943 Commits (master)
 

Author SHA1 Message Date
Felix Stupp 360172f8db
dns/master: Moved default tts var to global var 4 years ago
Felix Stupp 72ee42d539
dns/master: Allow configure default ttl 4 years ago
Felix Stupp 3008672ded
dns/master: Added section comments to zone.conf 4 years ago
Felix Stupp a41f4c1c3f
dns/master: Adapted generate-keys to inline-signing (only gen KSK) 4 years ago
Felix Stupp be6303576a
dns/application: Added configuration for session-key 4 years ago
Felix Stupp 49d53d0213
dns/application: Removed obsolete dnssec directives 4 years ago
Felix Stupp 0e96fcbe34
dns/application: Fixed defining role dependencies 4 years ago
Felix Stupp 99e58d4224
common: Added helper nsupdate_keygen 4 years ago
Felix Stupp 0b7e2cb923
dns/application: Changed vars in makefile to support further dest files 4 years ago
Felix Stupp 1ceb1999ff
common: Changed include_tasks to import_tasks
To enable static instead of dynamic imports
4 years ago
Felix Stupp 36da702163
nginx/application: Disable log for HTTPs forwarding 4 years ago
Felix Stupp 49704746ad
blocklists: Added ipv4 of known SemrushBots 4 years ago
Felix Stupp 98ff22f28a
all/vars: Adapted bind_service_name to official bind version 4 years ago
Felix Stupp d8405a223b
server/nextcloud: Added hint for source of var redis_socket_path 4 years ago
Felix Stupp d8421b49bb
server/gitea: Renamed var gitea_user_directory to user_directory 4 years ago
Felix Stupp fe0a677b13
git_auto_update: Used long parameters 4 years ago
Felix Stupp e30121cae2
git_auto_update: Improved comparism with GPG fingerprint
Configured grep to compare againg fixed strings, not regexp
4 years ago
Felix Stupp f2b6e41645
git_auto_update: Fixed default reload_command to "true"
An empty default value would result in an error thrown.
4 years ago
Felix Stupp 818515cc05
server/gitea: Reworked logging configuration to contain (only) required information 4 years ago
Felix Stupp 49dd6e4da1
server/gitea/app.ini: Removed not required log settings 4 years ago
Felix Stupp 072ace6438
server/gitea: Configured fail2ban protection 4 years ago
Felix Stupp d81f883e50
server/gitea: Disable colorizing logs for fail2ban 4 years ago
Felix Stupp d630988291
Added role fail2ban/rule 4 years ago
Felix Stupp 2eaf8034f7
server/gitea: Reconfigured log to be minimal and adapted to systemd 4 years ago
Felix Stupp 85028e1dcb
fail2ban/application: Moved service_name to global var 4 years ago
Felix Stupp 239ef3124e
fail2ban/application: Moved vars to global part
Because paths are not user-configured but given by package/system
4 years ago
Felix Stupp 66e38ebcde
server/nextcloud: Enabled APCu cache for cron job 4 years ago
Felix Stupp cf4a4863f4
server/nextcloud: Reformatted cron job line to meet format requirements 4 years ago
Felix Stupp c6a9c15e14
server/nextcloud: Enabled redis cache 4 years ago
Felix Stupp f3d7f2f8a2
Added roles for redis (application, instance) 4 years ago
Felix Stupp b5ca1ce80f
server/nextcloud: Renamed var nextcloud_user_directory to user_directory 4 years ago
Felix Stupp 8e22085ba7
server/nextcloud: Moved "config APCu cache" to "add add. entries" with blockinfile task 4 years ago
Felix Stupp d59f4914b6
hosts.py: Added missing json.dumps 4 years ago
Felix Stupp d40a8cee92
server/nextcloud: Fixed changing configuration of nextcloud instance
- Fixes configuring APCu cache
4 years ago
Felix Stupp 5c374bc977
nginx/application: Added security relevant HTTP headers to global config
Duplicates removed from server/nextcloud
4 years ago
Felix Stupp fc2a098ff2
server/nextcloud: Fixed disallowing well-known as dot file 4 years ago
Felix Stupp 7889e10385
nginx/php-pool: Fixed default disabling of status_page_path 4 years ago
Felix Stupp 788d259f85
all/vars: nginx_status_page_acl: Added public addresses of host 4 years ago
Felix Stupp 8f25d008a9
var: nginx_status_page_acl: Fixed localhost ipv4 address range 4 years ago
Felix Stupp b7d34b28ee
nginx/php: Made name of task more descriptive 4 years ago
Felix Stupp 9d8d041241
nginx/application: Fixed typo of "unnecessary" 4 years ago
Felix Stupp 28d49be899
server/nextcloud: Added support for php-fpm status page 4 years ago
Felix Stupp 458babf82c
nginx/php: Added support for php-fpm status page 4 years ago
Felix Stupp 2a672cb597
nginx/default_server: Extracted status_page_acl var 4 years ago
Felix Stupp ce55e33fda
nginx/php-pool: Added support for enabling status page 4 years ago
Felix Stupp e91f9d1a81
nginx/default_server: Hide status page by answering 403 always 4 years ago
Felix Stupp 74a62e861f
Added role nginx/default_server
To prevent circular dependencies, role must be included manually on
required servers
4 years ago
Felix Stupp 7a33ceffb8
nginx/application: Removed configuring trusted certificate for OCSP
Can be derived by given certificate for host
4 years ago
Felix Stupp 48588ee0dd
server/spotme: Removed not required dependencies 4 years ago
Felix Stupp 647f112c2b
nginx/server: Extracted special pre directives into configurable vars 4 years ago