e175c56d61
[fix] role:nginx
2024-06-09 12:46:26 +02:00
3675d40a24
Merge branch 'dev-vikunja' into 'main'
...
Vikunja
See merge request roydfalk/ansible-base!8
2024-06-09 09:11:39 +00:00
4500492ad6
[mod] role:vikunja:tls hardening
2024-06-09 11:11:17 +02:00
66dff8e58b
[fix] role:vikunja
2024-06-09 11:08:24 +02:00
758136b40f
Merge remote-tracking branch 'origin/main' into dev-vikunja
2024-06-09 11:06:31 +02:00
a60858e48a
Merge branch 'dev-nginx-hardening' into 'main'
...
Harden nginx ssl/tls config
See merge request roydfalk/ansible-base!2
2024-06-09 09:05:11 +00:00
6fe4f5fd56
[res]
2024-06-09 11:04:57 +02:00
a6169291f6
Merge branch 'dev-ufw' into 'main'
...
Add ufw role
See merge request roydfalk/ansible-base!3
2024-06-09 09:03:26 +00:00
fbf14b2731
Merge branch 'dev-unattended-updates' into 'main'
...
Unattended updates and some system basics
See merge request roydfalk/ansible-base!4
2024-06-09 09:03:08 +00:00
46e239133d
[res]
2024-06-09 11:02:04 +02:00
d4b7b800ca
[res]
2024-06-09 11:01:34 +02:00
3f0f265554
[res]
2024-06-09 11:00:09 +02:00
aac2308647
[res]
2024-06-09 10:58:24 +02:00
0df42efdc4
Merge branch 'dev-nginx-hardening_1' into 'dev-nginx-hardening'
...
Harden nginx ssl/tls config | Adjustments after test
See merge request roydfalk/ansible-base!7
2024-06-09 08:57:19 +00:00
b9224747a1
Merge branch 'dev-unattended-updates_1' into 'dev-unattended-updates'
...
Unattended updates and some system basics | Adjustments after test
See merge request roydfalk/ansible-base!5
2024-06-09 08:57:09 +00:00
cf175b8ec1
Merge branch 'dev-ufw_1' into 'dev-ufw'
...
Add ufw role | Adjustments after test
See merge request roydfalk/ansible-base!6
2024-06-09 08:57:04 +00:00
a47662cdaa
[fix] role:nginx
2024-06-06 14:51:10 +02:00
958630599d
[fix] role:nginx
2024-06-06 14:50:15 +02:00
8084f33676
[fix] role:authelia
2024-06-06 14:48:40 +02:00
888fdda75b
[fix] role:authelia
2024-06-06 14:48:36 +02:00
9a886a2df9
[fix] role:nginx
2024-06-06 14:48:31 +02:00
8b47912f46
[res]
2024-06-06 14:48:27 +02:00
8a0a4dd778
[fix] role:authelia:vardef
2024-06-05 20:00:55 +02:00
93cf4a2895
[fix] role:vikunja
2024-06-05 20:00:46 +02:00
156f94fb3f
[fix] role:authelia:vardef
2024-06-05 20:00:23 +02:00
c62ae6e42f
[fix] role:authelia-for-vikunja
2024-06-04 10:04:20 +02:00
cc922b910d
[mod] role:vikunja:more config variables
2024-06-04 10:04:01 +02:00
e442272e18
[add] role:postgresql-for-vikunja
2024-06-04 10:03:33 +02:00
70bd2098b0
[add] role:authelia-for-vikunja [add] vikunja [add] vikunja-and-nginx
2024-06-04 08:52:31 +02:00
e89702bf75
[mod] role:authelia:add var "password_reset_custom_url"
2024-06-04 00:01:37 +02:00
f62ffeeeb8
[res]
2024-06-04 00:01:31 +02:00
a7794303ea
[res]
2024-06-04 00:01:05 +02:00
da6853532a
[mod] todo
2024-06-04 00:00:09 +02:00
da1ad77dab
[res]
2024-06-03 23:59:58 +02:00
d912a168a2
[mod] role:authelia
2024-06-01 19:26:22 +02:00
aeac7cceab
[sty] roles:tls hardening:format
2024-06-01 18:14:21 +02:00
c7c9e6895c
[fix] roles with ufw incocation
2024-06-01 17:56:28 +02:00
2ac8c9c4c3
[fix] role:ufw:add missing become:true directives [mod] role:ufw:use fully qualified names for ansible tasks
2024-06-01 13:49:11 +02:00
434c901173
[mod] role:system-basics renamed to system_basics
2024-06-01 13:47:47 +02:00
0e913099e6
[fix] role:system-basics:add missing become:true directives [mod] role:system-basisc:also install htop and tmux
2024-06-01 13:47:20 +02:00
8d57e57df8
[mod] role:unattended-upgrades renamed to unattended_upgrades
2024-06-01 13:44:51 +02:00
715d39716c
[fix] install required packages [fix] add missing become:true directives [mod] use fully qualified names for ansible tasks
2024-06-01 13:43:40 +02:00
Marius Melzer
389b171401
Apply review comments
2024-04-24 20:03:44 +02:00
e70ab02fed
Apply 6 suggestion(s) to 2 file(s)
2024-04-24 17:38:11 +00:00
882286e1a7
Apply 1 suggestion(s) to 1 file(s)
2024-04-24 17:33:35 +00:00
Marius Melzer
65b00c8840
Add ufw role
...
- Enable ufw and by default deny incoming traffic
- in other roles: if ufw (role) is enabled, then allow necessary ports
2024-04-20 17:08:39 +02:00
Marius Melzer
fcad5b9354
Add unattended upgrades
...
Enable unattended upgrades and triggers unattended reboots (23:55 after an
upgrade which needs reboot).
Attention: this is specific to debian-style linux systems (Debian, Ubuntu,...).
2024-04-20 15:24:38 +02:00
Marius Melzer
139ba7504a
Add system-basics role
...
- set time zone
- limit journal size
- set vim as editor
- limit ssh login to pubkey
2024-04-20 15:23:38 +02:00
Marius Melzer
dcc52b04cc
Generate dhparams instead of using a checked in file
2024-04-20 13:11:26 +02:00
Marius Melzer
a03e50c933
Harden nginx ssl/tls config
...
According to https://ssl-config.mozilla.org/
2024-04-19 00:28:45 +02:00
