412 Commits (164cdbbc799c5f6b00ee65af5937914ac2637321)

Author SHA1 Message Date
Felix Stupp 164cdbbc79
common: Tagged ip blocklist for easier skipping 5 years ago
Felix Stupp 187f573d4f
common: Added pv to required common packages 5 years ago
Felix Stupp 424b85eec8
mysql/database: Added database_template function 5 years ago
Felix Stupp c6309b92ad
mysql/database: Documented database_user as required var 5 years ago
Felix Stupp a3eb7778a8
server/nextcloud: Add packages for SMB access 5 years ago
Felix Stupp 2a161ca509
acme/certificate: Ensure dns entry is given by depending on role dns/entries 5 years ago
Felix Stupp 5a41a9afc9
acme/certificate: Document var domain as required 5 years ago
Felix Stupp b3620fa3c8
dns/application: makefile combine: Sort files before combining
Ensures 0_main.db is before other files
5 years ago
Felix Stupp 979abba1aa
Added role dns/entries for configuring dns entries 5 years ago
Felix Stupp eff48f1773
Changed approach for generating sshfp RR to lookup on python script 5 years ago
Felix Stupp 748999d36d
dns: Moved var zones_environment_directory to global vars 5 years ago
Felix Stupp f8c01d46f6
dns/master: Fix permissions for dns env dir 5 years ago
Felix Stupp bf00dcb6dd
dns/application: Moved var configuration_directory to global vars 5 years ago
Felix Stupp eb632a8f2c
dns/master: Store mapping of domain to host in public_keys 5 years ago
Felix Stupp 592bb483cf
common: Used variable global_ssh_key_directory for public_keys path 5 years ago
Felix Stupp c58223c21b
server/gitea: Disable logging of SQL requests 5 years ago
Felix Stupp 3b33ff4c0c
fail2ban/application: Set file permissions for sshd.local config 5 years ago
Felix Stupp 2526033405
fail2ban/application: Send log messages to journald 5 years ago
Felix Stupp 0043d6255a
nginx/application global.conf: Added comment to excluding hidden files 5 years ago
Felix Stupp 025f77736a
dns: Changed approach for DNSSEC signing to inline-signing
- Moved keys into own directory
- Replaced makefile per zone by makefile for all zones
  - Only combining of zone files and setting serial number
  - signing now made by bind
- Added AppArmor profile extension for creating dynamic zone files
5 years ago
Felix Stupp 274f658016
nginx/php-pool: Fixed permissions for other 5 years ago
Felix Stupp e85ad8fed3
dns: Fixed applying permissions to directories 5 years ago
Felix Stupp c89ec27f6d
dns/master: Changed TODO for "Copy public key" to "Copy ZSK"
Only required and beneficial for ZSK
5 years ago
Felix Stupp 905a887b80
dns: Renamed zones_configuration_environment_ to zones_environment 5 years ago
Felix Stupp 7e2813928e
dns: Renamed variables, removed prefix dns_ on not essential variable names 5 years ago
Felix Stupp 4e6df015f5
Added roles nfs/server and nfs/export 5 years ago
Felix Stupp 24ab62d6a0
acme/application: Fixed usage of YAML multiline for "Upgrade acme.sh" 5 years ago
Felix Stupp a03a335430
account: Added bmon to tools list 5 years ago
Felix Stupp a576893776
misc/docker: Install docker-compose bindings for python3 5 years ago
Felix Stupp b600f678ca
misc/docker: Install python3 docker bindings using package manager 5 years ago
Felix Stupp 8758553a02
common: Install explicit python3 interpreter 5 years ago
Felix Stupp 2dcfd1b09e
nginx: Added full paths to includes of snippets / fastcgi_params
To allow Ansible to validate the main config if placed on different
locations
5 years ago
Felix Stupp ff7275cb60
server/{linx,spotme}: Removed default bind_port 5 years ago
Felix Stupp 4a186854cf
server/node: Renamed variable app_port to bind_port 5 years ago
Felix Stupp f6c1aff55a
server/spotme: Renamed variable spotme_port to bind_port 5 years ago
Felix Stupp 7e0df4abc5
Added variable local_user for user running playbook
Useful if tasks store data on the local machine
5 years ago
Felix Stupp 9d50f84321
server/firefox-sync: Changed remote repo url back to official repo 5 years ago
Felix Stupp f91f2bc325
Added role fail2ban/application 5 years ago
Felix Stupp c110a24e9f
common: sshd: Disable weak key algorithms 5 years ago
Felix Stupp 505c85eb11
common: Disable root login over ssh 5 years ago
Felix Stupp 651794a136
common: sshd: Disable X11 Forwarding globally 5 years ago
Felix Stupp baace3ce16
misc/handlers: Changed "restart ssh" to "reload ssh" 5 years ago
Felix Stupp 025d8a3256
Added role misc/ssh_tg_notify
- Added role to common site
- Added variables required to global vars and vault
5 years ago
Felix Stupp 69b884ad3f
bootstrap: Configure ssh key used to connect on new user 5 years ago
Felix Stupp f610812fc7
bootstrap: Ensure user has .ssh/authorized_keys before trying to copy 5 years ago
Felix Stupp 096554f37b
mqtt/user: Fixed usage of var user (before username) 5 years ago
Felix Stupp fe393bd246
mqtt/application: Enforce sort part files before combining for acl and auth 5 years ago
Felix Stupp 1a608ce172
mqtt/application: Remove config use_username_as_clientid
Seems to block users with different username and clientid
5 years ago
Felix Stupp e18f7f32e0
mqtt/application: Add paths for acl and auth files to config 5 years ago
Felix Stupp 46e932049e
mqtt/application: Allow root to read SYS topics 5 years ago