Luke Cyca
e46ad018ba
Improved test suite, rewritten in python
Added friendly_networks variable to denote whitelisted networks
11 år sedan
Luke Cyca
2f145ce543
Two small apache-related fixes
11 år sedan
Luke Cyca
08d6827755
New vagrant-based development environment
11 år sedan
Luke Cyca
b1a3b8b67d
Use discovered IPv4 address
11 år sedan
Luke Cyca
37a0400c22
Standardize apache’s 301 redirect to https, and enable HSTS
11 år sedan
Luke Cyca
bdab1cd6b1
Reworked ufw logic to not use change_when keyword
because it's not available in a stable ansible release yet
11 år sedan
Allen Riddell
5b8ba840a4
workaround ufw bug, call ufw enable twice
11 år sedan
Allen Riddell
ae0d1ca8f4
Ignore ufw error resulting from known bug on Debian 7
In order to check the version of the linux distribution we need to
set `gather_facts` to True.
Closes #73 .
11 år sedan
Luke Cyca
7043143f90
Improved idempotency and removed ip detection for checkrbl
11 år sedan
Allen Riddell
88705bb7fa
Replace ferm with ufw
11 år sedan
Bertrand Cachet
f43c57e132
fix(apticron): apticron emails are sent to root
Instead of sending email to {{ admin_email }} we send them to root user.
These emails will be redirected to the appropriate user via
mail_virtual_aliases variables
11 år sedan
Bertrand Cachet
373cb4584b
add(apticron): configure email
Apticron is configured to send email to {{ admin_email }}
11 år sedan
Bertrand Cachet
df802919f7
add(fail2ban): Add server IP address to ignore IP
ignoreip field inside /etc/fail2ban/jail.local is populated with
server_ip_address variable
11 år sedan
Alex Payne
a9cabad947
Update etc_ferm_ferm.conf
11 år sedan
Allen Riddell
580e3ef5c1
Don't open unused ports
Sovereign does not currently use jabber/xmpp or insecure smtp.
11 år sedan
Greg Karékinian
58dddc55d1
Remove variables from roles
Refs #39
11 år sedan
Luke Cyca
c697e135e9
Move NameVirtualHost directives to ports.conf
11 år sedan
Alex Payne
f27442b678
move tarsnap to its own role
11 år sedan
Luke Cyca
5beacea2d2
Absolute path for tarsnap
11 år sedan
Luke Cyca
ca8a371320
Use combined cert for postfix, dovecot, and znc
Fix CAcert usage in postfix and dovecot
11 år sedan
Alex Payne
65103923ec
Fix typo in firm task name
11 år sedan
Luke Cyca
7e2ce80a25
Update apt repo and upgrade safe packages
11 år sedan
Luke Cyca
cf9d8350dd
Fix ssh handler typo
11 år sedan
Luke Cyca
09c8fcb295
Named all tasks and made them idempotent where possible
11 år sedan
Luke Cyca
6168cd68d0
Automate encfs setup and name mount point more appropriately
11 år sedan
Luke Cyca
12d42ad38a
Configure sshd_config to disable PermitRootLogin and PasswordAuthentication
11 år sedan
Luke Cyca
921cebb41d
Fix invalid service state
11 år sedan
Luke Cyca
5920b17609
Remove usergroup because debian adds it by default as the primary group
11 år sedan
Luke Cyca
dfe8bd1cca
TODO for fail2ban ignoreip
Removed your hardcoded server IP
11 år sedan
Henrik Hodne
a844401d7c
tarsnap: Only run cron job once per day.
The old action would generate a crontab job for `* 3 * * *`, which means every minute at 3am, so 60 times per day.
11 år sedan
Alex Payne
080d38986c
first commit
11 år sedan