fripost-ansible - Fripost ansible scripts

	Commit message (Collapse)	Author	Age	Files
*	typofix	Guilhem Moulin	2020-11-15	1
\| \| \| \|	Regression from ead9aaa3dd7ca48012b2b21cc930ee73c8eaa9d3.
*	Bacula: refactor systemd service files.	Guilhem Moulin	2020-11-03	2
\| \| \| \| \| \|	Use unit overrides on top of upstream's service files instead of overriding entire service files. In particular, upstream uses flag `-P` so we don't need to use RuntimeDirectory= anymore.
*	bacula-{dir,sd}: Upgrade role to Debian Buster.	Guilhem Moulin	2020-05-26	2
\|
*	tr/-/_/ in group names.	Guilhem Moulin	2020-01-22	1
\| \| \| \| \| \| \| \| \| \| \| \|	This avoids [DEPRECATION WARNING]: The TRANSFORM_INVALID_GROUP_CHARS settings is set to allow bad characters in group names by default, this will change, but still be user configurable on deprecation. This feature will be removed in version 2.10. Deprecation warnings can be disabled by setting deprecation_warnings=False in ansible.cfg. [WARNING]: Invalid characters were found in group names but not replaced, use -vvvv to see details
*	bacula-sd: Ensure /mnt/backup is mounted before creating sub-directories.	Guilhem Moulin	2018-12-09	1
\|
*	systemd.service: Tighten hardening options.	Guilhem Moulin	2018-12-09	1
\|
*	bacula-*.service: Don't fork in the background.	Guilhem Moulin	2018-12-09	1
\| \| \| \|	Inspired from /lib/systemd/system/bacula-fd.service.
*	systemd: Replace ‘ProtectSystem=full’ with ‘ProtectSystem=strict’.	Guilhem Moulin	2018-12-09	1
\| \| \| \|	And remove ‘ReadOnlyDirectories=/’ as it's implied by ‘ProtectSystem=strict’.
*	/lib/systemd/system → /etc/systemd/system	Guilhem Moulin	2017-05-31	2
\|
*	Tunnel bacula (dir → {fd,sd} and fd → sd) traffic through IPSec.	Guilhem Moulin	2016-05-22	5
\|
*	Add an ansible module 'fetch_cmd' to fetch the output of a remote command ↵	Guilhem Moulin	2016-05-18	1
\| \| \| \| \| \|	locally. And use this to fetch all X.509 leaf certificates.
*	bacula: Set heartbeat options.	Guilhem Moulin	2016-05-12	2
\| \| \| \|	and also TCP keepalive options in the stunnel config.
*	bacula-sd: wibble	Guilhem Moulin	2016-05-12	1
\|
*	Add hardening options to our systemd unit files.	Guilhem Moulin	2016-05-12	1
\|
*	Use systemd unit files for stunnel4.	Guilhem Moulin	2016-05-12	3
\|
*	Upgrade playbooks to Ansible 2.0.	Guilhem Moulin	2016-02-12	1
\|
*	stunnel: disable compression.	Guilhem Moulin	2015-10-27	1
\|
*	stunnel: use GCM ciphers only; use SSL options rather than ciphers to ↵	Guilhem Moulin	2015-10-27	1
\| \| \| \|	disable protocols.
*	Configure Bacula File Daemon / Storage Daemon / Director.	Guilhem Moulin	2015-06-07	5
	Using client-side data signing/encryption and wrapping inter-host communication into stunnel.