infrastructure/roles
Sven-Hendrik Haase 535bc648de Fix packer build
- Switch to zstd as new grub now supports btrfs and zstd.
- Go back to good old sgdisk as ansible's parted is pretty buggy.
- Upgrade bootstrap version.
- Remove base-devel to decrease image size and we don't really need it everywhere.
2019-08-09 20:14:00 +02:00
..
arch-boxes Update arch-boxes to 1.1.3 2018-10-06 00:14:11 +02:00
arch32_mirror nginx: Reduce access log content for static data 2018-05-30 16:00:41 +02:00
archbuild archbuild: Also skip log files 2019-06-26 20:45:57 +02:00
archive archive: Redirect /packages/*/$pkg to archive.org 2019-08-06 20:29:05 +02:00
archusers archusers: Change shell for jerome to zsh 2019-04-03 16:48:32 +02:00
archweb archweb: update to latest release 2019-08-05 14:45:00 +02:00
archwiki archwiki: Block Bytespider search bot 2019-06-22 17:13:57 +02:00
borg-client borg-client: Replace xtrabackup with mariabackup 2019-07-28 11:13:06 +02:00
borg-server/tasks borg-client: Adapt for FQDN 2017-09-06 20:52:42 +02:00
certbot certbot/nginx: Reload nginx via hook instead of directly in the certbot 2019-05-14 23:31:55 +02:00
common roles/common: Start auditd by default 2019-08-02 12:37:30 +02:00
conf.archlinux.org conf: redirect /2019/ to conf.archlinux.org 2019-06-05 17:45:38 +02:00
crond/tasks Enable cpu/memory accounting by default 2018-06-25 14:50:58 +02:00
dbscripts verify if the git commit was signed 2019-01-29 20:20:35 +01:00
docker-image Give sangy sudo to docker-image user 2018-08-07 19:43:02 +02:00
dovecot add "firewall" tag to all relevant tasks 2018-08-17 14:56:37 +10:00
firewalld Track firewalld.conf 2018-09-06 01:01:25 +02:00
flyspray Enable cpu/memory accounting by default 2018-06-25 14:50:58 +02:00
grafana grafana: Limit cookies to HTTPS 2019-02-27 16:14:26 +01:00
hardening roles: add a hardening role for sysctl hardening options 2019-05-07 21:07:14 +02:00
hefur orion: migrate torrent tracker from luna to orion 2018-12-27 19:58:53 +01:00
install_arch Fix packer build 2019-08-09 20:14:00 +02:00
kanboard Harden kanboard cron service 2019-01-19 21:27:06 +01:00
mailman nginx: Reduce access log content for static data 2018-05-30 16:00:41 +02:00
mariadb mariadb: Add TODO for zabbix agent access 2019-08-07 19:31:28 +02:00
matrix matrix: Update homeserver config from sample_config.yaml 2019-07-25 19:37:40 +02:00
memcached roles/memcached: Initial work on the memcached role. 2016-12-27 14:13:53 -02:00
nginx certbot/nginx: Reload nginx via hook instead of directly in the certbot 2019-05-14 23:31:55 +02:00
oidentd add "firewall" tag to all relevant tasks 2018-08-17 14:56:37 +10:00
opendkim Enable cpu/memory accounting by default 2018-06-25 14:50:58 +02:00
patchwork Update patchwork to 2.1.4 2019-07-05 13:46:01 +02:00
php-fpm php: Merge upstream php.ini changes 2019-04-07 10:50:20 +02:00
phpinfo Tag nginx configs in roles as nginx 2018-02-19 21:41:14 +01:00
phrik phrik: add pkgfile as requirement 2019-07-28 19:59:59 +02:00
planet planet: harden planet generation service 2019-01-23 14:19:38 +01:00
postfix add "firewall" tag to all relevant tasks 2018-08-17 14:56:37 +10:00
postfwd Enable cpu/memory accounting by default 2018-06-25 14:50:58 +02:00
postgres postgres: Install SSL certs before starting postgres 2019-03-24 17:37:45 +01:00
public_html public_html: update css for archnav bar 2019-02-24 20:36:23 +01:00
quassel quassel: Fix ident config 2019-04-25 22:23:39 +02:00
root_ssh Remove dragon.archlinux.org 2018-09-06 00:58:42 +02:00
security_tracker security_tracker: update tracker to latest stable 2019-03-29 22:37:59 +01:00
sogrep roles/sogrep: Remove obsolete files/sogrep script 2019-06-09 17:54:16 +03:00
sources nginx: Reduce access log content for static data 2018-05-30 16:00:41 +02:00
spampd spampd: Remove service override 2019-05-15 17:09:32 +02:00
sshd roles/sshd: Simplification of the template check for a build server 2019-04-12 15:15:10 -03:00
sudo/tasks Remove angvp sudo access 2018-06-06 16:53:19 +02:00
syncrepo syncrepo: create nginx log dir iff mirror_domain is defined 2019-03-20 02:03:37 +02:00
terraform_state terraform_state: Grant all permissions for terraform db 2019-03-31 04:19:56 +02:00
tools/tasks tools: Add git and its perl-term-readkey optdep 2019-07-03 22:16:12 +02:00
unbound unbound: Merge package config changes: Disable forking in config 2018-08-07 15:23:55 +02:00
uwsgi roles/uwsgi: Added uwsgitop to the uwsgi role 2016-12-23 20:02:13 -02:00
wkd wkd: Skip revoked keys 2019-08-07 19:26:46 +02:00
zabbix-agent zabbix: Let systemd.unit.is-enable always return a boolean 2019-07-13 13:29:43 +02:00
zabbix-server zabbix-server: Check the exit code when checking if the db is populated 2018-11-19 17:11:30 +01:00