summaryrefslogtreecommitdiffstats
path: root/roles/bacula-dir
Commit message (Collapse)AuthorAgeFiles
* Bacula: refactor systemd service files.Guilhem Moulin2020-11-032
| | | | | | Use unit overrides on top of upstream's service files instead of overriding entire service files. In particular, upstream uses flag `-P` so we don't need to use RuntimeDirectory= anymore.
* Bacula Director: Properly quote shell command.Guilhem Moulin2020-11-021
|
* slapcat-all.sh: Use ldapsearch(1) to generate the LDIF.Guilhem Moulin2020-05-261
| | | | | Unlike slapcat(1) it doesn't require write access to ~openldap, so we don't have to weaken bacula-fd.service.
* bacula-dir: Add jobs for nextcloud-data.Guilhem Moulin2020-05-261
|
* bacula-{dir,sd}: Upgrade role to Debian Buster.Guilhem Moulin2020-05-262
|
* s/LDAP-provider/LDAP_provider/Guilhem Moulin2020-05-191
| | | | This was forgotten after a092bfd947773281a23419ee0ab62358371b7166.
* tr/-/_/ in group names.Guilhem Moulin2020-01-221
| | | | | | | | | | | | This avoids [DEPRECATION WARNING]: The TRANSFORM_INVALID_GROUP_CHARS settings is set to allow bad characters in group names by default, this will change, but still be user configurable on deprecation. This feature will be removed in version 2.10. Deprecation warnings can be disabled by setting deprecation_warnings=False in ansible.cfg. [WARNING]: Invalid characters were found in group names but not replaced, use -vvvv to see details
* bacula: Backup MySQL database for the nextcloud host.Guilhem Moulin2018-12-092
|
* systemd.service: Tighten hardening options.Guilhem Moulin2018-12-091
|
* bacula-*.service: Don't fork in the background.Guilhem Moulin2018-12-091
| | | | Inspired from /lib/systemd/system/bacula-fd.service.
* systemd: Replace ‘ProtectSystem=full’ with ‘ProtectSystem=strict’.Guilhem Moulin2018-12-091
| | | | And remove ‘ReadOnlyDirectories=/’ as it's implied by ‘ProtectSystem=strict’.
* Upgrade syntax to Ansible 2.7 (apt module).Guilhem Moulin2018-12-031
|
* Use MariaDB as default MySQL flavor.Guilhem Moulin2017-07-291
|
* /lib/systemd/system → /etc/systemd/systemGuilhem Moulin2017-05-312
|
* dovecot: use Single-Instance Storage for mail attachments.Guilhem Moulin2016-12-101
|
* Tunnel bacula (dir → {fd,sd} and fd → sd) traffic through IPSec.Guilhem Moulin2016-05-224
|
* Add an ansible module 'fetch_cmd' to fetch the output of a remote command ↵Guilhem Moulin2016-05-181
| | | | | | locally. And use this to fetch all X.509 leaf certificates.
* bacula: Set heartbeat options.Guilhem Moulin2016-05-122
| | | | and also TCP keepalive options in the stunnel config.
* bacula-dir: Fix Reschedule Interval from 17 months to 17 mins.Guilhem Moulin2016-05-121
|
* Add hardening options to our systemd unit files.Guilhem Moulin2016-05-121
|
* Use systemd unit files for stunnel4.Guilhem Moulin2016-05-123
|
* Ansible: Using bare variables is deprecated, and will be removed in a future ↵Guilhem Moulin2016-03-021
| | | | release.
* Upgrade playbooks to Ansible 2.0.Guilhem Moulin2016-02-121
|
* stunnel: disable compression.Guilhem Moulin2015-10-271
|
* stunnel: use GCM ciphers only; use SSL options rather than ciphers to ↵Guilhem Moulin2015-10-271
| | | | disable protocols.
* Use <bacula@fripost.org> as envelope sender for bacula.Guilhem Moulin2015-07-191
|
* Rename 'mysql_user' plugin to 'mysql_user2' to avoid name collisions.Guilhem Moulin2015-07-121
|
* Fix bacula priorities.Guilhem Moulin2015-06-071
|
* Configure Bacula File Daemon / Storage Daemon / Director.Guilhem Moulin2015-06-076
Using client-side data signing/encryption and wrapping inter-host communication into stunnel.