summaryrefslogtreecommitdiffstats
path: root/roles
Commit message (Expand)AuthorAgeFiles
* Wiki: Content-Security-Policy: Add data: to img-src.Guilhem Moulin2020-05-222
* cgit: Tighten Content-Security-Policy.Guilhem Moulin2020-05-211
* LDAP: Add ACLs for group ‘styrelse’.Guilhem Moulin2020-05-211
* Postfix: Install -lmdb in all roles using db=lmdb.Guilhem Moulin2020-05-214
* postfix-sender-login: Better hardening.Guilhem Moulin2020-05-214
* dovecot-auth-proxy: replace directory traversal with LDAP lookups.Guilhem Moulin2020-05-215
* dovecot-auth-proxy: Bump protocol version to 2.2.Guilhem Moulin2020-05-201
* IMAP: Update role to Debian Buster.Guilhem Moulin2020-05-1912
* MSA: Update role to Debian Buster.Guilhem Moulin2020-05-193
* LDAP: Update role to Debian Buster.Guilhem Moulin2020-05-192
* s/LDAP-provider/LDAP_provider/Guilhem Moulin2020-05-198
* wibbleGuilhem Moulin2020-05-181
* stunnel4: Harden and socket-activate.Guilhem Moulin2020-05-187
* Firewall: note on reqid matching.Guilhem Moulin2020-05-181
* AEAD ciphers: Add EECDH+CHACHA20 macro.Guilhem Moulin2020-05-184
* cgit and HTTP backend: Remove unused files.Guilhem Moulin2020-05-182
* Firewall: Use `meta secpath exists` to match xfrm associations.Guilhem Moulin2020-05-181
* nginx: Add Expires: HTTP headers.Guilhem Moulin2020-05-176
* webmail: Add .webp to the list of static resources.Guilhem Moulin2020-05-171
* Nextcloud: Fix location{} directives.Guilhem Moulin2020-05-171
* lacme: Port to Debian 10.Guilhem Moulin2020-05-172
* lists.fripost.org: Improve gzip support.Guilhem Moulin2020-05-171
* git, wiki, website: Improve gzip support.Guilhem Moulin2020-05-173
* Webmail: Compress static resources.Guilhem Moulin2020-05-171
* Webmail: Fix allowed extensions for static resources.Guilhem Moulin2020-05-171
* Webmail: Improve Content-Security-Policy.Guilhem Moulin2020-05-171
* nginx: Add MIME type declaration for .woff2 files.Guilhem Moulin2020-05-171
* Remove 'meta: flush_handlers' directives under conditionals.Guilhem Moulin2020-05-172
* Roundcube: skip 'keyboard_shortcuts' plugin.Guilhem Moulin2020-05-171
* roles/amavis: Drop packages that no longer exist.Guilhem Moulin2020-05-171
* Roundcube: Port to Debian 10.Guilhem Moulin2020-05-1712
* common-web: Remove snippets/acme-challenge.conf.Guilhem Moulin2020-05-162
* MX: Port to Debian 10.Guilhem Moulin2020-05-162
* wiki/website: harden config and port to Debian 10.Guilhem Moulin2020-05-168
* git browser and HTTP backend: harden config and port to Debian 10.Guilhem Moulin2020-05-168
* MX: Install OpenDMARC to add Authentication-Results headers.Guilhem Moulin2020-05-166
* wwsympa.service: Use existing directory /run/sympa.Guilhem Moulin2020-05-161
* sympa.conf: remove deprecated options.Guilhem Moulin2020-05-161
* antilop: Upgrade baseline to Debian 10.Guilhem Moulin2020-05-163
* nextcloud: Set php values in pool configuration.Guilhem Moulin2020-05-162
* typofixGuilhem Moulin2020-05-161
* Upgrade baseline to Debian 10.Guilhem Moulin2020-05-1623
* wibbleGuilhem Moulin2020-05-161
* Nextcloud: Minor redis-server config tweak.Guilhem Moulin2020-05-161
* Nextcloud: use dedicated user and PHP FPM pool.Guilhem Moulin2020-05-165
* Add nextcloud's logrotate file.Guilhem Moulin2020-05-161
* role/common-web: Upgrade baseline to Debian 10.Guilhem Moulin2020-05-164
* Nextcloud: Better separation between code/data/logs/cache.Guilhem Moulin2020-05-124
* Add own DKIM key for debian.org address.Guilhem Moulin2020-04-131
* /etc/apt/sources.list: Use https:// URIs.Guilhem Moulin2020-01-251