summaryrefslogtreecommitdiffstats
path: root/roles/common/templates
Commit message (Expand)AuthorAgeFiles
* IPSec: replace (self-signed) X.509 certs by their raw pubkey for authentication.Guilhem Moulin2016-05-241
* Tunnel bacula (dir → {fd,sd} and fd → sd) traffic through IPSec.Guilhem Moulin2016-05-223
* Tunnel munin-update traffic through IPSec.Guilhem Moulin2016-05-223
* Tunnel internal NTP traffic through IPSec.Guilhem Moulin2016-05-222
* Set up IPSec tunnels between each pair of hosts.Guilhem Moulin2016-05-225
* postfix: Update to recommended TLS settings.Guilhem Moulin2016-05-181
* postfix: disable weak ciphers for the 'encrypt' TLS security level.Guilhem Moulin2016-05-181
* bacula: Set heartbeat options.Guilhem Moulin2016-05-122
* Use systemd unit files for stunnel4.Guilhem Moulin2016-05-122
* s/ansible_ssh_/ansible_/Guilhem Moulin2016-02-122
* Postfix TLS policy: Store the fingerprint of the cert's pubkey, not of the ce...Guilhem Moulin2015-12-031
* Internal Postfix config: Disable TLS protocols <1.2 rather than enable 1.2 only.Guilhem Moulin2015-10-271
* stunnel: disable compression.Guilhem Moulin2015-10-272
* stunnel: use GCM ciphers only; use SSL options rather than ciphers to disable...Guilhem Moulin2015-10-272
* Change match to "^(Genuine)?Intel.*" for Intel processors.Guilhem Moulin2015-07-122
* Use a single LDAP connection per Munin round to collect slapd statistics.Guilhem Moulin2015-06-111
* slapd monitoring.Guilhem Moulin2015-06-101
* Configure munin nodes & master.Guilhem Moulin2015-06-104
* Configure Bacula File Daemon / Storage Daemon / Director.Guilhem Moulin2015-06-073
* wibbleGuilhem Moulin2015-06-071
* Configure ikiwiki (website + wiki).Guilhem Moulin2015-06-071
* typoGuilhem Moulin2015-06-071
* typoGuilhem Moulin2015-06-071
* Allow outgoing HKP and WHOIS traffic on the LDAP provider.Guilhem Moulin2015-06-071
* Allow outgoing SSH traffic.Guilhem Moulin2015-06-071
* Add wildcard Pin version in apt preferences.Guilhem Moulin2015-06-071
* Configure the list manager (Sympa).Guilhem Moulin2015-06-072
* Enable the use of git:// clients.Guilhem Moulin2015-06-071
* typoGuilhem Moulin2015-06-071
* wibbleGuilhem Moulin2015-06-071
* Don't install intel-microcode on Xen guests.Guilhem Moulin2015-06-072
* wibbleGuilhem Moulin2015-06-071
* Fix NTP configuration.Guilhem Moulin2015-06-072
* Ensure have a TLS policy for each of our host we want to relay to.Guilhem Moulin2015-06-071
* typoGuilhem Moulin2015-06-071
* Fix Dovecot's mail location.Guilhem Moulin2015-06-071
* Perform the alias resolution and address validation solely on the MX:es.Guilhem Moulin2015-06-071
* Configure SyncRepl (OpenLDAP replication) and related ACLs.Guilhem Moulin2015-06-071
* Tell vim the underlying filetype of templates for syntax highlighting.Guilhem Moulin2015-06-073
* Remove IPSec related files.Guilhem Moulin2015-06-072
* typoGuilhem Moulin2015-06-071
* Whitelist our IPs against fail2ban.Guilhem Moulin2015-06-071
* Replace IPSec tunnels by app-level ephemeral TLS sessions.Guilhem Moulin2015-06-073
* Outgoing SMTP proxy.Guilhem Moulin2015-06-072
* Log SASL usernames for longer, but don't include mail.log into syslog.Guilhem Moulin2015-06-071
* Don't use generic maps.Guilhem Moulin2015-06-071
* wibbleGuilhem Moulin2015-06-071
* Don't require a PKI for IPSec.Guilhem Moulin2015-06-071
* Support non-free firmwares. (Can be required :-()Guilhem Moulin2015-06-072
* Assume a DNS entry for each role.Guilhem Moulin2015-06-072
generated by cgit v1.2.3 (git 2.25.1) at 2024-11-26 08:19:40 +0000