index
:
fripost-ansible
master
Fripost ansible scripts
summary
refs
log
tree
commit
diff
stats
log msg
author
committer
range
path:
root
/
roles
/
common
/
tasks
Commit message (
Expand
)
Author
Age
Files
*
Tunnel bacula (dir → {fd,sd} and fd → sd) traffic through IPSec.
Guilhem Moulin
2016-05-22
1
*
Tunnel munin-update traffic through IPSec.
Guilhem Moulin
2016-05-22
3
*
Set up IPSec tunnels between each pair of hosts.
Guilhem Moulin
2016-05-22
3
*
Move /etc/ssl/private/dhparams.pem to /etc/ssl/dhparams.pem and make it public.
Guilhem Moulin
2016-05-18
1
*
Add an ansible module 'fetch_cmd' to fetch the output of a remote command loc...
Guilhem Moulin
2016-05-18
3
*
Use systemd unit files for stunnel4.
Guilhem Moulin
2016-05-12
5
*
sysctl: don't set IPv6 privacy extensions globaly.
Guilhem Moulin
2016-04-01
1
*
sysctl: set net.ipv6.conf.all.accept_ra = 0.
Guilhem Moulin
2016-03-30
1
*
Ansible: Using bare variables is deprecated, and will be removed in a future ...
Guilhem Moulin
2016-03-02
2
*
Upgrade playbooks to Ansible 2.0.
Guilhem Moulin
2016-02-12
5
*
Only install letsencrypt-tiny to the relevant hosts.
Guilhem Moulin
2015-12-28
1
*
Use the Let's Encrypt CA for our public certs.
Guilhem Moulin
2015-12-20
1
*
Internal Postfix config: Generate RSA 4096 keys by default.
Guilhem Moulin
2015-10-28
1
*
Configure FreshClam.
Guilhem Moulin
2015-09-15
1
*
Change match to "^(Genuine)?Intel.*" for Intel processors.
Guilhem Moulin
2015-07-12
1
*
Configure munin nodes & master.
Guilhem Moulin
2015-06-10
2
*
Configure Bacula File Daemon / Storage Daemon / Director.
Guilhem Moulin
2015-06-07
2
*
Install CAcert.org root certificates.
Guilhem Moulin
2015-06-07
1
*
logjam mitigation.
Guilhem Moulin
2015-06-07
1
*
wibble
Guilhem Moulin
2015-06-07
1
*
Don't instal smartd on KVM guests.
Guilhem Moulin
2015-06-07
1
*
Upgrade the common package list.
Guilhem Moulin
2015-06-07
2
*
Add a 'root' alias to root@fripost.org.
Guilhem Moulin
2015-06-07
1
*
Upgrade rkhunter config to Jessie.
Guilhem Moulin
2015-06-07
1
*
Don't install intel-microcode on Xen guests.
Guilhem Moulin
2015-06-07
1
*
Don't install smartd on Xen guests.
Guilhem Moulin
2015-06-07
2
*
Install auditd.
Guilhem Moulin
2015-06-07
3
*
wibble
Guilhem Moulin
2015-06-07
1
*
Fix NTP configuration.
Guilhem Moulin
2015-06-07
1
*
Ensure have a TLS policy for each of our host we want to relay to.
Guilhem Moulin
2015-06-07
1
*
Postfix needs to be restarted after rekeying.
Guilhem Moulin
2015-06-07
1
*
Add a tag 'tls_policy' to facilitate rekeying.
Guilhem Moulin
2015-06-07
1
*
Add ability to add custom OrganizationalUnits in genkeypair.
Guilhem Moulin
2015-06-07
1
*
Don't install daemontools.
Guilhem Moulin
2015-06-07
1
*
Reload Postfix upon configuration change, but don't restart it.
Guilhem Moulin
2015-06-07
1
*
Don't restart/reload Postifx upon change of a file based database.
Guilhem Moulin
2015-06-07
1
*
wibble
Guilhem Moulin
2015-06-07
2
*
Remove IPSec related files.
Guilhem Moulin
2015-06-07
1
*
Tel logcheck which logs to monitor.
Guilhem Moulin
2015-06-07
1
*
Replace IPSec tunnels by app-level ephemeral TLS sessions.
Guilhem Moulin
2015-06-07
3
*
Log SASL usernames for longer, but don't include mail.log into syslog.
Guilhem Moulin
2015-06-07
1
*
Fix syntax error.
Guilhem Moulin
2015-06-07
1
*
Don't install 'unhide.rb'.
Guilhem Moulin
2015-06-07
1
*
Don't use generic maps.
Guilhem Moulin
2015-06-07
1
*
Generate certs for Dovecot and Nginx if they are not there.
Guilhem Moulin
2015-06-07
1
*
Make genkeypair.sh able to display TXT record for DKIM signatures.
Guilhem Moulin
2015-06-07
2
*
Add support for CSR and subjectAltName in genkeypair.sh.
Guilhem Moulin
2015-06-07
1
*
More logcheck-database tweaks.
Guilhem Moulin
2015-06-07
1
*
logcheck-database tweaks.
Guilhem Moulin
2015-06-07
1
*
Don't require a PKI for IPSec.
Guilhem Moulin
2015-06-07
2
[next]