index
:
fripost-ansible
master
Fripost ansible scripts
summary
refs
log
tree
commit
diff
stats
log msg
author
committer
range
path:
root
/
roles
/
common
/
templates
Commit message (
Expand
)
Author
Age
Files
...
*
Tunnel bacula (dir → {fd,sd} and fd → sd) traffic through IPSec.
Guilhem Moulin
2016-05-22
3
*
Tunnel munin-update traffic through IPSec.
Guilhem Moulin
2016-05-22
3
*
Tunnel internal NTP traffic through IPSec.
Guilhem Moulin
2016-05-22
2
*
Set up IPSec tunnels between each pair of hosts.
Guilhem Moulin
2016-05-22
5
*
postfix: Update to recommended TLS settings.
Guilhem Moulin
2016-05-18
1
*
postfix: disable weak ciphers for the 'encrypt' TLS security level.
Guilhem Moulin
2016-05-18
1
*
bacula: Set heartbeat options.
Guilhem Moulin
2016-05-12
2
*
Use systemd unit files for stunnel4.
Guilhem Moulin
2016-05-12
2
*
s/ansible_ssh_/ansible_/
Guilhem Moulin
2016-02-12
2
*
Postfix TLS policy: Store the fingerprint of the cert's pubkey, not of the ce...
Guilhem Moulin
2015-12-03
1
*
Internal Postfix config: Disable TLS protocols <1.2 rather than enable 1.2 only.
Guilhem Moulin
2015-10-27
1
*
stunnel: disable compression.
Guilhem Moulin
2015-10-27
2
*
stunnel: use GCM ciphers only; use SSL options rather than ciphers to disable...
Guilhem Moulin
2015-10-27
2
*
Change match to "^(Genuine)?Intel.*" for Intel processors.
Guilhem Moulin
2015-07-12
2
*
Use a single LDAP connection per Munin round to collect slapd statistics.
Guilhem Moulin
2015-06-11
1
*
slapd monitoring.
Guilhem Moulin
2015-06-10
1
*
Configure munin nodes & master.
Guilhem Moulin
2015-06-10
4
*
Configure Bacula File Daemon / Storage Daemon / Director.
Guilhem Moulin
2015-06-07
3
*
wibble
Guilhem Moulin
2015-06-07
1
*
Configure ikiwiki (website + wiki).
Guilhem Moulin
2015-06-07
1
*
typo
Guilhem Moulin
2015-06-07
1
*
typo
Guilhem Moulin
2015-06-07
1
*
Allow outgoing HKP and WHOIS traffic on the LDAP provider.
Guilhem Moulin
2015-06-07
1
*
Allow outgoing SSH traffic.
Guilhem Moulin
2015-06-07
1
*
Add wildcard Pin version in apt preferences.
Guilhem Moulin
2015-06-07
1
*
Configure the list manager (Sympa).
Guilhem Moulin
2015-06-07
2
*
Enable the use of git:// clients.
Guilhem Moulin
2015-06-07
1
*
typo
Guilhem Moulin
2015-06-07
1
*
wibble
Guilhem Moulin
2015-06-07
1
*
Don't install intel-microcode on Xen guests.
Guilhem Moulin
2015-06-07
2
*
wibble
Guilhem Moulin
2015-06-07
1
*
Fix NTP configuration.
Guilhem Moulin
2015-06-07
2
*
Ensure have a TLS policy for each of our host we want to relay to.
Guilhem Moulin
2015-06-07
1
*
typo
Guilhem Moulin
2015-06-07
1
*
Fix Dovecot's mail location.
Guilhem Moulin
2015-06-07
1
*
Perform the alias resolution and address validation solely on the MX:es.
Guilhem Moulin
2015-06-07
1
*
Configure SyncRepl (OpenLDAP replication) and related ACLs.
Guilhem Moulin
2015-06-07
1
*
Tell vim the underlying filetype of templates for syntax highlighting.
Guilhem Moulin
2015-06-07
3
*
Remove IPSec related files.
Guilhem Moulin
2015-06-07
2
*
typo
Guilhem Moulin
2015-06-07
1
*
Whitelist our IPs against fail2ban.
Guilhem Moulin
2015-06-07
1
*
Replace IPSec tunnels by app-level ephemeral TLS sessions.
Guilhem Moulin
2015-06-07
3
*
Outgoing SMTP proxy.
Guilhem Moulin
2015-06-07
2
*
Log SASL usernames for longer, but don't include mail.log into syslog.
Guilhem Moulin
2015-06-07
1
*
Don't use generic maps.
Guilhem Moulin
2015-06-07
1
*
wibble
Guilhem Moulin
2015-06-07
1
*
Don't require a PKI for IPSec.
Guilhem Moulin
2015-06-07
1
*
Support non-free firmwares. (Can be required :-()
Guilhem Moulin
2015-06-07
2
*
Assume a DNS entry for each role.
Guilhem Moulin
2015-06-07
2
*
Don't use IPSec to relay messages to localhost.
Guilhem Moulin
2015-06-07
1
[prev]
[next]