summaryrefslogtreecommitdiffstats
path: root/roles/common
Commit message (Expand)AuthorAgeFiles
* Add hardening options to our systemd unit files.Guilhem Moulin2016-05-121
* Use systemd unit files for stunnel4.Guilhem Moulin2016-05-1211
* sysctl: don't set IPv6 privacy extensions globaly.Guilhem Moulin2016-04-011
* sysctl: set net.ipv6.conf.all.accept_ra = 0.Guilhem Moulin2016-03-301
* More logcheck-database tweaks.Guilhem Moulin2016-03-131
* Ansible: Using bare variables is deprecated, and will be removed in a future ...Guilhem Moulin2016-03-022
* More logcheck-database tweaks.Guilhem Moulin2016-02-171
* s/ansible_ssh_/ansible_/Guilhem Moulin2016-02-122
* Upgrade playbooks to Ansible 2.0.Guilhem Moulin2016-02-125
* Only install letsencrypt-tiny to the relevant hosts.Guilhem Moulin2015-12-282
* Copy and install Let's Encrypt ACME client.Guilhem Moulin2015-12-201
* Use the Let's Encrypt CA for our public certs.Guilhem Moulin2015-12-202
* More logcheck-database tweaks.Guilhem Moulin2015-12-152
* typoGuilhem Moulin2015-12-041
* Postfix TLS policy: Store the fingerprint of the cert's pubkey, not of the ce...Guilhem Moulin2015-12-031
* More logcheck-database tweaks.Guilhem Moulin2015-12-011
* More logcheck-database tweaks.Guilhem Moulin2015-11-121
* Internal Postfix config: Generate RSA 4096 keys by default.Guilhem Moulin2015-10-281
* genkeypair: use install(1) for atomic file creation with permission mode.Guilhem Moulin2015-10-282
* Internal Postfix config: Disable TLS protocols <1.2 rather than enable 1.2 only.Guilhem Moulin2015-10-271
* stunnel: disable compression.Guilhem Moulin2015-10-272
* stunnel: use GCM ciphers only; use SSL options rather than ciphers to disable...Guilhem Moulin2015-10-272
* More logcheck-database tweaks.Guilhem Moulin2015-10-142
* More logcheck-database tweaks.Guilhem Moulin2015-09-241
* More logcheck-database tweaks.Guilhem Moulin2015-09-212
* More logcheck-database tweaks.Guilhem Moulin2015-09-151
* Configure FreshClam.Guilhem Moulin2015-09-152
* More logcheck-database tweaks.Guilhem Moulin2015-08-213
* Update unattended-upgrades configuration.Guilhem Moulin2015-07-191
* Change match to "^(Genuine)?Intel.*" for Intel processors.Guilhem Moulin2015-07-123
* More logcheck-database tweaks.Guilhem Moulin2015-06-221
* logcheck: Match only hexdigits in postfix queue ID.Guilhem Moulin2015-06-191
* Match IPv6 addresses in logcheck rules.Guilhem Moulin2015-06-191
* Use a single LDAP connection per Munin round to collect slapd statistics.Guilhem Moulin2015-06-113
* More logcheck-database tweaks.Guilhem Moulin2015-06-103
* slapd monitoring.Guilhem Moulin2015-06-102
* Configure munin nodes & master.Guilhem Moulin2015-06-1015
* Don't assume that Postfix queue ID are always 10-digits long.Guilhem Moulin2015-06-101
* Add a reserved domain 'discard.fripost.org' to discard messages.Guilhem Moulin2015-06-071
* Make the webmail connect directly to the outgoing SMTP proxy.Guilhem Moulin2015-06-072
* Use recipient address verification probes.Guilhem Moulin2015-06-071
* Configure Bacula File Daemon / Storage Daemon / Director.Guilhem Moulin2015-06-077
* wibbleGuilhem Moulin2015-06-071
* firewall: allow 127.0.0.1/8 on lo.Guilhem Moulin2015-06-071
* More logcheck-database tweaks.Guilhem Moulin2015-06-071
* genkeypair.sh: Merge privkey and pubkey for identical filekeys.Guilhem Moulin2015-06-071
* rkhunter: Allow hidden dir /etc/.javaGuilhem Moulin2015-06-071
* typoGuilhem Moulin2015-06-071
* More logcheck-database tweaks.Guilhem Moulin2015-06-073
* Configure ikiwiki (website + wiki).Guilhem Moulin2015-06-071
generated by cgit v1.2.3 (git 2.25.1) at 2024-11-24 11:14:12 +0000