Commit Graph

Select branches

Hide Pull Requests

alpine

master

#10

#20

#21

#25

#27

#29

Mono Color

• de75b2ffb6
  
  host_vars/web22: WordPress 5.8.2 Alan Orth 2021-11-30 19:48:18 +02:00
• e10d83dadd
  
  Pipfile.lock: run pipenv update Alan Orth 2021-11-30 19:34:46 +02:00
• f070fd9a64
  
  roles/common: Update list of abusive IP addresses Alan Orth 2021-11-07 10:12:43 +02:00
• 6e1527b1a8
  
  Pipfile.lock: run pipenv update Alan Orth 2021-11-07 10:11:46 +02:00
• ebd8b0632b
  
  roles/common: Disable unsafe Diffie-Hellman SSH moduli Alan Orth 2021-10-10 16:57:05 +03:00
• df26b6c17e
  
  roles/common: notify fail2ban after updating firewall Alan Orth 2021-09-28 10:45:51 +03:00
• d92151b8a6
  
  roles/common: Update list of abusive IP addresses Alan Orth 2021-09-28 10:28:02 +03:00
• b13ead0657
  
  roles/common: use a range for mosh ports in nftables Alan Orth 2021-09-28 07:34:25 +03:00
• 89ced6f952
  
  Pipfile.lock: run pipenv update Alan Orth 2021-09-27 17:28:41 +03:00
• ae5ba0607a
  
  Remove host_vars/nomad01 Alan Orth 2021-09-27 14:17:48 +03:00
• 89fd642b78
  
  roles/nginx: minor rework of acme.sh tasks Alan Orth 2021-09-27 13:40:17 +03:00
• 65e6dd34cd
  
  roles/common: Add missing section to Debian 11 sshd_config Alan Orth 2021-09-27 12:59:05 +03:00
• 0421807e4d
  
  Add web23 Alan Orth 2021-09-27 12:22:45 +03:00
• d5eed5055e
  
  roles/nginx: Add support for gitea Alan Orth 2021-09-27 12:15:47 +03:00
• f8752bb3e7
  
  roles/nginx: add todo about document roots Alan Orth 2021-09-27 12:05:53 +03:00
• 170e591701
  
  roles/common: Install rsync and lsof Alan Orth 2021-09-27 11:36:40 +03:00
• 8d6c3c57c3
  
  roles/nginx: install acme.sh after downloading Alan Orth 2021-09-27 11:28:02 +03:00
• 79b29f0c51
  
  roles/nginx: generate snakeoil cert manually Alan Orth 2021-09-27 10:48:24 +03:00
• a4acc85704
  
  roles/common: Remove iptables on newer Debian Alan Orth 2021-09-27 10:35:38 +03:00
• f7b9aa67f5
  
  roles/common: Fix comment about Debian 10 firewall Alan Orth 2021-09-27 10:31:31 +03:00
• 0a39c4f0ef
  
  README.md: Update debian/ubuntu note Alan Orth 2021-09-27 10:13:39 +03:00
• 85323d789c
  
  Remove host_vars/web19 Alan Orth 2021-09-13 11:49:32 +03:00
• 341a1bf11e
  
  roles/php-fpm: Install php7.4-xml Alan Orth 2021-09-13 10:19:33 +03:00
• 6ee389eda5
  
  roles/php-fpm: Use concrete dependencies Alan Orth 2021-09-13 10:18:40 +03:00
• 83fea62b0f
  
  host_vars/web22: WordPress 5.8.1 Alan Orth 2021-09-13 07:37:40 +03:00
• 0d1a5fbb25
  
  Add host_vars/web22 Alan Orth 2021-09-12 21:59:38 +03:00
• 4d8444abf2
  
  host_vars/web21: Fix path to cert Alan Orth 2021-09-12 20:39:45 +03:00
• e8486f6c9e
  
  host_vars/nomad02: Update Drone to version 2 Alan Orth 2021-09-10 21:49:00 +03:00
• 20cd6f213c
  
  roles/common: cache_valid_time explicitly sets update_cache Alan Orth 2021-09-08 21:59:51 +03:00
• eb80e797c6
  
  Add host_vars/web21 Alan Orth 2021-09-08 21:57:04 +03:00
• 736bb8eb38
  
  Remove host_vars/web20 Alan Orth 2021-09-08 21:56:43 +03:00
• 34a30c4d13
  
  roles/common: Don't update apt cache when removing packages Alan Orth 2021-09-08 17:05:48 +03:00
• c03e75d736
  
  roles/common: explicitly install systemd-timesyncd Alan Orth 2021-09-08 17:04:46 +03:00
• d08f10f9c8
  
  roles/common: Fix comment in ntp playbook Alan Orth 2021-09-08 17:04:20 +03:00
• 8467dc1300
  
  roles/mariadb: Change socket location Alan Orth 2021-09-08 15:50:48 +03:00
• 635bb5234d
  
  roles/common: fix logic for copying AbuseIPDB.com nft sets Alan Orth 2021-09-08 09:58:13 +03:00
• 37901da5b5
  
  roles/common: update AbuseIPDB lists for nftables Alan Orth 2021-09-08 09:57:58 +03:00
• e36ae3b11e
  
  roles/common: Update list of abusive IP addresses Alan Orth 2021-09-08 09:35:36 +03:00
• 81c1231a28
  
  roles/php-fpm: Fix logic Alan Orth 2021-09-08 09:32:06 +03:00
• bb6f058025
  
  roles/php-fpm: whitespace Alan Orth 2021-09-07 20:12:31 +03:00
• 547395b26e
  
  roles/nginx: Use php7.4-fpm socket on Debian 11 as well Alan Orth 2021-09-07 17:51:54 +03:00
• 15208241d3
  
  roles/common: Add git-lfs to base packages Alan Orth 2021-09-07 17:51:33 +03:00
• 0fd05d496e
  
  roles/nginx: Set mode of downloaded acme.sh Alan Orth 2021-09-07 17:10:35 +03:00
• 023a0d48ba
  
  roles/nginx: Remove old comment Alan Orth 2021-09-07 17:07:53 +03:00
• c687b7a91a
  
  roles/nginx: Run Let's Encrypt on Debian 11 too Alan Orth 2021-09-07 17:07:33 +03:00
• bd4ae36bb6
  
  roles/mariadb: use socket for all operations Alan Orth 2021-09-07 16:48:15 +03:00
• b60637c7d9
  
  roles/mariadb: Update comments for Ansible module Alan Orth 2021-09-07 16:47:47 +03:00
• 479127a5e4
  
  roles/common: Fix nftables handler in Debian firewall Alan Orth 2021-09-07 15:43:33 +03:00
• d261f81642
  
  roles/php-fpm: Use Ubuntu 20.04 configs on Debian 11 Alan Orth 2021-09-06 21:19:57 +03:00
• 6bc044d454
  
  host_vars: remove mosh rules Alan Orth 2021-09-05 16:33:45 +03:00
• 9e07e27fbe
  
  host_vars/web19: remove extra mosh rules Alan Orth 2021-09-05 16:24:28 +03:00
• 575a9fdfe6
  
  roles/common: Add mosh ports to common Alan Orth 2021-09-05 16:23:42 +03:00
• 35fa3b0d72
  
  roles/common: Fix typo in handlers Alan Orth 2021-09-05 16:19:31 +03:00
• ba5760bf8c
  
  host_vars/web19: WordPress 5.8 Alan Orth 2021-09-05 15:55:58 +03:00
• 5e918da88e
  
  Pipfile.lock: run pipenv update Alan Orth 2021-09-05 15:38:51 +03:00
• f7e87ea7be
  
  roles/common: Fix fail2ban ignoreip Alan Orth 2021-08-12 15:24:50 +03:00
• 7b233eb31d
  
  Pipfile.lock: Run pipenv update Alan Orth 2021-08-01 16:14:42 +03:00
• b5ea575d8d
  
  roles/common: Always restart nftables service Alan Orth 2021-08-01 14:23:00 +03:00
• 98cc3a8c2e
  
  Add nginx filter for fail2ban Alan Orth 2021-08-01 09:56:43 +03:00
• a67d901641
  
  roles/common: Use AbuseIPDB.com list in nftables Alan Orth 2021-07-31 21:46:50 +03:00
• 7ae100faeb
  
  roles/common: Add comments to nftables.conf Alan Orth 2021-07-30 09:37:30 +03:00
• debcb21161
  
  roles/common: Install curl for Abuse.ch update scripts Alan Orth 2021-07-29 10:24:32 +03:00
• 8dd7663b3c
  
  roles/common: Use Abuse.ch's SSL Blacklist in nftables Alan Orth 2021-07-29 10:16:00 +03:00
• cba2a7a996
  
  roles/common: Fix nftables in Debian firewall Alan Orth 2021-07-29 10:10:04 +03:00
• 197bdf7666
  
  roles/common: Start nftables service later Alan Orth 2021-07-29 10:05:15 +03:00
• 46fc2ce3d4
  
  roles/common: Move cleanup to a one-off play Alan Orth 2021-07-29 10:00:30 +03:00
• b4d50166f4
  
  roles/common: Fix loop in firewall cleanup Alan Orth 2021-07-28 23:46:53 +03:00
• c336b217c5
  
  Remove extra TCP ports from firewall rules Alan Orth 2021-07-28 14:49:50 +03:00
• af6c3dd12a
  
  roles/common: Update cache in firewall playbook Alan Orth 2021-07-28 14:46:58 +03:00
• b66c724109
  
  roles/common: Use nftables on Ubuntu 20.04 as well Alan Orth 2021-07-28 14:18:41 +03:00
• 8bc2b6f493
  
  roles/common: Retab nftables.conf.j2 Alan Orth 2021-07-27 22:03:23 +03:00
• a74d6dfc08
  
  roles/common: Don't overwrite spamhaus nft sets Alan Orth 2021-07-27 22:01:57 +03:00
• d3922e7878
  
  roles/common: Port configurable firewall logic to nftables Alan Orth 2021-07-27 21:22:32 +03:00
• 14814aa5d9
  
  roles/common: Wire up fail2ban Alan Orth 2021-07-26 22:07:31 +03:00
• 3b053167b1
  
  roles/common: Fix sources.list for Debian 11 Bullseye Alan Orth 2021-07-26 21:12:05 +03:00
• 9bba0d96bb
  
  roles/common: Add initial support for nftables on Debian 11 Alan Orth 2021-07-26 13:09:41 +03:00
• 38c333045b
  
  roles/common: bring Ubuntu firewall changes to Debian 11 Alan Orth 2021-07-24 23:09:33 +03:00
• d4ede33099
  
  roles/common: Don't configure apt sources on ARM Alan Orth 2021-07-24 22:32:00 +03:00
• 0bad75788d
  
  roles/common: Add encryption settings to Debian 11 sshd_config Alan Orth 2021-07-24 22:28:59 +03:00
• 892033b880
  
  roles/common: port common settings to Debian 11 sshd_config Alan Orth 2021-07-22 14:16:20 +03:00
• 7c6ab2a652 roles/common: Add sshd_config from Debian 11 RC2 Alan Orth 2021-07-21 21:00:07 +03:00
• 1c95c1faa8
  
  roles/common: Update KexAlgorithms in Ubuntu 20.04 sshd_config Alan Orth 2021-07-22 12:57:31 +03:00
• 9ea14de6f5
  
  roles/common: Remove Encrypt-and-MAC modes from Ubuntu 20.04 sshd_config Alan Orth 2021-07-22 12:48:12 +03:00
• 9b7a31ebf9
  
  roles/common: Remove 00-persistent-journal.conf Alan Orth 2021-07-21 10:02:33 +03:00
• d7c34a30a3
  
  roles/common: Add Spamhaus DROP lists to firewalld ipsets Alan Orth 2021-07-21 09:34:51 +03:00
• ee5f4cdf74
  
  host_vars: don't hard code python path Alan Orth 2021-07-07 12:23:05 +03:00
• b014c09a2c
  
  ansible.cfg: Use auto discovery of Python interpreter Alan Orth 2021-07-07 12:22:00 +03:00
• 531ff99af0
  
  roles/common: Update list of abusive IP addresses Alan Orth 2021-07-04 11:15:32 +03:00
• 82d3a7ff2a
  
  roles/nginx: Add convenience tags to fact task Alan Orth 2021-07-01 18:17:14 +03:00
• 6c3cf40a16
  
  roles/nginx: Use snakeoil cert from ssl-cert Alan Orth 2021-07-01 18:11:34 +03:00
• 681be5eb19
  
  Pipfile.lock: run pipenv update Alan Orth 2021-07-01 18:10:56 +03:00
• 4fae56a386
  
  host_vars/web19: WordPress 5.7.2 Alan Orth 2021-06-13 16:14:22 +03:00
• 1d5db7bdbe
  
  Pipfile.lock: run pipenv update Alan Orth 2021-06-13 16:14:05 +03:00
• 32da3a3341
  
  Pipfile.lock: Re-create pipenv environment for Ansible 4.0.0 Alan Orth 2021-05-20 10:21:01 +03:00
• 31a3f5832a
  
  roles/common: Update list of abusive IP addresses Alan Orth 2021-05-20 10:20:47 +03:00
• 3e7130b519
  
  Pipfile.lock: run pipenv update Alan Orth 2021-05-14 13:56:56 +03:00
• bd0b6a16de
  
  roles/nginx/defaults/main.yml: Update version comment Alan Orth 2021-05-10 16:00:44 +03:00
• 7145298f90
  
  Pipfile.lock: Run pipenv update Alan Orth 2021-05-10 15:59:34 +03:00
• 1bfd2bc441
  
  Pipfile.lock: Run pipenv update Alan Orth 2021-04-28 12:49:23 +03:00
• 884b3b8425
  
  host_vars/web19: remove dead host Alan Orth 2021-04-24 20:17:17 +03:00