fripost-ansible - Fripost ansible scripts

	Commit message (Collapse)	Author	Age	Files
*	bacula-sd: Ensure /mnt/backup is mounted before creating sub-directories.	Guilhem Moulin	2018-12-09	1
\|
*	systemd.service: Tighten hardening options.	Guilhem Moulin	2018-12-09	1
\|
*	bacula-*.service: Don't fork in the background.	Guilhem Moulin	2018-12-09	1
\| \| \| \|	Inspired from /lib/systemd/system/bacula-fd.service.
*	systemd: Replace ‘ProtectSystem=full’ with ‘ProtectSystem=strict’.	Guilhem Moulin	2018-12-09	1
\| \| \| \|	And remove ‘ReadOnlyDirectories=/’ as it's implied by ‘ProtectSystem=strict’.
*	/lib/systemd/system → /etc/systemd/system	Guilhem Moulin	2017-05-31	2
\|
*	Tunnel bacula (dir → {fd,sd} and fd → sd) traffic through IPSec.	Guilhem Moulin	2016-05-22	5
\|
*	Add an ansible module 'fetch_cmd' to fetch the output of a remote command ↵	Guilhem Moulin	2016-05-18	1
\| \| \| \| \| \|	locally. And use this to fetch all X.509 leaf certificates.
*	bacula: Set heartbeat options.	Guilhem Moulin	2016-05-12	2
\| \| \| \|	and also TCP keepalive options in the stunnel config.
*	bacula-sd: wibble	Guilhem Moulin	2016-05-12	1
\|
*	Add hardening options to our systemd unit files.	Guilhem Moulin	2016-05-12	1
\|
*	Use systemd unit files for stunnel4.	Guilhem Moulin	2016-05-12	3
\|
*	Upgrade playbooks to Ansible 2.0.	Guilhem Moulin	2016-02-12	1
\|
*	stunnel: disable compression.	Guilhem Moulin	2015-10-27	1
\|
*	stunnel: use GCM ciphers only; use SSL options rather than ciphers to ↵	Guilhem Moulin	2015-10-27	1
\| \| \| \|	disable protocols.
*	Configure Bacula File Daemon / Storage Daemon / Director.	Guilhem Moulin	2015-06-07	5
	Using client-side data signing/encryption and wrapping inter-host communication into stunnel.