153 Commits (2f8ef5dc3482d357d85395a71a1a6e9b75acdd90)

Author SHA1 Message Date
Felix Stupp 2f8ef5dc34
Extracted global var for systemd configuration directory 5 years ago
Felix Stupp bcfd4cb010
Fixed missing mode setting for others
To disallow access from others than user and group
5 years ago
Felix Stupp 5afcd6b738
misc/system_user: Allowed configuring user directory parameters 5 years ago
Felix Stupp 0ea1dac688
account: Documentated input variables
- username
- password
5 years ago
Felix Stupp d9b4510200
account: Added variable for user directory 5 years ago
Felix Stupp c56ed16851
account: Added configuration for home directory
For disabling other read rights on home directory
5 years ago
Felix Stupp ad87ad2e7d
server/gitea: Removed dumping before update
Global backup service should be enough
5 years ago
Felix Stupp bef682140b
acme/certificate: Removed invalid command argument 5 years ago
Felix Stupp a3fde6aa3c
acme: Moved certificate handling to custom system user
Avoided using root for acme.sh
Modified also role nginx/application
5 years ago
Felix Stupp 9e20b807f1
acme/application: Removed getting if acme is installed
As it should be installed or otherwise the playbook failed
5 years ago
Felix Stupp 002ecc28b0
nginx/php-pool: Removed not needed system user configuration 5 years ago
Felix Stupp 5486d06226
nginx/php-fpm: Fixed removing default php-fpm pool 5 years ago
Felix Stupp 964099cfdb
nginx/php-fpm: Added configuration for php opcache 5 years ago
Felix Stupp c25df42253
common: Reworked ssh configuration generation 5 years ago
Felix Stupp 1a5a7b0611
server/nextcloud: Added app previewgenerator
With its own cron job at 3
5 years ago
Felix Stupp 380a5dbf2e
server/nextcloud: Added apps Deck, Dicomviewer and suspicious_login 5 years ago
Felix Stupp 1e5dd61270
wireguard/application: Extracted role misc/deb_unstable 5 years ago
Felix Stupp 0dab3bdad2
Added role node/server 5 years ago
Felix Stupp a74f532394
Added role node/application 5 years ago
Felix Stupp 852dbdb143
php-pool: Added domain to required variables (doc-only) 5 years ago
Felix Stupp 9595db481f
Added role misc/system_user 5 years ago
Felix Stupp b229a5c3bf
git_auto_update: Added reset command before checkout 5 years ago
Felix Stupp d570f3cdb3
git_auto_update: Allow reload_command failing during playbook execution 5 years ago
Felix Stupp 67f1e0919e
git_auto_update: Allowed asume group equals owner 5 years ago
Felix Stupp 0944fd798f
common: Added configuration of apt sources 5 years ago
Felix Stupp b6c860548e
server/nextcloud: Changed dependencies back to real one
Undo of 9216931b33
5 years ago
Felix Stupp edb298ebaa
server/nextcloud: Combined vars nextcloud_system_user and system_user 5 years ago
Felix Stupp 16d91d83bd
common: Added aptitude to list of common packages 5 years ago
Felix Stupp b4897778b6
server/spotme: Added source of credentials for git repo 5 years ago
Felix Stupp 243b804fa4
dns/master: Added CAA Entry for letsencrypt.org 5 years ago
Felix Stupp 02ff70e699
common: Added downloading and processing ssh host keys 5 years ago
Felix Stupp 6b36435d8d
server/nextcloud: Added libmagickcore to dependencies 5 years ago
Felix Stupp 6742f9789d
mysql/database: Allowed duplications 5 years ago
Felix Stupp 4a09419de4
mysql/application: Removed duplicated locking of user root 5 years ago
Felix Stupp ef666274ba
mysql/application: Combined removing test user for all hosts 5 years ago
Felix Stupp 6381fe6d83
server/nextcloud: Increased memory for php up to 1G 5 years ago
Felix Stupp 029fba1983
nginx/php-pool: Added support for custom memory_limit 5 years ago
Felix Stupp a0000e3c7f
nginx/php*: Fixed handler names for controlling php-fpm service 5 years ago
Felix Stupp 3a5881a721
common: Fixed handler "restart ssh" 5 years ago
Felix Stupp ce90f3dadf
nginx/php-fpm: Fixed getting php-fpm for newer versions of Debian 5 years ago
Felix Stupp 6509b01d71
acme: Added ToDo for "Create custom user ..." 5 years ago
Felix Stupp bae56869f6
acme/certificate: Enabled OCSP must-stable for certificates 5 years ago
Felix Stupp 9ba13c5d73
nginx/application: Enabled OCSP Stapling 5 years ago
Felix Stupp 22f14189c2
nginx/application: Enabled TLSv1.3 and reworked ciphers 5 years ago
Felix Stupp ce1f2fb132
nginx/application: Increased time for HSTS 5 years ago
Felix Stupp 5bed7d067a
nginx/application: Added localhost as resolver for nginx 5 years ago
Felix Stupp d9eb74649f
nginx/application: Fixed missing notify for templates 5 years ago
Felix Stupp 13736ece66
server/nextcloud: Fixed cron job running as the correct user 5 years ago
Felix Stupp 69ec4ef59c
server/nextcloud: Fixed name for cron job
For allowing different nextcloud instances work simultaneously
5 years ago
Felix Stupp 52c8e89ff4
server/nextcloud: Change version to newest release 5 years ago