Commit message (Collapse) | Author | Age | Files | |
---|---|---|---|---|
* | systemd.service: Tighten hardening options. | Guilhem Moulin | 2018-12-09 | 2 |
| | ||||
* | systemd: Replace ‘ProtectSystem=full’ with ‘ProtectSystem=strict’. | Guilhem Moulin | 2018-12-09 | 2 |
| | | | | And remove ‘ReadOnlyDirectories=/’ as it's implied by ‘ProtectSystem=strict’. | |||
* | /lib/systemd/system → /etc/systemd/system | Guilhem Moulin | 2017-05-31 | 4 |
| | ||||
* | Fix munin-cgi-graph systemd service file. | Guilhem Moulin | 2016-05-22 | 1 |
| | | | | By allowing to place graphs into /var/lib/munin/cgi-tmp/munin-cgi-graph. | |||
* | Add hardening options to our systemd unit files. | Guilhem Moulin | 2016-05-12 | 2 |
| | ||||
* | Set HTTP security headers. | Guilhem Moulin | 2016-03-30 | 1 |
| | | | | See https://securityheaders.io . | |||
* | munin-master CGI: add application-level ACLs to keep non-local users at bay. | Guilhem Moulin | 2016-03-21 | 1 |
| | ||||
* | nginx: Move include.d/* to snippets/. | Guilhem Moulin | 2015-12-20 | 1 |
| | ||||
* | Configure munin nodes & master. | Guilhem Moulin | 2015-06-10 | 5 |
Interhost communications are protected by stunnel4. The graphs are only visible on the master itself, and content is generated by Fast CGI. |