153 Commits (c8a1f00be10547b46364673b15a7291968384efa)

Author SHA1 Message Date
  Carl Meyer b93deb9411 Remove stray + prefix in sudoers file. 8 years ago
  Allen Riddell a77f9b95ad Replace deprecated sudo_user with become_user 8 years ago
  Mike Ashley 3d4987c4e2 Use a more descriptive name for cert generation script 8 years ago
  Mike Ashley a38f4e08d3 Force download of letsencrypt release 8 years ago
  Mike Ashley 5385badd49 Correct bug in SSL cert setup for test environment 8 years ago
  Mike Ashley bc5bfa4b21 Determine registered subdomains at deploy-time for LE 8 years ago
  Mike Ashley 2ad6f78e45 Address incomplete chain error 8 years ago
  Mike Ashley 58e9e7a445 Add a short introduction to Let's Encrypt 8 years ago
  Mike Ashley 86048ee397 Update prosody to use LE certs directly 8 years ago
  Mike Ashley 1746afcc3a Arrange automated tests to not use Let's Encrypt 8 years ago
  Mike Ashley 8f1b6a9ed8 Arrange for services to restart on cert renewal 8 years ago
  Mike Ashley 65729d12f8 Update xmpp role for LE certificate 8 years ago
  Mike Ashley 7bb523950e Draft design description for Let's Encrypt support 8 years ago
  Mike Ashley 8e1d473027 Use Let's Encrypt for generating site certificates 8 years ago
  Mike Ashley 7f46129a4c Remove use of wildcard certificate 8 years ago
  Mike Ashley 195d8811fc Remove references to Trusty and Wheezy 8 years ago
  Mike Ashley d3abc02f84 Clean up Apache SSL configuration 8 years ago
  fengor e63661f982 Added "UseRoaming no" to ssh.config to fix OpenSSH: client bugs CVE-2016-0777 and CVE-2016-0778 8 years ago
  Sebastian Kriems fe536873b7 ufw tasks shall have the ufw tag 8 years ago
  Dan Milon 829c8491c7 restart apache on SSL changes 8 years ago
  Dan Milon a5c6f663ce properly install changed SSL certificate 8 years ago
  Sven Neuhaus d59c5eff05 Generate 2048 DH group and add it to Postfix 8 years ago
  Dan Milon 2fb7cfa7c9 Add SSL stapling cache for apache 8 years ago
  Laurent Arnoud 1419c4e26e Use common_timezone and fix idempotence 8 years ago
  Alex Payne 0579cf1ba9 Use same Apache server name configuration across distros 8 years ago
  Alex Payne 290a3b4312 Remove wheezy-specific Apache SSL config omission 8 years ago
  Alex Payne 474c1d5f92 No longer need `fuse` group in Jessie. 8 years ago
  Alex Payne 6906412f63 Remove wheezy-specific ufw task. 8 years ago
  Alex Payne 6d1eebb9d2 Use Ansible task names, not comments. 8 years ago
  Alex Payne c9b32cd2e2 Same Google auth install should work for both Jessie and Trusty. 8 years ago
  Alex Payne 006f8e9b82 Just plain Ruby 8 years ago
  Laurent Arnoud a09e2e71c1 tar used in place of unarchive module 9 years ago
  Laurent Arnoud 311fae7e11 Trailing whitespace 9 years ago
  Laurent Arnoud 3b8f15b745 Added whois for fail2ban report 9 years ago
  Will McCutchen 1be1afe1ff Disable SSL stapling on wheezy 9 years ago
  Will McCutchen 16b66cc849 Define apache SSL config in one place 9 years ago
  Manfred Touron 16c93ea486
Using more verbose 'dependencies' tag (#393) 9 years ago
  Manfred Touron b49f3a6586 Tagged 'deps' aptitude tasks 9 years ago
  Laurent Arnoud 353e69d299 Remove duplication with items unattended upgrades 9 years ago
  Laurent Arnoud 89d47731ff Add molly-guard and unattended-upgrades as common pkgs 9 years ago
  Alex Payne b11fb68559 Automatically set up passwordless sudo for deploy user. 9 years ago
  Aleksandr Bogdanov a849948e8d Choosing the closest ubuntu mirror before anything else 9 years ago
  Sven Neuhaus ae58053653 Create /decrypted directory even if encfs is not used. 9 years ago
  Sven Neuhaus d5217ea1cd Create main user without "fuse" group, instead add it later as part 9 years ago
  Marius Voila b13ab39f11 cleaning security.yml 9 years ago
  fengor 7ed46f590c renamed templates to be consistent with coding standard. 9 years ago
  Marius Voila ec69fef60c removed old template 9 years ago
  Marius Voila 2ae2c3683c removed template and implemented logic 9 years ago
  fengor 2fd1e1b722 readded google authenticator lines 9 years ago
  fengor 224e8cb339 Setting timezone to UTC 9 years ago