Thomas Buck
e6bd74153d
creating domain list for letsencrypt dynamically. some other small fixes.
3 anos atrás
Thomas Buck
426c2f2186
add role for dokuwiki
3 anos atrás
Thomas Buck
b37d78c1f9
more fixes to support debian 10
3 anos atrás
Thomas Buck
97ceee0704
remove unnecessary secret_* everywhere
3 anos atrás
Thomas Buck
36571bace7
some fixes for debian 10
3 anos atrás
Thomas Buck
37dd16fb67
add sslletsencrypt and sslselfsigned roles for internal servers
3 anos atrás
Thomas Buck
ee0f739b1d
Lots of updates, first test of VPN.
5 anos atrás
maxbachmann
4f3d1e415f
Update security.yml
5 anos atrás
Thomas Buck
8b83bd66b1
Properly setup hostname
5 anos atrás
Thomas Buck
5684f3c673
Install fail2ban with IPv6 support from stretch-backports (Debian 9).
5 anos atrás
Thomas Buck
df70d73549
Rename fathom subdomain to stats and make it a variable.
5 anos atrás
Thomas Buck
f88fc91d13
cleanup vars
5 anos atrás
Thomas Buck
17ae1906ee
Add iot role with grafana task
5 anos atrás
Thomas Buck
30832be156
Add Commento to blog task and add example index page for webhosting.
5 anos atrás
Thomas Buck
14dd6202ef
Added Mastodon role
5 anos atrás
Thomas Buck
d72da6b11b
Add Matrix: Synapse Homeserver and Riot webclient
5 anos atrás
Thomas Buck
4ab56bdf6e
Added gitea
5 anos atrás
Thomas Buck
72cb7a3d23
letsencrypt cert folder should stay with ssl-cert group
5 anos atrás
Thomas Buck
5215ac9a25
Password lookup called wrong, all generated passwords were 20 chars long, regardless of specification.
5 anos atrás
Thomas Buck
bad2e4f9a1
Add tmux to common programs. Generate german locale. Remove unneeded empty lines.
5 anos atrás
Thomas Buck
04ba7ad539
Added Fathom statistics tracker to blog task
5 anos atrás
Thomas Buck
4cf67e7aed
Explicitly install postgres-9.6 and fix monit pid-file location for it.
5 anos atrás
Thomas Buck
f34c0c827f
Typo in common apache config, file actually ends with .conf
5 anos atrás
Thomas Buck
c41cd737fd
Support multiple domains for letsencrypt
5 anos atrás
Thomas Buck
1b7628c756
Install ACL so newer ansible versions can properly upload scripts from and for unprivileged users.
5 anos atrás
Thomas Buck
c71c6d8559
Use new style of calling apt in ansible
5 anos atrás
Thomas Buck
3dc25b1bc9
common was missing db admin user pass in default vars.
5 anos atrás
Thomas Buck
472dd068c2
Remove unneeded testing / vagrant stuff.
5 anos atrás
Thomas Buck
03f37267df
Remove cgit/gitolite git repo hosting
5 anos atrás
Thomas Buck
82a931b55d
Remove Tarsnap stuff
5 anos atrás
Thomas Buck
31afcaa7b9
Remove encfs and call directory data instead of decrypted
5 anos atrás
Thomas Buck
183b80da8d
Remove Google Authenticator / Two-Factor Authentification
5 anos atrás
Brett Haines
eddcdd7993
Updating fail2ban jail list
6 anos atrás
Óscar Nájera
8f0cc14f76
Fix: Ansible uses the value present in apt module state parameter
6 anos atrás
Óscar Nájera
ae0594dc4a
use mozilla sshd config on algorithms
6 anos atrás
Bryan Voss
128b7e63a2
Update for Debian 9
7 anos atrás
Ndubisi Nwaku
55770977da
Add group name ssl-cert for SSL certificates
7 anos atrás
Aleksandr Bogdanov
cdc0d3fb4e
Fixing encfs shell invocation for ansible 2 compatibility
7 anos atrás
Óscar Nájera
0635815b52
Ensure en_US.UTF-8 locale is present
7 anos atrás
Wolfgang Steitz
3a42d15850
setup posgres within the common role
Postgres is used by several roles, but the setup is currently part of the 'mailserver' role. By moving it to 'common', it's possible to disable the mailserver without breaking the others.
8 anos atrás
Mike Ashley
fc023dfc31
Clean up merge
Clean up some artifacts from the merge to match the `jessie` branch.
Keep the changes on master made with commits bfe6fe84 and e229c551 .
8 anos atrás
Tomas Bedrich
3efc7ae54e
Allowed SSH agent forwarding when using sudo
8 anos atrás
Dosenpfand
9697cbe6b3
Silence letsencrypt cron output unless there is an error
8 anos atrás
Tomas Bedrich
7a399d45ca
Fix SSH connections to Github
8 anos atrás
Mike Ashley
0e7adf6e3a
Fix bug exposed by commit 264c232b (#572 )
The `private_key` variable used to check for changes was never
registered.
8 anos atrás
Simon Schoeters
264c232bbf
Remove duplicate when statement in Let's Encrypt task
While adding the Let's Encrypt offline testing block in 1746afcc we
accidentially duplicated a the 'when' statement. Ansible only looks at
the last when statement for a given block meaning the earlier one has no
use. This commit merges both lines in one.
8 anos atrás
Allen Riddell
9f34027d8b
Add common default vars to role
8 anos atrás
Allen Riddell
e95caea06c
common: use password lookup to generate passwords
See https://docs.ansible.com/ansible/playbooks_lookups.html
8 anos atrás
Dosenpfand
f2c14dd911
Remove unneeded/deprecated apache configuration
8 anos atrás
Tomas Bedrich
899f527ca3
Updated LE renewal hook system
8 anos atrás