Commit Graph

Select branches

Hide Pull Requests

alpine

master

#10

#20

#21

#25

#27

#29

Mono Color

• c317429f6d roles/mariadb: rework package signing key and repo Alan Orth 2022-09-12 10:09:41 +03:00
• b512a7f765 roles/common: create /etc/apt/keyrings Alan Orth 2022-09-12 10:05:12 +03:00
• e3a87d4f79 roles/mariadb: MariaDB 10.6 Alan Orth 2022-09-12 09:25:46 +03:00
• dec2d50fbc host_vars/web22: WordPress 6.0.2 Alan Orth 2022-09-12 09:00:05 +03:00
• 34be0013b7 Remove Debian 10 support Alan Orth 2022-09-11 09:21:08 +03:00
• 399585f4e7 roles: don't compare literal true and false Alan Orth 2022-09-11 08:39:59 +03:00
• 0240897b1b Remove Ubuntu 18.04 support Alan Orth 2022-09-10 23:26:55 +03:00
• 1da0da53ec roles: use longer format for when conditionals Alan Orth 2022-09-10 23:12:49 +03:00
• 677cc9f160 roles/php-fpm: fix truthy-ness in when Alan Orth 2022-09-10 23:12:26 +03:00
• ffe7a872dd roles: strict truthy values Alan Orth 2022-09-10 22:33:19 +03:00
• 95d0005978 Add ansible-lint Alan Orth 2022-09-10 18:36:53 +03:00
• 498766fdc4 Pipfile.lock: run pipenv update Alan Orth 2022-09-10 18:36:07 +03:00
• fc0fcc5742 roles/common: fix unnamed blocks Alan Orth 2022-09-10 18:30:07 +03:00
• 587bd6dcdd roles: use fully qualified module names Alan Orth 2022-09-10 18:09:12 +03:00
• 92a4c72809 Pipfile.lock: run pipenv update Alan Orth 2022-08-16 21:24:34 -07:00
• a2d61abba2 roles/mariadb: update mirror Alan Orth 2022-08-14 22:09:47 -07:00
• d2a5a28809 Pipfile.lock: run pipenv update Alan Orth 2022-08-01 15:20:56 +03:00
• 84c0589aee host_vars/web22: WordPress 5.9.2 Alan Orth 2022-03-31 22:35:15 +03:00
• 2961578a54 roles/common: Update list of abusive IP addresses Alan Orth 2022-02-28 18:51:35 +03:00
• 4d74f76b3c Pipfile.lock: run pipenv update Alan Orth 2022-02-04 21:47:53 +03:00
• 9e737466c5 roles/common: Update list of abusive IP addresses Alan Orth 2022-02-04 21:47:37 +03:00
• 0ffb1b1a36 roles/common: use pyinotify backend for nginx fail2ban jail Alan Orth 2022-01-04 15:10:02 +02:00
• 68f0b85eb3 Pipfile.lock: run pipenv update Alan Orth 2021-12-22 11:49:24 +02:00
• ebbde530d2 roles/common: Update list of abusive IP addresses Alan Orth 2021-12-22 11:40:27 +02:00
• ab47df6031 Use Python 3.10 with pipenv Alan Orth 2021-12-13 08:38:08 +02:00
• de75b2ffb6 host_vars/web22: WordPress 5.8.2 Alan Orth 2021-11-30 19:48:18 +02:00
• e10d83dadd Pipfile.lock: run pipenv update Alan Orth 2021-11-30 19:34:46 +02:00
• f070fd9a64 roles/common: Update list of abusive IP addresses Alan Orth 2021-11-07 10:12:43 +02:00
• 6e1527b1a8 Pipfile.lock: run pipenv update Alan Orth 2021-11-07 10:11:46 +02:00
• ebd8b0632b roles/common: Disable unsafe Diffie-Hellman SSH moduli Alan Orth 2021-10-10 16:57:05 +03:00
• df26b6c17e roles/common: notify fail2ban after updating firewall Alan Orth 2021-09-28 10:45:51 +03:00
• d92151b8a6 roles/common: Update list of abusive IP addresses Alan Orth 2021-09-28 10:28:02 +03:00
• b13ead0657 roles/common: use a range for mosh ports in nftables Alan Orth 2021-09-28 07:34:25 +03:00
• 89ced6f952 Pipfile.lock: run pipenv update Alan Orth 2021-09-27 17:28:41 +03:00
• ae5ba0607a Remove host_vars/nomad01 Alan Orth 2021-09-27 14:17:48 +03:00
• 89fd642b78 roles/nginx: minor rework of acme.sh tasks Alan Orth 2021-09-27 13:40:17 +03:00
• 65e6dd34cd roles/common: Add missing section to Debian 11 sshd_config Alan Orth 2021-09-27 12:59:05 +03:00
• 0421807e4d Add web23 Alan Orth 2021-09-27 12:22:45 +03:00
• d5eed5055e roles/nginx: Add support for gitea Alan Orth 2021-09-27 12:15:47 +03:00
• f8752bb3e7 roles/nginx: add todo about document roots Alan Orth 2021-09-27 12:05:53 +03:00
• 170e591701 roles/common: Install rsync and lsof Alan Orth 2021-09-27 11:36:40 +03:00
• 8d6c3c57c3 roles/nginx: install acme.sh after downloading Alan Orth 2021-09-27 11:28:02 +03:00
• 79b29f0c51 roles/nginx: generate snakeoil cert manually Alan Orth 2021-09-27 10:48:24 +03:00
• a4acc85704 roles/common: Remove iptables on newer Debian Alan Orth 2021-09-27 10:35:38 +03:00
• f7b9aa67f5 roles/common: Fix comment about Debian 10 firewall Alan Orth 2021-09-27 10:31:31 +03:00
• 0a39c4f0ef README.md: Update debian/ubuntu note Alan Orth 2021-09-27 10:13:39 +03:00
• 85323d789c Remove host_vars/web19 Alan Orth 2021-09-13 11:49:32 +03:00
• 341a1bf11e roles/php-fpm: Install php7.4-xml Alan Orth 2021-09-13 10:19:33 +03:00
• 6ee389eda5 roles/php-fpm: Use concrete dependencies Alan Orth 2021-09-13 10:18:40 +03:00
• 83fea62b0f host_vars/web22: WordPress 5.8.1 Alan Orth 2021-09-13 07:37:40 +03:00
• 0d1a5fbb25 Add host_vars/web22 Alan Orth 2021-09-12 21:59:38 +03:00
• 4d8444abf2 host_vars/web21: Fix path to cert Alan Orth 2021-09-12 20:39:45 +03:00
• e8486f6c9e host_vars/nomad02: Update Drone to version 2 Alan Orth 2021-09-10 21:49:00 +03:00
• 20cd6f213c roles/common: cache_valid_time explicitly sets update_cache Alan Orth 2021-09-08 21:59:51 +03:00
• eb80e797c6 Add host_vars/web21 Alan Orth 2021-09-08 21:57:04 +03:00
• 736bb8eb38 Remove host_vars/web20 Alan Orth 2021-09-08 21:56:43 +03:00
• 34a30c4d13 roles/common: Don't update apt cache when removing packages Alan Orth 2021-09-08 17:05:48 +03:00
• c03e75d736 roles/common: explicitly install systemd-timesyncd Alan Orth 2021-09-08 17:04:46 +03:00
• d08f10f9c8 roles/common: Fix comment in ntp playbook Alan Orth 2021-09-08 17:04:20 +03:00
• 8467dc1300 roles/mariadb: Change socket location Alan Orth 2021-09-08 15:50:48 +03:00
• 635bb5234d roles/common: fix logic for copying AbuseIPDB.com nft sets Alan Orth 2021-09-08 09:58:13 +03:00
• 37901da5b5 roles/common: update AbuseIPDB lists for nftables Alan Orth 2021-09-08 09:57:58 +03:00
• e36ae3b11e roles/common: Update list of abusive IP addresses Alan Orth 2021-09-08 09:35:36 +03:00
• 81c1231a28 roles/php-fpm: Fix logic Alan Orth 2021-09-08 09:32:06 +03:00
• bb6f058025 roles/php-fpm: whitespace Alan Orth 2021-09-07 20:12:31 +03:00
• 547395b26e roles/nginx: Use php7.4-fpm socket on Debian 11 as well Alan Orth 2021-09-07 17:51:54 +03:00
• 15208241d3 roles/common: Add git-lfs to base packages Alan Orth 2021-09-07 17:51:33 +03:00
• 0fd05d496e roles/nginx: Set mode of downloaded acme.sh Alan Orth 2021-09-07 17:10:35 +03:00
• 023a0d48ba roles/nginx: Remove old comment Alan Orth 2021-09-07 17:07:53 +03:00
• c687b7a91a roles/nginx: Run Let's Encrypt on Debian 11 too Alan Orth 2021-09-07 17:07:33 +03:00
• bd4ae36bb6 roles/mariadb: use socket for all operations Alan Orth 2021-09-07 16:48:15 +03:00
• b60637c7d9 roles/mariadb: Update comments for Ansible module Alan Orth 2021-09-07 16:47:47 +03:00
• 479127a5e4 roles/common: Fix nftables handler in Debian firewall Alan Orth 2021-09-07 15:43:33 +03:00
• d261f81642 roles/php-fpm: Use Ubuntu 20.04 configs on Debian 11 Alan Orth 2021-09-06 21:19:57 +03:00
• 6bc044d454 host_vars: remove mosh rules Alan Orth 2021-09-05 16:33:45 +03:00
• 9e07e27fbe host_vars/web19: remove extra mosh rules Alan Orth 2021-09-05 16:24:28 +03:00
• 575a9fdfe6 roles/common: Add mosh ports to common Alan Orth 2021-09-05 16:23:42 +03:00
• 35fa3b0d72 roles/common: Fix typo in handlers Alan Orth 2021-09-05 16:19:31 +03:00
• ba5760bf8c host_vars/web19: WordPress 5.8 Alan Orth 2021-09-05 15:55:58 +03:00
• 5e918da88e Pipfile.lock: run pipenv update Alan Orth 2021-09-05 15:38:51 +03:00
• f7e87ea7be roles/common: Fix fail2ban ignoreip Alan Orth 2021-08-12 15:24:50 +03:00
• 7b233eb31d Pipfile.lock: Run pipenv update Alan Orth 2021-08-01 16:14:42 +03:00
• b5ea575d8d roles/common: Always restart nftables service Alan Orth 2021-08-01 14:23:00 +03:00
• 98cc3a8c2e Add nginx filter for fail2ban Alan Orth 2021-08-01 09:56:43 +03:00
• a67d901641 roles/common: Use AbuseIPDB.com list in nftables Alan Orth 2021-07-31 21:46:50 +03:00
• 7ae100faeb roles/common: Add comments to nftables.conf Alan Orth 2021-07-30 09:37:30 +03:00
• debcb21161 roles/common: Install curl for Abuse.ch update scripts Alan Orth 2021-07-29 10:24:32 +03:00
• 8dd7663b3c roles/common: Use Abuse.ch's SSL Blacklist in nftables Alan Orth 2021-07-29 10:16:00 +03:00
• cba2a7a996 roles/common: Fix nftables in Debian firewall Alan Orth 2021-07-29 10:10:04 +03:00
• 197bdf7666 roles/common: Start nftables service later Alan Orth 2021-07-29 10:05:15 +03:00
• 46fc2ce3d4 roles/common: Move cleanup to a one-off play Alan Orth 2021-07-29 10:00:30 +03:00
• b4d50166f4 roles/common: Fix loop in firewall cleanup Alan Orth 2021-07-28 23:46:53 +03:00
• c336b217c5 Remove extra TCP ports from firewall rules Alan Orth 2021-07-28 14:49:50 +03:00
• af6c3dd12a roles/common: Update cache in firewall playbook Alan Orth 2021-07-28 14:46:58 +03:00
• b66c724109 roles/common: Use nftables on Ubuntu 20.04 as well Alan Orth 2021-07-28 14:18:41 +03:00
• 8bc2b6f493 roles/common: Retab nftables.conf.j2 Alan Orth 2021-07-27 22:03:23 +03:00
• a74d6dfc08 roles/common: Don't overwrite spamhaus nft sets Alan Orth 2021-07-27 22:01:57 +03:00
• d3922e7878 roles/common: Port configurable firewall logic to nftables Alan Orth 2021-07-27 21:22:32 +03:00
• 14814aa5d9 roles/common: Wire up fail2ban Alan Orth 2021-07-26 22:07:31 +03:00
• 3b053167b1 roles/common: Fix sources.list for Debian 11 Bullseye Alan Orth 2021-07-26 21:12:05 +03:00