Jan Christian Grünhage
1dbc371d6b
update(ldap): bump openldap version to 2.6.6-r1
2024-02-22 10:23:47 +01:00
Jan Christian Grünhage
e78876d8cf
update(lego): bump version to 4.15.0
2024-02-14 20:35:38 +01:00
transcaffeine
944298ad54
update(redis): bump version to 7.2.4
2024-02-06 11:16:32 +01:00
Sammy
8e8f496df6
fix(lego): don't unpack source files in check mode
2024-02-02 10:45:58 +01:00
Sammy
4d1fae6b77
fix(user): ignore ssh key errors in check mode
...
In check mode, the task fails if it's supposed to be adding ssh keys to
a user who doesn't exist. Ignoring errors in check mode makes it
possible to run the task in check mode even if there are new users to be
added.
2024-02-02 10:34:16 +01:00
Sammy
8bcc12dfd1
chore(ssh): disallow terrapin-vulnerable ciphers..
...
..and MACs
See https://terrapin-attack.com/
2023-12-19 14:22:25 +01:00
Sammy
74d09b4416
fix(ssh): fix typo that prevented allowed ciphers..
...
from being set in the sshd config
2023-12-19 12:15:37 +01:00
Lars Kaiser
24ae029f01
fix(user): use deploy instead of configure in tags
2023-12-18 13:04:49 +01:00
transcaffeine
7bbae943d2
feat(user): support partial execution with prepare and configure tags
2023-12-15 15:58:32 +01:00
Johanna Dorothea Reichmann
f84376026b
feat(redis): allow not requiring any password to use redis
2023-12-15 13:35:48 +01:00
transcaffeine
c06f6a65be
chore(lego): ensure lego_certificate_store is owned by lego_certificate_store_user
2023-11-29 15:39:52 +01:00
Jan Christian Grünhage
ed8f0158ba
update(lego): bump version to 4.14.2
2023-11-08 23:58:40 +01:00
Jan Christian Grünhage
0a529d92dd
chore(rclone_serve): fix lints
2023-11-08 23:34:39 +01:00
Jan Christian Grünhage
10c34f5a73
fix(lego): systemd unit files should not have the executable bit set
...
We're also making them non world readable, just in case people are
putting secrets in there.
2023-11-08 23:28:43 +01:00
Johanna Dorothea Reichmann
e0c111ba08
chore(rclone_serve): allow adding arguments directly into rclone_serve, update README
2023-11-06 10:34:24 +01:00
Johanna Dorothea Reichmann
777e4f216d
fix(rclone_serve): allow inject remote-path into rclone_serve command
2023-11-06 10:34:23 +01:00
Johanna Dorothea Reichmann
7d7b3462c5
fix(rclone_serve): double-dashed arguments sometimes only get recognised with an equals sign between key and value
2023-11-06 10:34:15 +01:00
Johanna Dorothea Reichmann
457918ad59
update(restic): bump version to 0.16.2
2023-10-31 15:20:21 +01:00
Johanna Dorothea Reichmann
b6a87fc9c9
chore(restic): allow adding commandline parameters to restic backup command
2023-10-31 15:20:20 +01:00
Evelyn Alicke
740799de21
feat(rclone_serve): initial implementation
...
Co-Authored-By: Lars Kaiser <lars@kaiser.yt>
2023-10-25 16:17:52 +02:00
Johanna Dorothea Reichmann
57966a1b68
update(restic): bump version to 0.16.1
...
See https://github.com/restic/restic/releases/tag/v0.16.1
2023-10-25 15:03:53 +02:00
Johanna Dorothea Reichmann
a77bd479ec
feat(restic): add ansible role to run restic in systemd jobs
2023-10-24 15:09:39 +02:00
Sammy
a93da4ab5d
chore(dropbear_luks_unlock): fix lints
2023-10-06 13:33:27 +02:00
Jan Christian Grünhage
f4740fe77f
chore(ssh): update algorithm presets
2023-09-27 13:09:51 +02:00
Jan Christian Grünhage
b426afcced
chore(ssh): configure intersection of set and supported algorithms
...
This is done in preparation of updating the algorithm presets. Adding
new algorithms that aren't supported by older versions of openssh would
break templating, and we don't want to limit ourselves to algorithms
supported by all ssh versions we've got deployed anywhere.
2023-09-27 12:58:30 +02:00
Jan Christian Grünhage
7dc00eb18d
chore(ssh): switch default preset from bsi recommendations to our own
2023-09-27 12:57:19 +02:00
Johanna Dorothea Reichmann
515a07e81f
fix(lego): install acl package to allow becoming an unprivileged user
...
Without the ACL package installed, becoming an unprivileged ansible
user with an unprivileged connection user is not possible, as
it results in an 'invalid mode' error in chmod.
2023-09-23 19:36:37 +02:00
Jadyn Emma Jäger
0eb3432020
fix(dropbear_luks_unlock): Add config paths for latest version with support for Debian <=11
2023-09-16 13:31:13 +02:00
Sammy
9fe9f5c524
update(openldap): bump to 2.6.5 and switch to nexus
2023-09-05 10:11:02 +02:00
Sammy
4457b56528
docs: replace gitlab links with github
2023-09-05 10:10:57 +02:00
Johanna Dorothea Reichmann
64ee704401
chore(postgresql): allow to set maximum memory including swap and controlling the OOM killer
2023-08-28 09:27:57 +02:00
Sammy
491f853285
feat(user): remove home directory of removed users
2023-08-25 12:30:51 +02:00
Sammy
5d7acc5e49
chore(securitytxt): add restart-policy
2023-07-06 16:05:20 +02:00
Jan Christian Grünhage
66b1b5b0aa
fix(lego): remove async execution, as it caused more problems than it ever helped
2023-07-05 13:31:34 +02:00
Jan Christian Grünhage
ebd6de9fff
update(postgresql): bump version to 13.11
2023-07-05 13:31:34 +02:00
Jan Christian Grünhage
c329437b21
update(lego): bump version to 4.12.3
2023-07-05 13:31:30 +02:00
Johanna Dorothea Reichmann
2514d99cf9
update(lego): bump lego version to 4.12.1
2023-06-19 10:29:05 +02:00
Johanna Dorothea Reichmann
d3956c5cbe
feat(lego): add functionality for role to install its own dependencies
2023-06-19 10:29:00 +02:00
Johanna Dorothea Reichmann
12eb1aa48b
fix(lego): compare pubkey against merged configuration and provide a default key type
2023-06-19 10:28:56 +02:00
Jan Christian Grünhage
2ff5fac58d
feat(securitytxt): initial role
2023-04-19 11:57:32 +02:00
Jan Christian Grünhage
ce8d3cd082
chore(redis): migrate to standardized container image variable structure
2023-03-10 10:28:44 +01:00
Jan Christian Grünhage
6e455089e4
chore(postgresql): migrate to standardized container image variable structure
2023-03-10 10:28:44 +01:00
Jan Christian Grünhage
ee42621a3c
chore(ldap): migrate to standardized container image variable structure
2023-03-10 08:14:56 +01:00
Jan Christian Grünhage
6c20ba81b2
feat(lego): generate certificate metrics for the node_exporter textfile collector
2023-03-07 11:43:30 +01:00
Lars Kaiser
7ce4598d29
fix(lego): permissions for acme account
2023-02-28 17:57:35 +01:00
Lars Kaiser
fc44cea83b
fix(lego): build lego run command correctly
2023-02-28 17:51:54 +01:00
Jan Christian Grünhage
d489ec9a00
fix(user): don't remove existing groups if none are provided to be added
2023-02-23 14:35:17 +01:00
Jan Christian Grünhage
9ecdb38fb2
fix(user): only try to append existing groups to a user
2023-02-23 13:14:31 +01:00
Jan Christian Grünhage
12f83dd41c
chore(redis): fix lints in role
2023-02-22 18:35:21 +01:00
Jan Christian Grünhage
354341647f
chore(pip): fix lints in role
2023-02-22 18:35:20 +01:00
