| Commit message (Expand) | Author | Age | Files |
* | Resolver: Use systemd-resolved. | Guilhem Moulin | 2025-01-28 | 5 |
* | LDAP: Rotate soon-to-be expired key material. | Guilhem Moulin | 2024-09-08 | 1 |
* | Fail2ban: Remove obsolete filter dovecot.conf. | Guilhem Moulin | 2024-09-08 | 1 |
* | Firewall: Harden IPsec configuration by pining the reqids. | Guilhem Moulin | 2024-09-08 | 2 |
* | APT: Prepare config bump to Debian 12. | Guilhem Moulin | 2024-09-08 | 2 |
* | logcheck-database update. | Guilhem Moulin | 2024-09-08 | 2 |
* | Improve Debian 11's fail2ban rules. | Guilhem Moulin | 2022-12-18 | 7 |
* | Port baseline to Debian 11 (codename Bullseye). | Guilhem Moulin | 2022-10-13 | 19 |
* | clamav-freshclam: Remove ‘SafeBrowsing’ option. | Guilhem Moulin | 2022-10-11 | 1 |
* | logcheck-database update. | Guilhem Moulin | 2022-10-11 | 3 |
* | Prefix ‘ipaddr’ and ‘ipv4’ with ‘ansible.utils.’. | Guilhem Moulin | 2022-10-11 | 4 |
* | logcheck-database update. | Guilhem Moulin | 2021-02-13 | 1 |
* | munin: Skip ntp_* plugins when ntpq(1) is missing. | Guilhem Moulin | 2021-02-06 | 1 |
* | Postfix: pin key material to our MX:es for fripost.org and its subdomains. | Guilhem Moulin | 2021-01-26 | 1 |
* | Firewall: Always include 172.16.0.0/12 to the bogon list. | Guilhem Moulin | 2020-11-15 | 1 |
* | Firewall: Add counter to dropped ICMP packets. | Guilhem Moulin | 2020-11-15 | 1 |
* | rkhunter: workaround for mix usrmerge/non-usrmerge environments. | Guilhem Moulin | 2020-11-15 | 1 |
* | Firewall: ICMPv6: accept link-local multicast receiver notification messages. | Guilhem Moulin | 2020-11-15 | 1 |
* | Change NTP client to systemd-timesyncd. | Guilhem Moulin | 2020-11-15 | 5 |
* | logcheck-database update. | Guilhem Moulin | 2020-11-15 | 4 |
* | Firewall: allow ICMP type 11 (time time-exceeded). | Guilhem Moulin | 2020-11-03 | 1 |
* | Bacula: refactor systemd service files. | Guilhem Moulin | 2020-11-03 | 2 |
* | Firewall: Move IPsec/ICMP/ICMPv6 rules to ingress chain. | Guilhem Moulin | 2020-11-03 | 1 |
* | Firewall: Move martian and bogus TCP filters early in the packet flow. | Guilhem Moulin | 2020-11-02 | 1 |
* | kernel parameters: Disable SYN cookies and improve SYN backlog handling. | Guilhem Moulin | 2020-11-02 | 1 |
* | typofix | Guilhem Moulin | 2020-11-02 | 1 |
* | IMAP: Update role to Debian Buster. | Guilhem Moulin | 2020-05-19 | 1 |
* | MSA: Update role to Debian Buster. | Guilhem Moulin | 2020-05-19 | 1 |
* | s/LDAP-provider/LDAP_provider/ | Guilhem Moulin | 2020-05-19 | 2 |
* | stunnel4: Harden and socket-activate. | Guilhem Moulin | 2020-05-18 | 2 |
* | Firewall: note on reqid matching. | Guilhem Moulin | 2020-05-18 | 1 |
* | AEAD ciphers: Add EECDH+CHACHA20 macro. | Guilhem Moulin | 2020-05-18 | 1 |
* | Firewall: Use `meta secpath exists` to match xfrm associations. | Guilhem Moulin | 2020-05-18 | 1 |
* | Remove 'meta: flush_handlers' directives under conditionals. | Guilhem Moulin | 2020-05-17 | 1 |
* | Roundcube: Port to Debian 10. | Guilhem Moulin | 2020-05-17 | 1 |
* | typofix | Guilhem Moulin | 2020-05-16 | 1 |
* | Upgrade baseline to Debian 10. | Guilhem Moulin | 2020-05-16 | 23 |
* | /etc/apt/sources.list: Use https:// URIs. | Guilhem Moulin | 2020-01-25 | 1 |
* | Improve/harden fail2ban configuration. | Guilhem Moulin | 2020-01-25 | 7 |
* | Convert firewall to nftables. | Guilhem Moulin | 2020-01-23 | 11 |
* | Postfix: disable DNS lookups on the internal SMTPds. | Guilhem Moulin | 2020-01-23 | 1 |
* | tr/-/_/ in group names. | Guilhem Moulin | 2020-01-22 | 3 |
* | MSA: Open 465/TCP for Email Submission over TLS. | Guilhem Moulin | 2019-03-19 | 4 |
* | firewall: gracefully close invalid connections. | Guilhem Moulin | 2018-12-22 | 1 |
* | fail2ban: Only install the roundcube/dovecot filters if needed. | Guilhem Moulin | 2018-12-15 | 1 |
* | submission: Prospective SPF checking. | Guilhem Moulin | 2018-12-12 | 2 |
* | IPsec: use Suite-B-GCM-256 algorithms for IKEv2 & ESP. | Guilhem Moulin | 2018-12-09 | 1 |
* | MSA verification probes: enable opportunistic encryption. | Guilhem Moulin | 2018-12-09 | 1 |
* | Update 'IMAP', 'MSA' and 'LDAP-provider' roles to Debian Stretch. | Guilhem Moulin | 2018-12-09 | 6 |
* | Disable resume device. | Guilhem Moulin | 2018-12-09 | 3 |