summaryrefslogtreecommitdiffstats
Commit message (Expand)AuthorAgeFiles
* Fix munin-cgi-graph systemd service file.Guilhem Moulin2016-05-222
* Tunnel munin-update traffic through IPSec.Guilhem Moulin2016-05-2217
* Tunnel internal NTP traffic through IPSec.Guilhem Moulin2016-05-223
* Set up IPSec tunnels between each pair of hosts.Guilhem Moulin2016-05-2221
* postfix: master.cf wibbleGuilhem Moulin2016-05-181
* postfix: Update to recommended TLS settings.Guilhem Moulin2016-05-187
* postfix: unset 'smtpd_tls_session_cache_database'.Guilhem Moulin2016-05-185
* Move /etc/ssl/private/dhparams.pem to /etc/ssl/dhparams.pem and make it public.Guilhem Moulin2016-05-188
* postfix: disable weak ciphers for the 'encrypt' TLS security level.Guilhem Moulin2016-05-183
* Add an ansible module 'fetch_cmd' to fetch the output of a remote command loc...Guilhem Moulin2016-05-1823
* Renew imap.fripost.org:993 and smtp.fripost.org:587 X.509 certificates.Guilhem Moulin2016-05-184
* dovecot imapc: wibbleGuilhem Moulin2016-05-172
* roundube: Pin X.509 certificate for sieve.fripost.org:4190.Guilhem Moulin2016-05-172
* bacula: Set heartbeat options.Guilhem Moulin2016-05-126
* bacula-sd: wibbleGuilhem Moulin2016-05-121
* bacula-dir: Fix Reschedule Interval from 17 months to 17 mins.Guilhem Moulin2016-05-121
* MySQL: set flush InnoDB flush method to 'O_DIRECT'Guilhem Moulin2016-05-121
* Add hardening options to our systemd unit files.Guilhem Moulin2016-05-126
* Use systemd unit files for stunnel4.Guilhem Moulin2016-05-1226
* Roundcube's CSP: remove 'upgrade-insecure-requests' and 'block-all-mixed-cont...Guilhem Moulin2016-04-081
* Roundcube's CSP: allow loading images from data: URIs and arbitrary URLs.Guilhem Moulin2016-04-071
* nginx: update ssl_ciphers to follow Mozilla's TLS server recommendation.Guilhem Moulin2016-04-021
* Set frame-ancestors from 'none' to 'self' in roundcube's CSP.Guilhem Moulin2016-04-021
* wibbleGuilhem Moulin2016-04-023
* Set a HPKP on the webmail, website/wiki/git and list manager.Guilhem Moulin2016-04-019
* Set a CSP on the webmail, website/wiki and list manager.Guilhem Moulin2016-04-015
* sysctl: don't set IPv6 privacy extensions globaly.Guilhem Moulin2016-04-011
* sysctl: set net.ipv6.conf.all.accept_ra = 0.Guilhem Moulin2016-03-301
* Set HTTP security headers.Guilhem Moulin2016-03-309
* gencerts.sh: typoGuilhem Moulin2016-03-281
* gencerts.sh: improve formatting.Guilhem Moulin2016-03-281
* Replace LE's X1 intermediate CA with X3 since the latter has better support f...Guilhem Moulin2016-03-282
* Reissue certs on civett and elefant since LE's X3 intermediate CA has better ...Guilhem Moulin2016-03-275
* munin-master CGI: add application-level ACLs to keep non-local users at bay.Guilhem Moulin2016-03-211
* Remove SMTP message size limit on non public MTAs.Guilhem Moulin2016-03-213
* More logcheck-database tweaks.Guilhem Moulin2016-03-131
* Let's Encrypt: Only reload (as opposed to restart) postfix/nginx after renewi...Guilhem Moulin2016-03-054
* Amavis: use the LMTP protocol in the policy banks.Guilhem Moulin2016-03-031
* Let's EncryptGuilhem Moulin2016-03-0221
* cgit: Create cache directory /var/cache/cgitGuilhem Moulin2016-03-021
* Ansible: Using bare variables is deprecated, and will be removed in a future ...Guilhem Moulin2016-03-024
* More logcheck-database tweaks.Guilhem Moulin2016-02-171
* s/ansible_ssh_/ansible_/Guilhem Moulin2016-02-122
* Upgrade playbooks to Ansible 2.0.Guilhem Moulin2016-02-1225
* Update all Fripost links from http:// to https://.Guilhem Moulin2015-12-283
* Only install letsencrypt-tiny to the relevant hosts.Guilhem Moulin2015-12-283
* Fix Let's Encrypt CAfile.Guilhem Moulin2015-12-281
* Copy and install Let's Encrypt ACME client.Guilhem Moulin2015-12-202
* Improve gencert.shGuilhem Moulin2015-12-201
* Use the Let's Encrypt CA for our public certs.Guilhem Moulin2015-12-2030
generated by cgit v1.2.3 (git 2.25.1) at 2024-11-22 15:17:05 +0000