summaryrefslogtreecommitdiffstats
path: root/roles/common/files/etc
Commit message (Expand)AuthorAgeFiles
* Improve Debian 11's fail2ban rules.Guilhem Moulin2022-12-184
* Port baseline to Debian 11 (codename Bullseye).Guilhem Moulin2022-10-139
* logcheck-database update.Guilhem Moulin2022-10-113
* logcheck-database update.Guilhem Moulin2021-02-131
* rkhunter: workaround for mix usrmerge/non-usrmerge environments.Guilhem Moulin2020-11-151
* logcheck-database update.Guilhem Moulin2020-11-154
* Bacula: refactor systemd service files.Guilhem Moulin2020-11-031
* IMAP: Update role to Debian Buster.Guilhem Moulin2020-05-191
* stunnel4: Harden and socket-activate.Guilhem Moulin2020-05-181
* Upgrade baseline to Debian 10.Guilhem Moulin2020-05-1610
* Improve/harden fail2ban configuration.Guilhem Moulin2020-01-255
* Convert firewall to nftables.Guilhem Moulin2020-01-232
* MSA: Open 465/TCP for Email Submission over TLS.Guilhem Moulin2019-03-191
* Update 'IMAP', 'MSA' and 'LDAP-provider' roles to Debian Stretch.Guilhem Moulin2018-12-093
* Disable resume device.Guilhem Moulin2018-12-091
* systemd.service: Tighten hardening options.Guilhem Moulin2018-12-092
* bacula-*.service: Don't fork in the background.Guilhem Moulin2018-12-091
* Upgrade 'lists' role to Debian Stretch.Guilhem Moulin2018-12-091
* systemd: Replace ‘ProtectSystem=full’ with ‘ProtectSystem=strict’.Guilhem Moulin2018-12-092
* Postfix: replace cdb & btree tables with lmdb ones.Guilhem Moulin2018-12-031
* IPsec: allow ISAKMP over IPv6.Guilhem Moulin2018-12-031
* Upgrade baseline to Debian Stretch.Guilhem Moulin2018-12-038
* Skip samhain installation.Guilhem Moulin2018-12-031
* Harden anti spam on the MX:es.Guilhem Moulin2018-06-091
* More logcheck-database tweaks.Guilhem Moulin2018-04-043
* sympa: wibbleGuilhem Moulin2018-04-041
* Perform recipient address verification on the MSA itself.Guilhem Moulin2018-04-041
* More logcheck-database tweaks.Guilhem Moulin2017-09-143
* rkhunter: Disable remote updates to fix CVE-2017-7480.Guilhem Moulin2017-07-291
* Use MariaDB as default MySQL flavor.Guilhem Moulin2017-07-291
* More logcheck-database tweaks.Guilhem Moulin2017-06-071
* postfix-sender-login: wibbleGuilhem Moulin2017-06-051
* dovecot: enable user iteration and add a cronjob for `doveadm purge -A`Guilhem Moulin2017-06-051
* postfix: don't rate-limit our IPsec subnet.Guilhem Moulin2017-06-021
* /lib/systemd/system → /etc/systemd/systemGuilhem Moulin2017-05-313
* MSA: reject null sender address.Guilhem Moulin2017-05-141
* More logcheck-database tweaks.Guilhem Moulin2016-12-081
* More logcheck-database tweaks.Guilhem Moulin2016-08-222
* Postfix: don't share the master.cf between the instances.Guilhem Moulin2016-07-101
* More logcheck-database tweaks.Guilhem Moulin2016-07-092
* More logcheck-database tweaks.Guilhem Moulin2016-06-293
* Set up IPSec tunnels between each pair of hosts.Guilhem Moulin2016-05-223
* postfix: master.cf wibbleGuilhem Moulin2016-05-181
* postfix: Update to recommended TLS settings.Guilhem Moulin2016-05-181
* Use systemd unit files for stunnel4.Guilhem Moulin2016-05-121
* More logcheck-database tweaks.Guilhem Moulin2016-03-131
* More logcheck-database tweaks.Guilhem Moulin2016-02-171
* More logcheck-database tweaks.Guilhem Moulin2015-12-152
* More logcheck-database tweaks.Guilhem Moulin2015-12-011
* More logcheck-database tweaks.Guilhem Moulin2015-11-121