943 Commits (master)
 

Author SHA1 Message Date
Felix Stupp 2efb214edd
misc/ssh_tg_notify: Ignore messages from trusted VPN subnet 2 years ago
Felix Stupp c842c40c89
misc/ssh_tg_notify: Lookup & inform user which logged in as well 2 years ago
Felix Stupp 10a3e8aa9f
misc/ssh_tg_notify: Lookup user id of root dynamically 2 years ago
Felix Stupp 10e2dea52a
misc/ssh_tg_notify: Add comments for sections 2 years ago
Felix Stupp a98b250c31
misc/ssh_tg_notify: Check that PAM_RHOST is defined 2 years ago
Felix Stupp b50f457d99
misc/ssh_tg_notify: Add Content-Type to bot requests 2 years ago
Felix Stupp 4da0a72682
misc/ssh_tg_notify: Extract sendMessage method 2 years ago
Felix Stupp 07eeba447e
misc/ssh_tg_notify: Replace link to ipinfo.io with link to stat.ripe.net 2 years ago
Felix Stupp 8b7d4f1688
misc/ssh_tg_notify: strip expected stat error message 2 years ago
Felix Stupp 27bd516581
misc/ssh_tg_notify: Include username into cache key
- So if multiple users log in from the same ip, the cache does not prevent a notification
2 years ago
Felix Stupp a2091da6a9
Added playbooks/facts folder with gitignore 2 years ago
Felix Stupp 9731affd79
Renamed host_var files to add .yml ending 2 years ago
Felix Stupp 224b302e2d
Implement virtual env for pip and ansible collections 2 years ago
Felix Stupp 8b6b7e57ad
Move credentials.tar.gpg into misc directory 2 years ago
Felix Stupp dadee8a49d
ansible.cfg: Add comments for explaining every option / group of options 2 years ago
Felix Stupp 3a5cf551e7
makefile: Group targets with different headlines 2 years ago
Felix Stupp 8e6a96c5fa
makefile: Split up phony entries 2 years ago
Felix Stupp 734091b4fb
Add tag deploy-auto-update-script to some tasks 2 years ago
Felix Stupp f9912f950f
Change default GPG keyserver to keys.openpgp.org
- sks-keyservers not available anymore, so fallback to new one
2 years ago
Felix Stupp b5df9a1225
Extract GPG keyserver for backups into global var 2 years ago
Felix Stupp 644164eac5
Added tags to included roles 3 years ago
Felix Stupp 08e91883b3
misc/ssh_tg_notify: Added cache to send fewer notifications
- per IP only once in the next 4 hours
3 years ago
Felix Stupp 2e71da368b
nginx/{php,static}: Remove legacy "ssl on" directive 3 years ago
Felix Stupp 0781b4c175
nginx/forward: Redeveloped using nginx/server template 3 years ago
Felix Stupp cc8513ddf4
nginx/forward: correctly documented vars as required by removing default value 3 years ago
Felix Stupp 6c48b7360e
Update mitogen to version compatible to Ansible 2.10 3 years ago
Felix Stupp 0c6d7161ed
nginx/server: Added tag nginx-server-config to deployment of site config 3 years ago
Felix Stupp 05c0d5fa7b
added intention to change global admin mail to own domain mail 3 years ago
Felix Stupp 16a72f6014
group_vars/all: extracted os_defaults from general vars.yml 3 years ago
Felix Stupp 88b904abc7
deprecate global "project" variables 3 years ago
Felix Stupp 72e3fda3ff
added role misc/deb_backports_prio 3 years ago
Felix Stupp e267e345da
server/nextcloud: Enable apc on using occ commands
Required since Nextcloud 21
3 years ago
Felix Stupp 1bf40022a9
server/nextcloud: Allow configuring files_chunk_size and setup linked limits
- linked settings are (configured to same value appending some overheads):
   - nginx_max_size
   - php_post_max_size
   - php_upload_max_size
3 years ago
Felix Stupp 5ae646abdd
server/spotme: service_environment_file variable fixed to use correct service_name var 3 years ago
Felix Stupp ae39585006
server/spotme: Increased java version to 11 3 years ago
Felix Stupp 79e1423947
server/tt-rss: increased lifetime of session cookies 3 years ago
Felix Stupp 25616aa118
nginx/php-pool: Added tag nginx-php-pool-config 3 years ago
Felix Stupp 416289a367
server/firefox-sync: added dependency libmariadb-dev 3 years ago
Felix Stupp b4eef0e28b
configure drone-ci on hatoria for git.banananet.work 3 years ago
Felix Stupp b666ffb439
Removed temporary transfer tag 3 years ago
Felix Stupp 6301ed65fc
playbooks/dns: Moved main dns server from nvak to hatoria 3 years ago
Felix Stupp 0126d2f8ae
server/nextcloud: Add support for configuring default phone region 3 years ago
Felix Stupp 6919a6f7dc
dns/application: Added dependency python3-dnspython
Required for Ansible to configure dns records
3 years ago
Felix Stupp f2dac5ca1f
nginx/php-pool: Allow configuring arbitary php_admin_values
- removing support for explicit configuration key for memory_limit
- replaced usage of memory_limit key with usage of admin_values key
3 years ago
Felix Stupp 98b7b55a53
Whitelist multiple services of proc's hidepid feature
Not only required for systemd-logind, but also for user@.service
3 years ago
Felix Stupp 15ad953131
common: Validate sshd_config before applying 3 years ago
Felix Stupp e1a612966c
Hide running processes from users other than root 3 years ago
Felix Stupp d0e9962d04
common: Add tag journald to certain tasks 3 years ago
Felix Stupp edc4ccd4c3
Fix journald path from /systmed/ to /systemd/ 3 years ago
Felix Stupp 065408fd9d
moved git.bnet from nvak to hatoria 3 years ago