misc/ansible-base
0
0
Fork 0
Code Issues Pull requests 1 Actions Packages Projects Releases Wiki Activity
298 commits 13 branches 0 tags 930 KiB
Commit graph

142 commits

Author SHA1 Message Date
Christian Fraß f2b4ba5fed [fix] role:dokuwiki-and-nginx 2024-07-09 10:44:06 +02:00
Christian Fraß 361abc6a74 [fix] role:dokuwiki-and-nginx 2024-07-09 10:42:02 +02:00
Christian Fraß 3d02e0f4fb [mod] nginx-connector-roles:conf formatting 2024-07-09 10:38:28 +02:00
Christian Fraß 75caf79a51 [mod] nginx-connector-roles:conf formatting 2024-07-09 09:19:57 +02:00
Christian Fraß 71f0549191 [fix] role:vikunja-and-nginx 2024-07-09 09:14:52 +02:00
Christian Fraß 2048b1f2ce [fix] role:vikunja-and-nginx 2024-07-09 09:12:07 +02:00
Christian Fraß 7e0f48a332 [fix] role:synapse-and-nginx 2024-07-09 09:11:53 +02:00
Christian Fraß e82b76cef1 [fix] role:dokuwiki-and-nginx 2024-07-09 09:11:41 +02:00
Christian Fraß bceb605f68 [mod] roles:gitlab-and-nginx:tls mode 2024-07-09 09:11:20 +02:00
Christian Fraß 37682a6e24 [mod] role:system_basics:install package "acl" 2024-07-09 09:10:50 +02:00
Christian Fraß 37a5b0cb7b [mod] role:owncloud-and-nginx:tls switch 2024-07-04 23:00:25 +02:00
Christian Fraß 6cf5a0666b [fix] role:authelia:Variablen für ownCloud-Anbindung 2024-07-04 11:20:40 +02:00
Christian Fraß 717898fea8 [fix] role:authelia-for-owncloud:desktop client stuff [fix] role:owncloud:desktop client stuff 2024-07-04 09:48:33 +02:00
Christian Fraß 0d8d5c3651 [mod] role:authelia:Variablen für ownCloud-Anbindung 2024-07-04 09:47:26 +02:00
Christian Fraß 1553ea9f53 [mod] roles:vikunja-and-nginx:tls mode 2024-07-03 22:34:15 +02:00
Christian Fraß d08f287d73 [mod] roles:synapse-and-nginx:tls mode 2024-07-03 22:31:49 +02:00
Christian Fraß 6d42a70bd4 [mod] roles:dokuwiki-and-nginx:tls mode 2024-07-03 22:10:07 +02:00
Christian Fraß fc03370b19 [mod] role:authelia-and-nginx:tls mode 2024-07-03 22:02:06 +02:00
Christian Fraß dc28d22a90 [mod] role:hedgedoc-and-nginx:tls mode 2024-07-03 21:55:57 +02:00
Christian Fraß a81ba565e1 [mod] role:owncloud:Einstellungen für öffentliche Freigaben 2024-07-03 08:26:19 +02:00
Christian Fraß 2b18625dd3 [mod] role:owncloud:Einstellungen für öffentliche Freigaben 2024-07-02 18:59:16 +02:00
Christian Fraß 704012f888 [fix] role:owncloud 2024-07-02 00:11:36 +02:00
Christian Fraß 0235238dd7 [fix] role:authelia-for-owncloud 2024-07-02 00:11:22 +02:00
Christian Fraß 8e71c7eadc Merge branch 'main' of dl-cloud-gitlab:roydfalk/ansible-base 2024-06-27 19:08:37 +02:00
Christian Fraß 99a2fd0ea7 [fix] role:hedgedoc:default:domain 2024-06-27 19:08:25 +02:00
Christian Fraß 6c8b3d1b08 [add] role:authelia-for-owncloud [add] owncloud [add] owncloud-and-nginx 2024-06-27 19:07:58 +02:00
Christian Fraß a3509ca37b [int] 2024-06-25 11:44:29 +02:00
Christian Fraß b3cd34f0ac [mod] role:tlscert_selfsigned:remove var for ssl-path and unify domain vars 2024-06-25 11:43:19 +02:00
Christian Fraß 61b39794e8 [mod] role:tlscert_existing:remove var for ssl-path and unify domain vars 2024-06-25 11:43:11 +02:00
Christian Fraß 1bf66c5c23 [mod] role:element-and-nginx:Abhängigkeiten nutzen und TLS-Schalter einbauen 2024-06-25 11:42:01 +02:00
Christian Fraß c997a20276 [mod] role:tlscert_selfsigned:remove var for ssl-path and unify domain vars 2024-06-25 11:33:12 +02:00
Christian Fraß 82e9f8e806 [mod] role:tlscert_existing:remove var for ssl-path and unify domain vars 2024-06-25 11:32:36 +02:00
Christian Fraß e4c3b3a287 [int] 2024-06-24 20:19:04 +02:00
Christian Fraß 0b303849a8 Merge branch 'dev-murmur_tls' into 'main' 
Murmur | TLS

See merge request roydfalk/ansible-base!9
 2024-06-17 08:09:48 +00:00
Christian Fraß 9d1f829cd7 [mod] role:authelia:info 2024-06-15 10:28:51 +02:00
Christian Fraß c176793364 Apply 2 suggestion(s) to 1 file(s) 2024-06-14 06:24:39 +00:00
Christian Fraß 18d6564083 [fix] role:vikunja 2024-06-10 16:47:34 +02:00
Christian Fraß 0f0640c027 [mod] role:murmur:tls 2024-06-10 16:35:52 +02:00
Christian Fraß a3296a4023 [fix] role:synapse-and-lighttpd 2024-06-09 18:24:58 +02:00
Christian Fraß a60fdd3935 [fix] roles:hedgedoc-and-lighttpd 2024-06-09 18:24:37 +02:00
Christian Fraß 8023d8e2a5 [fix] role:hedgedoc-and-nginx 2024-06-09 18:24:15 +02:00
Christian Fraß af476b4ffc [fix] role:vikunja 2024-06-09 17:39:28 +02:00
Christian Fraß 07d382b80d [fix] roles:vikunja 2024-06-09 13:04:47 +02:00
Christian Fraß fc925d491a [fix] role:tlswert_acme_inwx 2024-06-09 12:54:47 +02:00
Christian Fraß e175c56d61 [fix] role:nginx 2024-06-09 12:46:26 +02:00
Christian Fraß 4500492ad6 [mod] role:vikunja:tls hardening 2024-06-09 11:11:17 +02:00
Christian Fraß 66dff8e58b [fix] role:vikunja 2024-06-09 11:08:24 +02:00
Christian Fraß 758136b40f Merge remote-tracking branch 'origin/main' into dev-vikunja 2024-06-09 11:06:31 +02:00
Christian Fraß 6fe4f5fd56 [res] 2024-06-09 11:04:57 +02:00
Christian Fraß a6169291f6 Merge branch 'dev-ufw' into 'main' 
Add ufw role

See merge request roydfalk/ansible-base!3
 2024-06-09 09:03:26 +00:00
Christian Fraß 46e239133d [res] 2024-06-09 11:02:04 +02:00
Christian Fraß d4b7b800ca [res] 2024-06-09 11:01:34 +02:00
Christian Fraß 3f0f265554 [res] 2024-06-09 11:00:09 +02:00
Christian Fraß aac2308647 [res] 2024-06-09 10:58:24 +02:00
Christian Fraß a47662cdaa [fix] role:nginx 2024-06-06 14:51:10 +02:00
Christian Fraß 958630599d [fix] role:nginx 2024-06-06 14:50:15 +02:00
Christian Fraß 8084f33676 [fix] role:authelia 2024-06-06 14:48:40 +02:00
Christian Fraß 888fdda75b [fix] role:authelia 2024-06-06 14:48:36 +02:00
Christian Fraß 9a886a2df9 [fix] role:nginx 2024-06-06 14:48:31 +02:00
Christian Fraß 8b47912f46 [res] 2024-06-06 14:48:27 +02:00
Christian Fraß 8a0a4dd778 [fix] role:authelia:vardef 2024-06-05 20:00:55 +02:00
Christian Fraß 93cf4a2895 [fix] role:vikunja 2024-06-05 20:00:46 +02:00
Christian Fraß 156f94fb3f [fix] role:authelia:vardef 2024-06-05 20:00:23 +02:00
Christian Fraß c62ae6e42f [fix] role:authelia-for-vikunja 2024-06-04 10:04:20 +02:00
Christian Fraß cc922b910d [mod] role:vikunja:more config variables 2024-06-04 10:04:01 +02:00
Christian Fraß e442272e18 [add] role:postgresql-for-vikunja 2024-06-04 10:03:33 +02:00
Christian Fraß 70bd2098b0 [add] role:authelia-for-vikunja [add] vikunja [add] vikunja-and-nginx 2024-06-04 08:52:31 +02:00
Christian Fraß e89702bf75 [mod] role:authelia:add var "password_reset_custom_url" 2024-06-04 00:01:37 +02:00
Christian Fraß f62ffeeeb8 [res] 2024-06-04 00:01:31 +02:00
Christian Fraß a7794303ea [res] 2024-06-04 00:01:05 +02:00
Christian Fraß da1ad77dab [res] 2024-06-03 23:59:58 +02:00
Christian Fraß d912a168a2 [mod] role:authelia 2024-06-01 19:26:22 +02:00
Christian Fraß aeac7cceab [sty] roles:tls hardening:format 2024-06-01 18:14:21 +02:00
Christian Fraß c7c9e6895c [fix] roles with ufw incocation 2024-06-01 17:56:28 +02:00
Christian Fraß 2ac8c9c4c3 [fix] role:ufw:add missing become:true directives [mod] role:ufw:use fully qualified names for ansible tasks 2024-06-01 13:49:11 +02:00
Christian Fraß 434c901173 [mod] role:system-basics renamed to system_basics 2024-06-01 13:47:47 +02:00
Christian Fraß 0e913099e6 [fix] role:system-basics:add missing become:true directives [mod] role:system-basisc:also install htop and tmux 2024-06-01 13:47:20 +02:00
Christian Fraß 8d57e57df8 [mod] role:unattended-upgrades renamed to unattended_upgrades 2024-06-01 13:44:51 +02:00
Christian Fraß 715d39716c [fix] install required packages [fix] add missing become:true directives [mod] use fully qualified names for ansible tasks 2024-06-01 13:43:40 +02:00
Marius Melzer 389b171401 Apply review comments 2024-04-24 20:03:44 +02:00
Christian Fraß e70ab02fed Apply 6 suggestion(s) to 2 file(s) 2024-04-24 17:38:11 +00:00
Christian Fraß 882286e1a7 Apply 1 suggestion(s) to 1 file(s) 2024-04-24 17:33:35 +00:00
Marius Melzer 65b00c8840 Add ufw role 
- Enable ufw and by default deny incoming traffic
- in other roles: if ufw (role) is enabled, then allow necessary ports
 2024-04-20 17:08:39 +02:00
Marius Melzer fcad5b9354 Add unattended upgrades 
Enable unattended upgrades and triggers unattended reboots (23:55 after an
upgrade which needs reboot).

Attention: this is specific to debian-style linux systems (Debian, Ubuntu,...).
 2024-04-20 15:24:38 +02:00
Marius Melzer 139ba7504a Add system-basics role 
- set time zone
- limit journal size
- set vim as editor
- limit ssh login to pubkey
 2024-04-20 15:23:38 +02:00
Marius Melzer dcc52b04cc Generate dhparams instead of using a checked in file 2024-04-20 13:11:26 +02:00
Marius Melzer a03e50c933 Harden nginx ssl/tls config 
According to https://ssl-config.mozilla.org/
 2024-04-19 00:28:45 +02:00
Christian Fraß 7f555a86c3 [mod] role:gitlab:SMTP-Anbindung hinzugefügt 2024-04-14 11:23:32 +02:00
Christian Fraß a209387e20 [add] role:synapse:vardef 2024-04-12 20:19:57 +02:00
Christian Fraß 6c4e68298b [mod] role:synapse:Schalter für federation 2024-04-05 13:39:26 +02:00
Christian Fraß 00049a180d [fix] role:dokuwiki 2024-04-05 13:31:43 +02:00
Christian Fraß 59211fba86 [int] 2024-03-29 17:21:05 +01:00