index
:
fripost-ansible
master
Fripost ansible scripts
summary
refs
log
tree
commit
diff
stats
log msg
author
committer
range
Commit message (
Expand
)
Author
Age
Files
*
Postscreen: Give temporary whitelist status to primary MX addresses only.
Guilhem Moulin
2016-09-20
2
*
systemd: Ensure sympa service is enabled.
Guilhem Moulin
2016-09-18
1
*
lacme-certs.conf: don't restart but reload dovecot after renewing IMAPS cert.
Guilhem Moulin
2016-09-18
1
*
Postfix: ensure common aliases are present.
Guilhem Moulin
2016-09-18
3
*
FreshClam: change ownership of /etc/clamav/freshclam.conf.
Guilhem Moulin
2016-09-18
1
*
Firewall: allow duplicates rules.
Guilhem Moulin
2016-09-18
1
*
HPKP: increase max-mage directive to 6 months from 1 hour.
Guilhem Moulin
2016-09-18
1
*
gencerts: improve workning: s/pubkey/SPKI/
Guilhem Moulin
2016-09-18
1
*
More logcheck-database tweaks.
Guilhem Moulin
2016-08-22
2
*
Improve certs formatting.
Guilhem Moulin
2016-07-12
1
*
gencerts: Print the SHA1 digests in hex not base64 format.
Guilhem Moulin
2016-07-12
1
*
typo
Guilhem Moulin
2016-07-12
1
*
typo
Guilhem Moulin
2016-07-12
1
*
HSTS: use the standard capitalization of includeSubDomains.
Guilhem Moulin
2016-07-12
1
*
postfix: Remove obsolete templates tls_policy/relay_clientcerts.
Guilhem Moulin
2016-07-12
4
*
gencerts: make the SSHFPR output match the X509 ones.
Guilhem Moulin
2016-07-12
1
*
gencerts: Include SAN for the website and webmail.
Guilhem Moulin
2016-07-12
1
*
gencerts: base64-encode the SHA256 digests.
Guilhem Moulin
2016-07-12
1
*
postfix: commit the master.cf symlinks.
Guilhem Moulin
2016-07-12
5
*
nginx: Don't hard-code the HPKP headers.
Guilhem Moulin
2016-07-12
18
*
gencerts: exclude expired certs in the CRT queries.
Guilhem Moulin
2016-07-10
1
*
Postfix lists/MDA instances: only include the MX:es' IPs in $mynetworks.
Guilhem Moulin
2016-07-10
2
*
Route all internal SMTP traffic through IPsec.
Guilhem Moulin
2016-07-10
20
*
Postfix MX/MSA instances: put certs in the the instance's $config_directory.
Guilhem Moulin
2016-07-10
5
*
Postfix MX/MSA instances: don't ask the remote SMTP client for a client certi...
Guilhem Moulin
2016-07-10
2
*
Postfix: avoid hardcoding the instance names.
Guilhem Moulin
2016-07-10
2
*
Postfix: don't share the master.cf between the instances.
Guilhem Moulin
2016-07-10
13
*
postfix: Don't explicitly set inet_interfaces=all as it's the default.
Guilhem Moulin
2016-07-10
5
*
Change the pubkey extension from .pem to .pub.
Guilhem Moulin
2016-07-10
16
*
Route SMTP traffic from the webmail through IPsec.
Guilhem Moulin
2016-07-10
10
*
More logcheck-database tweaks.
Guilhem Moulin
2016-07-09
2
*
Localize the NTP pool hostnames.
Guilhem Moulin
2016-07-09
1
*
Localize the debian archive hostnames.
Guilhem Moulin
2016-07-09
1
*
ClamAV (FreshClam): use a localized Database Mirror.
Guilhem Moulin
2016-07-09
3
*
IMAP: don't include mailbox under the virtual namespace in LIST responses.
Guilhem Moulin
2016-07-06
2
*
dovecot: use the MSA postfix instance for sieve redirection.
Guilhem Moulin
2016-07-01
2
*
IPSec → IPsec
Guilhem Moulin
2016-06-29
6
*
More logcheck-database tweaks.
Guilhem Moulin
2016-06-29
3
*
update-firewall.sh: COMMIT empty iptables rule files.
Guilhem Moulin
2016-06-29
1
*
Postfix MSA: don't allow unauthenticated clients from $mynetworks.
Guilhem Moulin
2016-06-29
1
*
ansible: _make_tmp_path now takes an argument.
Guilhem Moulin
2016-06-29
2
*
typo
Guilhem Moulin
2016-06-15
1
*
crt.sh: Replace SHA1 by SHA256 as SPKI digest to list certificates.
Guilhem Moulin
2016-06-15
1
*
certs/public: fetch each cert's pubkey (SPKI), not the cert itself.
Guilhem Moulin
2016-06-15
16
*
Rename letsencrypt-tiny to lacme.
Guilhem Moulin
2016-06-15
8
*
wwsympa systemd service file: Set PrivateTmp=yes.
Guilhem Moulin
2016-06-07
1
*
clamav: Don't set obsolete option 'AllowSupplementaryGroups'.
Guilhem Moulin
2016-06-05
1
*
Use stunnel to secure the connection from the webmail to ldap.fripost.org.
Guilhem Moulin
2016-06-05
5
*
postfix: rotate the sender address for verify probes.
Guilhem Moulin
2016-06-02
2
*
Remove the IMAP caching proxy.
Guilhem Moulin
2016-05-28
11
[next]