Commit message (Collapse) | Author | Age | Files | Lines | |
---|---|---|---|---|---|
* | bootstrap: Disable password login for SSH | Aaron LI | 2019-09-19 | 1 | -0/+8 |
| | |||||
* | znc: Update the wiki URL | Aaron LI | 2018-12-20 | 1 | -1/+1 |
| | |||||
* | basic: Enable all.log and tweak syslogd flags | Aaron LI | 2018-12-20 | 1 | -0/+23 |
| | |||||
* | radicale: Do not bother to rotate the log file | Aaron LI | 2018-12-20 | 1 | -6/+0 |
| | | | | | | | | | | | Without running radicale in debug mode, the log file is quite small, so do not bother to rotate it. Actually, it's hard to configure uwsgi to properly rotate the log file: when the uwsgi worker accepts the 'HUP' signal and restart, it doesn't have priviledge to create the socket file and thus failed. If, on the other hand, the uwsgi isn't stopped properly, it will leave SysV semaphores in use, and finally exaust all semaphores. | ||||
* | Fix uwsgi socket owner in rc.conf | Aaron LI | 2018-12-20 | 2 | -0/+2 |
| | |||||
* | web/sites: Add 233233.d.conf to proxy to duckduckgo.com | Aaron LI | 2018-12-01 | 1 | -0/+78 |
| | |||||
* | dns: Add CNAME d.233233.xyz | Aaron LI | 2018-12-01 | 1 | -1/+1 |
| | |||||
* | Port to Ansible 2.7 | Aaron LI | 2018-12-01 | 3 | -11/+21 |
| | |||||
* | security/pf: Allow the ports of all shadowsocks instances | Aaron LI | 2018-06-24 | 1 | -2/+3 |
| | |||||
* | shadowsocks: Support multiple instances (share with others) | Aaron LI | 2018-06-24 | 4 | -20/+139 |
| | | | | | | | Add the "shadowsocks" rc script that allows multiple instances (based on the uwsgi rc script). Update the role and vars to setup two shadowsocks instances. | ||||
* | git: remove obsolete git-shell-commands files and vars.conf.j2 | Aaron LI | 2018-05-15 | 11 | -381/+0 |
| | |||||
* | git: remove some obsolete settings | Aaron LI | 2018-05-15 | 1 | -48/+34 |
| | |||||
* | git: configure gitolite with cgit | Aaron LI | 2018-05-15 | 2 | -2/+5 |
| | |||||
* | git/gitolite: update config | Aaron LI | 2018-05-15 | 1 | -2/+2 |
| | |||||
* | git: update github keyname to be keyfile to the full path to the key | Aaron LI | 2018-05-14 | 1 | -3/+3 |
| | |||||
* | git: Use gitolite to replace the git-shell shipped with git | Aaron LI | 2018-05-14 | 2 | -16/+254 |
| | |||||
* | mail/dovecot: change sieve directory ownership | Aaron LI | 2018-05-05 | 2 | -7/+3 |
| | |||||
* | security/clean-pf: log cleaned ip address | Aaron LI | 2018-05-05 | 1 | -1/+1 |
| | |||||
* | git/cgit: copy script and install highlight | Aaron LI | 2018-04-18 | 1 | -0/+7 |
| | |||||
* | git: Update git shell commands; add git-cmds tag | Aaron LI | 2018-04-18 | 4 | -4/+6 |
| | |||||
* | Add git role: host git repos and share repos via cgit | Aaron LI | 2018-04-18 | 18 | -3/+779 |
| | | | | | | * Host git repositories * Share git repositories through web interface via cgit * The static resources used by cgit is also managed/deployed by a git repo ^_^ | ||||
* | web: Fix private path for the dhparam file | Aaron LI | 2018-04-18 | 1 | -3/+3 |
| | |||||
* | mail/dovecot: update config file to dovecot v2.3 | Aaron LI | 2018-04-18 | 1 | -14/+3 |
| | |||||
* | basic/periodic: Inline daily security status | Aaron LI | 2018-04-16 | 2 | -6/+12 |
| | |||||
* | web/sites: rename liwt.git.conf.j2 to liwt.cgit.conf.j2 | Aaron LI | 2018-04-11 | 1 | -2/+1 |
| | |||||
* | radicale: setup git repo | Aaron LI | 2018-04-11 | 1 | -0/+22 |
| | |||||
* | web/sites: Clean up liwt.radicale.conf | Aaron LI | 2018-04-10 | 1 | -18/+4 |
| | |||||
* | web/sites: Fix reload-nginx after generating sites | Aaron LI | 2018-04-10 | 2 | -1/+1 |
| | |||||
* | web/sites: Also check availability of 'radicale' and 'cgit' | Aaron LI | 2018-04-10 | 2 | -2/+2 |
| | |||||
* | radicale: Use the default path of uwsgi socket | Aaron LI | 2018-04-10 | 2 | -2/+1 |
| | |||||
* | radicale: Fix log rotation | Aaron LI | 2018-04-10 | 1 | -2/+2 |
| | |||||
* | radicale: add 'git' variable to toggle versioning with git | Aaron LI | 2018-04-10 | 1 | -1/+4 |
| | |||||
* | radicale: use full path to git; rotation log file | Aaron LI | 2018-04-09 | 2 | -1/+7 |
| | |||||
* | Add radicale role: lightweight {Card,Cal}DAV server | Aaron LI | 2018-04-09 | 7 | -0/+277 |
| | | | | WARNING: py36-radicale2 needs manual installation at the moment. | ||||
* | web/acme: tag acme and acme-renew; add deploy-acme handler | Aaron LI | 2018-04-09 | 2 | -0/+21 |
| | |||||
* | dns/zones: use dav to replace {card,cal}dav; clean aaronly.me | Aaron LI | 2018-04-09 | 3 | -8/+4 |
| | |||||
* | dns/zones: tweak space after ";" | Aaron LI | 2018-04-09 | 2 | -6/+6 |
| | |||||
* | mail/postfix: improve tls settings a bit | Aaron LI | 2018-04-09 | 1 | -72/+70 |
| | |||||
* | dns/zones: improve dmarc record | Aaron LI | 2018-03-22 | 2 | -2/+16 |
| | |||||
* | web/acme: no need to check & link /etc/ssl/cert.pem | Aaron LI | 2018-03-18 | 1 | -4/+0 |
| | | | | Already been fixed in new ca_root_nss package. | ||||
* | mail/dovecot: store pass in ansible vault and hash from there | Aaron LI | 2018-03-17 | 2 | -15/+13 |
| | |||||
* | znc: Add filter znc_makepass, improve templating with ipv4+ipv6 | Aaron LI | 2018-03-17 | 1 | -3/+11 |
| | |||||
* | znc: simply and improve listeners templating | Aaron LI | 2018-03-16 | 1 | -14/+9 |
| | |||||
* | znc: move data dir to /home/znc, listen on ipv4 & ipv6, fix reload | Aaron LI | 2018-03-15 | 4 | -28/+47 |
| | |||||
* | security/pf: allow IRC bouncer by ZNC | Aaron LI | 2018-03-14 | 1 | -1/+2 |
| | |||||
* | Add znc role: IRC bouncer | Aaron LI | 2018-03-14 | 4 | -0/+167 |
| | |||||
* | web/acme: refactor certificates deployment | Aaron LI | 2018-03-14 | 7 | -14/+76 |
| | |||||
* | web/acme: minor improve output format | Aaron LI | 2018-03-14 | 2 | -0/+2 |
| | |||||
* | security/sshlockout: the syslog line cannot append to the file end ... | Aaron LI | 2018-03-14 | 1 | -5/+4 |
| | |||||
* | dns/zones: add code.aaronly.me | Aaron LI | 2018-03-14 | 1 | -1/+1 |
| |