| Commit message (Collapse) | Author | Age | Files | |
|---|---|---|---|---|
| * | slapd monitoring. | Guilhem Moulin | 2015-06-10 | 2 |
| | | | | | | We don't use the provided 'slapd_' Munin plugin because it doesn't support SASL binds. | |||
| * | Configure munin nodes & master. | Guilhem Moulin | 2015-06-10 | 15 |
| | | | | | | Interhost communications are protected by stunnel4. The graphs are only visible on the master itself, and content is generated by Fast CGI. | |||
| * | Don't assume that Postfix queue ID are always 10-digits long. | Guilhem Moulin | 2015-06-10 | 1 |
| | | ||||
| * | Add a reserved domain 'discard.fripost.org' to discard messages. | Guilhem Moulin | 2015-06-07 | 1 |
| | | | | | | ‘noreply@’ aliases can be added by routing them to ‘@discard.fripost.org’. | |||
| * | Make the webmail connect directly to the outgoing SMTP proxy. | Guilhem Moulin | 2015-06-07 | 2 |
| | | | | | | (Hence delete the 'webmail' Postfix instance.) This shortens the delay caused by the recipient verification probes. | |||
| * | Use recipient address verification probes. | Guilhem Moulin | 2015-06-07 | 1 |
| | | | | | | | | This is specially useful for mailing lists and the webmail, since it prevents our outgoing gateway from accepting mails known to be bouncing. However the downside is that it adds a delay of up to 6s after the RCPT TO command. | |||
| * | Configure Bacula File Daemon / Storage Daemon / Director. | Guilhem Moulin | 2015-06-07 | 7 |
| | | | | | | Using client-side data signing/encryption and wrapping inter-host communication into stunnel. | |||
| * | wibble | Guilhem Moulin | 2015-06-07 | 1 |
| | | ||||
| * | firewall: allow 127.0.0.1/8 on lo. | Guilhem Moulin | 2015-06-07 | 1 |
| | | ||||
| * | More logcheck-database tweaks. | Guilhem Moulin | 2015-06-07 | 1 |
| | | ||||
| * | genkeypair.sh: Merge privkey and pubkey for identical filekeys. | Guilhem Moulin | 2015-06-07 | 1 |
| | | | | | Also, set ‘subjectKeyIdentifier = hash’ in the CSR. | |||
| * | rkhunter: Allow hidden dir /etc/.java | Guilhem Moulin | 2015-06-07 | 1 |
| | | ||||
| * | typo | Guilhem Moulin | 2015-06-07 | 1 |
| | | ||||
| * | More logcheck-database tweaks. | Guilhem Moulin | 2015-06-07 | 3 |
| | | ||||
| * | Configure ikiwiki (website + wiki). | Guilhem Moulin | 2015-06-07 | 1 |
| | | ||||
| * | Install CAcert.org root certificates. | Guilhem Moulin | 2015-06-07 | 1 |
| | | | | | | XXX: this is a workaround the CAcert root CAs not being present in Jessie. In stretch, we would merely install the 'ca-cacert' package. | |||
| * | typo | Guilhem Moulin | 2015-06-07 | 1 |
| | | ||||
| * | Upgrade the MX configuration from Wheezy to Jessie. | Guilhem Moulin | 2015-06-07 | 1 |
| | | | | | | | In particular, since Postfix is now able to perform LDAP lookups using SASL, previous hacks with simble binds on cn=postfix,ou=services,… can now be removed. | |||
| * | logjam mitigation. | Guilhem Moulin | 2015-06-07 | 3 |
| | | ||||
| * | More logcheck-database tweaks. | Guilhem Moulin | 2015-06-07 | 3 |
| | | ||||
| * | typo | Guilhem Moulin | 2015-06-07 | 1 |
| | | ||||
| * | wibble | Guilhem Moulin | 2015-06-07 | 1 |
| | | ||||
| * | Allow outgoing HKP and WHOIS traffic on the LDAP provider. | Guilhem Moulin | 2015-06-07 | 1 |
| | | ||||
| * | Allow outgoing SSH traffic. | Guilhem Moulin | 2015-06-07 | 1 |
| | | ||||
| * | Add wildcard Pin version in apt preferences. | Guilhem Moulin | 2015-06-07 | 1 |
| | | ||||
| * | Don't instal smartd on KVM guests. | Guilhem Moulin | 2015-06-07 | 1 |
| | | ||||
| * | Upgrade the common package list. | Guilhem Moulin | 2015-06-07 | 2 |
| | | ||||
| * | Add a 'root' alias to root@fripost.org. | Guilhem Moulin | 2015-06-07 | 1 |
| | | ||||
| * | Upgrade samhain config to Jessie. | Guilhem Moulin | 2015-06-07 | 1 |
| | | ||||
| * | Upgrade custom logcheck-database to Jessie. | Guilhem Moulin | 2015-06-07 | 1 |
| | | ||||
| * | Upgrade rkhunter config to Jessie. | Guilhem Moulin | 2015-06-07 | 2 |
| | | ||||
| * | Upgrade amavis config to Jessie. | Guilhem Moulin | 2015-06-07 | 2 |
| | | ||||
| * | Upgrade Postfix config to Jessie (MSA & outgoing proxy). | Guilhem Moulin | 2015-06-07 | 1 |
| | | ||||
| * | Upgrade Dovecot config to Jessie. | Guilhem Moulin | 2015-06-07 | 1 |
| | | ||||
| * | Configure the list manager (Sympa). | Guilhem Moulin | 2015-06-07 | 5 |
| | | ||||
| * | More logcheck-database tweaks. | Guilhem Moulin | 2015-06-07 | 1 |
| | | ||||
| * | Enable the use of git:// clients. | Guilhem Moulin | 2015-06-07 | 1 |
| | | ||||
| * | Disable rsyslog's rate-limiting. | Guilhem Moulin | 2015-06-07 | 1 |
| | | | | | The default for rsyslog v7, but not for rsyslog v5. | |||
| * | More logcheck-database tweaks. | Guilhem Moulin | 2015-06-07 | 3 |
| | | ||||
| * | typo | Guilhem Moulin | 2015-06-07 | 2 |
| | | ||||
| * | More logcheck-database tweaks. | Guilhem Moulin | 2015-06-07 | 1 |
| | | ||||
| * | Key usage 'keyCertSign' is required for self-signed certificates. | Guilhem Moulin | 2015-06-07 | 1 |
| | | ||||
| * | More logcheck-database tweaks. | Guilhem Moulin | 2015-06-07 | 3 |
| | | ||||
| * | wibble | Guilhem Moulin | 2015-06-07 | 1 |
| | | ||||
| * | More logcheck-database tweaks. | Guilhem Moulin | 2015-06-07 | 3 |
| | | ||||
| * | More logcheck-database tweaks. | Guilhem Moulin | 2015-06-07 | 2 |
| | | ||||
| * | Amavis is logging to syslog with severity 'notice'. | Guilhem Moulin | 2015-06-07 | 1 |
| | | ||||
| * | Don't install intel-microcode on Xen guests. | Guilhem Moulin | 2015-06-07 | 3 |
| | | | | | It should be installed on the dom0 instead. | |||
| * | Don't install smartd on Xen guests. | Guilhem Moulin | 2015-06-07 | 2 |
| | | | | | S.M.A.R.T makes little sense for virtual HDDs. | |||
| * | Don't merge amavis' logs into /var/log/syslog. | Guilhem Moulin | 2015-06-07 | 1 |
| | | | | | | As they contain user information, we keep it in /var/log/mail.log only. These logs are kept for 3 days "only", as per our policy. | |||
 |
index : fripost-ansible | |
| Fripost ansible scripts |
| summaryrefslogtreecommitdiffstats |