Commit message (Collapse) | Author | Age | Files | |
---|---|---|---|---|
* | munin: `sed s,/var/run/,/run,` | Guilhem Moulin | 2020-05-26 | 2 |
| | ||||
* | systemd.service: Tighten hardening options. | Guilhem Moulin | 2018-12-09 | 2 |
| | ||||
* | systemd: Replace ‘ProtectSystem=full’ with ‘ProtectSystem=strict’. | Guilhem Moulin | 2018-12-09 | 2 |
| | | | | And remove ‘ReadOnlyDirectories=/’ as it's implied by ‘ProtectSystem=strict’. | |||
* | Upgrade syntax to Ansible 2.7 (apt module). | Guilhem Moulin | 2018-12-03 | 1 |
| | ||||
* | /lib/systemd/system → /etc/systemd/system | Guilhem Moulin | 2017-05-31 | 5 |
| | ||||
* | Fix munin-cgi-graph systemd service file. | Guilhem Moulin | 2016-05-22 | 2 |
| | | | | By allowing to place graphs into /var/lib/munin/cgi-tmp/munin-cgi-graph. | |||
* | Tunnel munin-update traffic through IPSec. | Guilhem Moulin | 2016-05-22 | 4 |
| | ||||
* | Add hardening options to our systemd unit files. | Guilhem Moulin | 2016-05-12 | 2 |
| | ||||
* | Use systemd unit files for stunnel4. | Guilhem Moulin | 2016-05-12 | 3 |
| | ||||
* | Set HTTP security headers. | Guilhem Moulin | 2016-03-30 | 1 |
| | | | | See https://securityheaders.io . | |||
* | munin-master CGI: add application-level ACLs to keep non-local users at bay. | Guilhem Moulin | 2016-03-21 | 1 |
| | ||||
* | Ansible: Using bare variables is deprecated, and will be removed in a future ↵ | Guilhem Moulin | 2016-03-02 | 1 |
| | | | | release. | |||
* | nginx: Move include.d/* to snippets/. | Guilhem Moulin | 2015-12-20 | 1 |
| | ||||
* | stunnel: disable compression. | Guilhem Moulin | 2015-10-27 | 1 |
| | ||||
* | stunnel: use GCM ciphers only; use SSL options rather than ciphers to ↵ | Guilhem Moulin | 2015-10-27 | 1 |
| | | | | disable protocols. | |||
* | Configure munin nodes & master. | Guilhem Moulin | 2015-06-10 | 9 |
Interhost communications are protected by stunnel4. The graphs are only visible on the master itself, and content is generated by Fast CGI. |