summaryrefslogtreecommitdiffstats
path: root/roles
Commit message (Expand)AuthorAgeFiles
* Rename '_lacme' user to '_lacme-client'.Guilhem Moulin2021-02-242
* logcheck-database update.Guilhem Moulin2021-02-131
* Don't restart amavis on DKIM key generation.Guilhem Moulin2021-02-131
* munin: Skip ntp_* plugins when ntpq(1) is missing.Guilhem Moulin2021-02-061
* Roundcube: Fix favicon path.Guilhem Moulin2021-01-271
* Roundcube: Serve assets pre-compressed when possible.Guilhem Moulin2021-01-271
* Roundcube: Change document root to /var/lib/roundcube/public_html.Guilhem Moulin2021-01-271
* Postfix: pin key material to our MX:es for fripost.org and its subdomains.Guilhem Moulin2021-01-266
* nginx: Update trusted certificate used for OCSP stapling.Guilhem Moulin2020-12-051
* Firewall: Always include 172.16.0.0/12 to the bogon list.Guilhem Moulin2020-11-151
* Firewall: Add counter to dropped ICMP packets.Guilhem Moulin2020-11-151
* rkhunter: workaround for mix usrmerge/non-usrmerge environments.Guilhem Moulin2020-11-151
* Firewall: ICMPv6: accept link-local multicast receiver notification messages.Guilhem Moulin2020-11-151
* typofixGuilhem Moulin2020-11-151
* Change NTP client to systemd-timesyncd.Guilhem Moulin2020-11-155
* Bacula: tweak fileset and retention policy.Guilhem Moulin2020-11-151
* logcheck-database update.Guilhem Moulin2020-11-154
* Firewall: allow ICMP type 11 (time time-exceeded).Guilhem Moulin2020-11-031
* Revert "Bacula Director: Properly quote shell command."Guilhem Moulin2020-11-031
* Bacula: refactor systemd service files.Guilhem Moulin2020-11-036
* Firewall: Move IPsec/ICMP/ICMPv6 rules to ingress chain.Guilhem Moulin2020-11-031
* Firewall: Move martian and bogus TCP filters early in the packet flow.Guilhem Moulin2020-11-021
* kernel parameters: Disable SYN cookies and improve SYN backlog handling.Guilhem Moulin2020-11-021
* Refactor SQL custom configuration.Guilhem Moulin2020-11-023
* Bacula Director: Properly quote shell command.Guilhem Moulin2020-11-021
* typofixGuilhem Moulin2020-11-021
* Munin master: Bug fix for the HTML rendering.Guilhem Moulin2020-11-022
* Wiki: Install dependencies for static web content.Guilhem Moulin2020-11-021
* typofixGuilhem Moulin2020-10-021
* Roundcube: Add minimal config confile for thunderbird_labels plugin.Guilhem Moulin2020-10-022
* Roundcube: Don't allow overriding authres_status's use_fallback_verifier/trus...Guilhem Moulin2020-10-022
* Add PHP modules required for Nextcloud 19.Guilhem Moulin2020-08-191
* slapcat-all.sh: Use ldapsearch(1) to generate the LDIF.Guilhem Moulin2020-05-262
* munin: `sed s,/var/run/,/run,`Guilhem Moulin2020-05-262
* bacula-dir: Add jobs for nextcloud-data.Guilhem Moulin2020-05-261
* bacula-{dir,sd}: Upgrade role to Debian Buster.Guilhem Moulin2020-05-264
* Wiki: Content-Security-Policy: Add data: to img-src.Guilhem Moulin2020-05-222
* cgit: Tighten Content-Security-Policy.Guilhem Moulin2020-05-211
* LDAP: Add ACLs for group ‘styrelse’.Guilhem Moulin2020-05-211
* Postfix: Install -lmdb in all roles using db=lmdb.Guilhem Moulin2020-05-214
* postfix-sender-login: Better hardening.Guilhem Moulin2020-05-214
* dovecot-auth-proxy: replace directory traversal with LDAP lookups.Guilhem Moulin2020-05-215
* dovecot-auth-proxy: Bump protocol version to 2.2.Guilhem Moulin2020-05-201
* IMAP: Update role to Debian Buster.Guilhem Moulin2020-05-1912
* MSA: Update role to Debian Buster.Guilhem Moulin2020-05-193
* LDAP: Update role to Debian Buster.Guilhem Moulin2020-05-192
* s/LDAP-provider/LDAP_provider/Guilhem Moulin2020-05-198
* wibbleGuilhem Moulin2020-05-181
* stunnel4: Harden and socket-activate.Guilhem Moulin2020-05-187
* Firewall: note on reqid matching.Guilhem Moulin2020-05-181