 Felix Stupp
|
c56ed16851
|
account: Added configuration for home directory
For disabling other read rights on home directory
|
5 years ago |
|
Felix Stupp
|
ad87ad2e7d
|
server/gitea: Removed dumping before update
Global backup service should be enough
|
5 years ago |
|
Felix Stupp
|
bef682140b
|
acme/certificate: Removed invalid command argument
|
5 years ago |
|
Felix Stupp
|
dbcc2e3209
|
site.yml: Fixed MX record and added SPF record
|
5 years ago |
|
Felix Stupp
|
a3fde6aa3c
|
acme: Moved certificate handling to custom system user
Avoided using root for acme.sh
Modified also role nginx/application
|
5 years ago |
|
Felix Stupp
|
9e20b807f1
|
acme/application: Removed getting if acme is installed
As it should be installed or otherwise the playbook failed
|
5 years ago |
|
Felix Stupp
|
002ecc28b0
|
nginx/php-pool: Removed not needed system user configuration
|
5 years ago |
|
Felix Stupp
|
5486d06226
|
nginx/php-fpm: Fixed removing default php-fpm pool
|
5 years ago |
|
Felix Stupp
|
964099cfdb
|
nginx/php-fpm: Added configuration for php opcache
|
5 years ago |
|
Felix Stupp
|
c25df42253
|
common: Reworked ssh configuration generation
|
5 years ago |
|
Felix Stupp
|
1a5a7b0611
|
server/nextcloud: Added app previewgenerator
With its own cron job at 3
|
5 years ago |
|
Felix Stupp
|
380a5dbf2e
|
server/nextcloud: Added apps Deck, Dicomviewer and suspicious_login
|
5 years ago |
|
Felix Stupp
|
1e5dd61270
|
wireguard/application: Extracted role misc/deb_unstable
|
5 years ago |
|
Felix Stupp
|
9e67c463c2
|
README: Added missing descriptions
|
5 years ago |
|
Felix Stupp
|
485333e82f
|
README: Added description for role server/node
|
5 years ago |
|
Felix Stupp
|
212ff1b66e
|
Added complete playbook
|
5 years ago |
|
Felix Stupp
|
8777421f03
|
Added hosts file
|
5 years ago |
|
Felix Stupp
|
5c0345f468
|
makefile: Reworked prinicple of different playbooks
|
5 years ago |
|
Felix Stupp
|
08c85654e4
|
Added config for ansible
|
5 years ago |
|
Felix Stupp
|
a0a440d4be
|
.gitignore: Added all yml files of root except site.yml
|
5 years ago |
|
Felix Stupp
|
0dab3bdad2
|
Added role node/server
|
5 years ago |
|
Felix Stupp
|
a74f532394
|
Added role node/application
|
5 years ago |
|
Felix Stupp
|
852dbdb143
|
php-pool: Added domain to required variables (doc-only)
|
5 years ago |
|
Felix Stupp
|
9595db481f
|
Added role misc/system_user
|
5 years ago |
|
Felix Stupp
|
b229a5c3bf
|
git_auto_update: Added reset command before checkout
|
5 years ago |
|
Felix Stupp
|
d570f3cdb3
|
git_auto_update: Allow reload_command failing during playbook execution
|
5 years ago |
|
Felix Stupp
|
67f1e0919e
|
git_auto_update: Allowed asume group equals owner
|
5 years ago |
|
Felix Stupp
|
0944fd798f
|
common: Added configuration of apt sources
|
5 years ago |
|
Felix Stupp
|
b6c860548e
|
server/nextcloud: Changed dependencies back to real one
Undo of 9216931b33
|
5 years ago |
|
Felix Stupp
|
edb298ebaa
|
server/nextcloud: Combined vars nextcloud_system_user and system_user
|
5 years ago |
|
Felix Stupp
|
32c176c93b
|
Added global variables
|
5 years ago |
|
Felix Stupp
|
16d91d83bd
|
common: Added aptitude to list of common packages
|
5 years ago |
|
Felix Stupp
|
b4897778b6
|
server/spotme: Added source of credentials for git repo
|
5 years ago |
|
Felix Stupp
|
243b804fa4
|
dns/master: Added CAA Entry for letsencrypt.org
|
5 years ago |
|
Felix Stupp
|
02ff70e699
|
common: Added downloading and processing ssh host keys
|
5 years ago |
|
Felix Stupp
|
6b36435d8d
|
server/nextcloud: Added libmagickcore to dependencies
|
5 years ago |
|
Felix Stupp
|
6742f9789d
|
mysql/database: Allowed duplications
|
5 years ago |
|
Felix Stupp
|
4a09419de4
|
mysql/application: Removed duplicated locking of user root
|
5 years ago |
|
Felix Stupp
|
ef666274ba
|
mysql/application: Combined removing test user for all hosts
|
5 years ago |
|
Felix Stupp
|
6381fe6d83
|
server/nextcloud: Increased memory for php up to 1G
|
5 years ago |
|
Felix Stupp
|
029fba1983
|
nginx/php-pool: Added support for custom memory_limit
|
5 years ago |
|
Felix Stupp
|
a0000e3c7f
|
nginx/php*: Fixed handler names for controlling php-fpm service
|
5 years ago |
|
Felix Stupp
|
3a5881a721
|
common: Fixed handler "restart ssh"
|
5 years ago |
|
Felix Stupp
|
ce90f3dadf
|
nginx/php-fpm: Fixed getting php-fpm for newer versions of Debian
|
5 years ago |
|
Felix Stupp
|
6509b01d71
|
acme: Added ToDo for "Create custom user ..."
|
5 years ago |
|
Felix Stupp
|
bae56869f6
|
acme/certificate: Enabled OCSP must-stable for certificates
|
5 years ago |
|
Felix Stupp
|
9ba13c5d73
|
nginx/application: Enabled OCSP Stapling
|
5 years ago |
|
Felix Stupp
|
22f14189c2
|
nginx/application: Enabled TLSv1.3 and reworked ciphers
|
5 years ago |
|
Felix Stupp
|
ce1f2fb132
|
nginx/application: Increased time for HSTS
|
5 years ago |
|
Felix Stupp
|
5bed7d067a
|
nginx/application: Added localhost as resolver for nginx
|
5 years ago |