index
:
fripost-ansible
master
Fripost ansible scripts
summary
refs
log
tree
commit
diff
stats
log msg
author
committer
range
Commit message (
Expand
)
Author
Age
Files
...
*
antilop: Upgrade baseline to Debian 10.
Guilhem Moulin
2020-05-16
3
*
nextcloud: Set php values in pool configuration.
Guilhem Moulin
2020-05-16
2
*
typofix
Guilhem Moulin
2020-05-16
1
*
Upgrade baseline to Debian 10.
Guilhem Moulin
2020-05-16
23
*
wibble
Guilhem Moulin
2020-05-16
1
*
Nextcloud: Minor redis-server config tweak.
Guilhem Moulin
2020-05-16
1
*
Nextcloud: use dedicated user and PHP FPM pool.
Guilhem Moulin
2020-05-16
5
*
Add nextcloud's logrotate file.
Guilhem Moulin
2020-05-16
1
*
role/common-web: Upgrade baseline to Debian 10.
Guilhem Moulin
2020-05-16
4
*
Nextcloud: Better separation between code/data/logs/cache.
Guilhem Moulin
2020-05-12
4
*
Use dedicated DKIM key for guilhem.org.
Guilhem Moulin
2020-04-22
2
*
Add dedicated DKIM key for lists.fripost.org.
Guilhem Moulin
2020-04-22
2
*
Add own DKIM key for debian.org address.
Guilhem Moulin
2020-04-13
3
*
/etc/apt/sources.list: Use https:// URIs.
Guilhem Moulin
2020-01-25
1
*
Improve/harden fail2ban configuration.
Guilhem Moulin
2020-01-25
7
*
Convert firewall to nftables.
Guilhem Moulin
2020-01-23
12
*
Postfix: disable DNS lookups on the internal SMTPds.
Guilhem Moulin
2020-01-23
1
*
tr/-/_/ in group names.
Guilhem Moulin
2020-01-22
9
*
mysql_user2: Explicitly set type to Bool.
Guilhem Moulin
2020-01-22
1
*
dovecot: raise default_vsz_limit from 256MB to 512MB.
Guilhem Moulin
2019-05-23
1
*
MSA: Open 465/TCP for Email Submission over TLS.
Guilhem Moulin
2019-03-19
6
*
Port custom modules to python3.
Guilhem Moulin
2019-02-05
5
*
firewall: gracefully close invalid connections.
Guilhem Moulin
2018-12-22
1
*
fail2ban: Only install the roundcube/dovecot filters if needed.
Guilhem Moulin
2018-12-15
1
*
submission: Prospective SPF checking.
Guilhem Moulin
2018-12-12
5
*
Outgoing SMTP: masquerade internal hostnames.
Guilhem Moulin
2018-12-12
3
*
IMAP: raise per user maximum number of inotify instances from 128 to 512.
Guilhem Moulin
2018-12-12
1
*
IPsec: use Suite-B-GCM-256 algorithms for IKEv2 & ESP.
Guilhem Moulin
2018-12-09
1
*
MSA verification probes: enable opportunistic encryption.
Guilhem Moulin
2018-12-09
2
*
Use mariadb.service not mysql.service.
Guilhem Moulin
2018-12-09
2
*
Update 'IMAP', 'MSA' and 'LDAP-provider' roles to Debian Stretch.
Guilhem Moulin
2018-12-09
25
*
Disable resume device.
Guilhem Moulin
2018-12-09
3
*
IMAP: Ensure /home/mail is mounted before creating sub-directories.
Guilhem Moulin
2018-12-09
1
*
bacula-sd: Ensure /mnt/backup is mounted before creating sub-directories.
Guilhem Moulin
2018-12-09
1
*
bacula: Backup MySQL database for the nextcloud host.
Guilhem Moulin
2018-12-09
2
*
Add ssh-ed25519 hostkey for benjamin.
Guilhem Moulin
2018-12-09
1
*
systemd.service: Tighten hardening options.
Guilhem Moulin
2018-12-09
9
*
bacula-*.service: Don't fork in the background.
Guilhem Moulin
2018-12-09
3
*
Upgrade 'lists' role to Debian Stretch.
Guilhem Moulin
2018-12-09
8
*
Firewall: disable outgoing access to git:// remote servers.
Guilhem Moulin
2018-12-09
1
*
systemd: Replace ‘ProtectSystem=full’ with ‘ProtectSystem=strict’.
Guilhem Moulin
2018-12-09
9
*
Firewall: REJECT outgoing connections instead of DROPing them.
Guilhem Moulin
2018-12-09
1
*
Upgrade 'out' role to Debian Stretch.
Guilhem Moulin
2018-12-09
1
*
Don't install the haveged entropy daemon.
Guilhem Moulin
2018-12-09
2
*
ntp.conf: reduce delta with the packaged version.
Guilhem Moulin
2018-12-09
1
*
MX: chroot postscreen(8), smtpd(8) and cleanup(8) daemons.
Guilhem Moulin
2018-12-09
8
*
MX: don't override 5XY reject codes to 554.
Guilhem Moulin
2018-12-09
1
*
postfix: remove explicit default 'mail_owner = postfix'.
Guilhem Moulin
2018-12-06
6
*
postfix ≥3.0: don't advertise SMTPUTF8 support.
Guilhem Moulin
2018-12-06
1
*
Upgrade 'ikiwiki-pandoc' to v0.5.1.
Guilhem Moulin
2018-12-06
1
[prev]
[next]