summaryrefslogtreecommitdiffstats
path: root/roles
Commit message (Expand)AuthorAgeFiles
* Send internal system mails to root@f.o.Guilhem Moulin33 hours10
* Nginx: Drop OCSP stapling directives.Guilhem Moulin2025-08-061
* Update logcheck database.Guilhem Moulin2025-04-042
* Update /etc/rkhunter.conf.Guilhem Moulin2025-02-011
* LDAP: Load dynlist overlay.Guilhem Moulin2025-02-013
* fail2ban: set 'allowipv6 = auto'.Guilhem Moulin2025-01-281
* Update logcheck database.Guilhem Moulin2025-01-283
* Skip auditd setup.Guilhem Moulin2025-01-281
* Fix logcheck.logfiles permissions.Guilhem Moulin2025-01-281
* Adjust nextcloud nginx and PHP-FPM config for bookworm.Guilhem Moulin2025-01-284
* Update charon.conf for bookworm.Guilhem Moulin2025-01-281
* Update logcheck database.Guilhem Moulin2025-01-284
* Resolver: Use systemd-resolved.Guilhem Moulin2025-01-285
* Set dmarc_protection_mode=all from dmarc_any.Guilhem Moulin2024-10-181
* LDAP: Rotate soon-to-be expired key material.Guilhem Moulin2024-09-083
* Fail2ban: Remove obsolete filter dovecot.conf.Guilhem Moulin2024-09-081
* Nextcloud: Tweak opcache settings.Guilhem Moulin2024-09-081
* Nextcloud: Upgrade backend to PHP7.4.Guilhem Moulin2024-09-084
* wibbleGuilhem Moulin2024-09-081
* Firewall: Harden IPsec configuration by pining the reqids.Guilhem Moulin2024-09-082
* OpenDMARC: Adjust configuration to bullseye.Guilhem Moulin2024-09-081
* Sympa: Default to dmarc_protection_mode=dmarc_reject.Guilhem Moulin2024-09-081
* Sympa: Update Content-Security-Policy.Guilhem Moulin2024-09-081
* APT: Prepare config bump to Debian 12.Guilhem Moulin2024-09-082
* logcheck-database update.Guilhem Moulin2024-09-082
* typofixGuilhem Moulin2024-09-081
* DKIM key generation: Adjust ownership.Guilhem Moulin2024-09-081
* MSA: Set smtpd_forbid_bare_newline to defeat SMTP smuggling attacks.Guilhem Moulin2024-09-081
* IMAP: Adjust dovecot configuration to bullseye.Guilhem Moulin2024-09-0812
* Roundcube: Set $config['max_recipients'] = 15 to avoid timeout.Guilhem Moulin2024-09-081
* Don't take roundcube from backports.Guilhem Moulin2024-09-081
* Webmail: Upgrade backend to PHP7.4.Guilhem Moulin2024-09-084
* Sympa: Enable French support.Guilhem Moulin2024-06-121
* Nextcloud: Set ‘X-Robots-Tag: noindex, nofollow’.Guilhem Moulin2023-03-261
* Sympa: Update robot.conf to fix HTTP 421 on virtual hosts.Guilhem Moulin2023-01-133
* Improve Debian 11's fail2ban rules.Guilhem Moulin2022-12-187
* Port baseline to Debian 11 (codename Bullseye).Guilhem Moulin2022-10-1323
* openldap module: Fix python3's bytes vs str mismatch.Guilhem Moulin2022-10-111
* Remove module ‘mysql_user2’.Guilhem Moulin2022-10-114
* Roundcube: managesieve: Disable ‘reject’ and ‘ereject’ extensions.Guilhem Moulin2022-10-111
* clamav-freshclam: Remove ‘SafeBrowsing’ option.Guilhem Moulin2022-10-111
* logcheck-database update.Guilhem Moulin2022-10-113
* postfix: Adjust anonymize_sender.pcre.Guilhem Moulin2022-10-111
* dovecot: Bump VSZ to 1G.Guilhem Moulin2022-10-111
* Prefix ‘ipaddr’ and ‘ipv4’ with ‘ansible.utils.’.Guilhem Moulin2022-10-1111
* Nextcloud: Adapt configuration to v21.Guilhem Moulin2021-05-232
* Rename '_lacme' user to '_lacme-client'.Guilhem Moulin2021-02-242
* logcheck-database update.Guilhem Moulin2021-02-131
* Don't restart amavis on DKIM key generation.Guilhem Moulin2021-02-131
* munin: Skip ntp_* plugins when ntpq(1) is missing.Guilhem Moulin2021-02-061