fripost-ansible - Fripost ansible scripts

	Commit message (Collapse)	Author	Age	Files
*	systemd.service: Tighten hardening options.	Guilhem Moulin	2018-12-09	2
\|
*	systemd: Replace ‘ProtectSystem=full’ with ‘ProtectSystem=strict’.	Guilhem Moulin	2018-12-09	2
\| \| \| \|	And remove ‘ReadOnlyDirectories=/’ as it's implied by ‘ProtectSystem=strict’.
*	/lib/systemd/system → /etc/systemd/system	Guilhem Moulin	2017-05-31	4
\|
*	Fix munin-cgi-graph systemd service file.	Guilhem Moulin	2016-05-22	1
\| \| \| \|	By allowing to place graphs into /var/lib/munin/cgi-tmp/munin-cgi-graph.
*	Add hardening options to our systemd unit files.	Guilhem Moulin	2016-05-12	2
\|
*	Set HTTP security headers.	Guilhem Moulin	2016-03-30	1
\| \| \| \|	See https://securityheaders.io .
*	munin-master CGI: add application-level ACLs to keep non-local users at bay.	Guilhem Moulin	2016-03-21	1
\|
*	nginx: Move include.d/* to snippets/.	Guilhem Moulin	2015-12-20	1
\|
*	Configure munin nodes & master.	Guilhem Moulin	2015-06-10	5
	Interhost communications are protected by stunnel4. The graphs are only visible on the master itself, and content is generated by Fast CGI.