aboutsummaryrefslogtreecommitdiffstats
path: root/roles
Commit message (Collapse)AuthorAgeFilesLines
* web/sites: Add 'w.233233.xyz'Aaron LI2019-09-221-0/+124
|
* web/sites: Update certificate pathsAaron LI2019-09-228-18/+18
|
* web: Remove obsolete 'acme-client' related codeAaron LI2019-09-226-199/+0
|
* web: Use 'acme.sh' to issue and renew certificatesAaron LI2019-09-224-75/+123
| | | | The 'acme-client' seems obsolete and is missing from DPorts.
* web: Add 'nginx' tagAaron LI2019-09-221-1/+11
|
* vars: Introduce 'web.acme_webroot'Aaron LI2019-09-221-1/+1
|
* web: Only create the basic site for ACMEAaron LI2019-09-211-2/+4
|
* security: Use cron to expire PF table instead of daily periodic taskAaron LI2019-09-212-42/+7
|
* security: Use 'service' module instead of rcrestart/rcreloadAaron LI2019-09-211-2/+6
|
* zones/liwt.net: Do not hardcode subdomainsAaron LI2019-09-211-6/+16
| | | | | Also reject the 'mail' subdomain from creating the CNAME record, because the 'mail' is used to create the MX record.
* zones/233233.xyz: Do not hardcode subdomainsAaron LI2019-09-211-1/+11
|
* dns/nsd: Add IPv6 AXFR address for ns2.afraid.orgAaron LI2019-09-211-2/+4
|
* basic: Add static IPv6 settingsAaron LI2019-09-211-0/+30
|
* zones/aaronly.me: Remove "dorm-x42", "office", "cluster"Aaron LI2019-09-211-3/+0
|
* dns: Add tags "unbound" and "nsd"Aaron LI2019-09-211-3/+20
|
* dns: Fetch initial anchor for unboundAaron LI2019-09-211-0/+6
|
* dns: Use "service" module instead of rcrestart/rcreloadAaron LI2019-09-211-4/+12
|
* bootstrap: Use the 'service' module instead of ad-hoc commandAaron LI2019-09-191-1/+3
|
* shadowsocks: Use the 'service' module instead of ad-hoc commandAaron LI2019-09-192-2/+6
|
* shadowsocks: Minor tweaksAaron LI2019-09-192-2/+3
|
* Update pkgng usage and fix package namesAaron LI2019-09-196-32/+26
| | | | | | Fix package names: * vim-lite => vim-console * uwsgi-py36 => uwsgi
* bootstrap: Disable password login for SSHAaron LI2019-09-191-0/+8
|
* znc: Update the wiki URLAaron LI2018-12-201-1/+1
|
* basic: Enable all.log and tweak syslogd flagsAaron LI2018-12-201-0/+23
|
* radicale: Do not bother to rotate the log fileAaron LI2018-12-201-6/+0
| | | | | | | | | | | Without running radicale in debug mode, the log file is quite small, so do not bother to rotate it. Actually, it's hard to configure uwsgi to properly rotate the log file: when the uwsgi worker accepts the 'HUP' signal and restart, it doesn't have priviledge to create the socket file and thus failed. If, on the other hand, the uwsgi isn't stopped properly, it will leave SysV semaphores in use, and finally exaust all semaphores.
* Fix uwsgi socket owner in rc.confAaron LI2018-12-202-0/+2
|
* web/sites: Add 233233.d.conf to proxy to duckduckgo.comAaron LI2018-12-011-0/+78
|
* dns: Add CNAME d.233233.xyzAaron LI2018-12-011-1/+1
|
* Port to Ansible 2.7Aaron LI2018-12-013-11/+21
|
* security/pf: Allow the ports of all shadowsocks instancesAaron LI2018-06-241-2/+3
|
* shadowsocks: Support multiple instances (share with others)Aaron LI2018-06-244-20/+139
| | | | | | | Add the "shadowsocks" rc script that allows multiple instances (based on the uwsgi rc script). Update the role and vars to setup two shadowsocks instances.
* git: remove obsolete git-shell-commands files and vars.conf.j2Aaron LI2018-05-1511-381/+0
|
* git: remove some obsolete settingsAaron LI2018-05-151-48/+34
|
* git: configure gitolite with cgitAaron LI2018-05-152-2/+5
|
* git/gitolite: update configAaron LI2018-05-151-2/+2
|
* git: update github keyname to be keyfile to the full path to the keyAaron LI2018-05-141-3/+3
|
* git: Use gitolite to replace the git-shell shipped with gitAaron LI2018-05-142-16/+254
|
* mail/dovecot: change sieve directory ownershipAaron LI2018-05-052-7/+3
|
* security/clean-pf: log cleaned ip addressAaron LI2018-05-051-1/+1
|
* git/cgit: copy script and install highlightAaron LI2018-04-181-0/+7
|
* git: Update git shell commands; add git-cmds tagAaron LI2018-04-184-4/+6
|
* Add git role: host git repos and share repos via cgitAaron LI2018-04-1818-3/+779
| | | | | | * Host git repositories * Share git repositories through web interface via cgit * The static resources used by cgit is also managed/deployed by a git repo ^_^
* web: Fix private path for the dhparam fileAaron LI2018-04-181-3/+3
|
* mail/dovecot: update config file to dovecot v2.3Aaron LI2018-04-181-14/+3
|
* basic/periodic: Inline daily security statusAaron LI2018-04-162-6/+12
|
* web/sites: rename liwt.git.conf.j2 to liwt.cgit.conf.j2Aaron LI2018-04-111-2/+1
|
* radicale: setup git repoAaron LI2018-04-111-0/+22
|
* web/sites: Clean up liwt.radicale.confAaron LI2018-04-101-18/+4
|
* web/sites: Fix reload-nginx after generating sitesAaron LI2018-04-102-1/+1
|
* web/sites: Also check availability of 'radicale' and 'cgit'Aaron LI2018-04-102-2/+2
|
Copyright © 2017-2018 Aaron LI. All Rights Reserved.