Felix Stupp
|
0232319ccd
|
dns/master: Configured dnssec-policy for automatic KASP
|
4 years ago |
Felix Stupp
|
ab39f9337e
|
vscode: Removed python path from repository configuration
|
4 years ago |
Felix Stupp
|
ae995dec67
|
dns/entries: Prefixed entries name with "server:"
|
4 years ago |
Felix Stupp
|
3071b98f9d
|
Reconfigured bind session-keyalg to hmac-sha512
|
4 years ago |
Felix Stupp
|
3d274d9996
|
dns/application: Fixed indent
|
4 years ago |
Felix Stupp
|
361f02565a
|
playbooks/dns: Removed gather facts about other hosts before
|
4 years ago |
Felix Stupp
|
93b5ba9e4b
|
misc/backup_files: Fixed conversion of timing data to str
|
4 years ago |
Felix Stupp
|
ddc1da5c3c
|
misc/backup_files: Use backup_name for name of tasks
|
4 years ago |
Felix Stupp
|
d1e14a9de9
|
misc/backup_files: Added & used variable for backup_target
Ensures usage of backup_name insted of domain
|
4 years ago |
Felix Stupp
|
b6d9b1deb5
|
dns/entries: Fixed reference to var dns_zone_domain
|
4 years ago |
Felix Stupp
|
82288b4862
|
playbooks/dns: Removed explicit mail entries
Should be replaced by mail roles soon
|
4 years ago |
Felix Stupp
|
360172f8db
|
dns/master: Moved default tts var to global var
|
4 years ago |
Felix Stupp
|
72ee42d539
|
dns/master: Allow configure default ttl
|
4 years ago |
Felix Stupp
|
3008672ded
|
dns/master: Added section comments to zone.conf
|
4 years ago |
Felix Stupp
|
a41f4c1c3f
|
dns/master: Adapted generate-keys to inline-signing (only gen KSK)
|
4 years ago |
Felix Stupp
|
be6303576a
|
dns/application: Added configuration for session-key
|
4 years ago |
Felix Stupp
|
49d53d0213
|
dns/application: Removed obsolete dnssec directives
|
4 years ago |
Felix Stupp
|
0e96fcbe34
|
dns/application: Fixed defining role dependencies
|
4 years ago |
Felix Stupp
|
99e58d4224
|
common: Added helper nsupdate_keygen
|
4 years ago |
Felix Stupp
|
0b7e2cb923
|
dns/application: Changed vars in makefile to support further dest files
|
4 years ago |
Felix Stupp
|
1ceb1999ff
|
common: Changed include_tasks to import_tasks
To enable static instead of dynamic imports
|
4 years ago |
Felix Stupp
|
36da702163
|
nginx/application: Disable log for HTTPs forwarding
|
4 years ago |
Felix Stupp
|
49704746ad
|
blocklists: Added ipv4 of known SemrushBots
|
4 years ago |
Felix Stupp
|
98ff22f28a
|
all/vars: Adapted bind_service_name to official bind version
|
4 years ago |
Felix Stupp
|
d8405a223b
|
server/nextcloud: Added hint for source of var redis_socket_path
|
5 years ago |
Felix Stupp
|
d8421b49bb
|
server/gitea: Renamed var gitea_user_directory to user_directory
|
5 years ago |
Felix Stupp
|
fe0a677b13
|
git_auto_update: Used long parameters
|
5 years ago |
Felix Stupp
|
e30121cae2
|
git_auto_update: Improved comparism with GPG fingerprint
Configured grep to compare againg fixed strings, not regexp
|
5 years ago |
Felix Stupp
|
f2b6e41645
|
git_auto_update: Fixed default reload_command to "true"
An empty default value would result in an error thrown.
|
5 years ago |
Felix Stupp
|
818515cc05
|
server/gitea: Reworked logging configuration to contain (only) required information
|
5 years ago |
Felix Stupp
|
49dd6e4da1
|
server/gitea/app.ini: Removed not required log settings
|
5 years ago |
Felix Stupp
|
072ace6438
|
server/gitea: Configured fail2ban protection
|
5 years ago |
Felix Stupp
|
d81f883e50
|
server/gitea: Disable colorizing logs for fail2ban
|
5 years ago |
Felix Stupp
|
d630988291
|
Added role fail2ban/rule
|
5 years ago |
Felix Stupp
|
2eaf8034f7
|
server/gitea: Reconfigured log to be minimal and adapted to systemd
|
5 years ago |
Felix Stupp
|
85028e1dcb
|
fail2ban/application: Moved service_name to global var
|
5 years ago |
Felix Stupp
|
239ef3124e
|
fail2ban/application: Moved vars to global part
Because paths are not user-configured but given by package/system
|
5 years ago |
Felix Stupp
|
66e38ebcde
|
server/nextcloud: Enabled APCu cache for cron job
|
5 years ago |
Felix Stupp
|
cf4a4863f4
|
server/nextcloud: Reformatted cron job line to meet format requirements
|
5 years ago |
Felix Stupp
|
c6a9c15e14
|
server/nextcloud: Enabled redis cache
|
5 years ago |
Felix Stupp
|
f3d7f2f8a2
|
Added roles for redis (application, instance)
|
5 years ago |
Felix Stupp
|
b5ca1ce80f
|
server/nextcloud: Renamed var nextcloud_user_directory to user_directory
|
5 years ago |
Felix Stupp
|
8e22085ba7
|
server/nextcloud: Moved "config APCu cache" to "add add. entries" with blockinfile task
|
5 years ago |
Felix Stupp
|
d59f4914b6
|
hosts.py: Added missing json.dumps
|
5 years ago |
Felix Stupp
|
d40a8cee92
|
server/nextcloud: Fixed changing configuration of nextcloud instance
- Fixes configuring APCu cache
|
5 years ago |
Felix Stupp
|
5c374bc977
|
nginx/application: Added security relevant HTTP headers to global config
Duplicates removed from server/nextcloud
|
5 years ago |
Felix Stupp
|
fc2a098ff2
|
server/nextcloud: Fixed disallowing well-known as dot file
|
5 years ago |
Felix Stupp
|
7889e10385
|
nginx/php-pool: Fixed default disabling of status_page_path
|
5 years ago |
Felix Stupp
|
788d259f85
|
all/vars: nginx_status_page_acl: Added public addresses of host
|
5 years ago |
Felix Stupp
|
8f25d008a9
|
var: nginx_status_page_acl: Fixed localhost ipv4 address range
|
5 years ago |