summaryrefslogtreecommitdiffstats
path: root/roles
Commit message (Expand)AuthorAgeFiles
* Sympa: Default to dmarc_protection_mode=dmarc_reject.Guilhem Moulin2024-09-081
* Sympa: Update Content-Security-Policy.Guilhem Moulin2024-09-081
* APT: Prepare config bump to Debian 12.Guilhem Moulin2024-09-082
* logcheck-database update.Guilhem Moulin2024-09-082
* typofixGuilhem Moulin2024-09-081
* DKIM key generation: Adjust ownership.Guilhem Moulin2024-09-081
* MSA: Set smtpd_forbid_bare_newline to defeat SMTP smuggling attacks.Guilhem Moulin2024-09-081
* IMAP: Adjust dovecot configuration to bullseye.Guilhem Moulin2024-09-0812
* Roundcube: Set $config['max_recipients'] = 15 to avoid timeout.Guilhem Moulin2024-09-081
* Don't take roundcube from backports.Guilhem Moulin2024-09-081
* Webmail: Upgrade backend to PHP7.4.Guilhem Moulin2024-09-084
* Sympa: Enable French support.Guilhem Moulin2024-06-121
* Nextcloud: Set ‘X-Robots-Tag: noindex, nofollow’.Guilhem Moulin2023-03-261
* Sympa: Update robot.conf to fix HTTP 421 on virtual hosts.Guilhem Moulin2023-01-133
* Improve Debian 11's fail2ban rules.Guilhem Moulin2022-12-187
* Port baseline to Debian 11 (codename Bullseye).Guilhem Moulin2022-10-1323
* openldap module: Fix python3's bytes vs str mismatch.Guilhem Moulin2022-10-111
* Remove module ‘mysql_user2’.Guilhem Moulin2022-10-114
* Roundcube: managesieve: Disable ‘reject’ and ‘ereject’ extensions.Guilhem Moulin2022-10-111
* clamav-freshclam: Remove ‘SafeBrowsing’ option.Guilhem Moulin2022-10-111
* logcheck-database update.Guilhem Moulin2022-10-113
* postfix: Adjust anonymize_sender.pcre.Guilhem Moulin2022-10-111
* dovecot: Bump VSZ to 1G.Guilhem Moulin2022-10-111
* Prefix ‘ipaddr’ and ‘ipv4’ with ‘ansible.utils.’.Guilhem Moulin2022-10-1111
* Nextcloud: Adapt configuration to v21.Guilhem Moulin2021-05-232
* Rename '_lacme' user to '_lacme-client'.Guilhem Moulin2021-02-242
* logcheck-database update.Guilhem Moulin2021-02-131
* Don't restart amavis on DKIM key generation.Guilhem Moulin2021-02-131
* munin: Skip ntp_* plugins when ntpq(1) is missing.Guilhem Moulin2021-02-061
* Roundcube: Fix favicon path.Guilhem Moulin2021-01-271
* Roundcube: Serve assets pre-compressed when possible.Guilhem Moulin2021-01-271
* Roundcube: Change document root to /var/lib/roundcube/public_html.Guilhem Moulin2021-01-271
* Postfix: pin key material to our MX:es for fripost.org and its subdomains.Guilhem Moulin2021-01-266
* nginx: Update trusted certificate used for OCSP stapling.Guilhem Moulin2020-12-051
* Firewall: Always include 172.16.0.0/12 to the bogon list.Guilhem Moulin2020-11-151
* Firewall: Add counter to dropped ICMP packets.Guilhem Moulin2020-11-151
* rkhunter: workaround for mix usrmerge/non-usrmerge environments.Guilhem Moulin2020-11-151
* Firewall: ICMPv6: accept link-local multicast receiver notification messages.Guilhem Moulin2020-11-151
* typofixGuilhem Moulin2020-11-151
* Change NTP client to systemd-timesyncd.Guilhem Moulin2020-11-155
* Bacula: tweak fileset and retention policy.Guilhem Moulin2020-11-151
* logcheck-database update.Guilhem Moulin2020-11-154
* Firewall: allow ICMP type 11 (time time-exceeded).Guilhem Moulin2020-11-031
* Revert "Bacula Director: Properly quote shell command."Guilhem Moulin2020-11-031
* Bacula: refactor systemd service files.Guilhem Moulin2020-11-036
* Firewall: Move IPsec/ICMP/ICMPv6 rules to ingress chain.Guilhem Moulin2020-11-031
* Firewall: Move martian and bogus TCP filters early in the packet flow.Guilhem Moulin2020-11-021
* kernel parameters: Disable SYN cookies and improve SYN backlog handling.Guilhem Moulin2020-11-021
* Refactor SQL custom configuration.Guilhem Moulin2020-11-023
* Bacula Director: Properly quote shell command.Guilhem Moulin2020-11-021
generated by cgit v1.2.3 (git 2.25.1) at 2024-11-23 10:12:46 +0000