| Commit message (Expand) | Author | Age | Files |
... | |
* | bacula-dir: Fix Reschedule Interval from 17 months to 17 mins. | Guilhem Moulin | 2016-05-12 | 1 |
* | MySQL: set flush InnoDB flush method to 'O_DIRECT' | Guilhem Moulin | 2016-05-12 | 1 |
* | Add hardening options to our systemd unit files. | Guilhem Moulin | 2016-05-12 | 6 |
* | Use systemd unit files for stunnel4. | Guilhem Moulin | 2016-05-12 | 26 |
* | Roundcube's CSP: remove 'upgrade-insecure-requests' and 'block-all-mixed-cont... | Guilhem Moulin | 2016-04-08 | 1 |
* | Roundcube's CSP: allow loading images from data: URIs and arbitrary URLs. | Guilhem Moulin | 2016-04-07 | 1 |
* | nginx: update ssl_ciphers to follow Mozilla's TLS server recommendation. | Guilhem Moulin | 2016-04-02 | 1 |
* | Set frame-ancestors from 'none' to 'self' in roundcube's CSP. | Guilhem Moulin | 2016-04-02 | 1 |
* | wibble | Guilhem Moulin | 2016-04-02 | 3 |
* | Set a HPKP on the webmail, website/wiki/git and list manager. | Guilhem Moulin | 2016-04-01 | 5 |
* | Set a CSP on the webmail, website/wiki and list manager. | Guilhem Moulin | 2016-04-01 | 5 |
* | sysctl: don't set IPv6 privacy extensions globaly. | Guilhem Moulin | 2016-04-01 | 1 |
* | sysctl: set net.ipv6.conf.all.accept_ra = 0. | Guilhem Moulin | 2016-03-30 | 1 |
* | Set HTTP security headers. | Guilhem Moulin | 2016-03-30 | 9 |
* | Replace LE's X1 intermediate CA with X3 since the latter has better support f... | Guilhem Moulin | 2016-03-28 | 1 |
* | munin-master CGI: add application-level ACLs to keep non-local users at bay. | Guilhem Moulin | 2016-03-21 | 1 |
* | Remove SMTP message size limit on non public MTAs. | Guilhem Moulin | 2016-03-21 | 3 |
* | More logcheck-database tweaks. | Guilhem Moulin | 2016-03-13 | 1 |
* | Let's Encrypt: Only reload (as opposed to restart) postfix/nginx after renewi... | Guilhem Moulin | 2016-03-05 | 1 |
* | Amavis: use the LMTP protocol in the policy banks. | Guilhem Moulin | 2016-03-03 | 1 |
* | Let's Encrypt | Guilhem Moulin | 2016-03-02 | 12 |
* | cgit: Create cache directory /var/cache/cgit | Guilhem Moulin | 2016-03-02 | 1 |
* | Ansible: Using bare variables is deprecated, and will be removed in a future ... | Guilhem Moulin | 2016-03-02 | 4 |
* | More logcheck-database tweaks. | Guilhem Moulin | 2016-02-17 | 1 |
* | s/ansible_ssh_/ansible_/ | Guilhem Moulin | 2016-02-12 | 2 |
* | Upgrade playbooks to Ansible 2.0. | Guilhem Moulin | 2016-02-12 | 23 |
* | Update all Fripost links from http:// to https://. | Guilhem Moulin | 2015-12-28 | 3 |
* | Only install letsencrypt-tiny to the relevant hosts. | Guilhem Moulin | 2015-12-28 | 2 |
* | Fix Let's Encrypt CAfile. | Guilhem Moulin | 2015-12-28 | 1 |
* | Copy and install Let's Encrypt ACME client. | Guilhem Moulin | 2015-12-20 | 1 |
* | Use the Let's Encrypt CA for our public certs. | Guilhem Moulin | 2015-12-20 | 19 |
* | nginx: Move include.d/* to snippets/. | Guilhem Moulin | 2015-12-20 | 12 |
* | More logcheck-database tweaks. | Guilhem Moulin | 2015-12-15 | 2 |
* | dovecot: remove !SSLv2 from ssl_cipher_list. | Guilhem Moulin | 2015-12-15 | 1 |
* | nginx: s/conf.d/include.d/ | Guilhem Moulin | 2015-12-15 | 7 |
* | wibble | Guilhem Moulin | 2015-12-09 | 2 |
* | ngnix: mv ssl/config conf.d/ssl | Guilhem Moulin | 2015-12-09 | 7 |
* | typo | Guilhem Moulin | 2015-12-04 | 1 |
* | Postfix TLS policy: Store the fingerprint of the cert's pubkey, not of the ce... | Guilhem Moulin | 2015-12-03 | 4 |
* | Use a dedicated subdomain for ManageSieve. | Guilhem Moulin | 2015-12-03 | 1 |
* | Automatically fetch X.509 certificates, and add them to git. | Guilhem Moulin | 2015-12-03 | 7 |
* | More logcheck-database tweaks. | Guilhem Moulin | 2015-12-01 | 1 |
* | dovecot-sieve: Enable the 'editheader' extension (5293). | Guilhem Moulin | 2015-11-26 | 1 |
* | More logcheck-database tweaks. | Guilhem Moulin | 2015-11-12 | 1 |
* | nginx: adjust expiration date for static content. | Guilhem Moulin | 2015-10-30 | 3 |
* | ikiwiki: Also install Authen::Passphrase. | Guilhem Moulin | 2015-10-28 | 1 |
* | Internal Postfix config: Generate RSA 4096 keys by default. | Guilhem Moulin | 2015-10-28 | 1 |
* | genkeypair: use install(1) for atomic file creation with permission mode. | Guilhem Moulin | 2015-10-28 | 3 |
* | Internal Postfix config: Disable TLS protocols <1.2 rather than enable 1.2 only. | Guilhem Moulin | 2015-10-27 | 1 |
* | Roundcube managesieve SSL options: use AESGCM and disable compression. | Guilhem Moulin | 2015-10-27 | 1 |