Mike Ashley
3a630c8236
Update versions in README
8 yıl önce
Allen Riddell
50fae9cb73
Merge pull request #531 from spk/use-https-rspamd
Use https for rpsamd key and repository
8 yıl önce
Laurent Arnoud
d56f0bd7ef
Use https for rpsamd key and repository
8 yıl önce
Allen Riddell
78b3d5825e
Merge pull request #530 from mikeashley/openvpn-update
Only add iptables rules if they don't already exist
8 yıl önce
Yannik Sembritzki
66cb39bb46
Only add iptables rules if they don't already exist
8 yıl önce
Mike Ashley
9725cdd9d8
Merge pull request #521 from carljm/rmilter
Complete rmilter/rspamd setup.
8 yıl önce
Mike Ashley
37b3a11829
Merge pull request #519 from ariddell/feature/unused-var
Remove unused variables in jessie
8 yıl önce
Allen Riddell
68cafc79ae
Remove unused variables
- google_auth_version
- znc_version
8 yıl önce
Allen Riddell
f21edc8ee4
Merge pull request #518 from nodiscc/patch-1
bash syntax cleanup
8 yıl önce
Carl Meyer
1a3d01f311
Complete rmilter/rspamd setup.
8 yıl önce
Sven Neuhaus
d1df544634
Merge pull request #516 from carljm/opendmarc-silent-cron
Make OpenDMARC cron job log everything instead of mailing some output to root.
8 yıl önce
nodiscc
d876c87e21
bash syntax cleanup
as per discussion in https://github.com/sovereign/sovereign/pull/504
8 yıl önce
Carl Meyer
d46fb1521b
Make OpenDMARC cron job email root only on error.
8 yıl önce
Sven Neuhaus
9bf9803578
Merge pull request #517 from carljm/fix-opendkim-signing
Pass {auth_type} to milters, fixing OpenDKIM signing of authenticated SMTP messages.
8 yıl önce
Carl Meyer
57982401a9
Pass {auth_type} to milters, fixing OpenDKIM signing of authenticated SMTP messages.
8 yıl önce
Mike Ashley
59da1a8618
Merge pull request #512 from ariddell/feature/dry-openvpn
DRY in openvpn role and allow other rc.local tasks
8 yıl önce
Mike Ashley
e995580577
Merge pull request #514 from carljm/le-doc-update
Remove obsolete documentation note.
8 yıl önce
Carl Meyer
05724aed5f
Remove obsolete documentation note.
8 yıl önce
Justin Plock
1406ab8ac3
Merge pull request #513 from carljm/fix-sudoers
Remove stray + prefix in sudoers file.
8 yıl önce
Carl Meyer
b93deb9411
Remove stray + prefix in sudoers file.
8 yıl önce
Allen Riddell
6904d4727d
Merge pull request #505 from mikeashley/oc-fix
Update ownCloud role for ownCloud 8.2
8 yıl önce
Yannik Sembritzki
d2821753a7
DRY in openvpn role and allow other rc.local tasks
8 yıl önce
Mike Ashley
a38dd89adf
Merge pull request #508 from ariddell/feature/ansible-lint
Update ansible in jessie
8 yıl önce
Allen Riddell
a77f9b95ad
Replace deprecated sudo_user with become_user
The ``sudo`` and ``sudo_user`` directives are replaced with ``become``
and ``become_user`` in Ansible 1.9.
8 yıl önce
Allen Riddell
2062225709
Fix ansible version and ansible-lint version
Ansible 1.9 or greater is required.
8 yıl önce
Allen Riddell
b92b8841ea
Merge pull request #504 from mikeashley/letsencrypt
Let's Encrypt support
8 yıl önce
Mike Ashley
3d4987c4e2
Use a more descriptive name for cert generation script
8 yıl önce
Mike Ashley
a38f4e08d3
Force download of letsencrypt release
The installer automatically updates itself, which registers as a change
in the git repo. To maintain idempotency of the task list, the repo
download must be forced.
8 yıl önce
Mike Ashley
a17b576e78
Update ownCloud role for ownCloud 8.2
- Remove unnecessary dependencies
- Clean up postgresql server setup
- Install from official package repository
- Expect package installer to enable modules that are needed
- Update virtual host config with owncloud 8.2 configuration
- Update post-deploy instructions
8 yıl önce
Mike Ashley
5385badd49
Correct bug in SSL cert setup for test environment
8 yıl önce
Allen Riddell
f213d2b70e
Merge pull request #503 from mikeashley/opendmarc-repair
Fix opendmarc installation
8 yıl önce
Mike Ashley
bc5bfa4b21
Determine registered subdomains at deploy-time for LE
9 yıl önce
Mike Ashley
2ad6f78e45
Address incomplete chain error
Fix Apache's configuration for version 2.4.8 and above. See
https://community.letsencrypt.org/t/untrusted-on-mobile-newbe/7903
9 yıl önce
Mike Ashley
58e9e7a445
Add a short introduction to Let's Encrypt
9 yıl önce
Mike Ashley
a8aa1ac42e
Explain where certificates will come from
9 yıl önce
Mike Ashley
0302a8fa0a
Correct certificate paths for ZNC
9 yıl önce
Mike Ashley
86048ee397
Update prosody to use LE certs directly
Don't copy the LE certificates. Instead use the ssl-cert group to
manage access to the LE certificates directly. See
https://github.com/letsencrypt/letsencrypt/issues/1425 for a request to
have the LE client do this itself.
9 yıl önce
Mike Ashley
1746afcc3a
Arrange automated tests to not use Let's Encrypt
9 yıl önce
Mike Ashley
8f1b6a9ed8
Arrange for services to restart on cert renewal
9 yıl önce
Mike Ashley
65729d12f8
Update xmpp role for LE certificate
9 yıl önce
Mike Ashley
ec7b5867d3
Update ircbouncer role for LE certificate
9 yıl önce
Mike Ashley
beaceafbd1
Update mailserver role to use LE certificate
9 yıl önce
Mike Ashley
8ff2181585
Update tarsnap role to include LE files
9 yıl önce
Mike Ashley
7bb523950e
Draft design description for Let's Encrypt support
9 yıl önce
Mike Ashley
b1029aafb4
Update README.md for DNS config changes
Let's Encrypt uses DNS to verify domain ownership, so DNS records must
be set up before the paybook is run the first time.
9 yıl önce
Mike Ashley
8e1d473027
Use Let's Encrypt for generating site certificates
This method uses Subjective Alternative Names (SANs) to get one
certificate for all the subdomains that Sovereign employs, whether or
not the user configured their site with the roles.
9 yıl önce
Mike Ashley
7f46129a4c
Remove use of wildcard certificate
9 yıl önce
Mike Ashley
4c830e1b07
Override opendmarc defaults
This patch restores sovereign's configuration of opendmarc.
8 yıl önce
Mike Ashley
1bc60827ef
Revert opendmarc to use mysql
An earlier commit started transitioning opendmarc to use postgres, but
this was incomplete. This patch reverts that change and uses mysql for
the reporting database.
Other changes:
* Do not maintain a copy of the database import schema. A copy is
included in the distribution in /usr/share/doc, so that is used
instead.
* The configuration file is replaced with the distribution's sample
configuration. A second patch will restore the actual configuration.
This will make the changes easier to see if the default configuraton
file changes in future versions of opendmarc.
8 yıl önce
Allen Riddell
1963fa6f15
Merge pull request #498 from mikeashley/no-trusty
Remove references to Trusty and Wheezy (jessie)
8 yıl önce