sovereign

Tekijä	SHA1	Viesti	Päivämäärä
Alex Payne	d28f0f82b9	move to non-deprecated template variable formatting	10 vuotta sitten
Luke Cyca	e46ad018ba	Improved test suite, rewritten in python Added friendly_networks variable to denote whitelisted networks	10 vuotta sitten
Luke Cyca	2f145ce543	Two small apache-related fixes	10 vuotta sitten
Luke Cyca	08d6827755	New vagrant-based development environment	10 vuotta sitten
Luke Cyca	b1a3b8b67d	Use discovered IPv4 address	10 vuotta sitten
Luke Cyca	37a0400c22	Standardize apache’s 301 redirect to https, and enable HSTS	10 vuotta sitten
Luke Cyca	bdab1cd6b1	Reworked ufw logic to not use change_when keyword because it's not available in a stable ansible release yet	10 vuotta sitten
Allen Riddell	5b8ba840a4	workaround ufw bug, call ufw enable twice	10 vuotta sitten
Allen Riddell	ae0d1ca8f4	Ignore ufw error resulting from known bug on Debian 7 In order to check the version of the linux distribution we need to set `gather_facts` to True. Closes #73.	10 vuotta sitten
Luke Cyca	7043143f90	Improved idempotency and removed ip detection for checkrbl	10 vuotta sitten
Allen Riddell	88705bb7fa	Replace ferm with ufw	10 vuotta sitten
Bertrand Cachet	f43c57e132	fix(apticron): apticron emails are sent to root Instead of sending email to {{ admin_email }} we send them to root user. These emails will be redirected to the appropriate user via mail_virtual_aliases variables	10 vuotta sitten
Bertrand Cachet	373cb4584b	add(apticron): configure email Apticron is configured to send email to {{ admin_email }}	10 vuotta sitten
Bertrand Cachet	df802919f7	add(fail2ban): Add server IP address to ignore IP ignoreip field inside /etc/fail2ban/jail.local is populated with server_ip_address variable	10 vuotta sitten
Alex Payne	a9cabad947	Update etc_ferm_ferm.conf	10 vuotta sitten
Allen Riddell	580e3ef5c1	Don't open unused ports Sovereign does not currently use jabber/xmpp or insecure smtp.	10 vuotta sitten
Greg Karékinian	58dddc55d1	Remove variables from roles Refs #39	10 vuotta sitten
Luke Cyca	c697e135e9	Move NameVirtualHost directives to ports.conf	10 vuotta sitten
Alex Payne	f27442b678	move tarsnap to its own role	10 vuotta sitten
Luke Cyca	5beacea2d2	Absolute path for tarsnap	10 vuotta sitten
Luke Cyca	ca8a371320	Use combined cert for postfix, dovecot, and znc Fix CAcert usage in postfix and dovecot	10 vuotta sitten
Alex Payne	65103923ec	Fix typo in firm task name	10 vuotta sitten
Luke Cyca	7e2ce80a25	Update apt repo and upgrade safe packages	10 vuotta sitten
Luke Cyca	cf9d8350dd	Fix ssh handler typo	10 vuotta sitten
Luke Cyca	09c8fcb295	Named all tasks and made them idempotent where possible	10 vuotta sitten
Luke Cyca	6168cd68d0	Automate encfs setup and name mount point more appropriately	10 vuotta sitten
Luke Cyca	12d42ad38a	Configure sshd_config to disable PermitRootLogin and PasswordAuthentication	10 vuotta sitten
Luke Cyca	921cebb41d	Fix invalid service state	10 vuotta sitten
Luke Cyca	5920b17609	Remove usergroup because debian adds it by default as the primary group	10 vuotta sitten
Luke Cyca	dfe8bd1cca	TODO for fail2ban ignoreip Removed your hardcoded server IP	10 vuotta sitten
Henrik Hodne	a844401d7c	tarsnap: Only run cron job once per day. The old action would generate a crontab job for `* 3 * * *`, which means every minute at 3am, so 60 times per day.	10 vuotta sitten
Alex Payne	080d38986c	first commit	11 vuotta sitten

35 Commitit (d28f0f82b9e2b4f3737dd1c91c57cda79bb4f4de)