Felix Stupp
dd48448828
nginx/php: Removed debian-specific index file from config
4 years ago
Felix Stupp
58955871ad
nginx/application: Removed specfic exclusion of htaccess files
...
Because dot files are already blocked in general
4 years ago
Felix Stupp
9394b66f47
wireguard/application: Added sorting of peer files before combining
4 years ago
Felix Stupp
e09fb25104
Added role misc/dnsmasq as dnssec resolver
4 years ago
Felix Stupp
fbf20622b0
Added group contabo_vserver
4 years ago
Felix Stupp
2158b2717d
dns/master: Added support for dname to root zone
4 years ago
Felix Stupp
0b388a7e9a
git_auto_update: Added brackets for less ambiguity
4 years ago
Felix Stupp
9a8996d69e
git_auto_update: Increased check options for update script
4 years ago
Felix Stupp
2515ab82db
roles/nfs: Improved var usages
...
- Extracted global_nfs_directory from default root_directory
- Added usage of export_path
4 years ago
Felix Stupp
666f463b46
Added global_vars already used
4 years ago
Felix Stupp
04c71a8611
common: ssh makefile: Sort part files before combining
4 years ago
Felix Stupp
d09b7ea8c3
mysql: Configure mysql_user and mysql_password
4 years ago
Felix Stupp
164cdbbc79
common: Tagged ip blocklist for easier skipping
4 years ago
Felix Stupp
b3fac3587f
Removed ecdsa as accepted ssh host key
4 years ago
Felix Stupp
187f573d4f
common: Added pv to required common packages
4 years ago
Felix Stupp
424b85eec8
mysql/database: Added database_template function
4 years ago
Felix Stupp
c6309b92ad
mysql/database: Documented database_user as required var
4 years ago
Felix Stupp
a3eb7778a8
server/nextcloud: Add packages for SMB access
4 years ago
Felix Stupp
f8e3f50e57
nvak wg.banananet.work: Added app side_menu
4 years ago
Felix Stupp
85edad4123
nvak nextclouds: Replaced apps files_markdown/files_readmemd with text
4 years ago
Felix Stupp
d07b72482c
nvak nextclouds: Added app settings from core
4 years ago
Felix Stupp
e437d35490
nvak nextclouds: Disable app spreed due to unused
4 years ago
Felix Stupp
91404feeae
nvak cloud.banananet.work: Remove app social due to deprecation
4 years ago
Felix Stupp
f85f713b8f
nvak nextclouds: Remove app sharerenamer due to deprecation
4 years ago
Felix Stupp
b17643bd4d
nvak nextclouds: Removed app files_ebookreader due to deprecation
4 years ago
Felix Stupp
9d130ea11a
nvak cloud.banananet.work: Remove app ransomware_detection
4 years ago
Felix Stupp
e5e41f11d6
nvak cloud.banananet.work: Disable app dicomviewer
4 years ago
Felix Stupp
1ccd35c3de
nvak nextclouds: Rename of app gallery to photos
4 years ago
Felix Stupp
2a161ca509
acme/certificate: Ensure dns entry is given by depending on role dns/entries
4 years ago
Felix Stupp
5a41a9afc9
acme/certificate: Document var domain as required
4 years ago
Felix Stupp
b3620fa3c8
dns/application: makefile combine: Sort files before combining
...
Ensures 0_main.db is before other files
4 years ago
Felix Stupp
979abba1aa
Added role dns/entries for configuring dns entries
4 years ago
Felix Stupp
eff48f1773
Changed approach for generating sshfp RR to lookup on python script
4 years ago
Felix Stupp
748999d36d
dns: Moved var zones_environment_directory to global vars
4 years ago
Felix Stupp
f8c01d46f6
dns/master: Fix permissions for dns env dir
4 years ago
Felix Stupp
bf00dcb6dd
dns/application: Moved var configuration_directory to global vars
4 years ago
Felix Stupp
eb632a8f2c
dns/master: Store mapping of domain to host in public_keys
4 years ago
Felix Stupp
499e48c208
site: Extracted playbook local.yml
4 years ago
Felix Stupp
7b2d1f90a6
all vars: Added separating space before ssh public_keys directories
4 years ago
Felix Stupp
5e139bc638
public_keys: Allow scripts in gitignore for usage in Ansible
4 years ago
Felix Stupp
9cac16e5af
public_keys: Added README
4 years ago
Felix Stupp
02fe2cfbc6
gitignore: Allow README files in fact directories
4 years ago
Felix Stupp
592bb483cf
common: Used variable global_ssh_key_directory for public_keys path
4 years ago
Felix Stupp
c58223c21b
server/gitea: Disable logging of SQL requests
4 years ago
Felix Stupp
3b33ff4c0c
fail2ban/application: Set file permissions for sshd.local config
4 years ago
Felix Stupp
2526033405
fail2ban/application: Send log messages to journald
4 years ago
Felix Stupp
55db427c95
blocklists/ipv4: Added North Korean IP subnets
4 years ago
Felix Stupp
8c69ef1611
blocklists/append_ipv4: Added support for ips with CIDR notation
4 years ago
Felix Stupp
0043d6255a
nginx/application global.conf: Added comment to excluding hidden files
4 years ago
Felix Stupp
025f77736a
dns: Changed approach for DNSSEC signing to inline-signing
...
- Moved keys into own directory
- Replaced makefile per zone by makefile for all zones
- Only combining of zone files and setting serial number
- signing now made by bind
- Added AppArmor profile extension for creating dynamic zone files
4 years ago
