Thomas Buck
37dd16fb67
add sslletsencrypt and sslselfsigned roles for internal servers
3 роки тому
Sebastian Kriems
fe536873b7
ufw tasks shall have the ufw tag
resolves #453
Conflicts:
roles/common/tasks/ufw.yml
9 роки тому
Sebastian Kriems
968abba197
ufw tasks shall have the ufw tag
resolves #453
9 роки тому
Alex Payne
6906412f63
Remove wheezy-specific ufw task.
9 роки тому
Manfred Touron
16c93ea486
Using more verbose 'dependencies' tag (#393 )
9 роки тому
Manfred Touron
b49f3a6586
Tagged 'deps' aptitude tasks
9 роки тому
Anthony Perez-sanz
cdf9ed07bb
Enable UFW after setting firewall rules
On fresh installs of Debian 7.6, the current order of steps will lock you
out of SSH. This will enable UFW after creating rules for http, https, ssh,
and DNS. Fix comes from @Debugreality in issue #303 :
https://github.com/al3x/sovereign/issues/303
10 роки тому
Lorenzo Villani
d5ecf673d3
Calm OCD by sorting almost every with_items block in alphabetical order
10 роки тому
Justin Plock
1d7986fd96
Enable UFW and deny everything by default
Removed unused status checks on UFW
10 роки тому
Justin Plock
ea0b288818
Moved ufw firewall rules into individual roles
10 роки тому
Justin Plock
3b0308d69e
Allow both TCP and UDP port 53 for DNS lookups through OpenVPN
11 роки тому
Joost Baaij
335cef5c9f
Enabled POP3S for old-timeys who dig that
added dovecot-pop3d
allowed in the firewall
monitored with monit
added relevant tests
11 роки тому
Joshua Lund
4ed07a1e0a
* Made the OpenVPN port and protocol (tcp/udp) configurable
* Added 'cipher' and 'auth' lines to the generated client configs
11 роки тому
Luke Cyca
76d52b63f3
XMPP cert handling improvements, ufw rules, and tests
11 роки тому
Luke Cyca
bdab1cd6b1
Reworked ufw logic to not use change_when keyword
because it's not available in a stable ansible release yet
11 роки тому
Allen Riddell
5b8ba840a4
workaround ufw bug, call ufw enable twice
11 роки тому
Allen Riddell
ae0d1ca8f4
Ignore ufw error resulting from known bug on Debian 7
In order to check the version of the linux distribution we need to
set `gather_facts` to True.
Closes #73 .
11 роки тому
Allen Riddell
88705bb7fa
Replace ferm with ufw
11 роки тому