 Felix Stupp
|
2efb214edd
|
misc/ssh_tg_notify: Ignore messages from trusted VPN subnet
|
2 years ago |
|
Felix Stupp
|
c842c40c89
|
misc/ssh_tg_notify: Lookup & inform user which logged in as well
|
2 years ago |
|
Felix Stupp
|
10a3e8aa9f
|
misc/ssh_tg_notify: Lookup user id of root dynamically
|
2 years ago |
|
Felix Stupp
|
10e2dea52a
|
misc/ssh_tg_notify: Add comments for sections
|
2 years ago |
|
Felix Stupp
|
a98b250c31
|
misc/ssh_tg_notify: Check that PAM_RHOST is defined
|
2 years ago |
|
Felix Stupp
|
b50f457d99
|
misc/ssh_tg_notify: Add Content-Type to bot requests
|
2 years ago |
|
Felix Stupp
|
4da0a72682
|
misc/ssh_tg_notify: Extract sendMessage method
|
2 years ago |
|
Felix Stupp
|
07eeba447e
|
misc/ssh_tg_notify: Replace link to ipinfo.io with link to stat.ripe.net
|
2 years ago |
|
Felix Stupp
|
8b7d4f1688
|
misc/ssh_tg_notify: strip expected stat error message
|
2 years ago |
|
Felix Stupp
|
27bd516581
|
misc/ssh_tg_notify: Include username into cache key
- So if multiple users log in from the same ip, the cache does not prevent a notification
|
2 years ago |
|
Felix Stupp
|
a2091da6a9
|
Added playbooks/facts folder with gitignore
|
3 years ago |
|
Felix Stupp
|
9731affd79
|
Renamed host_var files to add .yml ending
|
3 years ago |
|
Felix Stupp
|
224b302e2d
|
Implement virtual env for pip and ansible collections
|
3 years ago |
|
Felix Stupp
|
8b6b7e57ad
|
Move credentials.tar.gpg into misc directory
|
3 years ago |
|
Felix Stupp
|
dadee8a49d
|
ansible.cfg: Add comments for explaining every option / group of options
|
3 years ago |
|
Felix Stupp
|
3a5cf551e7
|
makefile: Group targets with different headlines
|
3 years ago |
|
Felix Stupp
|
8e6a96c5fa
|
makefile: Split up phony entries
|
3 years ago |
|
Felix Stupp
|
734091b4fb
|
Add tag deploy-auto-update-script to some tasks
|
3 years ago |
|
Felix Stupp
|
f9912f950f
|
Change default GPG keyserver to keys.openpgp.org
- sks-keyservers not available anymore, so fallback to new one
|
3 years ago |
|
Felix Stupp
|
b5df9a1225
|
Extract GPG keyserver for backups into global var
|
3 years ago |
|
Felix Stupp
|
644164eac5
|
Added tags to included roles
|
3 years ago |
|
Felix Stupp
|
08e91883b3
|
misc/ssh_tg_notify: Added cache to send fewer notifications
- per IP only once in the next 4 hours
|
3 years ago |
|
Felix Stupp
|
2e71da368b
|
nginx/{php,static}: Remove legacy "ssl on" directive
|
3 years ago |
|
Felix Stupp
|
0781b4c175
|
nginx/forward: Redeveloped using nginx/server template
|
4 years ago |
|
Felix Stupp
|
cc8513ddf4
|
nginx/forward: correctly documented vars as required by removing default value
|
4 years ago |
|
Felix Stupp
|
6c48b7360e
|
Update mitogen to version compatible to Ansible 2.10
|
4 years ago |
|
Felix Stupp
|
0c6d7161ed
|
nginx/server: Added tag nginx-server-config to deployment of site config
|
4 years ago |
|
Felix Stupp
|
05c0d5fa7b
|
added intention to change global admin mail to own domain mail
|
4 years ago |
|
Felix Stupp
|
16a72f6014
|
group_vars/all: extracted os_defaults from general vars.yml
|
4 years ago |
|
Felix Stupp
|
88b904abc7
|
deprecate global "project" variables
|
4 years ago |
|
Felix Stupp
|
72e3fda3ff
|
added role misc/deb_backports_prio
|
4 years ago |
|
Felix Stupp
|
e267e345da
|
server/nextcloud: Enable apc on using occ commands
Required since Nextcloud 21
|
4 years ago |
|
Felix Stupp
|
1bf40022a9
|
server/nextcloud: Allow configuring files_chunk_size and setup linked limits
- linked settings are (configured to same value appending some overheads):
- nginx_max_size
- php_post_max_size
- php_upload_max_size
|
4 years ago |
|
Felix Stupp
|
5ae646abdd
|
server/spotme: service_environment_file variable fixed to use correct service_name var
|
4 years ago |
|
Felix Stupp
|
ae39585006
|
server/spotme: Increased java version to 11
|
4 years ago |
|
Felix Stupp
|
79e1423947
|
server/tt-rss: increased lifetime of session cookies
|
4 years ago |
|
Felix Stupp
|
25616aa118
|
nginx/php-pool: Added tag nginx-php-pool-config
|
4 years ago |
|
Felix Stupp
|
416289a367
|
server/firefox-sync: added dependency libmariadb-dev
|
4 years ago |
|
Felix Stupp
|
b4eef0e28b
|
configure drone-ci on hatoria for git.banananet.work
|
4 years ago |
|
Felix Stupp
|
b666ffb439
|
Removed temporary transfer tag
|
4 years ago |
|
Felix Stupp
|
6301ed65fc
|
playbooks/dns: Moved main dns server from nvak to hatoria
|
4 years ago |
|
Felix Stupp
|
0126d2f8ae
|
server/nextcloud: Add support for configuring default phone region
|
4 years ago |
|
Felix Stupp
|
6919a6f7dc
|
dns/application: Added dependency python3-dnspython
Required for Ansible to configure dns records
|
4 years ago |
|
Felix Stupp
|
f2dac5ca1f
|
nginx/php-pool: Allow configuring arbitary php_admin_values
- removing support for explicit configuration key for memory_limit
- replaced usage of memory_limit key with usage of admin_values key
|
4 years ago |
|
Felix Stupp
|
98b7b55a53
|
Whitelist multiple services of proc's hidepid feature
Not only required for systemd-logind, but also for user@.service
|
4 years ago |
|
Felix Stupp
|
15ad953131
|
common: Validate sshd_config before applying
|
4 years ago |
|
Felix Stupp
|
e1a612966c
|
Hide running processes from users other than root
|
4 years ago |
|
Felix Stupp
|
d0e9962d04
|
common: Add tag journald to certain tasks
|
4 years ago |
|
Felix Stupp
|
edc4ccd4c3
|
Fix journald path from /systmed/ to /systemd/
|
4 years ago |
|
Felix Stupp
|
065408fd9d
|
moved git.bnet from nvak to hatoria
|
4 years ago |