| Commit message (Expand) | Author | Age | Files |
* | Tunnel munin-update traffic through IPSec. | Guilhem Moulin | 2016-05-22 | 3 |
* | Set up IPSec tunnels between each pair of hosts. | Guilhem Moulin | 2016-05-22 | 3 |
* | Move /etc/ssl/private/dhparams.pem to /etc/ssl/dhparams.pem and make it public. | Guilhem Moulin | 2016-05-18 | 1 |
* | Add an ansible module 'fetch_cmd' to fetch the output of a remote command loc... | Guilhem Moulin | 2016-05-18 | 3 |
* | Use systemd unit files for stunnel4. | Guilhem Moulin | 2016-05-12 | 5 |
* | sysctl: don't set IPv6 privacy extensions globaly. | Guilhem Moulin | 2016-04-01 | 1 |
* | sysctl: set net.ipv6.conf.all.accept_ra = 0. | Guilhem Moulin | 2016-03-30 | 1 |
* | Ansible: Using bare variables is deprecated, and will be removed in a future ... | Guilhem Moulin | 2016-03-02 | 2 |
* | Upgrade playbooks to Ansible 2.0. | Guilhem Moulin | 2016-02-12 | 5 |
* | Only install letsencrypt-tiny to the relevant hosts. | Guilhem Moulin | 2015-12-28 | 1 |
* | Use the Let's Encrypt CA for our public certs. | Guilhem Moulin | 2015-12-20 | 1 |
* | Internal Postfix config: Generate RSA 4096 keys by default. | Guilhem Moulin | 2015-10-28 | 1 |
* | Configure FreshClam. | Guilhem Moulin | 2015-09-15 | 1 |
* | Change match to "^(Genuine)?Intel.*" for Intel processors. | Guilhem Moulin | 2015-07-12 | 1 |
* | Configure munin nodes & master. | Guilhem Moulin | 2015-06-10 | 2 |
* | Configure Bacula File Daemon / Storage Daemon / Director. | Guilhem Moulin | 2015-06-07 | 2 |
* | Install CAcert.org root certificates. | Guilhem Moulin | 2015-06-07 | 1 |
* | logjam mitigation. | Guilhem Moulin | 2015-06-07 | 1 |
* | wibble | Guilhem Moulin | 2015-06-07 | 1 |
* | Don't instal smartd on KVM guests. | Guilhem Moulin | 2015-06-07 | 1 |
* | Upgrade the common package list. | Guilhem Moulin | 2015-06-07 | 2 |
* | Add a 'root' alias to root@fripost.org. | Guilhem Moulin | 2015-06-07 | 1 |
* | Upgrade rkhunter config to Jessie. | Guilhem Moulin | 2015-06-07 | 1 |
* | Don't install intel-microcode on Xen guests. | Guilhem Moulin | 2015-06-07 | 1 |
* | Don't install smartd on Xen guests. | Guilhem Moulin | 2015-06-07 | 2 |
* | Install auditd. | Guilhem Moulin | 2015-06-07 | 3 |
* | wibble | Guilhem Moulin | 2015-06-07 | 1 |
* | Fix NTP configuration. | Guilhem Moulin | 2015-06-07 | 1 |
* | Ensure have a TLS policy for each of our host we want to relay to. | Guilhem Moulin | 2015-06-07 | 1 |
* | Postfix needs to be restarted after rekeying. | Guilhem Moulin | 2015-06-07 | 1 |
* | Add a tag 'tls_policy' to facilitate rekeying. | Guilhem Moulin | 2015-06-07 | 1 |
* | Add ability to add custom OrganizationalUnits in genkeypair. | Guilhem Moulin | 2015-06-07 | 1 |
* | Don't install daemontools. | Guilhem Moulin | 2015-06-07 | 1 |
* | Reload Postfix upon configuration change, but don't restart it. | Guilhem Moulin | 2015-06-07 | 1 |
* | Don't restart/reload Postifx upon change of a file based database. | Guilhem Moulin | 2015-06-07 | 1 |
* | wibble | Guilhem Moulin | 2015-06-07 | 2 |
* | Remove IPSec related files. | Guilhem Moulin | 2015-06-07 | 1 |
* | Tel logcheck which logs to monitor. | Guilhem Moulin | 2015-06-07 | 1 |
* | Replace IPSec tunnels by app-level ephemeral TLS sessions. | Guilhem Moulin | 2015-06-07 | 3 |
* | Log SASL usernames for longer, but don't include mail.log into syslog. | Guilhem Moulin | 2015-06-07 | 1 |
* | Fix syntax error. | Guilhem Moulin | 2015-06-07 | 1 |
* | Don't install 'unhide.rb'. | Guilhem Moulin | 2015-06-07 | 1 |
* | Don't use generic maps. | Guilhem Moulin | 2015-06-07 | 1 |
* | Generate certs for Dovecot and Nginx if they are not there. | Guilhem Moulin | 2015-06-07 | 1 |
* | Make genkeypair.sh able to display TXT record for DKIM signatures. | Guilhem Moulin | 2015-06-07 | 2 |
* | Add support for CSR and subjectAltName in genkeypair.sh. | Guilhem Moulin | 2015-06-07 | 1 |
* | More logcheck-database tweaks. | Guilhem Moulin | 2015-06-07 | 1 |
* | logcheck-database tweaks. | Guilhem Moulin | 2015-06-07 | 1 |
* | Don't require a PKI for IPSec. | Guilhem Moulin | 2015-06-07 | 2 |
* | Don't try to start smart on VMs. | Guilhem Moulin | 2015-06-07 | 1 |