index
:
fripost-ansible
master
Fripost ansible scripts
summary
refs
log
tree
commit
diff
stats
log msg
author
committer
range
path:
root
/
roles
/
common
/
tasks
/
main.yml
Commit message (
Expand
)
Author
Age
Files
*
Upgrade syntax to Ansible 2.5.
Guilhem Moulin
2018-04-04
1
*
Upgrade syntax to Ansible 2.4.
Guilhem Moulin
2017-11-23
1
*
Fix detection of KVM guests.
Guilhem Moulin
2017-07-29
1
*
Change group of executables in /usr/local/{bin,sbin} from root to staff.
Guilhem Moulin
2017-05-14
1
*
Route SMTP traffic from the webmail through IPsec.
Guilhem Moulin
2016-07-10
1
*
Use stunnel to secure the connection from the webmail to ldap.fripost.org.
Guilhem Moulin
2016-06-05
1
*
Tunnel munin-update traffic through IPSec.
Guilhem Moulin
2016-05-22
1
*
Set up IPSec tunnels between each pair of hosts.
Guilhem Moulin
2016-05-22
1
*
Move /etc/ssl/private/dhparams.pem to /etc/ssl/dhparams.pem and make it public.
Guilhem Moulin
2016-05-18
1
*
Use systemd unit files for stunnel4.
Guilhem Moulin
2016-05-12
1
*
Upgrade playbooks to Ansible 2.0.
Guilhem Moulin
2016-02-12
1
*
Only install letsencrypt-tiny to the relevant hosts.
Guilhem Moulin
2015-12-28
1
*
Use the Let's Encrypt CA for our public certs.
Guilhem Moulin
2015-12-20
1
*
Change match to "^(Genuine)?Intel.*" for Intel processors.
Guilhem Moulin
2015-07-12
1
*
Configure munin nodes & master.
Guilhem Moulin
2015-06-10
1
*
Configure Bacula File Daemon / Storage Daemon / Director.
Guilhem Moulin
2015-06-07
1
*
Install CAcert.org root certificates.
Guilhem Moulin
2015-06-07
1
*
logjam mitigation.
Guilhem Moulin
2015-06-07
1
*
Don't instal smartd on KVM guests.
Guilhem Moulin
2015-06-07
1
*
Upgrade the common package list.
Guilhem Moulin
2015-06-07
1
*
Don't install intel-microcode on Xen guests.
Guilhem Moulin
2015-06-07
1
*
Don't install smartd on Xen guests.
Guilhem Moulin
2015-06-07
1
*
Install auditd.
Guilhem Moulin
2015-06-07
1
*
Don't install daemontools.
Guilhem Moulin
2015-06-07
1
*
Replace IPSec tunnels by app-level ephemeral TLS sessions.
Guilhem Moulin
2015-06-07
1
*
Make genkeypair.sh able to display TXT record for DKIM signatures.
Guilhem Moulin
2015-06-07
1
*
Don't require a PKI for IPSec.
Guilhem Moulin
2015-06-07
1
*
Install haveged.
Guilhem Moulin
2015-06-07
1
*
Install ClamAV.
Guilhem Moulin
2015-06-07
1
*
Install common packages.
Guilhem Moulin
2015-06-07
1
*
Configure S.M.A.R.T.
Guilhem Moulin
2015-06-07
1
*
Configure NTP.
Guilhem Moulin
2015-06-07
1
*
Reorganization.
Guilhem Moulin
2015-06-07
1
*
Common LDAP (slapd) configuration.
Guilhem Moulin
2015-06-07
1
*
Common MySQL configuration.
Guilhem Moulin
2015-06-07
1
*
Postfix master (nullmailer) configuration
Guilhem Moulin
2015-06-07
1
*
Configure the (basic) logging policy.
Guilhem Moulin
2015-06-07
1
*
Configure IPSec.
Guilhem Moulin
2015-06-07
1
*
Configure fail2ban.
Guilhem Moulin
2015-06-07
1
*
Configure rkhunter.
Guilhem Moulin
2015-06-07
1
*
Configure samhain.
Guilhem Moulin
2015-06-07
1
*
Configure v4 and v6 iptable rulesets.
Guilhem Moulin
2015-06-07
1
*
Configure APT.
Guilhem Moulin
2015-06-07
1
*
Configure /etc/{hosts,hostname,mailname}.
Guilhem Moulin
2015-06-07
1
*
Basic ansible setup.
Guilhem Moulin
2015-06-07
1