summaryrefslogtreecommitdiffstats
path: root/roles/munin-master
Commit message (Collapse)AuthorAgeFiles
* systemd: Replace ‘ProtectSystem=full’ with ‘ProtectSystem=strict’.Guilhem Moulin2018-12-092
| | | | And remove ‘ReadOnlyDirectories=/’ as it's implied by ‘ProtectSystem=strict’.
* Upgrade syntax to Ansible 2.7 (apt module).Guilhem Moulin2018-12-031
|
* /lib/systemd/system → /etc/systemd/systemGuilhem Moulin2017-05-315
|
* Fix munin-cgi-graph systemd service file.Guilhem Moulin2016-05-222
| | | | By allowing to place graphs into /var/lib/munin/cgi-tmp/munin-cgi-graph.
* Tunnel munin-update traffic through IPSec.Guilhem Moulin2016-05-224
|
* Add hardening options to our systemd unit files.Guilhem Moulin2016-05-122
|
* Use systemd unit files for stunnel4.Guilhem Moulin2016-05-123
|
* Set HTTP security headers.Guilhem Moulin2016-03-301
| | | | See https://securityheaders.io .
* munin-master CGI: add application-level ACLs to keep non-local users at bay.Guilhem Moulin2016-03-211
|
* Ansible: Using bare variables is deprecated, and will be removed in a future ↵Guilhem Moulin2016-03-021
| | | | release.
* nginx: Move include.d/* to snippets/.Guilhem Moulin2015-12-201
|
* stunnel: disable compression.Guilhem Moulin2015-10-271
|
* stunnel: use GCM ciphers only; use SSL options rather than ciphers to ↵Guilhem Moulin2015-10-271
| | | | disable protocols.
* Configure munin nodes & master.Guilhem Moulin2015-06-109
Interhost communications are protected by stunnel4. The graphs are only visible on the master itself, and content is generated by Fast CGI.