Commit graph

83 commits

Author SHA1 Message Date
6a7110194d Foo 2022-12-29 19:13:28 +01:00
a1fd5f1f91 chore(gitea-ccchb): remove black navibar with black logo) 2022-08-21 13:18:56 +02:00
5662be9478 fix(gitea): update to v1.17.1 - security 2022-08-21 13:02:50 +02:00
Crest
f8704927fb Use path variables for bhyve. Changes #31 2022-07-04 02:58:24 +02:00
Crest
50a3a3d270 Use path variables for Unbound. Changes #31 2022-07-04 02:57:18 +02:00
Crest
53f05a7071 Use path variables for Rspamd. Changes #31 2022-07-04 02:56:34 +02:00
Crest
e7eeb4039a Use path variables for restic. Changes #31 2022-07-04 02:55:56 +02:00
Crest
b00f1a4c44 Use path variables for Redis. Changes #31 2022-07-04 02:54:03 +02:00
Crest
6a8cee385b Use path variables for Postfix. Changes #31 2022-07-04 02:53:23 +02:00
Crest
96b6c8fe4b Use path variables for OpenNTPD. Changes #31 2022-07-04 02:49:53 +02:00
Crest
8f23dd83b0 Use path variables for NSD. Changes #31 2022-07-04 02:47:17 +02:00
Crest
493a459466 Use path variables for mlmmj. Changes #31 2022-07-04 02:46:45 +02:00
Crest
6f18f4a005 Use path variables for HAProxy. Changes #31 2022-07-04 02:46:09 +02:00
Crest
b9d4e0b0d0 Use s6 path variables for Dovecot
Updates #31
2022-07-04 02:44:47 +02:00
Crest
803ebdbded Improve s6-rc rc.d script
* Deduplicate path literals
	* Pass live directory to s6-rc invocations

Changes #31
2022-07-04 02:42:22 +02:00
Crest
050fb34846 Deduplicate path literals
Changes #31
2022-07-04 02:41:15 +02:00
Crest
09cf6f693b Update account.json location.
Closes #30.
2022-07-01 15:25:52 +02:00
Crest
428f4be8da Add --email to acme.sh invocation.
Closes #28.
2022-07-01 13:56:31 +02:00
64fb3f2ff3 mediawiki: Enable OATHAuth module 2022-02-18 07:54:22 +00:00
Crest
1294722061 Restore docloc@ alias 2021-12-03 13:53:36 +01:00
Crest
ce8978725d Add alias thoddi@ccchb.de -> mail@thoddi.de 2021-11-30 11:56:29 +01:00
4ac1006e98 roles/nextcloud: update to new configuration 2021-07-11 23:43:16 +02:00
Crest
b8f2306667 Merge branch 'master' of ssh://dev.ccchb.de:2222/ccchb/ansible 2021-03-31 00:57:26 +02:00
c5ecf1df63 Enable HSTS for mediawiki 2021-03-10 11:30:18 +00:00
3c1aed2eee role/nginx: add timer for dehydrated / lets encrypt
fixed #21
2021-03-06 18:51:00 +01:00
aa2063743c NSD configuration for patterns 2021-02-28 13:56:30 +00:00
036f12630c Enable APC cache in wiki 2021-02-28 03:10:24 +00:00
ff8ad02776 Mete role 2021-02-16 23:38:59 +00:00
Crest
faaa5c71a5 Merge branch 'master' of ssh://dev.ccchb.de:2222/ccchb/ansible 2021-02-10 15:33:15 +01:00
Crest
25167bc296 Implement the requested features (as far as possible) 2021-02-10 15:32:59 +01:00
ed30097745 First draft for a prosody role 2021-02-03 00:04:38 +00:00
fdd1e5ce35 Handle nginx configuration in mediawiki role 2021-02-02 22:02:44 +00:00
d5a03479af New certbot role covering standalone and webroot setups 2021-02-02 21:49:20 +00:00
cba94e7929 Manage secrets outside Ansible 2021-02-02 18:29:48 +00:00
c2ea9c6600 Hacky mediawiki role 2021-02-02 18:27:37 +00:00
058910b93a Finish the mail setup. Closes #10. 2021-02-01 02:45:58 +01:00
060ba82d42 Perform daily backups. Close #22 2021-01-31 20:25:31 +01:00
03c34b1216 s6-svscan lost its -s flag with the 2.10.0 release 2021-01-31 19:20:46 +01:00
07a61ac55f Add mlmmj map 2021-01-31 19:18:31 +01:00
c49a79fe20 Update gitea submodule? 2021-01-31 19:17:40 +01:00
98a412c27b Renew Let's Encrypt certificates 2021-01-31 19:16:27 +01:00
925499223e Use correct handlers 2021-01-04 23:33:42 +01:00
68c6b53f68 gitea update 2020-12-14 23:53:27 +01:00
531b7ef276 Reenable redis dependency 2020-10-27 21:09:38 +01:00
c18f53b8ea Add rspamd support.
Postfix uses the Rspamd proxy as spam filtering milter
and HAProxy exposes the Rspamd webinterface through HTTPS.

Updates #10
2020-10-26 23:46:16 +01:00
28fbdff74b Make HAProxy use its new chroot jail in /var/run/haproxy.
Fixes #19
2020-10-26 23:31:57 +01:00
97daf854d0 Add the missing sender_access map to Postfix's configuration.
Updates #18
2020-10-24 19:34:42 +02:00
0a6b680cda Write a role to setup a Redis instance.
The role expects two parameters:

  * `redis_instance`: the instance name
  * `redis_client_group`: the group allowed to access the instance's unix socket

Fixes #17
Updates #10
2020-10-24 14:07:10 +02:00
593d8deddf Only delete old service databases after a *successful* update 2020-10-24 05:25:49 +02:00
36e65e6fe3 Install and configure nsd and unbound on emma.ccchb.de
Fixes #15
2020-10-23 19:37:15 +02:00