Commit message (Collapse) | Author | Age | Files | |
---|---|---|---|---|
* | typofix | Guilhem Moulin | 2020-11-15 | 1 |
| | | | | Regression from ead9aaa3dd7ca48012b2b21cc930ee73c8eaa9d3. | |||
* | Bacula: refactor systemd service files. | Guilhem Moulin | 2020-11-03 | 2 |
| | | | | | | Use unit overrides on top of upstream's service files instead of overriding entire service files. In particular, upstream uses flag `-P` so we don't need to use RuntimeDirectory= anymore. | |||
* | bacula-{dir,sd}: Upgrade role to Debian Buster. | Guilhem Moulin | 2020-05-26 | 2 |
| | ||||
* | tr/-/_/ in group names. | Guilhem Moulin | 2020-01-22 | 1 |
| | | | | | | | | | | | | This avoids [DEPRECATION WARNING]: The TRANSFORM_INVALID_GROUP_CHARS settings is set to allow bad characters in group names by default, this will change, but still be user configurable on deprecation. This feature will be removed in version 2.10. Deprecation warnings can be disabled by setting deprecation_warnings=False in ansible.cfg. [WARNING]: Invalid characters were found in group names but not replaced, use -vvvv to see details | |||
* | bacula-sd: Ensure /mnt/backup is mounted before creating sub-directories. | Guilhem Moulin | 2018-12-09 | 1 |
| | ||||
* | systemd.service: Tighten hardening options. | Guilhem Moulin | 2018-12-09 | 1 |
| | ||||
* | bacula-*.service: Don't fork in the background. | Guilhem Moulin | 2018-12-09 | 1 |
| | | | | Inspired from /lib/systemd/system/bacula-fd.service. | |||
* | systemd: Replace ‘ProtectSystem=full’ with ‘ProtectSystem=strict’. | Guilhem Moulin | 2018-12-09 | 1 |
| | | | | And remove ‘ReadOnlyDirectories=/’ as it's implied by ‘ProtectSystem=strict’. | |||
* | /lib/systemd/system → /etc/systemd/system | Guilhem Moulin | 2017-05-31 | 2 |
| | ||||
* | Tunnel bacula (dir → {fd,sd} and fd → sd) traffic through IPSec. | Guilhem Moulin | 2016-05-22 | 5 |
| | ||||
* | Add an ansible module 'fetch_cmd' to fetch the output of a remote command ↵ | Guilhem Moulin | 2016-05-18 | 1 |
| | | | | | | locally. And use this to fetch all X.509 leaf certificates. | |||
* | bacula: Set heartbeat options. | Guilhem Moulin | 2016-05-12 | 2 |
| | | | | and also TCP keepalive options in the stunnel config. | |||
* | bacula-sd: wibble | Guilhem Moulin | 2016-05-12 | 1 |
| | ||||
* | Add hardening options to our systemd unit files. | Guilhem Moulin | 2016-05-12 | 1 |
| | ||||
* | Use systemd unit files for stunnel4. | Guilhem Moulin | 2016-05-12 | 3 |
| | ||||
* | Upgrade playbooks to Ansible 2.0. | Guilhem Moulin | 2016-02-12 | 1 |
| | ||||
* | stunnel: disable compression. | Guilhem Moulin | 2015-10-27 | 1 |
| | ||||
* | stunnel: use GCM ciphers only; use SSL options rather than ciphers to ↵ | Guilhem Moulin | 2015-10-27 | 1 |
| | | | | disable protocols. | |||
* | Configure Bacula File Daemon / Storage Daemon / Director. | Guilhem Moulin | 2015-06-07 | 5 |
Using client-side data signing/encryption and wrapping inter-host communication into stunnel. |