index
:
fripost-ansible
master
Fripost ansible scripts
summary
refs
log
tree
commit
diff
stats
log msg
author
committer
range
Commit message (
Expand
)
Author
Age
Files
*
typo
Guilhem Moulin
2016-07-12
1
*
HSTS: use the standard capitalization of includeSubDomains.
Guilhem Moulin
2016-07-12
1
*
postfix: Remove obsolete templates tls_policy/relay_clientcerts.
Guilhem Moulin
2016-07-12
4
*
gencerts: make the SSHFPR output match the X509 ones.
Guilhem Moulin
2016-07-12
1
*
gencerts: Include SAN for the website and webmail.
Guilhem Moulin
2016-07-12
1
*
gencerts: base64-encode the SHA256 digests.
Guilhem Moulin
2016-07-12
1
*
postfix: commit the master.cf symlinks.
Guilhem Moulin
2016-07-12
5
*
nginx: Don't hard-code the HPKP headers.
Guilhem Moulin
2016-07-12
18
*
gencerts: exclude expired certs in the CRT queries.
Guilhem Moulin
2016-07-10
1
*
Postfix lists/MDA instances: only include the MX:es' IPs in $mynetworks.
Guilhem Moulin
2016-07-10
2
*
Route all internal SMTP traffic through IPsec.
Guilhem Moulin
2016-07-10
20
*
Postfix MX/MSA instances: put certs in the the instance's $config_directory.
Guilhem Moulin
2016-07-10
5
*
Postfix MX/MSA instances: don't ask the remote SMTP client for a client certi...
Guilhem Moulin
2016-07-10
2
*
Postfix: avoid hardcoding the instance names.
Guilhem Moulin
2016-07-10
2
*
Postfix: don't share the master.cf between the instances.
Guilhem Moulin
2016-07-10
13
*
postfix: Don't explicitly set inet_interfaces=all as it's the default.
Guilhem Moulin
2016-07-10
5
*
Change the pubkey extension from .pem to .pub.
Guilhem Moulin
2016-07-10
16
*
Route SMTP traffic from the webmail through IPsec.
Guilhem Moulin
2016-07-10
10
*
More logcheck-database tweaks.
Guilhem Moulin
2016-07-09
2
*
Localize the NTP pool hostnames.
Guilhem Moulin
2016-07-09
1
*
Localize the debian archive hostnames.
Guilhem Moulin
2016-07-09
1
*
ClamAV (FreshClam): use a localized Database Mirror.
Guilhem Moulin
2016-07-09
3
*
IMAP: don't include mailbox under the virtual namespace in LIST responses.
Guilhem Moulin
2016-07-06
2
*
dovecot: use the MSA postfix instance for sieve redirection.
Guilhem Moulin
2016-07-01
2
*
IPSec → IPsec
Guilhem Moulin
2016-06-29
6
*
More logcheck-database tweaks.
Guilhem Moulin
2016-06-29
3
*
update-firewall.sh: COMMIT empty iptables rule files.
Guilhem Moulin
2016-06-29
1
*
Postfix MSA: don't allow unauthenticated clients from $mynetworks.
Guilhem Moulin
2016-06-29
1
*
ansible: _make_tmp_path now takes an argument.
Guilhem Moulin
2016-06-29
2
*
typo
Guilhem Moulin
2016-06-15
1
*
crt.sh: Replace SHA1 by SHA256 as SPKI digest to list certificates.
Guilhem Moulin
2016-06-15
1
*
certs/public: fetch each cert's pubkey (SPKI), not the cert itself.
Guilhem Moulin
2016-06-15
16
*
Rename letsencrypt-tiny to lacme.
Guilhem Moulin
2016-06-15
8
*
wwsympa systemd service file: Set PrivateTmp=yes.
Guilhem Moulin
2016-06-07
1
*
clamav: Don't set obsolete option 'AllowSupplementaryGroups'.
Guilhem Moulin
2016-06-05
1
*
Use stunnel to secure the connection from the webmail to ldap.fripost.org.
Guilhem Moulin
2016-06-05
5
*
postfix: rotate the sender address for verify probes.
Guilhem Moulin
2016-06-02
2
*
Remove the IMAP caching proxy.
Guilhem Moulin
2016-05-28
11
*
Roundcube: route IMAP and managesieve traffic through IPSec.
Guilhem Moulin
2016-05-28
3
*
Renew cert for https://lists.fripost.org.
Guilhem Moulin
2016-05-28
1
*
Roundcube: add a link to our webpage as support URL.
Guilhem Moulin
2016-05-24
1
*
typo
Guilhem Moulin
2016-05-24
2
*
IPSec: replace (self-signed) X.509 certs by their raw pubkey for authentication.
Guilhem Moulin
2016-05-24
9
*
dovecot: don't listen on the IP dedicated for IPSec when there is a single host.
Guilhem Moulin
2016-05-23
1
*
Restore the public part of Bacula's data encryption master key.
Guilhem Moulin
2016-05-23
1
*
Roundcube: add a warning regarding IMAP hostname change.
Guilhem Moulin
2016-05-23
1
*
Dovecot imapc: use the version from jessie-backports.
Guilhem Moulin
2016-05-23
7
*
Dovecot imapc: don't hardcode the master IMAP server's IP.
Guilhem Moulin
2016-05-23
4
*
Dovecot imapc: change imapproxy's homedir from /home/imapproxy to /var/lib/im...
Guilhem Moulin
2016-05-22
2
*
dovecot: also listen on the virtual IP dedicated to IPSec.
Guilhem Moulin
2016-05-22
2
[next]