See https://wiki.mozilla.org/Security/Server_Side_TLS for details.
Removes RC4 cipher. Fixes issue #341.
Also explicitly disabled SSLCompression and enables OCSP stapling.

We should put all these settings in
/etc/apache2/mods-enabled/ssl.conf
to avoid duplication...

(on Debian Jessie, Ubuntu Trusty or older distributions such as
Debian Wheezy and Ubuntu Precise).

This is the updated version from the prosody repository because
these distributions have an old version of the lua-sec package
that lacks PFS and other features. Second commit for issue #285.

Installation of package unattended-upgrades was listed twice.

relates to pull request #372

added details about the license and the supported distributions.

Reflects the move to the `sovereign` GitHub organization.

remove duplicate options which are already specified in main.cf

Add molly-guard and unattended-upgrades as common pkgs

Dovecot: Fix for logjam attack

Add a tag for newebe, so it can be installed separately

Added a tag for newebe in a similar style to the other roles.

adds deploy user to sudoers

Resolves #363.

Addresses #362.

Addresses #361.

More secure defaults for ssh.

# Conflicts:
#	roles/common/tasks/users.yml

Closes #343.

Integration between selfoss and wallabag (fixes #349)

Create main user without "fuse" group, instead add it later

Enabling php5-mcrypt for roundcube, as it is not by default

fixing a dependency on mailserver, as psycopg and postgres are only installed there

Choosing the closest ubuntu mirror before anything else

Helps with issue #120.

of the "encfs" tag. This allows the user to make encfs optional.
Helps with issue #120.

cleaning security.yml

removed comment line in ssh_config

fail2ban support for Trusty

Enable UFW only after setting firewall rules