley
2d4e6136b0
Merge pull request #544 from mikeashley/noninteractive
Add non-interactive to LE client options
8 years ago
Allen Riddell
588dd8e388
Merge pull request #555 from Dosenpfand/apache-config-improvements
Remove unneeded/deprecated apache configuration
8 years ago
Mike Ashley
d90d37d74e
Merge pull request #554 from tomasbedrich/jessie
Fixed LE renew options
8 years ago
Dosenpfand
f2c14dd911
Remove unneeded/deprecated apache configuration
8 years ago
Tomas Bedrich
899f527ca3
Updated LE renewal hook system
8 years ago
Tomas Bedrich
9786230808
Changed LE-renew cron frequency
8 years ago
Tomas Bedrich
e08acd2deb
Simplified LE renew script
8 years ago
Mike Ashley
48e025310e
Merge pull request #552 from carljm/fix-fail2ban-dovecot
Fix fail2ban dovecot config.
8 years ago
Carl Meyer
60855eda70
Fix typo in fail2ban config for dovecot.
8 years ago
Mike Ashley
3f9ecc2d94
Merge pull request #548 from Dosenpfand/readme-improvements
add www.domain DNS entry to README.md
8 years ago
Markus Gasser
0d4f23705b
add www.domain DNS entry to README
8 years ago
Mike Ashley
2243dd73a4
Remove unnecessary ownCloud configuration
The ownCloud configuration file does not get touched. The virtual host
configuration is modified by sovereign but can be updated in place and
Apache restarted.
8 years ago
Sven Neuhaus
1c6dafeb43
Clarify Debian 8 and Ubuntu 16.04 status
8 years ago
Justin Plock
c1c0d0a6c6
Merge pull request #547 from mikeashley/lint-fixes
Add leading 0 to octal file permissions
8 years ago
Mike Ashley
3d68705341
Add leading 0 to octal file permissions
This is done to suppress warnings from ansible-lint.
8 years ago
Mike Ashley
4a33ebecdc
Add non-interactive to LE client options
Depending on when the client is run, there are no certificates to
update. By default, the client runs in interactive mode and wants to
notify the user of this. This causes Ansible to hang waiting for an
acknowledgement that will never come. Adding the non-interactive flag
fixes this.
8 years ago
Mike Ashley
c822f9de14
Merge pull request #533 from carljm/post-renew
Idempotency fixes to LetsEncrypt handling.
8 years ago
Sven Neuhaus
15a39c695d
Merge pull request #535 from carljm/pg-passwords
Encrypt Postgres passwords, and fix change-reporting.
8 years ago
Carl Meyer
2737b16477
Use postgresql_user module for configuring PG admin user in owncloud role.
8 years ago
Carl Meyer
a343509129
No need for letsencrypt.yml to ensure Apache is running.
8 years ago
Carl Meyer
579afa68d3
Add comment into letsencrypt-gencert script clarifying why we stop Apache.
8 years ago
Sven Neuhaus
106cd1b2c7
Merge pull request #542 from johngian/fix-znc-persistency
Add directories to allow persistent znc user/modules configuration.
8 years ago
John Giannelos
0b62ed998b
Add directories to allow persistent znc user/modules configuration.
8 years ago
Sven Neuhaus
7af11cf4d4
Merge pull request #541 from johngian/fix-monitoring
Fix monitoring config for apache/postgresql.
8 years ago
John Giannelos
66cc560281
Fix monitoring config for apache/postgresql.
8 years ago
Mike Ashley
c4ddb31909
Merge pull request #536 from carljm/opendmarc-idempotent
Idempotency/changed-reporting fixes for OpenDMARC tasks.
8 years ago
Carl Meyer
0abf92734e
Don't stop Apache until we have to; start it again right after.
8 years ago
Carl Meyer
a636a43948
Don't try to execute any non-executable file in LE postrenew dir.
8 years ago