<feed xmlns='http://www.w3.org/2005/Atom'>
<title>fripost-ansible/roles, branch master</title>
<subtitle>Fripost ansible scripts</subtitle>
<link rel='alternate' type='text/html' href='http://git.fripost.org/fripost-ansible/'/>
<entry>
<title>Convert changed_when value to a boolean.</title>
<updated>2025-09-10T13:31:19+00:00</updated>
<author>
<name>Guilhem Moulin</name>
<email>guilhem@fripost.org</email>
</author>
<published>2025-09-10T13:31:19+00:00</published>
<link rel='alternate' type='text/html' href='http://git.fripost.org/fripost-ansible/commit/?id=831c41b79273d112367811331faab034e4d81cf1'/>
<id>831c41b79273d112367811331faab034e4d81cf1</id>
<content type='text'>
As of ansible 2.19 a non-zero value is no longer converted to a boolean.
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
As of ansible 2.19 a non-zero value is no longer converted to a boolean.
</pre>
</div>
</content>
</entry>
<entry>
<title>Send internal system mails to root@f.o.</title>
<updated>2025-09-10T13:14:45+00:00</updated>
<author>
<name>Guilhem Moulin</name>
<email>guilhem@fripost.org</email>
</author>
<published>2025-09-10T13:14:45+00:00</published>
<link rel='alternate' type='text/html' href='http://git.fripost.org/fripost-ansible/commit/?id=4b48f1b6dd799d1a69f0c9e2a157a007fcdcbe25'/>
<id>4b48f1b6dd799d1a69f0c9e2a157a007fcdcbe25</id>
<content type='text'>
Instead of admin@f.o. Per msgid=&lt;ad724342-b3bb-48d9-9984-6d277714910d@fripost.org&gt;.
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
Instead of admin@f.o. Per msgid=&lt;ad724342-b3bb-48d9-9984-6d277714910d@fripost.org&gt;.
</pre>
</div>
</content>
</entry>
<entry>
<title>Nginx: Drop OCSP stapling directives.</title>
<updated>2025-08-06T11:51:50+00:00</updated>
<author>
<name>Guilhem Moulin</name>
<email>guilhem@fripost.org</email>
</author>
<published>2025-08-06T11:51:50+00:00</published>
<link rel='alternate' type='text/html' href='http://git.fripost.org/fripost-ansible/commit/?id=983981b8546d9ef847cfef7711c35c6e06549f43'/>
<id>983981b8546d9ef847cfef7711c35c6e06549f43</id>
<content type='text'>
Let's Encrypt removed OCSP URLs from certificates on 2025-05-07, see
https://letsencrypt.org/2024/12/05/ending-ocsp .
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
Let's Encrypt removed OCSP URLs from certificates on 2025-05-07, see
https://letsencrypt.org/2024/12/05/ending-ocsp .
</pre>
</div>
</content>
</entry>
<entry>
<title>Update logcheck database.</title>
<updated>2025-04-04T11:17:28+00:00</updated>
<author>
<name>Guilhem Moulin</name>
<email>guilhem@fripost.org</email>
</author>
<published>2025-03-19T12:12:25+00:00</published>
<link rel='alternate' type='text/html' href='http://git.fripost.org/fripost-ansible/commit/?id=39b0e7d580831b09e63a51196fdf8c89180abf7f'/>
<id>39b0e7d580831b09e63a51196fdf8c89180abf7f</id>
<content type='text'>
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
</pre>
</div>
</content>
</entry>
<entry>
<title>Update /etc/rkhunter.conf.</title>
<updated>2025-02-01T22:35:46+00:00</updated>
<author>
<name>Guilhem Moulin</name>
<email>guilhem@fripost.org</email>
</author>
<published>2025-02-01T22:35:46+00:00</published>
<link rel='alternate' type='text/html' href='http://git.fripost.org/fripost-ansible/commit/?id=54f26d2a48bab4f027f8d365900f06b1c69989e1'/>
<id>54f26d2a48bab4f027f8d365900f06b1c69989e1</id>
<content type='text'>
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
</pre>
</div>
</content>
</entry>
<entry>
<title>LDAP: Load dynlist overlay.</title>
<updated>2025-02-01T12:56:14+00:00</updated>
<author>
<name>Guilhem Moulin</name>
<email>guilhem@fripost.org</email>
</author>
<published>2025-01-29T23:58:13+00:00</published>
<link rel='alternate' type='text/html' href='http://git.fripost.org/fripost-ansible/commit/?id=f647dd2265bf4c5a2903325f628774eace2011ce'/>
<id>f647dd2265bf4c5a2903325f628774eace2011ce</id>
<content type='text'>
Looks like nextcloud 26-29 broke something in the handling of dynamic
groups via memberURL attribute (and keeps repopulating the group —
possibly due to paging — thereby spamming members with “An administrator
removed you from group medlemmar” mails), so we expand on the slapd via
slapo-dynlist(5) instead.

This commit also fixes an issue with the openldap module where the index
of the leftmost attribute of the DN is not necessary {0}.
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
Looks like nextcloud 26-29 broke something in the handling of dynamic
groups via memberURL attribute (and keeps repopulating the group —
possibly due to paging — thereby spamming members with “An administrator
removed you from group medlemmar” mails), so we expand on the slapd via
slapo-dynlist(5) instead.

This commit also fixes an issue with the openldap module where the index
of the leftmost attribute of the DN is not necessary {0}.
</pre>
</div>
</content>
</entry>
<entry>
<title>fail2ban: set 'allowipv6 = auto'.</title>
<updated>2025-01-28T17:33:48+00:00</updated>
<author>
<name>Guilhem Moulin</name>
<email>guilhem@fripost.org</email>
</author>
<published>2025-01-28T17:33:48+00:00</published>
<link rel='alternate' type='text/html' href='http://git.fripost.org/fripost-ansible/commit/?id=bcdb01c02f392503c91538b3c1fabe62544ef423'/>
<id>bcdb01c02f392503c91538b3c1fabe62544ef423</id>
<content type='text'>
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
</pre>
</div>
</content>
</entry>
<entry>
<title>Update logcheck database.</title>
<updated>2025-01-28T17:31:05+00:00</updated>
<author>
<name>Guilhem Moulin</name>
<email>guilhem@fripost.org</email>
</author>
<published>2025-01-28T16:08:10+00:00</published>
<link rel='alternate' type='text/html' href='http://git.fripost.org/fripost-ansible/commit/?id=e5445c177842c12d6a28ac0a5528c26652077935'/>
<id>e5445c177842c12d6a28ac0a5528c26652077935</id>
<content type='text'>
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
</pre>
</div>
</content>
</entry>
<entry>
<title>Skip auditd setup.</title>
<updated>2025-01-28T15:16:29+00:00</updated>
<author>
<name>Guilhem Moulin</name>
<email>guilhem@fripost.org</email>
</author>
<published>2025-01-28T15:09:33+00:00</published>
<link rel='alternate' type='text/html' href='http://git.fripost.org/fripost-ansible/commit/?id=93e778134630e6d5f71096dff76a995854a15da9'/>
<id>93e778134630e6d5f71096dff76a995854a15da9</id>
<content type='text'>
Arguably not very useful without further configuration.
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
Arguably not very useful without further configuration.
</pre>
</div>
</content>
</entry>
<entry>
<title>Fix logcheck.logfiles permissions.</title>
<updated>2025-01-28T14:28:51+00:00</updated>
<author>
<name>Guilhem Moulin</name>
<email>guilhem@fripost.org</email>
</author>
<published>2025-01-28T14:21:44+00:00</published>
<link rel='alternate' type='text/html' href='http://git.fripost.org/fripost-ansible/commit/?id=c7a9f907a61cf06c73c56628210257b639a6bb50'/>
<id>c7a9f907a61cf06c73c56628210257b639a6bb50</id>
<content type='text'>
Regression from 0c5664f27d84c6d616b2c2fb0812aad94c4185af.
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
Regression from 0c5664f27d84c6d616b2c2fb0812aad94c4185af.
</pre>
</div>
</content>
</entry>
</feed>
