fripost-ansible - Fripost ansible scripts

	Commit message (Collapse)	Author	Age	Files
*	munin: `sed s,/var/run/,/run,`	Guilhem Moulin	2020-05-26	2
\|
*	systemd.service: Tighten hardening options.	Guilhem Moulin	2018-12-09	2
\|
*	systemd: Replace ‘ProtectSystem=full’ with ‘ProtectSystem=strict’.	Guilhem Moulin	2018-12-09	2
\| \| \| \|	And remove ‘ReadOnlyDirectories=/’ as it's implied by ‘ProtectSystem=strict’.
*	Upgrade syntax to Ansible 2.7 (apt module).	Guilhem Moulin	2018-12-03	1
\|
*	/lib/systemd/system → /etc/systemd/system	Guilhem Moulin	2017-05-31	5
\|
*	Fix munin-cgi-graph systemd service file.	Guilhem Moulin	2016-05-22	2
\| \| \| \|	By allowing to place graphs into /var/lib/munin/cgi-tmp/munin-cgi-graph.
*	Tunnel munin-update traffic through IPSec.	Guilhem Moulin	2016-05-22	4
\|
*	Add hardening options to our systemd unit files.	Guilhem Moulin	2016-05-12	2
\|
*	Use systemd unit files for stunnel4.	Guilhem Moulin	2016-05-12	3
\|
*	Set HTTP security headers.	Guilhem Moulin	2016-03-30	1
\| \| \| \|	See https://securityheaders.io .
*	munin-master CGI: add application-level ACLs to keep non-local users at bay.	Guilhem Moulin	2016-03-21	1
\|
*	Ansible: Using bare variables is deprecated, and will be removed in a future ↵	Guilhem Moulin	2016-03-02	1
\| \| \| \|	release.
*	nginx: Move include.d/* to snippets/.	Guilhem Moulin	2015-12-20	1
\|
*	stunnel: disable compression.	Guilhem Moulin	2015-10-27	1
\|
*	stunnel: use GCM ciphers only; use SSL options rather than ciphers to ↵	Guilhem Moulin	2015-10-27	1
\| \| \| \|	disable protocols.
*	Configure munin nodes & master.	Guilhem Moulin	2015-06-10	9
	Interhost communications are protected by stunnel4. The graphs are only visible on the master itself, and content is generated by Fast CGI.