 Felix Stupp
|
2dcfd1b09e
|
nginx: Added full paths to includes of snippets / fastcgi_params
To allow Ansible to validate the main config if placed on different
locations
|
5 years ago |
|
Felix Stupp
|
ff7275cb60
|
server/{linx,spotme}: Removed default bind_port
|
5 years ago |
|
Felix Stupp
|
4a186854cf
|
server/node: Renamed variable app_port to bind_port
|
5 years ago |
|
Felix Stupp
|
f6c1aff55a
|
server/spotme: Renamed variable spotme_port to bind_port
|
5 years ago |
|
Felix Stupp
|
7e0df4abc5
|
Added variable local_user for user running playbook
Useful if tasks store data on the local machine
|
5 years ago |
|
Felix Stupp
|
9d50f84321
|
server/firefox-sync: Changed remote repo url back to official repo
|
5 years ago |
|
Felix Stupp
|
f91f2bc325
|
Added role fail2ban/application
|
5 years ago |
|
Felix Stupp
|
c110a24e9f
|
common: sshd: Disable weak key algorithms
|
5 years ago |
|
Felix Stupp
|
505c85eb11
|
common: Disable root login over ssh
|
5 years ago |
|
Felix Stupp
|
651794a136
|
common: sshd: Disable X11 Forwarding globally
|
5 years ago |
|
Felix Stupp
|
baace3ce16
|
misc/handlers: Changed "restart ssh" to "reload ssh"
|
5 years ago |
|
Felix Stupp
|
025d8a3256
|
Added role misc/ssh_tg_notify
- Added role to common site
- Added variables required to global vars and vault
|
5 years ago |
|
Felix Stupp
|
69b884ad3f
|
bootstrap: Configure ssh key used to connect on new user
|
5 years ago |
|
Felix Stupp
|
f610812fc7
|
bootstrap: Ensure user has .ssh/authorized_keys before trying to copy
|
5 years ago |
|
Felix Stupp
|
096554f37b
|
mqtt/user: Fixed usage of var user (before username)
|
5 years ago |
|
Felix Stupp
|
fe393bd246
|
mqtt/application: Enforce sort part files before combining for acl and auth
|
5 years ago |
|
Felix Stupp
|
1a608ce172
|
mqtt/application: Remove config use_username_as_clientid
Seems to block users with different username and clientid
|
5 years ago |
|
Felix Stupp
|
e18f7f32e0
|
mqtt/application: Add paths for acl and auth files to config
|
5 years ago |
|
Felix Stupp
|
46e932049e
|
mqtt/application: Allow root to read SYS topics
|
5 years ago |
|
Felix Stupp
|
b6de0c1a4d
|
mqtt/application: Fix usage of variable configuration_directory
|
5 years ago |
|
Felix Stupp
|
cf632d1a56
|
mqtt: Ensure create auth files before writing using mosquitto_passwd
Fixes error on calling tool if file does not exist
|
5 years ago |
|
Felix Stupp
|
4b6cef5c10
|
mqtt/application: Notify handlers on change to makefile
|
5 years ago |
|
Felix Stupp
|
82c7666ae8
|
mqtt/application: Fix port for mosquitto server
|
5 years ago |
|
Felix Stupp
|
81dab362a6
|
misc/docker: Do not install recommended packages to fix issue on raspberry
|
5 years ago |
|
Felix Stupp
|
fcae6e8429
|
Added blocklist of known malicious ip addresses applied by role common
|
5 years ago |
|
Felix Stupp
|
f2c9b17194
|
Moved packages only required for admin account from role common to role account
|
5 years ago |
|
Felix Stupp
|
25df92ee7b
|
common: Removed package buffer
Replaced by pv integrated buffering
which supports greater limits.
|
5 years ago |
|
Felix Stupp
|
e68c6ffe50
|
common: Added todo / comment to (transition) package apt-transport-https
|
5 years ago |
|
Felix Stupp
|
3c7fb65ac9
|
common: Removed package acl
Not installable on Raspbian and also not used on any Debian system
|
5 years ago |
|
Felix Stupp
|
9e8d1b5220
|
common: Fix applying sources.list for different distributions
|
5 years ago |
|
Felix Stupp
|
b3f05edb6f
|
account: Added exa to packages
|
5 years ago |
|
Felix Stupp
|
8ebe8aecfb
|
nginx/application: Hide server tokens per default
|
5 years ago |
|
Felix Stupp
|
69dfba9911
|
mqtt/application: Added linking of configuration directory to environment
|
5 years ago |
|
Felix Stupp
|
18832f4eb0
|
mqtt/application: Fixed names of variables admin_{user,pass}
|
5 years ago |
|
Felix Stupp
|
9dc203621e
|
mqtt: Fixed wording 'notifiy' to 'notify'
|
5 years ago |
|
Felix Stupp
|
0b69a41ebc
|
Added roles mqtt/application and mqtt/user
|
5 years ago |
|
Felix Stupp
|
ab1a067cff
|
dns/master: Added flush_handlers before role ends
|
5 years ago |
|
Felix Stupp
|
371b1d5751
|
dns/application: Fixed permissions for zone databases directories
|
5 years ago |
|
Felix Stupp
|
64576c8ff5
|
dns/master: zone.makefile: Added cd to key signing
|
5 years ago |
|
Felix Stupp
|
ab61090340
|
dns/master: zone.makefile: Added check for directories not equal
|
5 years ago |
|
Felix Stupp
|
bb8a2759ec
|
dns/master: zone.makefile: Changed usage of var dest
|
5 years ago |
|
Felix Stupp
|
d052a08f0d
|
dns/master: zone.makefile: Fixed format
|
5 years ago |
|
Felix Stupp
|
ebbacdce0c
|
dns/master: Added dependency to role dns/master_handlers
|
5 years ago |
|
Felix Stupp
|
73c9a72590
|
dns: Fixed usages of var dns_zones_configuration_environment_directory
|
5 years ago |
|
Felix Stupp
|
0662df1ca5
|
dns/master: Let serial number configured by dnssec-signzone
|
5 years ago |
|
Felix Stupp
|
d8f1b36ee1
|
dns/master: Moved building of zone files to makefile
|
5 years ago |
|
Felix Stupp
|
208e277e79
|
Added role dns/master_handlers for makefile handler
|
5 years ago |
|
Felix Stupp
|
d7991e0bbb
|
dns/master: Added configuring configuration environment
|
5 years ago |
|
Felix Stupp
|
5627a36949
|
dns/master: Extracted database_signed_file_name of database_signed_file
|
5 years ago |
|
Felix Stupp
|
a206642f77
|
dns/master: Extracted database_file_name of database_file
|
5 years ago |