aboutsummaryrefslogtreecommitdiffstats
path: root/roles
Commit message (Collapse)AuthorAgeFilesLines
* radicale: Do not bother to rotate the log fileAaron LI2018-12-201-6/+0
| | | | | | | | | | | Without running radicale in debug mode, the log file is quite small, so do not bother to rotate it. Actually, it's hard to configure uwsgi to properly rotate the log file: when the uwsgi worker accepts the 'HUP' signal and restart, it doesn't have priviledge to create the socket file and thus failed. If, on the other hand, the uwsgi isn't stopped properly, it will leave SysV semaphores in use, and finally exaust all semaphores.
* Fix uwsgi socket owner in rc.confAaron LI2018-12-202-0/+2
|
* web/sites: Add 233233.d.conf to proxy to duckduckgo.comAaron LI2018-12-011-0/+78
|
* dns: Add CNAME d.233233.xyzAaron LI2018-12-011-1/+1
|
* Port to Ansible 2.7Aaron LI2018-12-013-11/+21
|
* security/pf: Allow the ports of all shadowsocks instancesAaron LI2018-06-241-2/+3
|
* shadowsocks: Support multiple instances (share with others)Aaron LI2018-06-244-20/+139
| | | | | | | Add the "shadowsocks" rc script that allows multiple instances (based on the uwsgi rc script). Update the role and vars to setup two shadowsocks instances.
* git: remove obsolete git-shell-commands files and vars.conf.j2Aaron LI2018-05-1511-381/+0
|
* git: remove some obsolete settingsAaron LI2018-05-151-48/+34
|
* git: configure gitolite with cgitAaron LI2018-05-152-2/+5
|
* git/gitolite: update configAaron LI2018-05-151-2/+2
|
* git: update github keyname to be keyfile to the full path to the keyAaron LI2018-05-141-3/+3
|
* git: Use gitolite to replace the git-shell shipped with gitAaron LI2018-05-142-16/+254
|
* mail/dovecot: change sieve directory ownershipAaron LI2018-05-052-7/+3
|
* security/clean-pf: log cleaned ip addressAaron LI2018-05-051-1/+1
|
* git/cgit: copy script and install highlightAaron LI2018-04-181-0/+7
|
* git: Update git shell commands; add git-cmds tagAaron LI2018-04-184-4/+6
|
* Add git role: host git repos and share repos via cgitAaron LI2018-04-1818-3/+779
| | | | | | * Host git repositories * Share git repositories through web interface via cgit * The static resources used by cgit is also managed/deployed by a git repo ^_^
* web: Fix private path for the dhparam fileAaron LI2018-04-181-3/+3
|
* mail/dovecot: update config file to dovecot v2.3Aaron LI2018-04-181-14/+3
|
* basic/periodic: Inline daily security statusAaron LI2018-04-162-6/+12
|
* web/sites: rename liwt.git.conf.j2 to liwt.cgit.conf.j2Aaron LI2018-04-111-2/+1
|
* radicale: setup git repoAaron LI2018-04-111-0/+22
|
* web/sites: Clean up liwt.radicale.confAaron LI2018-04-101-18/+4
|
* web/sites: Fix reload-nginx after generating sitesAaron LI2018-04-102-1/+1
|
* web/sites: Also check availability of 'radicale' and 'cgit'Aaron LI2018-04-102-2/+2
|
* radicale: Use the default path of uwsgi socketAaron LI2018-04-102-2/+1
|
* radicale: Fix log rotationAaron LI2018-04-101-2/+2
|
* radicale: add 'git' variable to toggle versioning with gitAaron LI2018-04-101-1/+4
|
* radicale: use full path to git; rotation log fileAaron LI2018-04-092-1/+7
|
* Add radicale role: lightweight {Card,Cal}DAV serverAaron LI2018-04-097-0/+277
| | | | WARNING: py36-radicale2 needs manual installation at the moment.
* web/acme: tag acme and acme-renew; add deploy-acme handlerAaron LI2018-04-092-0/+21
|
* dns/zones: use dav to replace {card,cal}dav; clean aaronly.meAaron LI2018-04-093-8/+4
|
* dns/zones: tweak space after ";"Aaron LI2018-04-092-6/+6
|
* mail/postfix: improve tls settings a bitAaron LI2018-04-091-72/+70
|
* dns/zones: improve dmarc recordAaron LI2018-03-222-2/+16
|
* web/acme: no need to check & link /etc/ssl/cert.pemAaron LI2018-03-181-4/+0
| | | | Already been fixed in new ca_root_nss package.
* mail/dovecot: store pass in ansible vault and hash from thereAaron LI2018-03-172-15/+13
|
* znc: Add filter znc_makepass, improve templating with ipv4+ipv6Aaron LI2018-03-171-3/+11
|
* znc: simply and improve listeners templatingAaron LI2018-03-161-14/+9
|
* znc: move data dir to /home/znc, listen on ipv4 & ipv6, fix reloadAaron LI2018-03-154-28/+47
|
* security/pf: allow IRC bouncer by ZNCAaron LI2018-03-141-1/+2
|
* Add znc role: IRC bouncerAaron LI2018-03-144-0/+167
|
* web/acme: refactor certificates deploymentAaron LI2018-03-147-14/+76
|
* web/acme: minor improve output formatAaron LI2018-03-142-0/+2
|
* security/sshlockout: the syslog line cannot append to the file end ...Aaron LI2018-03-141-5/+4
|
* dns/zones: add code.aaronly.meAaron LI2018-03-141-1/+1
|
* security/pf: improve <bruteforce> overload ruleAaron LI2018-03-142-20/+21
|
* security: restart syslogd and reload pfAaron LI2018-03-142-0/+5
|
* dns/zones: add mail.aaronly.me CNAMEAaron LI2018-03-141-0/+1
|
Copyright © 2017-2018 Aaron LI. All Rights Reserved.