sovereign

Commit Graph

작성자	SHA1	메시지	날짜
Laurent Arnoud	89d47731ff	Add molly-guard and unattended-upgrades as common pkgs	10 년 전
Alex Payne	b11fb68559	Automatically set up passwordless sudo for deploy user. Closes #343.	10 년 전
Aleksandr Bogdanov	a849948e8d	Choosing the closest ubuntu mirror before anything else	10 년 전
Sven Neuhaus	ae58053653	Create /decrypted directory even if encfs is not used. Helps with issue #120.	10 년 전
Sven Neuhaus	d5217ea1cd	Create main user without "fuse" group, instead add it later as part of the "encfs" tag. This allows the user to make encfs optional. Helps with issue #120.	10 년 전
Marius Voila	b13ab39f11	cleaning security.yml	10 년 전
fengor	7ed46f590c	renamed templates to be consistent with coding standard. removed comment line in ssh_config	10 년 전
fengor	2fd1e1b722	readded google authenticator lines	10 년 전
fengor	224e8cb339	Setting timezone to UTC	10 년 전
fengor	39566abb6c	More secure defaults for ssh. Ciphers, Kex and MAC can be set via defaults.var	10 년 전
Marius Voila	e62bd7c71a	fail2ban support for Trusty	10 년 전
Anthony Perez-sanz	cdf9ed07bb	Enable UFW after setting firewall rules On fresh installs of Debian 7.6, the current order of steps will lock you out of SSH. This will enable UFW after creating rules for http, https, ssh, and DNS. Fix comes from @Debugreality in issue #303: https://github.com/al3x/sovereign/issues/303	10 년 전
Lorenzo Villani	5d1090d488	Make sure fail2ban is started	11 년 전
Lorenzo Villani	d5ecf673d3	Calm OCD by sorting almost every with_items block in alphabetical order	11 년 전
Lorenzo Villani	e7703d0d9c	Add support for Apache 2.4 on Ubuntu 14.04	11 년 전
Lorenzo Villani	e2e61a2f76	Install 'fuse' instead of 'fuse-utils' The 'fuse-utils' package doesn't exist on Ubuntu 14.04 and is marked as a transitional package on both Debian 7 and Ubuntu 12.04 that installs the 'fuse' package. Since Debian 7 is the officially supported distribution we can safely switch to install 'fuse' instead of 'fuse-utils' and we also gain compatibility with Ubuntu 14.04.	11 년 전
Sven Neuhaus	63ba754eb7	libpam-google-authenticator uses distribution package on Ubuntu 14.04	11 년 전
Gelnior	7995bac36c	put back enc.fs (removed by mistake)	11 년 전
Gelnior	bd57edd5a5	newebe config: fix Newebe config file task	11 년 전
Justin Plock	1d7986fd96	Enable UFW and deny everything by default Removed unused status checks on UFW	11 년 전
Justin Plock	ea0b288818	Moved ufw firewall rules into individual roles	11 년 전
Justin Plock	ed75c9469b	libpam-dev didn't exist for some people so switching to libpam0g-dev instead	11 년 전
Justin Plock	e88fb57cba	Skip the google authenticator generation if we're running as vagrant. Vagrant can't sudo to the sovereign test user so this won't work.	11 년 전
Justin Plock	2d751ab680	The .google_authenticator file has to be generated by the user that is going to attempt to use it. Also, -W doesn't seem to work (results an in INVALID_WINDOW error in /var/log/auth.log), so use -w 1 to allow for a single concurrent token	11 년 전
Justin Plock	c037dce07a	Clarified parameters are bit in a comment	11 년 전
Justin Plock	22a8717f6d	Automatically generate the Google authenticator file for the default user	11 년 전
Justin Plock	84c9febec7	Added Google Authenticator 2FA logins	11 년 전
Justin Plock	89f018bd23	In preparation for using any 2FA solution, it will most likely need to modify sshd_config, so let's change the file in place instead of overwriting it completely.	11 년 전
Justin Plock	9f918363b9	Set a ServerName for apache (fixes #187)	11 년 전
Benjamin Reitzammer	d957760697	Making main user's shell configurable	11 년 전
Justin Plock	3b0308d69e	Allow both TCP and UDP port 53 for DNS lookups through OpenVPN	11 년 전
Joost Baaij	4837d2e87a	extract NTP logic	11 년 전
Joost Baaij	2033c37982	Enabled unattended-upgrades This works on Debian/Ubuntu only. There are similar packages for other distributions, but they still need manual configuration. It seemed better to go for the common denominator. unattended-upgrades is usually installed by default anyway, so we are just reinforcing best practices.	11 년 전
Joost Baaij	335cef5c9f	Enabled POP3S for old-timeys who dig that added dovecot-pop3d allowed in the firewall monitored with monit added relevant tests	11 년 전
Joshua Lund	4ed07a1e0a	* Made the OpenVPN port and protocol (tcp/udp) configurable * Added 'cipher' and 'auth' lines to the generated client configs	11 년 전
Luke Cyca	4bc4cebf41	Explicit permissions for all cert files	11 년 전
Luke Cyca	76d52b63f3	XMPP cert handling improvements, ufw rules, and tests	11 년 전
Alex Payne	f7f7157cec	more updated variable formatting and accommodation of the YAML parser being a fussbudget	11 년 전
Alex Payne	34d7595c0b	ensure we can install from third-party repos across playbooks	11 년 전
Alex Payne	d28f0f82b9	move to non-deprecated template variable formatting	11 년 전
Luke Cyca	2f145ce543	Two small apache-related fixes	11 년 전
Luke Cyca	37a0400c22	Standardize apache’s 301 redirect to https, and enable HSTS	11 년 전
Luke Cyca	bdab1cd6b1	Reworked ufw logic to not use change_when keyword because it's not available in a stable ansible release yet	11 년 전
Allen Riddell	5b8ba840a4	workaround ufw bug, call ufw enable twice	11 년 전
Allen Riddell	ae0d1ca8f4	Ignore ufw error resulting from known bug on Debian 7 In order to check the version of the linux distribution we need to set `gather_facts` to True. Closes #73.	11 년 전
Luke Cyca	7043143f90	Improved idempotency and removed ip detection for checkrbl	11 년 전
Allen Riddell	88705bb7fa	Replace ferm with ufw	12 년 전
Bertrand Cachet	373cb4584b	add(apticron): configure email Apticron is configured to send email to {{ admin_email }}	12 년 전
Luke Cyca	c697e135e9	Move NameVirtualHost directives to ports.conf	12 년 전
Alex Payne	f27442b678	move tarsnap to its own role	12 년 전

처음 이전 1 2 다음 마지막

67 커밋 (d64b71e3834384f15146df36c9ca16e64e6b9e8a)