211 Commits (34da73722c5c2eb4b7990eea4269a536d41e64b2)

Author SHA1 Message Date
Felix Stupp 49f119c6e8
server/node: Used external handler for daemon_reload 5 years ago
Felix Stupp fd08d83275
Restricted permissions for service files 5 years ago
Felix Stupp 98386df525
Added role server/firefox-sync 5 years ago
Felix Stupp 8abcc88a13
server/nextcloud: Allow access for nginx for seeing php files 5 years ago
Felix Stupp ec6202bd61
server/gitea: Added doc for var domain on nginx/proxy 5 years ago
Felix Stupp 133d82e0bb
nginx/proxy: Added doc for var upstream_name 5 years ago
Felix Stupp b6e70b881a
acme: Fixed using correct home and config-home directories 5 years ago
Felix Stupp 5ea380e812
common: Fix auto backup database script
Encryption failed
5 years ago
Felix Stupp 2f8ef5dc34
Extracted global var for systemd configuration directory 5 years ago
Felix Stupp bcfd4cb010
Fixed missing mode setting for others
To disallow access from others than user and group
5 years ago
Felix Stupp 5afcd6b738
misc/system_user: Allowed configuring user directory parameters 5 years ago
Felix Stupp 0ea1dac688
account: Documentated input variables
- username
- password
5 years ago
Felix Stupp d9b4510200
account: Added variable for user directory 5 years ago
Felix Stupp c56ed16851
account: Added configuration for home directory
For disabling other read rights on home directory
5 years ago
Felix Stupp ad87ad2e7d
server/gitea: Removed dumping before update
Global backup service should be enough
5 years ago
Felix Stupp bef682140b
acme/certificate: Removed invalid command argument 5 years ago
Felix Stupp a3fde6aa3c
acme: Moved certificate handling to custom system user
Avoided using root for acme.sh
Modified also role nginx/application
5 years ago
Felix Stupp 9e20b807f1
acme/application: Removed getting if acme is installed
As it should be installed or otherwise the playbook failed
5 years ago
Felix Stupp 002ecc28b0
nginx/php-pool: Removed not needed system user configuration 5 years ago
Felix Stupp 5486d06226
nginx/php-fpm: Fixed removing default php-fpm pool 5 years ago
Felix Stupp 964099cfdb
nginx/php-fpm: Added configuration for php opcache 5 years ago
Felix Stupp c25df42253
common: Reworked ssh configuration generation 5 years ago
Felix Stupp 1a5a7b0611
server/nextcloud: Added app previewgenerator
With its own cron job at 3
5 years ago
Felix Stupp 380a5dbf2e
server/nextcloud: Added apps Deck, Dicomviewer and suspicious_login 5 years ago
Felix Stupp 1e5dd61270
wireguard/application: Extracted role misc/deb_unstable 5 years ago
Felix Stupp 0dab3bdad2
Added role node/server 5 years ago
Felix Stupp a74f532394
Added role node/application 5 years ago
Felix Stupp 852dbdb143
php-pool: Added domain to required variables (doc-only) 5 years ago
Felix Stupp 9595db481f
Added role misc/system_user 5 years ago
Felix Stupp b229a5c3bf
git_auto_update: Added reset command before checkout 5 years ago
Felix Stupp d570f3cdb3
git_auto_update: Allow reload_command failing during playbook execution 5 years ago
Felix Stupp 67f1e0919e
git_auto_update: Allowed asume group equals owner 5 years ago
Felix Stupp 0944fd798f
common: Added configuration of apt sources 5 years ago
Felix Stupp b6c860548e
server/nextcloud: Changed dependencies back to real one
Undo of 9216931b33
5 years ago
Felix Stupp edb298ebaa
server/nextcloud: Combined vars nextcloud_system_user and system_user 5 years ago
Felix Stupp 16d91d83bd
common: Added aptitude to list of common packages 5 years ago
Felix Stupp b4897778b6
server/spotme: Added source of credentials for git repo 5 years ago
Felix Stupp 243b804fa4
dns/master: Added CAA Entry for letsencrypt.org 5 years ago
Felix Stupp 02ff70e699
common: Added downloading and processing ssh host keys 5 years ago
Felix Stupp 6b36435d8d
server/nextcloud: Added libmagickcore to dependencies 5 years ago
Felix Stupp 6742f9789d
mysql/database: Allowed duplications 5 years ago
Felix Stupp 4a09419de4
mysql/application: Removed duplicated locking of user root 5 years ago
Felix Stupp ef666274ba
mysql/application: Combined removing test user for all hosts 5 years ago
Felix Stupp 6381fe6d83
server/nextcloud: Increased memory for php up to 1G 5 years ago
Felix Stupp 029fba1983
nginx/php-pool: Added support for custom memory_limit 5 years ago
Felix Stupp a0000e3c7f
nginx/php*: Fixed handler names for controlling php-fpm service 5 years ago
Felix Stupp 3a5881a721
common: Fixed handler "restart ssh" 5 years ago
Felix Stupp ce90f3dadf
nginx/php-fpm: Fixed getting php-fpm for newer versions of Debian 5 years ago
Felix Stupp 6509b01d71
acme: Added ToDo for "Create custom user ..." 5 years ago
Felix Stupp bae56869f6
acme/certificate: Enabled OCSP must-stable for certificates 5 years ago
Felix Stupp 9ba13c5d73
nginx/application: Enabled OCSP Stapling 5 years ago
Felix Stupp 22f14189c2
nginx/application: Enabled TLSv1.3 and reworked ciphers 5 years ago
Felix Stupp ce1f2fb132
nginx/application: Increased time for HSTS 5 years ago
Felix Stupp 5bed7d067a
nginx/application: Added localhost as resolver for nginx 5 years ago
Felix Stupp d9eb74649f
nginx/application: Fixed missing notify for templates 5 years ago
Felix Stupp 13736ece66
server/nextcloud: Fixed cron job running as the correct user 5 years ago
Felix Stupp 69ec4ef59c
server/nextcloud: Fixed name for cron job
For allowing different nextcloud instances work simultaneously
5 years ago
Felix Stupp 52c8e89ff4
server/nextcloud: Change version to newest release 5 years ago
Felix Stupp 1f9f70bc1c
server/nextcloud: Enabled nextcloud app social 5 years ago
Felix Stupp b381bdbd9e
server/nextcloud: Disabled php module mcrypt
Already preinstalled in base packages
5 years ago
Felix Stupp 4b7bb44141
server/nextcloud: Allow duplicates for role 5 years ago
Felix Stupp 4bb347344c
server/nextcloud: Moved user directory for nextcloud 5 years ago
Felix Stupp 9216931b33
server/nextcloud: Moved roles into tasks for creating user before 5 years ago
Felix Stupp 826cc1d0b7
common: Added creating of backup files directory 5 years ago
Felix Stupp 1602022134
mysql: Added auto backuping databases 5 years ago
Felix Stupp 53643f6c99
server/nextcloud: Added support for auto backuping data directory 5 years ago
Felix Stupp f77d57eba8
server/gitea: Added auto backup support for repositories 5 years ago
Felix Stupp 39e7f60aba
common: Fixed syntax in backup_databases.sh script 5 years ago
Felix Stupp c02b88bf2e
common: Added support for files backups 5 years ago
Felix Stupp f61da86598
server/nextcloud: Reordered background job and update task 5 years ago
Felix Stupp c2b060df9e
common: Added support for backup databases 5 years ago
Felix Stupp fcba624ac5
common: Fixed typo in task name for packages 5 years ago
Felix Stupp d3f2e8d4b5
Added role wireguard/special_client 5 years ago
Felix Stupp 96ae42477f
Added role wireguard/application 5 years ago
Felix Stupp 93f1207bf9
Added role server/spotme 5 years ago
Felix Stupp 93f30e6919
Added role server/nextcloud 5 years ago
Felix Stupp 0bec0a9630
Added role nginx/server 5 years ago
Felix Stupp 3f19422c0c
Added role nginx/php-pool 5 years ago
Felix Stupp 692b9bf74b
Added role nginx/php-fpm
For php-fpm setup
5 years ago
Felix Stupp 30f2210481
git_auto_update: Renamed variable name to repo_name 5 years ago
Felix Stupp e04596e4ab
common: Added dirmngr to packages 5 years ago
Felix Stupp 0df56b9ddc
common: Added helper scripts support and gpg_import_url_key 5 years ago
Felix Stupp 0e8234fa08
common: Fixed ufw setting default deny for incoming traffic 5 years ago
Felix Stupp 9cdc7ccd91
common: Generate locale for german 5 years ago
Felix Stupp 83c2dde55c
server/gitea: Added usage of handlers 5 years ago
Felix Stupp c10bb0160d
Added role misc/handlers
As handlers collection for general, preinstalled applications
5 years ago
Felix Stupp 262cba5952
server/gitea: Removed note about change required 5 years ago
Felix Stupp 3327a9e4b4
server/gitea: Used derivation of pass/name by database role 5 years ago
Felix Stupp c9206ff499
mysql/database: Added derivation of password and database name 5 years ago
Felix Stupp df88e582a7
dns/master: Added dnssec support
- Generation of keys
- Signing zone after each change
5 years ago
Felix Stupp 69026d8d27
dns/master: Moved zone files into directory per zone 5 years ago
Felix Stupp 93891c25a5
dns/application: Added config for bind9
- Enabled dnssec by default
5 years ago
Felix Stupp befbff3c7e
dns/master: Added prefix for paths to vars in default 5 years ago
Felix Stupp f85d1a4477
roles/nginx/forward: nginx configuration "redirect" -> "return" 6 years ago
Felix Stupp d938fdfb39
roles/nginx/forward: Fixed name of configuration template 6 years ago
Felix Stupp 3fbead1377
Added roles/server/static 6 years ago
Felix Stupp f20776e1bd
Added roles/git_auto_update 6 years ago
Felix Stupp 2b63f1a248
Added roles/dns/{application,master,slave} 6 years ago
Felix Stupp b804ae005e
roles/server/gitea: Fixed creating dump on first download 6 years ago
Felix Stupp 1965972379
roles/server/gitea: Changed gpg keyserver pool to europe only
Because latency is lower
6 years ago