fripost-ansible/roles/common/handlers, branch master Fripost ansible scripts Resolver: Use systemd-resolved. 2025-01-28T13:26:18+00:00 Guilhem Moulin guilhem@fripost.org 2025-01-28T13:26:18+00:00 20cd6ac5299a725558a85df7c93c34f4a67b15d5 






Change NTP client to systemd-timesyncd.
2020-11-15T17:33:37+00:00

Guilhem Moulin
guilhem@fripost.org

2020-11-05T16:13:03+00:00

e8e01842f4e578ec427dd8d6f5a5e40b498458af

(Excluding our NTP master.)  It's simpler, arguably more secure, and
provides enough functionality when only simple client use-cases are
desired.

We allow outgoing connections to 123/udp also on NTP slaves so systemd-timesyncd
can connect to the fallbacks NTP servers.





(Excluding our NTP master.)  It's simpler, arguably more secure, and
provides enough functionality when only simple client use-cases are
desired.

We allow outgoing connections to 123/udp also on NTP slaves so systemd-timesyncd
can connect to the fallbacks NTP servers.







typofix
2020-11-02T00:21:44+00:00

Guilhem Moulin
guilhem@fripost.org

2020-11-02T00:21:44+00:00

65063c9638b905ca23ce35cdc0045f51f02187f4












Upgrade baseline to Debian 10.
2020-05-16T03:45:59+00:00

Guilhem Moulin
guilhem@fripost.org

2020-05-16T00:52:55+00:00

bac7811d2b35252b7a83a45d75bb344b4b1776a9












Disable resume device.
2018-12-09T19:25:40+00:00

Guilhem Moulin
guilhem@fripost.org

2018-12-09T17:28:59+00:00

7d9380c2c9dd87876ce4d9f9b30c934505fcba51

We don't need suspend-on-disk (hibernation).





We don't need suspend-on-disk (hibernation).







Install unbound on metal hosts.
2018-12-03T02:46:28+00:00

Guilhem Moulin
guilhem@fripost.org

2018-12-03T02:45:59+00:00

07c1734d2c00ce0a52830533b19a02faed678364

(A validating, recursive, caching DNS resolver.)





(A validating, recursive, caching DNS resolver.)







Skip samhain installation.
2018-12-03T01:53:27+00:00

Guilhem Moulin
guilhem@fripost.org

2018-06-08T22:31:38+00:00

203c3ca3d0b3d053827e6ced01cdde85eb0871c5

It's become too verbose (too many false-positive)…





It's become too verbose (too many false-positive)…







IPSec → IPsec
2016-06-29T18:14:25+00:00

Guilhem Moulin
guilhem@fripost.org

2016-06-29T18:14:25+00:00

aaba815dbccbb0d623def17d1e030383d905daa0












Tunnel bacula (dir → {fd,sd} and fd → sd) traffic through IPSec.
2016-05-22T15:53:58+00:00

Guilhem Moulin
guilhem@fripost.org

2016-05-22T15:21:16+00:00

8cf4032ecec5b9f58d829e89f231179170432539












Tunnel munin-update traffic through IPSec.
2016-05-22T15:53:58+00:00

Guilhem Moulin
guilhem@fripost.org

2016-05-22T15:00:58+00:00

82d27fabc7becba1d1ee7c24b331522f2330cae6