 Felix Stupp
|
6ce23c8a64
|
group os_debian: Force python3 interpreter to be used
|
4 years ago |
|
Felix Stupp
|
8758553a02
|
common: Install explicit python3 interpreter
|
4 years ago |
|
Felix Stupp
|
2dcfd1b09e
|
nginx: Added full paths to includes of snippets / fastcgi_params
To allow Ansible to validate the main config if placed on different
locations
|
4 years ago |
|
Felix Stupp
|
ff7275cb60
|
server/{linx,spotme}: Removed default bind_port
|
4 years ago |
|
Felix Stupp
|
4a186854cf
|
server/node: Renamed variable app_port to bind_port
|
4 years ago |
|
Felix Stupp
|
f6c1aff55a
|
server/spotme: Renamed variable spotme_port to bind_port
|
4 years ago |
|
Felix Stupp
|
7e0df4abc5
|
Added variable local_user for user running playbook
Useful if tasks store data on the local machine
|
4 years ago |
|
Felix Stupp
|
192a9c8b86
|
cloud.banananet.work: Removed preconfiguring admin password
|
4 years ago |
|
Felix Stupp
|
9d50f84321
|
server/firefox-sync: Changed remote repo url back to official repo
|
4 years ago |
|
Felix Stupp
|
90bf46bde6
|
global vars: Added var for username "zocker"
|
4 years ago |
|
Felix Stupp
|
373f59e7a4
|
misc/blocklist/ipv4: Expanded by new ips
|
4 years ago |
|
Felix Stupp
|
b74029ec7b
|
site: Added fail2ban/application as default role for all hosts
|
4 years ago |
|
Felix Stupp
|
f91f2bc325
|
Added role fail2ban/application
|
4 years ago |
|
Felix Stupp
|
c110a24e9f
|
common: sshd: Disable weak key algorithms
|
4 years ago |
|
Felix Stupp
|
505c85eb11
|
common: Disable root login over ssh
|
4 years ago |
|
Felix Stupp
|
651794a136
|
common: sshd: Disable X11 Forwarding globally
|
4 years ago |
|
Felix Stupp
|
baace3ce16
|
misc/handlers: Changed "restart ssh" to "reload ssh"
|
4 years ago |
|
Felix Stupp
|
025d8a3256
|
Added role misc/ssh_tg_notify
- Added role to common site
- Added variables required to global vars and vault
|
5 years ago |
|
Felix Stupp
|
69b884ad3f
|
bootstrap: Configure ssh key used to connect on new user
|
5 years ago |
|
Felix Stupp
|
f610812fc7
|
bootstrap: Ensure user has .ssh/authorized_keys before trying to copy
|
5 years ago |
|
Felix Stupp
|
096554f37b
|
mqtt/user: Fixed usage of var user (before username)
|
5 years ago |
|
Felix Stupp
|
fe393bd246
|
mqtt/application: Enforce sort part files before combining for acl and auth
|
5 years ago |
|
Felix Stupp
|
1a608ce172
|
mqtt/application: Remove config use_username_as_clientid
Seems to block users with different username and clientid
|
5 years ago |
|
Felix Stupp
|
e18f7f32e0
|
mqtt/application: Add paths for acl and auth files to config
|
5 years ago |
|
Felix Stupp
|
46e932049e
|
mqtt/application: Allow root to read SYS topics
|
5 years ago |
|
Felix Stupp
|
b6de0c1a4d
|
mqtt/application: Fix usage of variable configuration_directory
|
5 years ago |
|
Felix Stupp
|
cf632d1a56
|
mqtt: Ensure create auth files before writing using mosquitto_passwd
Fixes error on calling tool if file does not exist
|
5 years ago |
|
Felix Stupp
|
4b6cef5c10
|
mqtt/application: Notify handlers on change to makefile
|
5 years ago |
|
Felix Stupp
|
82c7666ae8
|
mqtt/application: Fix port for mosquitto server
|
5 years ago |
|
Felix Stupp
|
81dab362a6
|
misc/docker: Do not install recommended packages to fix issue on raspberry
|
5 years ago |
|
Felix Stupp
|
35b790978f
|
playbooks/dns: Changed minecraft wg addresses to Nitrado Game Server
|
5 years ago |
|
Felix Stupp
|
b052d1f18c
|
ansible.cfg: Changed type of python detection
To prevent further warnings cause of coming, may breaking changes
|
5 years ago |
|
Felix Stupp
|
d455d62dbf
|
Added script for appending ips to blocklist
|
5 years ago |
|
Felix Stupp
|
81364e9bfe
|
Extracted blocklist to own file and added ips
|
5 years ago |
|
Felix Stupp
|
8b340912b1
|
Added known ips to blocklist
|
5 years ago |
|
Felix Stupp
|
fcae6e8429
|
Added blocklist of known malicious ip addresses applied by role common
|
5 years ago |
|
Felix Stupp
|
f2c9b17194
|
Moved packages only required for admin account from role common to role account
|
5 years ago |
|
Felix Stupp
|
25df92ee7b
|
common: Removed package buffer
Replaced by pv integrated buffering
which supports greater limits.
|
5 years ago |
|
Felix Stupp
|
e68c6ffe50
|
common: Added todo / comment to (transition) package apt-transport-https
|
5 years ago |
|
Felix Stupp
|
3c7fb65ac9
|
common: Removed package acl
Not installable on Raspbian and also not used on any Debian system
|
5 years ago |
|
Felix Stupp
|
9e8d1b5220
|
common: Fix applying sources.list for different distributions
|
5 years ago |
|
Felix Stupp
|
b3f05edb6f
|
account: Added exa to packages
|
5 years ago |
|
Felix Stupp
|
8ebe8aecfb
|
nginx/application: Hide server tokens per default
|
5 years ago |
|
Felix Stupp
|
69dfba9911
|
mqtt/application: Added linking of configuration directory to environment
|
5 years ago |
|
Felix Stupp
|
18832f4eb0
|
mqtt/application: Fixed names of variables admin_{user,pass}
|
5 years ago |
|
Felix Stupp
|
9dc203621e
|
mqtt: Fixed wording 'notifiy' to 'notify'
|
5 years ago |
|
Felix Stupp
|
5f031fcd63
|
Subdirectories of playbook replaced by file prefixes
|
5 years ago |
|
Felix Stupp
|
295c6831bd
|
site: Added comments
|
5 years ago |
|
Felix Stupp
|
cc62f7617f
|
Added group configurataion for os_raspbian
|
5 years ago |
|
Felix Stupp
|
3d5e2f0e9d
|
site: Moved host-specific configurations to special files
|
5 years ago |