aboutsummaryrefslogtreecommitdiffstats
path: root/roles
Commit message (Expand)AuthorAgeFilesLines
* mail: setup postfix with dovecot (SASL auth + LDA virtual transport)Aaron LI2018-03-149-10/+1154
* mail: setup dovecot seviceAaron LI2018-03-146-0/+594
* vars: add "mail.user" for the virtual mail user infoAaron LI2018-03-141-6/+6
* web: create files/{acme,nginx} to organize files betterAaron LI2018-03-146-5/+4
* mail/aliases: forward root's mailsAaron LI2018-03-142-0/+10
* mail: create vmail group and userAaron LI2018-03-141-0/+34
* mail: install dovecot-pigeonholeAaron LI2018-03-142-2/+3
* bootstrap: ignore errors & changes when check group & userAaron LI2018-03-141-0/+4
* mail/opendkim: Fix tables templating; update config; add handlerAaron LI2018-03-143-8/+9
* dns: update tag zonesAaron LI2018-03-141-1/+1
* mail: setup opendkim config filesAaron LI2018-03-145-8/+201
* basic: install csh config fileAaron LI2018-03-142-0/+59
* web: acme deploy check service running statusAaron LI2018-03-141-2/+6
* add tags: zones, sitesAaron LI2018-03-142-0/+3
* add mail role: preliminary, setup DKIM keysAaron LI2018-03-142-0/+73
* dns/zones: use DNS SOA variablesAaron LI2018-03-144-24/+20
* dns/zones: add DKIM recordAaron LI2018-03-142-2/+6
* dns: refactor nsd zones generation to support DKIM recordAaron LI2018-03-142-19/+37
* web: setup acme periodic tasks for cert renewalAaron LI2018-03-141-2/+12
* web: add nginx sitesAaron LI2018-03-148-0/+543
* Add web role: nginx and acme-client (SSL/TLS cert)Aaron LI2018-03-1410-0/+558
* Add security role: PF firewall, sshlockoutAaron LI2018-03-144-0/+450
* basic: enable syslog of console.logAaron LI2018-03-141-1/+13
* dns/zones: add zone aaronly.me; update zone liwt.net with mail recordsAaron LI2018-03-142-4/+56
* dns/nsd: use fileglob lookup to help zones templating; also check zone filesAaron LI2018-03-141-4/+20
* dns: validate unbound and nsd config file before updateAaron LI2018-03-141-6/+8
* dns/nsd: clean config file a bit, increase verbosity to 1Aaron LI2018-03-141-11/+4
* dns/unbound: disable chroot for easier syslog settingsAaron LI2018-03-141-3/+8
* basic: fix vim setting block markerAaron LI2018-03-141-0/+1
* dns: update zones templates and add liwt.net zoneAaron LI2018-03-144-36/+80
* var: update domains and nsd.conf.j2Aaron LI2018-03-141-1/+1
* minor updatesAaron LI2018-03-141-2/+2
* shadowsocks: rename var server_port to portAaron LI2018-03-142-2/+2
* basic: install rsync and htopAaron LI2018-03-141-0/+3
* basic: add basic settings for vimAaron LI2018-03-141-0/+7
* basic: tune some settings in rc.conf and loader.confAaron LI2018-03-141-0/+22
* basic: disable pkg repo auto updateAaron LI2018-03-141-1/+7
* bootstrap: install sudoAaron LI2018-03-141-0/+5
* dns: generate nsd.conf with domains and nameservers variablesAaron LI2018-03-142-11/+10
* dns: clean up unbound.conf a bitAaron LI2018-03-141-10/+1
* shadowsocks: remove nameserver settingAaron LI2018-03-141-2/+0
* dns/nsd: remove unused "key" sectionAaron LI2018-03-141-14/+0
* dns/unbound: update config and enable remote-controlAaron LI2018-03-142-12/+35
* dns: reload unbound/nsd instead of restartAaron LI2018-03-142-4/+10
* role packages renamed to basicAaron LI2018-03-141-2/+2
* bootstrap: improve group/user creation; add block marker for sshd_configAaron LI2018-03-141-6/+14
* role/dns: configure NSD as the stealth master with 2 domainsAaron LI2018-03-145-0/+245
* Add role shadowsocksAaron LI2018-03-143-0/+48
* Add role dns to setup unbound serviceAaron LI2018-02-213-0/+213
* Add deploy playbook with packages roleAaron LI2018-02-211-0/+12