index
:
fripost-ansible
master
Fripost ansible scripts
summary
refs
log
tree
commit
diff
stats
log msg
author
committer
range
path:
root
/
roles
/
common
/
templates
/
etc
/
iptables
/
services.j2
Commit message (
Expand
)
Author
Age
Files
*
Update 'IMAP', 'MSA' and 'LDAP-provider' roles to Debian Stretch.
Guilhem Moulin
2018-12-09
1
*
Firewall: disable outgoing access to git:// remote servers.
Guilhem Moulin
2018-12-09
1
*
Define new host "calima" serving Nextcloud.
Guilhem Moulin
2018-12-03
1
*
IPsec: allow ISAKMP over IPv6.
Guilhem Moulin
2018-12-03
1
*
Firewall: Allow DNS queries over TCP.
Guilhem Moulin
2018-04-04
1
*
Perform recipient address verification on the MSA itself.
Guilhem Moulin
2018-04-04
1
*
Webmail: don't allow outgoing TCP/993 connections.
Guilhem Moulin
2017-06-15
1
*
Route all internal SMTP traffic through IPsec.
Guilhem Moulin
2016-07-10
1
*
IPSec → IPsec
Guilhem Moulin
2016-06-29
1
*
Tunnel bacula (dir → {fd,sd} and fd → sd) traffic through IPSec.
Guilhem Moulin
2016-05-22
1
*
Tunnel munin-update traffic through IPSec.
Guilhem Moulin
2016-05-22
1
*
Tunnel internal NTP traffic through IPSec.
Guilhem Moulin
2016-05-22
1
*
Set up IPSec tunnels between each pair of hosts.
Guilhem Moulin
2016-05-22
1
*
s/ansible_ssh_/ansible_/
Guilhem Moulin
2016-02-12
1
*
Configure munin nodes & master.
Guilhem Moulin
2015-06-10
1
*
Configure Bacula File Daemon / Storage Daemon / Director.
Guilhem Moulin
2015-06-07
1
*
wibble
Guilhem Moulin
2015-06-07
1
*
Configure ikiwiki (website + wiki).
Guilhem Moulin
2015-06-07
1
*
typo
Guilhem Moulin
2015-06-07
1
*
Allow outgoing HKP and WHOIS traffic on the LDAP provider.
Guilhem Moulin
2015-06-07
1
*
Allow outgoing SSH traffic.
Guilhem Moulin
2015-06-07
1
*
Configure the list manager (Sympa).
Guilhem Moulin
2015-06-07
1
*
Enable the use of git:// clients.
Guilhem Moulin
2015-06-07
1
*
wibble
Guilhem Moulin
2015-06-07
1
*
Fix NTP configuration.
Guilhem Moulin
2015-06-07
1
*
typo
Guilhem Moulin
2015-06-07
1
*
Fix Dovecot's mail location.
Guilhem Moulin
2015-06-07
1
*
Perform the alias resolution and address validation solely on the MX:es.
Guilhem Moulin
2015-06-07
1
*
Configure SyncRepl (OpenLDAP replication) and related ACLs.
Guilhem Moulin
2015-06-07
1
*
typo
Guilhem Moulin
2015-06-07
1
*
Replace IPSec tunnels by app-level ephemeral TLS sessions.
Guilhem Moulin
2015-06-07
1
*
Outgoing SMTP proxy.
Guilhem Moulin
2015-06-07
1
*
Configure Sieve and ManageSieve.
Guilhem Moulin
2015-06-07
1
*
Configure the webmail.
Guilhem Moulin
2015-06-07
1
*
Configure NTP.
Guilhem Moulin
2015-06-07
1
*
Configure the Mail Submission Agent.
Guilhem Moulin
2015-06-07
1
*
Configure the IMAP server.
Guilhem Moulin
2015-06-07
1
*
Configure the MX:es.
Guilhem Moulin
2015-06-07
1
*
Configure v4 and v6 iptable rulesets.
Guilhem Moulin
2015-06-07
1