fripost-ansible/roles/common/tasks, branch master Fripost ansible scripts Convert changed_when value to a boolean. 2025-09-10T13:31:19+00:00 Guilhem Moulin guilhem@fripost.org 2025-09-10T13:31:19+00:00 831c41b79273d112367811331faab034e4d81cf1 As of ansible 2.19 a non-zero value is no longer converted to a boolean. 
As of ansible 2.19 a non-zero value is no longer converted to a boolean.
Skip auditd setup. 2025-01-28T15:16:29+00:00 Guilhem Moulin guilhem@fripost.org 2025-01-28T15:09:33+00:00 93e778134630e6d5f71096dff76a995854a15da9 Arguably not very useful without further configuration. 
Arguably not very useful without further configuration.
Fix logcheck.logfiles permissions. 2025-01-28T14:28:51+00:00 Guilhem Moulin guilhem@fripost.org 2025-01-28T14:21:44+00:00 c7a9f907a61cf06c73c56628210257b639a6bb50 Regression from 0c5664f27d84c6d616b2c2fb0812aad94c4185af. 
Regression from 0c5664f27d84c6d616b2c2fb0812aad94c4185af.
Update logcheck database. 2025-01-28T13:26:40+00:00 Guilhem Moulin guilhem@fripost.org 2025-01-28T13:26:40+00:00 0c5664f27d84c6d616b2c2fb0812aad94c4185af 






Resolver: Use systemd-resolved.
2025-01-28T13:26:18+00:00

Guilhem Moulin
guilhem@fripost.org

2025-01-28T13:26:18+00:00

20cd6ac5299a725558a85df7c93c34f4a67b15d5












Improve Debian 11's fail2ban rules.
2022-12-18T12:29:34+00:00

Guilhem Moulin
guilhem@fripost.org

2022-12-14T11:01:33+00:00

7ea3baad594b889f6f7f4e7e4ccc4dc7c0099bc6












Port baseline to Debian 11 (codename Bullseye).
2022-10-13T20:12:05+00:00

Guilhem Moulin
guilhem@fripost.org

2022-10-11T23:43:23+00:00

85347041a04d17f6803100dd2cec9b489c9db47d












munin: Skip ntp_* plugins when ntpq(1) is missing.
2021-02-06T17:47:28+00:00

Guilhem Moulin
guilhem@fripost.org

2021-02-06T17:47:28+00:00

83ddeec1ab7f5e13cc8f930c6955cc275fb1b8c7












Change NTP client to systemd-timesyncd.
2020-11-15T17:33:37+00:00

Guilhem Moulin
guilhem@fripost.org

2020-11-05T16:13:03+00:00

e8e01842f4e578ec427dd8d6f5a5e40b498458af

(Excluding our NTP master.)  It's simpler, arguably more secure, and
provides enough functionality when only simple client use-cases are
desired.

We allow outgoing connections to 123/udp also on NTP slaves so systemd-timesyncd
can connect to the fallbacks NTP servers.





(Excluding our NTP master.)  It's simpler, arguably more secure, and
provides enough functionality when only simple client use-cases are
desired.

We allow outgoing connections to 123/udp also on NTP slaves so systemd-timesyncd
can connect to the fallbacks NTP servers.







Bacula: refactor systemd service files.
2020-11-03T02:37:11+00:00

Guilhem Moulin
guilhem@fripost.org

2020-11-03T02:15:10+00:00

ead9aaa3dd7ca48012b2b21cc930ee73c8eaa9d3

Use unit overrides on top of upstream's service files instead of
overriding entire service files.  In particular, upstream uses flag `-P`
so we don't need to use RuntimeDirectory= anymore.





Use unit overrides on top of upstream's service files instead of
overriding entire service files.  In particular, upstream uses flag `-P`
so we don't need to use RuntimeDirectory= anymore.