fripost-ansible - Fripost ansible scripts

	Commit message (Collapse)	Author	Age	Files
*	slapcat-all.sh: Use ldapsearch(1) to generate the LDIF.	Guilhem Moulin	2020-05-26	1
\| \| \| \| \|	Unlike slapcat(1) it doesn't require write access to ~openldap, so we don't have to weaken bacula-fd.service.
*	bacula-dir: Add jobs for nextcloud-data.	Guilhem Moulin	2020-05-26	1
\|
*	bacula-{dir,sd}: Upgrade role to Debian Buster.	Guilhem Moulin	2020-05-26	2
\|
*	s/LDAP-provider/LDAP_provider/	Guilhem Moulin	2020-05-19	1
\| \| \| \|	This was forgotten after a092bfd947773281a23419ee0ab62358371b7166.
*	tr/-/_/ in group names.	Guilhem Moulin	2020-01-22	1
\| \| \| \| \| \| \| \| \| \| \| \|	This avoids [DEPRECATION WARNING]: The TRANSFORM_INVALID_GROUP_CHARS settings is set to allow bad characters in group names by default, this will change, but still be user configurable on deprecation. This feature will be removed in version 2.10. Deprecation warnings can be disabled by setting deprecation_warnings=False in ansible.cfg. [WARNING]: Invalid characters were found in group names but not replaced, use -vvvv to see details
*	bacula: Backup MySQL database for the nextcloud host.	Guilhem Moulin	2018-12-09	2
\|
*	systemd.service: Tighten hardening options.	Guilhem Moulin	2018-12-09	1
\|
*	bacula-*.service: Don't fork in the background.	Guilhem Moulin	2018-12-09	1
\| \| \| \|	Inspired from /lib/systemd/system/bacula-fd.service.
*	systemd: Replace ‘ProtectSystem=full’ with ‘ProtectSystem=strict’.	Guilhem Moulin	2018-12-09	1
\| \| \| \|	And remove ‘ReadOnlyDirectories=/’ as it's implied by ‘ProtectSystem=strict’.
*	Upgrade syntax to Ansible 2.7 (apt module).	Guilhem Moulin	2018-12-03	1
\|
*	Use MariaDB as default MySQL flavor.	Guilhem Moulin	2017-07-29	1
\|
*	/lib/systemd/system → /etc/systemd/system	Guilhem Moulin	2017-05-31	2
\|
*	dovecot: use Single-Instance Storage for mail attachments.	Guilhem Moulin	2016-12-10	1
\|
*	Tunnel bacula (dir → {fd,sd} and fd → sd) traffic through IPSec.	Guilhem Moulin	2016-05-22	4
\|
*	Add an ansible module 'fetch_cmd' to fetch the output of a remote command ↵	Guilhem Moulin	2016-05-18	1
\| \| \| \| \| \|	locally. And use this to fetch all X.509 leaf certificates.
*	bacula: Set heartbeat options.	Guilhem Moulin	2016-05-12	2
\| \| \| \|	and also TCP keepalive options in the stunnel config.
*	bacula-dir: Fix Reschedule Interval from 17 months to 17 mins.	Guilhem Moulin	2016-05-12	1
\|
*	Add hardening options to our systemd unit files.	Guilhem Moulin	2016-05-12	1
\|
*	Use systemd unit files for stunnel4.	Guilhem Moulin	2016-05-12	3
\|
*	Ansible: Using bare variables is deprecated, and will be removed in a future ↵	Guilhem Moulin	2016-03-02	1
\| \| \| \|	release.
*	Upgrade playbooks to Ansible 2.0.	Guilhem Moulin	2016-02-12	1
\|
*	stunnel: disable compression.	Guilhem Moulin	2015-10-27	1
\|
*	stunnel: use GCM ciphers only; use SSL options rather than ciphers to ↵	Guilhem Moulin	2015-10-27	1
\| \| \| \|	disable protocols.
*	Use <bacula@fripost.org> as envelope sender for bacula.	Guilhem Moulin	2015-07-19	1
\|
*	Rename 'mysql_user' plugin to 'mysql_user2' to avoid name collisions.	Guilhem Moulin	2015-07-12	1
\|
*	Fix bacula priorities.	Guilhem Moulin	2015-06-07	1
\|
*	Configure Bacula File Daemon / Storage Daemon / Director.	Guilhem Moulin	2015-06-07	6
	Using client-side data signing/encryption and wrapping inter-host communication into stunnel.