fbf14b2731
Merge branch 'dev-unattended-updates' into 'main'
...
Unattended updates and some system basics
See merge request roydfalk/ansible-base!4
2024-06-09 09:03:08 +00:00
46e239133d
[res]
2024-06-09 11:02:04 +02:00
d4b7b800ca
[res]
2024-06-09 11:01:34 +02:00
3f0f265554
[res]
2024-06-09 11:00:09 +02:00
aac2308647
[res]
2024-06-09 10:58:24 +02:00
0df42efdc4
Merge branch 'dev-nginx-hardening_1' into 'dev-nginx-hardening'
...
Harden nginx ssl/tls config | Adjustments after test
See merge request roydfalk/ansible-base!7
2024-06-09 08:57:19 +00:00
b9224747a1
Merge branch 'dev-unattended-updates_1' into 'dev-unattended-updates'
...
Unattended updates and some system basics | Adjustments after test
See merge request roydfalk/ansible-base!5
2024-06-09 08:57:09 +00:00
cf175b8ec1
Merge branch 'dev-ufw_1' into 'dev-ufw'
...
Add ufw role | Adjustments after test
See merge request roydfalk/ansible-base!6
2024-06-09 08:57:04 +00:00
a47662cdaa
[fix] role:nginx
2024-06-06 14:51:10 +02:00
958630599d
[fix] role:nginx
2024-06-06 14:50:15 +02:00
8084f33676
[fix] role:authelia
2024-06-06 14:48:40 +02:00
888fdda75b
[fix] role:authelia
2024-06-06 14:48:36 +02:00
9a886a2df9
[fix] role:nginx
2024-06-06 14:48:31 +02:00
8b47912f46
[res]
2024-06-06 14:48:27 +02:00
8a0a4dd778
[fix] role:authelia:vardef
2024-06-05 20:00:55 +02:00
93cf4a2895
[fix] role:vikunja
2024-06-05 20:00:46 +02:00
156f94fb3f
[fix] role:authelia:vardef
2024-06-05 20:00:23 +02:00
c62ae6e42f
[fix] role:authelia-for-vikunja
2024-06-04 10:04:20 +02:00
cc922b910d
[mod] role:vikunja:more config variables
2024-06-04 10:04:01 +02:00
e442272e18
[add] role:postgresql-for-vikunja
2024-06-04 10:03:33 +02:00
70bd2098b0
[add] role:authelia-for-vikunja [add] vikunja [add] vikunja-and-nginx
2024-06-04 08:52:31 +02:00
e89702bf75
[mod] role:authelia:add var "password_reset_custom_url"
2024-06-04 00:01:37 +02:00
f62ffeeeb8
[res]
2024-06-04 00:01:31 +02:00
a7794303ea
[res]
2024-06-04 00:01:05 +02:00
da6853532a
[mod] todo
2024-06-04 00:00:09 +02:00
da1ad77dab
[res]
2024-06-03 23:59:58 +02:00
d912a168a2
[mod] role:authelia
2024-06-01 19:26:22 +02:00
aeac7cceab
[sty] roles:tls hardening:format
2024-06-01 18:14:21 +02:00
c7c9e6895c
[fix] roles with ufw incocation
2024-06-01 17:56:28 +02:00
2ac8c9c4c3
[fix] role:ufw:add missing become:true directives [mod] role:ufw:use fully qualified names for ansible tasks
2024-06-01 13:49:11 +02:00
434c901173
[mod] role:system-basics renamed to system_basics
2024-06-01 13:47:47 +02:00
0e913099e6
[fix] role:system-basics:add missing become:true directives [mod] role:system-basisc:also install htop and tmux
2024-06-01 13:47:20 +02:00
8d57e57df8
[mod] role:unattended-upgrades renamed to unattended_upgrades
2024-06-01 13:44:51 +02:00
715d39716c
[fix] install required packages [fix] add missing become:true directives [mod] use fully qualified names for ansible tasks
2024-06-01 13:43:40 +02:00
Marius Melzer
389b171401
Apply review comments
2024-04-24 20:03:44 +02:00
e70ab02fed
Apply 6 suggestion(s) to 2 file(s)
2024-04-24 17:38:11 +00:00
882286e1a7
Apply 1 suggestion(s) to 1 file(s)
2024-04-24 17:33:35 +00:00
Marius Melzer
65b00c8840
Add ufw role
...
- Enable ufw and by default deny incoming traffic
- in other roles: if ufw (role) is enabled, then allow necessary ports
2024-04-20 17:08:39 +02:00
Marius Melzer
fcad5b9354
Add unattended upgrades
...
Enable unattended upgrades and triggers unattended reboots (23:55 after an
upgrade which needs reboot).
Attention: this is specific to debian-style linux systems (Debian, Ubuntu,...).
2024-04-20 15:24:38 +02:00
Marius Melzer
139ba7504a
Add system-basics role
...
- set time zone
- limit journal size
- set vim as editor
- limit ssh login to pubkey
2024-04-20 15:23:38 +02:00
Marius Melzer
dcc52b04cc
Generate dhparams instead of using a checked in file
2024-04-20 13:11:26 +02:00
Marius Melzer
a03e50c933
Harden nginx ssl/tls config
...
According to https://ssl-config.mozilla.org/
2024-04-19 00:28:45 +02:00
f231fb75b0
[add] todo
2024-04-14 11:23:57 +02:00
7f555a86c3
[mod] role SMTP-Anbindung hinzugefügt
2024-04-14 11:23:32 +02:00
0e3ae3d901
[fix] tools:check-json-syntax
2024-04-12 21:53:39 +02:00
a209387e20
[add] role:synapse:vardef
2024-04-12 20:19:57 +02:00
6c4e68298b
[mod] role:synapse:Schalter für federation
2024-04-05 13:39:26 +02:00
00049a180d
[fix] role:dokuwiki
2024-04-05 13:31:43 +02:00
fc472c2938
[mod] readme
2024-03-29 18:31:43 +01:00
975fcb8cd5
Merge branch 'galaxy' into 'main'
...
Ansible Galaxy nutzen
See merge request roydfalk/ansible-base!1
2024-03-29 17:27:27 +00:00
SMTP-Anbindung hinzugefügt
