summaryrefslogtreecommitdiffstats
Commit message (Expand)AuthorAgeFiles
* certs/gencerts.sh: Don't hard-code the intermediate CA.Guilhem Moulin2021-01-071
* ansible.cfg: Use ControlPath=$XDG_RUNTIME_DIR/ssh-ansible-%CGuilhem Moulin2020-12-121
* nginx: Update trusted certificate used for OCSP stapling.Guilhem Moulin2020-12-051
* Firewall: Always include 172.16.0.0/12 to the bogon list.Guilhem Moulin2020-11-151
* Firewall: Add counter to dropped ICMP packets.Guilhem Moulin2020-11-151
* rkhunter: workaround for mix usrmerge/non-usrmerge environments.Guilhem Moulin2020-11-151
* Firewall: ICMPv6: accept link-local multicast receiver notification messages.Guilhem Moulin2020-11-151
* typofixGuilhem Moulin2020-11-151
* Change NTP client to systemd-timesyncd.Guilhem Moulin2020-11-155
* Bacula: tweak fileset and retention policy.Guilhem Moulin2020-11-151
* logcheck-database update.Guilhem Moulin2020-11-154
* Firewall: allow ICMP type 11 (time time-exceeded).Guilhem Moulin2020-11-031
* Revert "Bacula Director: Properly quote shell command."Guilhem Moulin2020-11-031
* Move bacula and munin master to new host levante from benjamin.Guilhem Moulin2020-11-035
* Bacula: refactor systemd service files.Guilhem Moulin2020-11-036
* Firewall: Move IPsec/ICMP/ICMPv6 rules to ingress chain.Guilhem Moulin2020-11-031
* Firewall: Move martian and bogus TCP filters early in the packet flow.Guilhem Moulin2020-11-021
* kernel parameters: Disable SYN cookies and improve SYN backlog handling.Guilhem Moulin2020-11-021
* Refactor SQL custom configuration.Guilhem Moulin2020-11-023
* Bacula Director: Properly quote shell command.Guilhem Moulin2020-11-021
* typofixGuilhem Moulin2020-11-021
* Munin master: Bug fix for the HTML rendering.Guilhem Moulin2020-11-022
* Wiki: Install dependencies for static web content.Guilhem Moulin2020-11-021
* typofixGuilhem Moulin2020-10-021
* Roundcube: Add minimal config confile for thunderbird_labels plugin.Guilhem Moulin2020-10-022
* Roundcube: Don't allow overriding authres_status's use_fallback_verifier/trus...Guilhem Moulin2020-10-022
* Use dedicated DKIM key for tevs.net.Guilhem Moulin2020-10-012
* Add PHP modules required for Nextcloud 19.Guilhem Moulin2020-08-191
* slapcat-all.sh: Use ldapsearch(1) to generate the LDIF.Guilhem Moulin2020-05-262
* munin: `sed s,/var/run/,/run,`Guilhem Moulin2020-05-262
* bacula-dir: Add jobs for nextcloud-data.Guilhem Moulin2020-05-261
* bacula-{dir,sd}: Upgrade role to Debian Buster.Guilhem Moulin2020-05-264
* Wiki: Content-Security-Policy: Add data: to img-src.Guilhem Moulin2020-05-222
* Use dedicated DKIM key for hemdal.se.Guilhem Moulin2020-05-222
* cgit: Tighten Content-Security-Policy.Guilhem Moulin2020-05-211
* LDAP: Add ACLs for group ‘styrelse’.Guilhem Moulin2020-05-211
* Postfix: Install -lmdb in all roles using db=lmdb.Guilhem Moulin2020-05-214
* postfix-sender-login: Better hardening.Guilhem Moulin2020-05-214
* dovecot-auth-proxy: replace directory traversal with LDAP lookups.Guilhem Moulin2020-05-216
* dovecot-auth-proxy: Bump protocol version to 2.2.Guilhem Moulin2020-05-201
* IMAP: Update role to Debian Buster.Guilhem Moulin2020-05-1912
* MSA: Update role to Debian Buster.Guilhem Moulin2020-05-193
* LDAP: Update role to Debian Buster.Guilhem Moulin2020-05-192
* s/LDAP-provider/LDAP_provider/Guilhem Moulin2020-05-198
* wibbleGuilhem Moulin2020-05-181
* stunnel4: Harden and socket-activate.Guilhem Moulin2020-05-187
* Firewall: note on reqid matching.Guilhem Moulin2020-05-181
* AEAD ciphers: Add EECDH+CHACHA20 macro.Guilhem Moulin2020-05-184
* cgit and HTTP backend: Remove unused files.Guilhem Moulin2020-05-182
* Firewall: Use `meta secpath exists` to match xfrm associations.Guilhem Moulin2020-05-181