fripost-ansible/roles/lacme, branch master Fripost ansible scripts Port baseline to Debian 11 (codename Bullseye). 2022-10-13T20:12:05+00:00 Guilhem Moulin guilhem@fripost.org 2022-10-11T23:43:23+00:00 85347041a04d17f6803100dd2cec9b489c9db47d 






Rename '_lacme' user to '_lacme-client'.
2021-02-24T11:33:54+00:00

Guilhem Moulin
guilhem@fripost.org

2021-02-24T11:33:54+00:00

7b23a7434ad050a73cedbeab6feb6ce6deb30015

For a smooth upgrade to Bullseye's lacme 0.8-1.





For a smooth upgrade to Bullseye's lacme 0.8-1.







AEAD ciphers: Add EECDH+CHACHA20 macro.
2020-05-18T02:34:17+00:00

Guilhem Moulin
guilhem@fripost.org

2020-05-18T02:34:00+00:00

61ba2a2fe12ffd5578429dfe1d354a1c5d16517a

This adds the following two ciphers:

  ECDHE-ECDSA-CHACHA20-POLY1305 TLSv1.2 Kx=ECDH  Au=ECDSA Enc=CHACHA20/POLY1305(256) Mac=AEAD
  ECDHE-RSA-CHACHA20-POLY1305   TLSv1.2 Kx=ECDH  Au=RSA   Enc=CHACHA20/POLY1305(256) Mac=AEAD





This adds the following two ciphers:

  ECDHE-ECDSA-CHACHA20-POLY1305 TLSv1.2 Kx=ECDH  Au=ECDSA Enc=CHACHA20/POLY1305(256) Mac=AEAD
  ECDHE-RSA-CHACHA20-POLY1305   TLSv1.2 Kx=ECDH  Au=RSA   Enc=CHACHA20/POLY1305(256) Mac=AEAD







lacme: Port to Debian 10.
2020-05-17T16:40:24+00:00

Guilhem Moulin
guilhem@fripost.org

2020-05-17T16:40:22+00:00

2f3e75fe26fb123b365cba6aba94b096a12a51bf

We also rename the ‘lacme’ system user to ‘_lacme’ per Debian Policy
§9.2.1: https://www.debian.org/doc/debian-policy/ch-opersys.html#introduction .





We also rename the ‘lacme’ system user to ‘_lacme’ per Debian Policy
§9.2.1: https://www.debian.org/doc/debian-policy/ch-opersys.html#introduction .







Update 'IMAP', 'MSA' and 'LDAP-provider' roles to Debian Stretch.
2018-12-09T19:25:40+00:00

Guilhem Moulin
guilhem@fripost.org

2018-12-09T17:41:06+00:00

e2ddcfc51f66c2a52a401064eab005e793f148ee












Define new host "calima" serving Nextcloud.
2018-12-03T02:43:48+00:00

Guilhem Moulin
guilhem@fripost.org

2018-12-03T02:37:19+00:00

5ad9fc5e963b9a461f60799d7f185a9e2e13522f












Upgrade baseline to Debian Stretch.
2018-12-03T02:43:36+00:00

Guilhem Moulin
guilhem@fripost.org

2018-12-03T02:04:22+00:00

2495327985da791891b579bd05b3cda1f41dfda7












lacme: explicitely bind to [::]:80.
2018-04-04T14:17:33+00:00

Guilhem Moulin
guilhem@fripost.org

2018-04-04T14:17:33+00:00

c75190a4f0a2213c1a6933f2b89d32e4e88c67e6












Upgrade to lacme 0.2-1.
2016-12-08T18:46:37+00:00

Guilhem Moulin
guilhem@fripost.org

2016-12-08T18:46:37+00:00

bdd34d9f6660d9d440eb95fd2f06d583d209b928












lacme-certs.conf: don't restart but reload dovecot after renewing IMAPS cert.
2016-09-18T16:02:23+00:00

Guilhem Moulin
guilhem@fripost.org

2016-09-18T15:56:59+00:00

234144b0dec021bc1b76d7d37f8134797665d702

Unfortunately as of Debian 8.6 (Jessie) dovecot's service file doesn't
have a “Reload” directive, so we can't use `/bin/systemctl restart
dovecot` as notification.  It'll be fixed in Stretch, though.





Unfortunately as of Debian 8.6 (Jessie) dovecot's service file doesn't
have a “Reload” directive, so we can't use `/bin/systemctl restart
dovecot` as notification.  It'll be fixed in Stretch, though.